<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="1508">
<package pkgid="891bcab6190203713d6577451655a5220d7fdd0f386c55c586a6a68b716ff6a8" name="NetworkManager" arch="aarch64">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="925b0b2d0bb4671cdf50d49dce9be5b9dbdfd373fd40ac98ba675bd8d793f19e" name="NetworkManager" arch="s390x">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="5aa778da69a2ca24922bb363539b28d383b79d262a9bf18b6d91ced08a4dfe03" name="NetworkManager" arch="src">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="d21680ed341c0e1a9f74cbc9a93e725e9c6ad0f2deccc4748005038f4bf42a76" name="NetworkManager" arch="x86_64">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="a51a069e056e0d404b286c28f3d643f49501d3daa594d3e4bbcaea3f94ea8f81" name="NetworkManager-bluetooth" arch="aarch64">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="8073c6149b80d5737f46f033d9188f40d9f15221ef348dd9a6809833a176c09b" name="NetworkManager-bluetooth" arch="s390x">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="0eab3f3dcffa0c9178a7c3382b32c27555fdc95530b7988b2a764bd84118853f" name="NetworkManager-bluetooth" arch="x86_64">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="627419ef13da2edabc942efda6518c5c8f9628378059d3918de80785746f2c6c" name="NetworkManager-cloud-setup" arch="aarch64">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="2f43adce40dec6783cd58fc2134b82a5fc75148ed379354a4b8e7f221721933b" name="NetworkManager-cloud-setup" arch="s390x">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="f30661dd99bf3b9db6b574e9b510c0096c3f955cde3c145ca4b2671d90be724a" name="NetworkManager-cloud-setup" arch="x86_64">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="54f61248b09080c0a9f0558ad68b9606819dbedeb1cadb313b649b1a2f43f59b" name="NetworkManager-pppoe" arch="aarch64">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="aaa8f8ed17cb2036268e9ae3989ebcb141a9db958e57fd3f3dcaeec52a905f62" name="NetworkManager-pppoe" arch="s390x">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="5b66194d35f6d380a146441164e04e42c1a9a2b06f9bc7f8fd640488f101da27" name="NetworkManager-pppoe" arch="x86_64">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="9bd71ec34dffc810cc4dbca689279cfe56dfc27ada307d08a0a4326721122bb6" name="NetworkManager-tui" arch="aarch64">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="ba9f253ebb9b99877074ff1649b341ed11875238b2dd7ef5bcd2904aa2db7436" name="NetworkManager-tui" arch="s390x">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="71877b0a5266f7aebb88d13d0f97833de0cb8646a76954d9b2966b457ab9c953" name="NetworkManager-tui" arch="x86_64">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="788a63a47383ea010ccfeca54935ec9d920a07c0d2cc348a262a2ecdc1da4293" name="NetworkManager-wwan" arch="aarch64">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="d3e7abc1ca758d4004796437973050e62043330797c197c2ec224f6da2295834" name="NetworkManager-wwan" arch="s390x">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="bad4505c37834416c0137241a99da221b4bc8bb86d6db6eb55b7a4d98d8cca63" name="NetworkManager-wwan" arch="x86_64">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="f5fa1142db59370ef19dcbbde52b994baaa74e55689ad51c19aa87088e267981" name="aaa_base" arch="aarch64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.6.2"/>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
</package>
<package pkgid="2d9cd00800f7ef65ac5f5524fb1227f10ebdb9e2ea06ca08e2e8d947dbf351d8" name="aaa_base" arch="s390x">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.6.2"/>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
</package>
<package pkgid="2a7c2126b5e581ac05ee8a053221d803b1a6fe144cac1ad4ad5690e9b15a83d0" name="aaa_base" arch="src">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.6.2"/>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
</package>
<package pkgid="2dc73f3ef22c6319257ab268fe8fd1f4628d9a06652a426fd84a37b465809d80" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.6.2"/>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
</package>
<package pkgid="da835c5a25586b7faca6ffc6d0354dd63a604a2cb0e450ea08ad994f1ae5d681" name="aaa_base" arch="aarch64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.9.1"/>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
</package>
<package pkgid="5692ddb58838a5e2a62c3f2ef4e88c74866146b2762a7521f8b7b87802edb1eb" name="aaa_base" arch="s390x">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.9.1"/>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
</package>
<package pkgid="31c02efb3cee5bf744be9af8280ced23014b51b3821ecabb9745da881330daec" name="aaa_base" arch="src">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.9.1"/>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
</package>
<package pkgid="9c019e19eea4377c378cee2f6b97a89f48fe870ee7287578f2441750e4d4a90f" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.9.1"/>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
</package>
<package pkgid="5484aa6de6c3820f4d68cc97581e8ca4add3f15da523acf7f08676c8741c69d7" name="abseil-cpp" arch="src">
  <version epoch="0" ver="20230802.1" rel="150400.10.4.1"/>
  <changelog author="fvogt@suse.com" date="1604664000">- Drop source package, was only used by grpc which was switched
  over to use the shared library</changelog>
  <changelog author="elimat@opensuse.org" date="1609243200">- Update to version 20200923.2
  What's New:
  * absl::StatusOr&lt;T&gt; has been released. See our blog
    post for more information.
  * Abseil Flags reflection interfaces have been released.
  * Abseil Flags memory usage has been significantly optimized.
  * Abseil now supports a "hardened" build mode. This build mode enables
    runtime checks that guard against programming errors that may lead
    to security vulnerabilities.
  Notable Fixes:
  * Sanitizer dynamic annotations like AnnotateRWLockCreate that are
    also defined by the compiler sanitizer implementation are no longer
    also defined by Abseil.
  * Sanitizer macros are now prefixed with ABSL_ to avoid naming collisions.
  * Sanitizer usage is now automatically detected and no longer requires
    macros like ADDRESS_SANITIZER to be defined on the command line.
  Breaking Changes:
  * Abseil no longer contains a dynamic_annotations library. Users
    using a supported build system (Bazel or CMake) are unaffected by
    this, but users manually specifying link libraries may get an error
    about a missing linker input.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
  <changelog author="jengelh@inai.de" date="1649073600">- Implement shlib packaging policy</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1656504000">- Add options-old.patch, options-cxx17.patch (boo#1203378)
  * Ensure ABI stability regardless of compiler settings per instruction in the header.</changelog>
  <changelog author="fvogt@suse.com" date="1656504001">- Remove obsolete 0%{suse_version} &lt; 1500 conditions</changelog>
  <changelog author="elimat@opensuse.org" date="1656849600">- Update to version 20220623.0
  What's New:
  * Added absl::AnyInvocable, a move-only function type.
  * Added absl::CordBuffer, a type for buffering data for eventual inclusion an
    absl::Cord, which is useful for writing zero-copy code.
  * Added support for command-line flags of type absl::optional&lt;T&gt;.
  Breaking Changes:
  * CMake builds now use the flag ABSL_BUILD_TESTING (default: OFF) to control
    whether or not unit tests are built.
  * The ABSL_DEPRECATED macro now works with the GCC compiler. GCC users that
    are experiencing new warnings can use -Wno-deprecated-declatations silence
  the warnings or use -Wno-error=deprecated-declarations to see warnings but
  not fail the build.
  * ABSL_CONST_INIT uses the C++20 keyword constinit when available. Some
    compilers are more strict about where this keyword must appear compared to
  the pre-C++20 implementation.
  * Bazel builds now depend on the bazelbuild/bazel-skylib repository.
    See Abseil's WORKSPACE file for an example of how to add this dependency.
  Other:
  * This will be the last release to support C++11. Future releases will require at least C++14.
- run spec-cleaner</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1657540800">- Add Fix-maes-msse41-leaking-into-pkgconfig.patch
  * Do not make programs compiled with abseil require new-ish CPUs (boo#1203379)</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 20220623.1:
  * minor warning fix</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to 20230125.2
  What's New:
    The Abseil logging library has been released. This library
    provides facilities for writing short text messages about the
    status of a program to stderr, disk files, or other sinks
    (via an extension API). See the logging library documentation
    for more information.
    An extension point, AbslStringify(), allows user-defined types
    to seamlessly work with Abseil's string formatting functions
    like absl::StrCat() and absl::StrFormat().
    A library for computing CRC32C checksums has been added.
    Floating-point parsing now uses the Eisel-Lemire algorithm,
    which provides a significant speed improvement.
    The flags library now provides suggestions for the closest
    flag(s) in the case of misspelled flags.
    Using CMake to install Abseil now makes the installed artifacts
    (in particular absl/base/options.h) reflect the compiled ABI.
  Breaking Changes:
    Abseil now requires at least C++14 and follows Google's Foundational
    C++ Support Policy. See this table for a list of currently supported
    versions compilers, platforms, and build tools.
    The legacy spellings of the thread annotation macros/functions
    (e.g. GUARDED_BY()) have been removed by default in favor of the
    ABSL_ prefixed versions (e.g. ABSL_GUARDED_BY()) due to clashes with
    other libraries. The compatibility macro ABSL_LEGACY_THREAD_ANNOTATIONS
    can be defined on the compile command-line to temporarily restore these
    spellings, but this compatibility macro will be removed in the future.
  Known Issues
    The Abseil logging library in this release is not a feature-complete
    replacement for glog yet. VLOG and DFATAL are examples of features
    that have not yet been released.
- obsolete Fix-maes-msse41-leaking-into-pkgconfig.patch</changelog>
  <changelog author="adrian@suse.de" date="1685016000">- update to 20230125.3
  Details can be found on:
    https://github.com/abseil/abseil-cpp/releases/tag/20230125.3</changelog>
  <changelog author="fvogt@suse.com" date="1688040000">- Add baselibs.conf to make protobuf happy. Hopefully temporary.</changelog>
  <changelog author="fstrba@suse.com" date="1691582400">- Fix build on older systems by requiring C++17 compliant compiler
- Added patch:
  * cmake.patch
    + lower the cmake requirement to 3.5 in order to be able to
    build on SLE12SP5</changelog>
  <changelog author="adrian@suse.de" date="1694088000">- update to 20230802.0
  What's New:
  * Added the nullability library for designating the expected
    nullability of pointers. Currently these serve as annotations
    only, but it is expected that compilers will one day be able
    to use these annotations for diagnostic purposes.
  * Added the prefetch library as a portable layer for moving data
    into caches before it is read.
  * Abseil's hash tables now detect many more programming errors
    in debug and sanitizer builds.
  * Abseil's synchronization objects now differentiate absolute
    waits (when passed an absl::Time) from relative waits (when
    passed an absl::Duration) when the underlying platform supports
    differentiating these cases. This only makes a difference when
    system clocks are adjusted.
  * Abseil's flag parsing library includes additional methods that
    make it easier to use when another library also expects to be
    able to parse flags.
  * absl::string_view is now available as a smaller target,
    @com_google_absl//absl/strings:string_view, so that users may
    use this library without depending on the much larger
    @com_google_absl//absl/strings target.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1696593600">- update to 20230802.1:
  * Add StdcppWaiter to the end of the list of waiter
    implementations</changelog>
  <changelog author="dmueller@suse.com" date="1705665600">- fix build for non-SUSE distributions</changelog>
</package>
<package pkgid="2234c693e832e19a5c4b7ea4965e3f0c9639a36b507badfa96505dadad60cc06" name="apparmor" arch="src">
  <version epoch="0" ver="3.0.4" rel="150500.11.9.1"/>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="scabrero@suse.de" date="1671796800">- Add samba-4-17.patch to update the samba profiles for samba
  version 4.17 (bsc#1206626);</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1693915200">- update zgrep profile to allow egrep helper use (bsc#1214458)
  - zgrep-profile-sync-with-master.diff</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
</package>
<package pkgid="470552e86847a963ea85115ac919f61e89abd2d551a13b9f858aa220998f15a1" name="apparmor-parser" arch="aarch64">
  <version epoch="0" ver="3.0.4" rel="150500.11.9.1"/>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="scabrero@suse.de" date="1671796800">- Add samba-4-17.patch to update the samba profiles for samba
  version 4.17 (bsc#1206626);</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1693915200">- update zgrep profile to allow egrep helper use (bsc#1214458)
  - zgrep-profile-sync-with-master.diff</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
</package>
<package pkgid="d58485cab64f93e2f28042260e6de1ecd0f011e132b66e4984de5025d630f534" name="apparmor-parser" arch="s390x">
  <version epoch="0" ver="3.0.4" rel="150500.11.9.1"/>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="scabrero@suse.de" date="1671796800">- Add samba-4-17.patch to update the samba profiles for samba
  version 4.17 (bsc#1206626);</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1693915200">- update zgrep profile to allow egrep helper use (bsc#1214458)
  - zgrep-profile-sync-with-master.diff</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
</package>
<package pkgid="cb6e1e489e875e8f2c87c24cfd9928c5f53931325c8eff88a7bc8d8c2a0c8207" name="apparmor-parser" arch="x86_64">
  <version epoch="0" ver="3.0.4" rel="150500.11.9.1"/>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="scabrero@suse.de" date="1671796800">- Add samba-4-17.patch to update the samba profiles for samba
  version 4.17 (bsc#1206626);</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1693915200">- update zgrep profile to allow egrep helper use (bsc#1214458)
  - zgrep-profile-sync-with-master.diff</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
</package>
<package pkgid="818ec10f98c55323c8ab573fcffcc9a7d1024b09aa7405994a68774ea26ea1f2" name="avahi" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.10.1"/>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
</package>
<package pkgid="b4d71589e2f252d6c6c38a95433a5c16e1f0a030045f82e6d5a6dd1a35078425" name="avahi" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.10.1"/>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
</package>
<package pkgid="8cb5ddf996f9eed46907027623ad1dc3f603692f2e6df2c587f6c479e1c2cf99" name="avahi" arch="src">
  <version epoch="0" ver="0.8" rel="150400.7.10.1"/>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
</package>
<package pkgid="f9976b2883d4a306242c0b4427000fbbd3ccf693524dc9d0f51402835a94bef0" name="avahi" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.10.1"/>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
</package>
<package pkgid="4f4f87b746290f4d28ceb28de8eaa23e80cad51995cba3a664f99da40e993c63" name="avahi" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.13.1"/>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
</package>
<package pkgid="382dcd04740c7b908fe4edea02253d95416a2f2648403f10ed421ed3550af6f9" name="avahi" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.13.1"/>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
</package>
<package pkgid="5862c30e26cee3fe88657172b64ddf58dca385950f64de5575f9fd219ef8e4a8" name="avahi" arch="src">
  <version epoch="0" ver="0.8" rel="150400.7.13.1"/>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
</package>
<package pkgid="dc1eed122296dbefbbc16a2ece60e99b90455c547c13ff52026503914344d8bf" name="avahi" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.13.1"/>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
</package>
<package pkgid="22554ae134eef62c1cc22c7e73ec058c96f22d882f9443fb0f451c40964430da" name="babeltrace" arch="aarch64">
  <version epoch="0" ver="1.5.8" rel="150300.3.2.1"/>
  <changelog author="tonyj@suse.com" date="1438084800">- Update to version 1.2.4 (FATE#319273)
  Changelog 1.2.4:
  * Fix: make sure we can exit the get_new_metadata loop
  * Docs fix: Change bt_ctf_writer_create_stream return description
  * Fix: offset_s and CTF clocks with frequency != 1GHz
  Changelog 1.2.3:
  * Fix: incorrect compiler warning
  * Fix: Don't assume that PROT_WRITE grants read permissions
  * Fix: align objstack on 8 bytes
  * Fix Python: Add a comment warning about an API limitation
  * Use BABELTRACE_HOST_NAME_MAX in test_ctf_writer.c
  * Add limits compatibility header
  * Fix: don't perform unaligned integer read/writes
  * Fix: Align buffers from objstack_alloc on sizeof(void *)
  * Fix: bt_ctf_field_type_structure_add_field argument validation
  Changelog 1.2.2:
  * Fix: Support out of tree builds in babeltrace
  * Fix: mmap trace read the stream_id from the first packet
  * Fix: check the lttng-relayd protocol version
  * Fix: don't update the trace collection if no new streams were received
  * Fix (Python bindings): Return a string if a sequence's element are chars
  * Fix: don't use a return code in _bt_ctf_stream_append_discarded_events
  * Fix: Report the sequence's length field's value as length
  * Fix: Variable name typo in SequenceField and Event classes
  * Fix python: remove weird char at the end of line
  * Fix: add missing files to gitignore
  * Fix: ctf-text: add missing double-quotes around enum tag
  * Fix: Add missing lttng_live_should_quit checks
  * Fix: Report errors occuring in lttng_live_read</changelog>
  <changelog author="dmueller@suse.com" date="1441022400">- enable build for aarch64 (fate#318370)</changelog>
  <changelog author="tonyj@suse.com" date="1444046400">- Cleanup urls in spec file (FATE#319273)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1470139200">- add ppc64/ppc64le in ExclusiveArch</changelog>
  <changelog author="tonyj@suse.com" date="1504267200">- Update to version 1.5.3 for SLE15 (bsc#1055683)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509710400">- Disable static library build.
- Enable Python 3 bindings build.
- Remove explicit glib2-devel requirement for the devel package: is
  autodetected already.
- Spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Update to version 1.5.4:
  * Use signed accessors for clock offsets.
  * Fix a signedness error in python complements.
  * Handle packet_seek errors.
  * Prevent calling adding the same trace recursively.
  * Make sure we have all the metadata streams before adding new
    traces.
  * Add missing debugging information in the live plugin.
  * Set stream id in HUP case.
  * Use list rather than ptr array for trace streams.
  * Fix a leak of streams.
  * Handle 0 session case in ask new streams.
  * Break loop on getting metadata error.
  * Return error on ask_new_stream when should quit.
  * Don't access missing ctf trace when getting metadata.
  * Fix lttng-live discarded event count after inactivity.
  * Fix timegm compat on Solaris.
  * Fix Python bindings when building with PIE hardening.
  * lttng-live: Print discarded event and packet lost warnings on
    stderr.</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1529236800">- Update to version 1.5.5:
  * Propagate error from packet_seek in case of truncated packet.
  * Fix: report truncated files while reading.
- Use tarball signing.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1542196800">- Update to version 1.5.6:
  * Fix: remove left-over debug logging statement.
  * Use trace-&gt;trace_id in check to remove trace from bt_ctx.
  * Fix: missing initializer braces warning.
  * Fix: zero out URL parsing array before use and ensure proper
    error reporting.</changelog>
  <changelog author="azouhr@opensuse.org" date="1563192000">- add s390x in ExclusiveArch</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1582718400">- Update to version 1.5.8 (changes since 1.5.6):
  * Cleanup: bitfields: streamline use of underscores.
  * Fix: bitfield: shift undefined/implementation defined
    behaviours.
  * Fix: array and sequence field's 'elems' members can be left NULL.
  * Fix: invalid alignment of enumeration fields.
  * Fix: lttng-live format: do not error out on empty streams
    hang up.
  * Fix: lttng-live: ctf_live_packet_seek stream hang up handling.
  * Fix: lib/iterator.c: unbalanced ctx put (leak).
  * Fix: lttng-live: lttng_live_open_trace_read memory leak.
  * Fix: trace-collection: trace clock use after free.
  * Fix: lttng-live: use-after-free in get_next_index().
  * Do not use diagnostic pragma when GCC version is lower than
    4.6.0.
  * Missing define when not building with gcc.
- Drop support for old openSUSE versions.</changelog>
  <changelog author="schwab@suse.de" date="1598875200">- Add riscv64 to ExclusiveArch</changelog>
</package>
<package pkgid="c76007e1a3b1cda3a4ca502a18383bccf4a769c8a9905c6e19681fc0e695096d" name="babeltrace" arch="src">
  <version epoch="0" ver="1.5.8" rel="150300.3.2.1"/>
  <changelog author="tonyj@suse.com" date="1335873600">- Update to version 1.0.0-rc2</changelog>
  <changelog author="tonyj@suse.com" date="1338811200">- Update to version 1.0.0-rc4</changelog>
  <changelog author="tonyj@suse.com" date="1363003200">- Upgrade to version 1.0.3 (FATE#314846)
  Changelog 1.0.3:
  * Fix: Double free when calling bt_context_remove_trace()
  * Add missing runall.sh to dist packaging
  * Fix: alignment of compound types containing array field
  Changelog 1.0.2:
  * Fix: add tests/lib missing files to Makefile.am
  Changelog 1.0.1:
  * Provides a basic pkg-config file for libbabeltrace
  * Fix erroneous warning/error messages
  * Fix comment in context.h
  * Cleanup: Remove whitespace at EOL from mit-license.txt
  * Add missing permission notice in each source file
  * Adding a test which do a sequence of seek BEGIN, LAST, BEGIN, LAST
  * Run seek tests on a second trace file
  * Add #define _GNU_SOURCE to remove warning about asprintf
  * Include a test for SEEK_BEGIN and SEEK_LAST
  * Fix: Report success even if we find at least one valid stream in find_max_timestamp_ctf_stream_class
  * Fix SEEK_BEGIN for streams that do not contain any event
  Changelog 1.0.0:
  * tests: add test traces to distribution tarball
  * Document bash requirement for make check in README
  * Add tests to make check
  * Fix: add missing header size validation
  * callbacks.c: handle extract_ctf_stream_event return value
  * Cleanup: fix cppcheck warning
  * Cleanup: fix cppcheck warnings
  * fix double-free on error path
  Changelog 1.0.0-rc6:
  * Add valgrind suppression file for libpopt
  * Fix: unplug memory leak that causes popt-0.13 to segfault
  * Fix: test all close/fclose ret val, fix double close
  * Cleanup: add missing newline
  * Fix: fd leak on trace close
  * Fix memory leaks induced by lack of libpopt documentation
  * babeltrace: fix poptGetOptArg memleak
  * plugins: implement plugin unregister
  * Doc: valgrind with babeltrace (glib workaround)
  * callsites: fix memory leak
  * Fix: free all the metadata-related memory
  * Fix : Free the iterator callback arrays
  * Fix : cleanup teardown of context
  * Fix : protect static float and double declarations
  * callsite: support instruction pointer field
  * Document that list.h is LGPLv2.1, but entirely trivial
  * Fix: callsite support: list multiple callsites
  * Add callsite support
  * Fix: Allow 64-bit packet offset
  * Fix: emf uri: surround by " "
  * Handle model.emf.uri event info
  * Fix: Documentation cleanup
  * Fix: misplaced C++ ifdef
  * Fix babeltrace-log get big line when the input file last line don't have enter
  * API Fix: bt_ctf_iter_read_event_flags
  * Fix: get encoding for char arrays and sequences
  * Fix: access to declaration from declaration_field
  * Fix: get_declaration_* should not cast to field
  * Fix babeltrace-log uninitialized memory (v2)
  * Revert "Fix babeltrace-log uninitialized memory"
  * Fix babeltrace-log uninitialized memory
  * Fix: access field properties by declaration
  * Fix: check return value of get_char_array
  * Fix: C++ support to API header files
  Changelog 1.0.0-rc5:
  * Change default printout to add host, process names and vpid
  * Add support for trace:hostname field
  * Fix: allow specifying more than one input trace path
  * Fix: make warnings (partial errors) visible
  * Fix: --clock-force-correlate to handle trace collections gathered from v
  * Documentation: update API doc with enum functions
  * Fix: API: remove unsupported BT_SEEK_END from API
  * API documentation
  * Cleanup: shut up gcc uninitialized var warning
  * Fix: support large files on 32-bit systems
  * Fix: remove unused fts.h include
  * Fix: add missing enum support to API
  * Fix: handle clock offset with frequency different from 1GHz
  * Cleanup: update ifdef wrapper name
  * Fix: clarify bt_ctf_get_field_list
  * Fix trace-collection.h: No such file or directory that build code with l
  * Fix: check return value of bt_context_create
  * Fix: ensure mmap_base_offset is zeroed on initialization
  * Fix: Reswitch to FTW for add_traces_recursive
  * Fix: don't free unallocated index
  * Fix: don't close the metadata FD if a FP is passed
  * Add BT_SEEK_LAST type to bt_iter_pos
  * Fix: iterator.c BT_SEEK_RESTORE: check return value
  * Fix: complete error handling of babeltrace API
  * cleanup: protected -&gt; hidden: cleanup symbol table
  * Fix: add mmap_base_offset to ctf_stream_pos
  * Fix: assign the current clock for mmap traces
  * Fix: libbabeltrace add missing static declaration
  * Fix: safety checks for opening mmap traces
  * Remove trace-collection.h from include_headers
  * Fix: protect visibility of ctf-parser functions
  * Fix: correct name of bt_ctf_field_get_error in comments and typo in man
  * Fix: wrong type in bt_ctf_get_uint64/int64
  * API cleanup name get_timestamp and get_cycles
  * fix comment struct bt_saved_pos
  * Fix: Add missing clock-types.h
  * Get rid of clock-raw and use real clock
  * Cleanup (messages): Make the wording of the signedness warning clearer
  * Fix: error path if heap_init fails
  * Fix: Remove obsolete bt_iter_seek function
  * Make the signedness warning useful with the field name
  * Fix: Restore heap for SEEK_BEGIN
  * Fix: check if handle is valid
  * Fix: iterator set_pos
  * Fix: get rid of consumed flag
  * Fix: add missing heap_copy
  * Fix: babeltrace assert() triggered by directories within trace
  * Several fixes for bt_iter_pos related functions
  * Fix iterator: various fixes
  * Fix: remove duplicate yydebug var
  * Fix babeltrace iterator lib: seek at time 0</changelog>
  <changelog author="cfarrell@suse.com" date="1363348800">- license update: MIT and GPL-2.0
  The correct operator is ^and^, not ^or^. Also, use SPDX format where
  possible</changelog>
  <changelog author="tonyj@suse.com" date="1392033600">- Update to version 1.1.1</changelog>
  <changelog author="tonyj@suse.com" date="1393588800">- Update to version 1.2</changelog>
  <changelog author="tonyj@suse.com" date="1397563200">- Update to version 1.2.1
  Changelog:
  * Fix: Accept an input port in the live URL when no session is provided</changelog>
  <changelog author="tonyj@suse.com" date="1438084800">- Update to version 1.2.4 (FATE#319273)
  Changelog 1.2.4:
  * Fix: make sure we can exit the get_new_metadata loop
  * Docs fix: Change bt_ctf_writer_create_stream return description
  * Fix: offset_s and CTF clocks with frequency != 1GHz
  Changelog 1.2.3:
  * Fix: incorrect compiler warning
  * Fix: Don't assume that PROT_WRITE grants read permissions
  * Fix: align objstack on 8 bytes
  * Fix Python: Add a comment warning about an API limitation
  * Use BABELTRACE_HOST_NAME_MAX in test_ctf_writer.c
  * Add limits compatibility header
  * Fix: don't perform unaligned integer read/writes
  * Fix: Align buffers from objstack_alloc on sizeof(void *)
  * Fix: bt_ctf_field_type_structure_add_field argument validation
  Changelog 1.2.2:
  * Fix: Support out of tree builds in babeltrace
  * Fix: mmap trace read the stream_id from the first packet
  * Fix: check the lttng-relayd protocol version
  * Fix: don't update the trace collection if no new streams were received
  * Fix (Python bindings): Return a string if a sequence's element are chars
  * Fix: don't use a return code in _bt_ctf_stream_append_discarded_events
  * Fix: Report the sequence's length field's value as length
  * Fix: Variable name typo in SequenceField and Event classes
  * Fix python: remove weird char at the end of line
  * Fix: add missing files to gitignore
  * Fix: ctf-text: add missing double-quotes around enum tag
  * Fix: Add missing lttng_live_should_quit checks
  * Fix: Report errors occuring in lttng_live_read</changelog>
  <changelog author="dmueller@suse.com" date="1441022400">- enable build for aarch64 (fate#318370)</changelog>
  <changelog author="tonyj@suse.com" date="1444046400">- Cleanup urls in spec file (FATE#319273)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1470139200">- add ppc64/ppc64le in ExclusiveArch</changelog>
  <changelog author="tonyj@suse.com" date="1504267200">- Update to version 1.5.3 for SLE15 (bsc#1055683)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509710400">- Disable static library build.
- Enable Python 3 bindings build.
- Remove explicit glib2-devel requirement for the devel package: is
  autodetected already.
- Spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Update to version 1.5.4:
  * Use signed accessors for clock offsets.
  * Fix a signedness error in python complements.
  * Handle packet_seek errors.
  * Prevent calling adding the same trace recursively.
  * Make sure we have all the metadata streams before adding new
    traces.
  * Add missing debugging information in the live plugin.
  * Set stream id in HUP case.
  * Use list rather than ptr array for trace streams.
  * Fix a leak of streams.
  * Handle 0 session case in ask new streams.
  * Break loop on getting metadata error.
  * Return error on ask_new_stream when should quit.
  * Don't access missing ctf trace when getting metadata.
  * Fix lttng-live discarded event count after inactivity.
  * Fix timegm compat on Solaris.
  * Fix Python bindings when building with PIE hardening.
  * lttng-live: Print discarded event and packet lost warnings on
    stderr.</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1529236800">- Update to version 1.5.5:
  * Propagate error from packet_seek in case of truncated packet.
  * Fix: report truncated files while reading.
- Use tarball signing.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1542196800">- Update to version 1.5.6:
  * Fix: remove left-over debug logging statement.
  * Use trace-&gt;trace_id in check to remove trace from bt_ctx.
  * Fix: missing initializer braces warning.
  * Fix: zero out URL parsing array before use and ensure proper
    error reporting.</changelog>
  <changelog author="azouhr@opensuse.org" date="1563192000">- add s390x in ExclusiveArch</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1582718400">- Update to version 1.5.8 (changes since 1.5.6):
  * Cleanup: bitfields: streamline use of underscores.
  * Fix: bitfield: shift undefined/implementation defined
    behaviours.
  * Fix: array and sequence field's 'elems' members can be left NULL.
  * Fix: invalid alignment of enumeration fields.
  * Fix: lttng-live format: do not error out on empty streams
    hang up.
  * Fix: lttng-live: ctf_live_packet_seek stream hang up handling.
  * Fix: lib/iterator.c: unbalanced ctx put (leak).
  * Fix: lttng-live: lttng_live_open_trace_read memory leak.
  * Fix: trace-collection: trace clock use after free.
  * Fix: lttng-live: use-after-free in get_next_index().
  * Do not use diagnostic pragma when GCC version is lower than
    4.6.0.
  * Missing define when not building with gcc.
- Drop support for old openSUSE versions.</changelog>
  <changelog author="schwab@suse.de" date="1598875200">- Add riscv64 to ExclusiveArch</changelog>
</package>
<package pkgid="eab1117bf3acef697c4adbd2d22859cf4d2c52fb705bdd0ec0eaa6fbbc3cadda" name="babeltrace" arch="x86_64">
  <version epoch="0" ver="1.5.8" rel="150300.3.2.1"/>
  <changelog author="tonyj@suse.com" date="1438084800">- Update to version 1.2.4 (FATE#319273)
  Changelog 1.2.4:
  * Fix: make sure we can exit the get_new_metadata loop
  * Docs fix: Change bt_ctf_writer_create_stream return description
  * Fix: offset_s and CTF clocks with frequency != 1GHz
  Changelog 1.2.3:
  * Fix: incorrect compiler warning
  * Fix: Don't assume that PROT_WRITE grants read permissions
  * Fix: align objstack on 8 bytes
  * Fix Python: Add a comment warning about an API limitation
  * Use BABELTRACE_HOST_NAME_MAX in test_ctf_writer.c
  * Add limits compatibility header
  * Fix: don't perform unaligned integer read/writes
  * Fix: Align buffers from objstack_alloc on sizeof(void *)
  * Fix: bt_ctf_field_type_structure_add_field argument validation
  Changelog 1.2.2:
  * Fix: Support out of tree builds in babeltrace
  * Fix: mmap trace read the stream_id from the first packet
  * Fix: check the lttng-relayd protocol version
  * Fix: don't update the trace collection if no new streams were received
  * Fix (Python bindings): Return a string if a sequence's element are chars
  * Fix: don't use a return code in _bt_ctf_stream_append_discarded_events
  * Fix: Report the sequence's length field's value as length
  * Fix: Variable name typo in SequenceField and Event classes
  * Fix python: remove weird char at the end of line
  * Fix: add missing files to gitignore
  * Fix: ctf-text: add missing double-quotes around enum tag
  * Fix: Add missing lttng_live_should_quit checks
  * Fix: Report errors occuring in lttng_live_read</changelog>
  <changelog author="dmueller@suse.com" date="1441022400">- enable build for aarch64 (fate#318370)</changelog>
  <changelog author="tonyj@suse.com" date="1444046400">- Cleanup urls in spec file (FATE#319273)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1470139200">- add ppc64/ppc64le in ExclusiveArch</changelog>
  <changelog author="tonyj@suse.com" date="1504267200">- Update to version 1.5.3 for SLE15 (bsc#1055683)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509710400">- Disable static library build.
- Enable Python 3 bindings build.
- Remove explicit glib2-devel requirement for the devel package: is
  autodetected already.
- Spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Update to version 1.5.4:
  * Use signed accessors for clock offsets.
  * Fix a signedness error in python complements.
  * Handle packet_seek errors.
  * Prevent calling adding the same trace recursively.
  * Make sure we have all the metadata streams before adding new
    traces.
  * Add missing debugging information in the live plugin.
  * Set stream id in HUP case.
  * Use list rather than ptr array for trace streams.
  * Fix a leak of streams.
  * Handle 0 session case in ask new streams.
  * Break loop on getting metadata error.
  * Return error on ask_new_stream when should quit.
  * Don't access missing ctf trace when getting metadata.
  * Fix lttng-live discarded event count after inactivity.
  * Fix timegm compat on Solaris.
  * Fix Python bindings when building with PIE hardening.
  * lttng-live: Print discarded event and packet lost warnings on
    stderr.</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1529236800">- Update to version 1.5.5:
  * Propagate error from packet_seek in case of truncated packet.
  * Fix: report truncated files while reading.
- Use tarball signing.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1542196800">- Update to version 1.5.6:
  * Fix: remove left-over debug logging statement.
  * Use trace-&gt;trace_id in check to remove trace from bt_ctx.
  * Fix: missing initializer braces warning.
  * Fix: zero out URL parsing array before use and ensure proper
    error reporting.</changelog>
  <changelog author="azouhr@opensuse.org" date="1563192000">- add s390x in ExclusiveArch</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1582718400">- Update to version 1.5.8 (changes since 1.5.6):
  * Cleanup: bitfields: streamline use of underscores.
  * Fix: bitfield: shift undefined/implementation defined
    behaviours.
  * Fix: array and sequence field's 'elems' members can be left NULL.
  * Fix: invalid alignment of enumeration fields.
  * Fix: lttng-live format: do not error out on empty streams
    hang up.
  * Fix: lttng-live: ctf_live_packet_seek stream hang up handling.
  * Fix: lib/iterator.c: unbalanced ctx put (leak).
  * Fix: lttng-live: lttng_live_open_trace_read memory leak.
  * Fix: trace-collection: trace clock use after free.
  * Fix: lttng-live: use-after-free in get_next_index().
  * Do not use diagnostic pragma when GCC version is lower than
    4.6.0.
  * Missing define when not building with gcc.
- Drop support for old openSUSE versions.</changelog>
  <changelog author="schwab@suse.de" date="1598875200">- Add riscv64 to ExclusiveArch</changelog>
</package>
<package pkgid="9d64b23713be0f9e0e29e7a31d5ed5294e1c9584b7247b36a49bec1f3dcec1a3" name="biosdevname" arch="src">
  <version epoch="0" ver="0.7.3.7.g495ab76" rel="150000.5.6.1"/>
  <changelog author="trenn@suse.de" date="1402660800">- Fix missing %posttrans section</changelog>
  <changelog author="trenn@suse.de" date="1407844800">- Add mainline commit: 51b8cdb0b60df3baa
  With this patch, the info can be showed correctly if there are two or more
  PCI root ports in the same Bus ID/Device ID (bnc#890562)
  Add: fix_several_PCI_root_ports_in_one_bus.patch</changelog>
  <changelog author="trenn@suse.de" date="1421928000">- Update to version 0.6.1
- Do not disable rule via perl script in .spec file, better use a patch
  (biosdevname_udevrule_rename_all_network_devices.patch)
- Modify configure.ac via sed to make use of %{_udevruledir} from .spec file
- Remove already integrated patches in latest source code:
  Delete biosdevname_v0.5.0_to_git_c140ce659a204d67e4cc.patch
  Delete biosdevname_udevrule_rename_all_network_devices.patch
  Delete fix_several_PCI_root_ports_in_one_bus.patch
  Modify udev-rule-path.patch
  Modify whitelist-dell</changelog>
  <changelog author="meissner@suse.com" date="1424520000">- biosdevname-pic.patch: make cpuid() not expose %ebx out of
  assembler, so we can build it with -fPIE.</changelog>
  <changelog author="mpluskal@suse.com" date="1428062400">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="zaitor@opensuse.org" date="1428667200">- Fix fault in ignore-broken-BIOSes patch (boo#920054).</changelog>
  <changelog author="mpluskal@suse.com" date="1433332800">- Update to 0.6.2
  * no upstream changelog provided</changelog>
  <changelog author="werner@suse.de" date="1436788800">- Add missed build require on pkgconfig udev</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.7.1
  * no upstream changelog provided</changelog>
  <changelog author="trenn@suse.de" date="1457092800">- Update to latest 0.7.2 version (fate#319998)</changelog>
  <changelog author="olaf@aepfle.de" date="1471348800">- Detect dom0 via xenfs instead of cpuid to compensate for ABI
  change in xen-4.7 on AMD systems. (bnc#974257)
  biosdevname-dom0.patch</changelog>
  <changelog author="felix.gerling@suse.com" date="1484827200">-  Update to HEAD 66eab208d3c2abe947ba0a793094ee856e8fb3ee
  * Fix use-after-free of fd</changelog>
  <changelog author="fschnizlein@suse.com" date="1497009600">- Update to latest HEAD to 02811d5165c2eeecf8797fe9b5088d6e78bd25db
  * Changed source to github
  * Ignore naming of non-Ethernet network interfaces
  * Prevent reading of VPD-DCM strings for SRIOV-vfs
  - removed patch v0.7.2_to_HEAD_66eab208.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506081600">- Update to version 0.7.3
  * Shipping and future Dell EMC systems support consistent network
    device naming feature.
  [fate#332490]</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="josef.moellers@suse.com" date="1527076800">- Prevent infinite recursion in dmidecode.c::smbios_setslot by
  checking that subordinate bus has a number greater than the
  current bus.
  [bsc#1093625, dmidecode-prevent-infinite-recursion.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1579694400">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="msuchanek@suse.com" date="1597320000">- Read DMI info rom sysfs (bsc#1174491).
  * biosdevname-Add-buffer-read-helper-using-read-explicitly.patch
  * biosdevname-Read-DMI-entries-from-sys-firmware-dmi-tables-DMI.patch</changelog>
  <changelog author="aschnell@suse.com" date="1700827200">- Update to version 0.7.3.7.g495ab76 (bsc#1217455):
  * Add SMBIOS 3.x support
  * Read DMI entries from /sys/firmware/dmi/tables/DMI
  * Add buffer read helper using read explicitly
  * man: fix all_ethN indentation
  * Netronome biosdevname support (#8)
  * Prevent infinite recursion in dmidecode.c::smbios_setslot by (#7)
  * Add support for ExaNIC network cards (#5)
- Removed patches now upstream:
  - dmidecode-prevent-infinite-recursion.patch
  - biosdevname-Add-buffer-read-helper-using-read-explicitly.patch
  - biosdevname-Read-DMI-entries-from-sys-firmware-dmi-tables-DMI.patch</changelog>
</package>
<package pkgid="5084d39baa9e68076673ed193b910285bb371a86e52b992a890e0a4f52efbd65" name="biosdevname" arch="x86_64">
  <version epoch="0" ver="0.7.3.7.g495ab76" rel="150000.5.6.1"/>
  <changelog author="trenn@suse.de" date="1421928000">- Update to version 0.6.1
- Do not disable rule via perl script in .spec file, better use a patch
  (biosdevname_udevrule_rename_all_network_devices.patch)
- Modify configure.ac via sed to make use of %{_udevruledir} from .spec file
- Remove already integrated patches in latest source code:
  Delete biosdevname_v0.5.0_to_git_c140ce659a204d67e4cc.patch
  Delete biosdevname_udevrule_rename_all_network_devices.patch
  Delete fix_several_PCI_root_ports_in_one_bus.patch
  Modify udev-rule-path.patch
  Modify whitelist-dell</changelog>
  <changelog author="meissner@suse.com" date="1424520000">- biosdevname-pic.patch: make cpuid() not expose %ebx out of
  assembler, so we can build it with -fPIE.</changelog>
  <changelog author="mpluskal@suse.com" date="1428062400">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="zaitor@opensuse.org" date="1428667200">- Fix fault in ignore-broken-BIOSes patch (boo#920054).</changelog>
  <changelog author="mpluskal@suse.com" date="1433332800">- Update to 0.6.2
  * no upstream changelog provided</changelog>
  <changelog author="werner@suse.de" date="1436788800">- Add missed build require on pkgconfig udev</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.7.1
  * no upstream changelog provided</changelog>
  <changelog author="trenn@suse.de" date="1457092800">- Update to latest 0.7.2 version (fate#319998)</changelog>
  <changelog author="olaf@aepfle.de" date="1471348800">- Detect dom0 via xenfs instead of cpuid to compensate for ABI
  change in xen-4.7 on AMD systems. (bnc#974257)
  biosdevname-dom0.patch</changelog>
  <changelog author="felix.gerling@suse.com" date="1484827200">-  Update to HEAD 66eab208d3c2abe947ba0a793094ee856e8fb3ee
  * Fix use-after-free of fd</changelog>
  <changelog author="fschnizlein@suse.com" date="1497009600">- Update to latest HEAD to 02811d5165c2eeecf8797fe9b5088d6e78bd25db
  * Changed source to github
  * Ignore naming of non-Ethernet network interfaces
  * Prevent reading of VPD-DCM strings for SRIOV-vfs
  - removed patch v0.7.2_to_HEAD_66eab208.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506081600">- Update to version 0.7.3
  * Shipping and future Dell EMC systems support consistent network
    device naming feature.
  [fate#332490]</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="josef.moellers@suse.com" date="1527076800">- Prevent infinite recursion in dmidecode.c::smbios_setslot by
  checking that subordinate bus has a number greater than the
  current bus.
  [bsc#1093625, dmidecode-prevent-infinite-recursion.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1579694400">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="msuchanek@suse.com" date="1597320000">- Read DMI info rom sysfs (bsc#1174491).
  * biosdevname-Add-buffer-read-helper-using-read-explicitly.patch
  * biosdevname-Read-DMI-entries-from-sys-firmware-dmi-tables-DMI.patch</changelog>
  <changelog author="aschnell@suse.com" date="1700827200">- Update to version 0.7.3.7.g495ab76 (bsc#1217455):
  * Add SMBIOS 3.x support
  * Read DMI entries from /sys/firmware/dmi/tables/DMI
  * Add buffer read helper using read explicitly
  * man: fix all_ethN indentation
  * Netronome biosdevname support (#8)
  * Prevent infinite recursion in dmidecode.c::smbios_setslot by (#7)
  * Add support for ExaNIC network cards (#5)
- Removed patches now upstream:
  - dmidecode-prevent-infinite-recursion.patch
  - biosdevname-Add-buffer-read-helper-using-read-explicitly.patch
  - biosdevname-Read-DMI-entries-from-sys-firmware-dmi-tables-DMI.patch</changelog>
</package>
<package pkgid="4543f315ba2009b54c50db7f15eb07d8ba719ccea10b25c837cb4516a5bea5cf" name="bluez" arch="src">
  <version epoch="0" ver="5.65" rel="150500.3.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
  <changelog author="jlee@suse.com" date="1705406400">- Add pbap-Fix-not-checking-Primary-Secundary-Counter-leng.patch
  pbap: Fix not checking Primary/Secundary Counter length
  (bsc#1218301)(CVE-2023-50230)(bsc#1218300)(CVE-2023-50229)</changelog>
</package>
<package pkgid="c4b3c7821b427d6a3575241e33f768561c7865930e78fc9d2fa651452605fbc0" name="btrfsprogs" arch="aarch64">
  <version epoch="0" ver="5.14" rel="150500.10.3.1"/>
  <changelog author="info@paolostivanin.com" date="1586174400">- Update to 5.6:
  * inspect logical-resolve: support LOGICAL_INO_V2 as new option '-o',
    helps advanced dedupe tools
  * inspect: user larger buffer (64K) for results
  * subvol delete: support deletion by id (requires kernel 5.7+)
  * dump-tree: new option --hide-names, replace any names
    (file, directory, subvolume, xattr) in the output with stubs
  * various fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1588161600">- Fix content of _dracutmodulesdir variable: this definitively does
  not belong to libexecdir.</changelog>
  <changelog author="dsterba@suse.cz" date="1589371200">- Update to 5.6.1:
  * print warning when multiple block group profiles exist, update 'fi usage'
    summary, add docs to maual page explaining the situation
  * build: optional support for libgcrypt or libsodium, providing hash
    implementations
  * updated docs</changelog>
  <changelog author="dsterba@suse.cz" date="1594036800">- Update to 5.7:
  * mkfs:
  * new option to enable features otherwise enabled at runtime, now
    implemented for quotas, 'mkfs.btrfs -R quota'
  * fix space accounting for small image, DUP and --rootdir
  * option -A removed
  * check: detect ranges with overlapping csum items
  * fi usage: report correct numbers when plain RAID56 profiles are used
  * convert: ensure the data chunks size never exceed device size
  * libbtrfsutil: update documentation regarding subvolume deletion
  * build: support libkcapi as implementation backend for cryptographic
    primitives
  * core: global options for verbosity (-v, -q), subcommands -v or -q are
    aliases and will continue to work but are considered deprecated,
    current command output is preserved to keep scripts working
  * other:
  * build warning fixes
  * btrfs-debugfs ported to python 3</changelog>
  <changelog author="dsterba@suse.cz" date="1603627200">- Update to 5.9:
  * mkfs:
  * switch default to single profile for multi-device filesystem, up to
    now it was raid0 that may not be simple to convert to some other profile
    as raid0 needs a workspace on all device for that
  * new option -R for run-time options (eg. mount time enabled), now
    understands free-space-tree
  * subvolume delete:
  * refuse to delete the default subvolume (kernel will not allow that but
    the error reason is not obvious)
  * warn on EPERM, eg. if send is on progress on the subvolume
  * convert:
  * fix 32bit overflows on large filesystems
  * improved error handling and error messages
  * check free space taking fragmentation into account
  * check:
  * detect and repair wrong inode generation
  * minor improvement in error reporting on roots
  * libbtrfsutils: follow main package versioning (5.9)
  * add pkg-config file definitions
  * python-btrfsutil: follow main package versioning (5.9)
  * inspect tree-stats: print node counts for each level, fanout
  * other:
  * docs:
  * remove obsolete mount options (alloc_start, subvolrootid)
  * deleting default subvolume is not permitted
  * updated or fixed tests
  * .editorconfig updates
  * move files to kernel-shared/
  * CI:
  * updated to use zstd 1.4.5
  * fix reiserfs build
  * more builds with asan, ubsan
  * sb-mod updates
  * build:
  * print .so versions of libraries in configure summary</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dsterba@suse.cz" date="1615118400">- Update to 5.11
  * fix device path canonicalization for device mapper devices
  * receive: remove workaround for setting capabilities, all stable kernels
    have been patched
  * receive: fix duplicate mount path detection
  * rescue: new subcommand create-control-device
  * device stats: minor fix for plain text format output
  * build: detect if e2fsprogs support 64bit timestamps
  * build: drop libmount, required functionality has been reimplemented
  * mkfs: warn when raid56 is used
  * balance convert: warn when raid56 is used
  * other
  * new and updated tests
  * documentation updates
  * seeding device
  * raid56 status
  * CI updates
  * docker images for various distros
- Update to 5.10.1
  * static build works again
  * other:
  * add a way to test static binaries with the testsuite
  * clarify scrub docs
  * update dependencies, minimum version for libmount is 2.24, this may
    change in the future
- Update to 5.10
  * scrub status:
  * print percentage of progress
  * add size unit options
  * fi usage: also print free space from statfs
  * convert: copy full 64 bit timestamp from ext4 if availalble
  * check:
  * add ability to repair extent item generation
  * new option to remove leftovers from inode number cache (-o inode_cache)
  * check for already running exclusive operation (balance, device add/...)
    when starting one
  * preliminary json output support for 'device stats'
  * fixes:
  * subvolume set-default: id 0 correctly falls back to toplevel
  * receive: align internal buffer to allow fast CRC calculation
  * logical-resolve: distinguish -o subvol and bind mounts
  * build: new dependency libmount
  * other
  * doc fixes and updates
  * new tests
  * ci on gitlab temporarily disabled
  * debugging output enhancements</changelog>
  <changelog author="dsterba@suse.cz" date="1620561600">- Update to 5.12
  * libbtrfsutil: relicensed to LGPL v2.1+
  * mkfs: zoned mode support (kernel 5.12+)
  * fi df: show zone_unusable per profile type in zoned mode
  * fi usage: show total amount of zone_unusable
  * fi resize: fix message for exact size
  * image: fix warning and enlarge output file if necessary
  * core
  * refactor chunk allocator for more modes
  * implement zoned mode support: allocation and writes, sb log
  * crypto/hash refactoring and cleanups
  * refactoring and cleanups
  * other
  * test updates
  * CI updates
  * travis-ci integration disabled
  * docker images updated, more coverage
  * incomplete build support for Android removed
  * doc updates
  * chattr mode m for 'NOCOMPRESS"
  * swapfile used from fstab
  * how to add a new export to libbtrfsutil
  * update status of mount options since 5.9
- Update to 5.11.1
  * properly format checksums when a mismatch is reported
  * check: fix false alert on tree block crossing 64K page boundary
  * convert:
  * refuse to convert filesystem with 'needs_recovery'
  * update documentation to require fsck before conversion
  * balance convert: fix raid56 warning when converting other profiles
  * fi resize: improved summary
  * other
  * build: fix checks and autoconf defines
  * fix symlink paths for CI support scripts
  * updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1620820800">- Update to 5.12.1
  * build: fix missing symbols in libbtrfs
  * mkfs: check for minimal number of zones
  * check: fix warning about cache generation when free space tree is enabled
  * fix superblock write in zoned mode on 16K pages</changelog>
  <changelog author="camspam@redhyena.net" date="1623758400">- Fix build for leap
  * --disable-zstd if leap &lt; 42.3
  * --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1623758401">- revert previous change, unintentionally disables zstd on tumbleweed</changelog>
  <changelog author="camspam@redhyena.net" date="1623844800">- Add --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1626091200">- Update to 5.13
  * restore: remove loop checks for extent count and directory scan
  * inspect dump-tree: new options to print node (--csum-headers) and data
    checksums (--csum-items)
  * fi usage:
  * print stripe count for striped profiles
  * print zoned information: size, total unusable
  * mkfs: print note about sha256 accelerated module loading issue
  * check: ability to reset dev_item::bytes_used
  * fixes
  * detect zoned kernel support at run time too
  * exclusive op running check return value
  * fi resize: support cancel (kernel 5.14)
  * device remove: support cancel (kernel 5.14)
  * documentation about general topics
  * compression
  * zoned mode
  * storage model
  * hardware considerations
  * other
  * libbtrfsutil API overview
  * help text fixes and updates
  * hash speedtest measure time, cycles using perf and print throughput</changelog>
  <changelog author="rgoldwyn@suse.com" date="1628596800">- Update to 5.13.1
  * build: fix build on musl libc due to missing definition of NAME_MAX
  * check:
  * batch more work into one transaction when clearing v1 free space inodes
  * detect directoris with wrong number of links
  * libbtrfsutil: fix race between subvolume iterator and deletion
  * mkfs: be more specific about supported profiles for zoned device
  * other:
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1631448000">- Update to 5.14
  * convert:
  * new option --uuid to copy, generate or set a given uuid
  * improve output
  * mkfs:
  * allow to create degenerate raid0 (on 1 device) and raid10 (on 2 devices)
  * image:
  * improved error messages
  * fix some alignment of restored image
  * subvol delete: allow to delete by id when path is not resolvable
  * check:
  * require alignment of nodesize for 64k page systems
  * detect and fix invalid block groups
  * libbtrfs (deprecated):
  * remove most exported symbols, leave only a few that are used by snapper
  * no version change (still 0.1)
  * remove btrfs-list.h, btrfsck.h
  * fixes:
  * reset generation of space v1 if v2 is used
  * fi us: don't wrongly report missing device size when partition is not readable
  * other:
  * build: experimental features
  * build: better detection of 64bit timestamp support for ext4
  * corrupt-block: block group items
  * new and updated tests
  * refactoring
  * experimental features:
  * new image dump format, with data</changelog>
  <changelog author="rgoldwyn@suse.com" date="1632744000">- Deleted upstreamed patches for upgrade:
  - fate#325871
  * 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch
  - btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch
  - btrfs-progs: check: fix segfault with -Q (bsc#1158560)
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch
  - Enqueue feature to wait for exclusive operation to finish (JSC#SLE-15234)
  * 0001-btrfs-progs-add-get_fsid_fd-for-getting-fsid-using-f.patch
  * 0002-btrfs-progs-add-sysfs-file-reading-helpers.patch
  * 0003-btrfs-progs-add-helpers-for-parsing-filesystem-exclu.patch
  * 0004-btrfs-progs-check-for-exclusive-operation-before-iss.patch
  * 0005-btrfs-progs-add-helper-to-check-or-wait-for-exclusiv.patch
  * 0006-btrfs-progs-add-enqueue-parameter-for-exclusive-ops.patch
  - Correct check_running_fs_exclop() return value (bsc#1184481)
  * btrfs-progs-Correct-check_running_fs_exclop-return-v.patch</changelog>
  <changelog author="nborisov@suse.com" date="1638360000">- Ignore multipath devices when probing devices for a btrfs filesystem (bsc#1192983)
  * 0001-btrfs-progs-Add-optional-dependency-on-libudev.patch
  * 0002-btrfs-progs-Ignore-devices-representing-paths-in-mul.patch
  * 0003-btrfs-progs-Add-fallback-code-for-path-device-ignore.patch</changelog>
  <changelog author="dmueller@suse.com" date="1642593600">- add python-rpm-macros (bsc#1194748)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1661774400">- Upstream behavior of btrfs compression=none (JSC#PED-1711)
  * btrfs-progs_props_dont_translate_value_of_compression_none.patch</changelog>
  <changelog author="tabraham@suse.com" date="1702987200">- btrfs-progs: fix defrag -c option parsing (bsc#1218029)
  * btrfs-progs-fix-defrag-c-option-parsing.patch</changelog>
</package>
<package pkgid="230dcfe4344f811c9db04918b11a131fba3ee0803cad9feaba857e4286b2bd44" name="btrfsprogs" arch="s390x">
  <version epoch="0" ver="5.14" rel="150500.10.3.1"/>
  <changelog author="info@paolostivanin.com" date="1586174400">- Update to 5.6:
  * inspect logical-resolve: support LOGICAL_INO_V2 as new option '-o',
    helps advanced dedupe tools
  * inspect: user larger buffer (64K) for results
  * subvol delete: support deletion by id (requires kernel 5.7+)
  * dump-tree: new option --hide-names, replace any names
    (file, directory, subvolume, xattr) in the output with stubs
  * various fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1588161600">- Fix content of _dracutmodulesdir variable: this definitively does
  not belong to libexecdir.</changelog>
  <changelog author="dsterba@suse.cz" date="1589371200">- Update to 5.6.1:
  * print warning when multiple block group profiles exist, update 'fi usage'
    summary, add docs to maual page explaining the situation
  * build: optional support for libgcrypt or libsodium, providing hash
    implementations
  * updated docs</changelog>
  <changelog author="dsterba@suse.cz" date="1594036800">- Update to 5.7:
  * mkfs:
  * new option to enable features otherwise enabled at runtime, now
    implemented for quotas, 'mkfs.btrfs -R quota'
  * fix space accounting for small image, DUP and --rootdir
  * option -A removed
  * check: detect ranges with overlapping csum items
  * fi usage: report correct numbers when plain RAID56 profiles are used
  * convert: ensure the data chunks size never exceed device size
  * libbtrfsutil: update documentation regarding subvolume deletion
  * build: support libkcapi as implementation backend for cryptographic
    primitives
  * core: global options for verbosity (-v, -q), subcommands -v or -q are
    aliases and will continue to work but are considered deprecated,
    current command output is preserved to keep scripts working
  * other:
  * build warning fixes
  * btrfs-debugfs ported to python 3</changelog>
  <changelog author="dsterba@suse.cz" date="1603627200">- Update to 5.9:
  * mkfs:
  * switch default to single profile for multi-device filesystem, up to
    now it was raid0 that may not be simple to convert to some other profile
    as raid0 needs a workspace on all device for that
  * new option -R for run-time options (eg. mount time enabled), now
    understands free-space-tree
  * subvolume delete:
  * refuse to delete the default subvolume (kernel will not allow that but
    the error reason is not obvious)
  * warn on EPERM, eg. if send is on progress on the subvolume
  * convert:
  * fix 32bit overflows on large filesystems
  * improved error handling and error messages
  * check free space taking fragmentation into account
  * check:
  * detect and repair wrong inode generation
  * minor improvement in error reporting on roots
  * libbtrfsutils: follow main package versioning (5.9)
  * add pkg-config file definitions
  * python-btrfsutil: follow main package versioning (5.9)
  * inspect tree-stats: print node counts for each level, fanout
  * other:
  * docs:
  * remove obsolete mount options (alloc_start, subvolrootid)
  * deleting default subvolume is not permitted
  * updated or fixed tests
  * .editorconfig updates
  * move files to kernel-shared/
  * CI:
  * updated to use zstd 1.4.5
  * fix reiserfs build
  * more builds with asan, ubsan
  * sb-mod updates
  * build:
  * print .so versions of libraries in configure summary</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dsterba@suse.cz" date="1615118400">- Update to 5.11
  * fix device path canonicalization for device mapper devices
  * receive: remove workaround for setting capabilities, all stable kernels
    have been patched
  * receive: fix duplicate mount path detection
  * rescue: new subcommand create-control-device
  * device stats: minor fix for plain text format output
  * build: detect if e2fsprogs support 64bit timestamps
  * build: drop libmount, required functionality has been reimplemented
  * mkfs: warn when raid56 is used
  * balance convert: warn when raid56 is used
  * other
  * new and updated tests
  * documentation updates
  * seeding device
  * raid56 status
  * CI updates
  * docker images for various distros
- Update to 5.10.1
  * static build works again
  * other:
  * add a way to test static binaries with the testsuite
  * clarify scrub docs
  * update dependencies, minimum version for libmount is 2.24, this may
    change in the future
- Update to 5.10
  * scrub status:
  * print percentage of progress
  * add size unit options
  * fi usage: also print free space from statfs
  * convert: copy full 64 bit timestamp from ext4 if availalble
  * check:
  * add ability to repair extent item generation
  * new option to remove leftovers from inode number cache (-o inode_cache)
  * check for already running exclusive operation (balance, device add/...)
    when starting one
  * preliminary json output support for 'device stats'
  * fixes:
  * subvolume set-default: id 0 correctly falls back to toplevel
  * receive: align internal buffer to allow fast CRC calculation
  * logical-resolve: distinguish -o subvol and bind mounts
  * build: new dependency libmount
  * other
  * doc fixes and updates
  * new tests
  * ci on gitlab temporarily disabled
  * debugging output enhancements</changelog>
  <changelog author="dsterba@suse.cz" date="1620561600">- Update to 5.12
  * libbtrfsutil: relicensed to LGPL v2.1+
  * mkfs: zoned mode support (kernel 5.12+)
  * fi df: show zone_unusable per profile type in zoned mode
  * fi usage: show total amount of zone_unusable
  * fi resize: fix message for exact size
  * image: fix warning and enlarge output file if necessary
  * core
  * refactor chunk allocator for more modes
  * implement zoned mode support: allocation and writes, sb log
  * crypto/hash refactoring and cleanups
  * refactoring and cleanups
  * other
  * test updates
  * CI updates
  * travis-ci integration disabled
  * docker images updated, more coverage
  * incomplete build support for Android removed
  * doc updates
  * chattr mode m for 'NOCOMPRESS"
  * swapfile used from fstab
  * how to add a new export to libbtrfsutil
  * update status of mount options since 5.9
- Update to 5.11.1
  * properly format checksums when a mismatch is reported
  * check: fix false alert on tree block crossing 64K page boundary
  * convert:
  * refuse to convert filesystem with 'needs_recovery'
  * update documentation to require fsck before conversion
  * balance convert: fix raid56 warning when converting other profiles
  * fi resize: improved summary
  * other
  * build: fix checks and autoconf defines
  * fix symlink paths for CI support scripts
  * updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1620820800">- Update to 5.12.1
  * build: fix missing symbols in libbtrfs
  * mkfs: check for minimal number of zones
  * check: fix warning about cache generation when free space tree is enabled
  * fix superblock write in zoned mode on 16K pages</changelog>
  <changelog author="camspam@redhyena.net" date="1623758400">- Fix build for leap
  * --disable-zstd if leap &lt; 42.3
  * --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1623758401">- revert previous change, unintentionally disables zstd on tumbleweed</changelog>
  <changelog author="camspam@redhyena.net" date="1623844800">- Add --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1626091200">- Update to 5.13
  * restore: remove loop checks for extent count and directory scan
  * inspect dump-tree: new options to print node (--csum-headers) and data
    checksums (--csum-items)
  * fi usage:
  * print stripe count for striped profiles
  * print zoned information: size, total unusable
  * mkfs: print note about sha256 accelerated module loading issue
  * check: ability to reset dev_item::bytes_used
  * fixes
  * detect zoned kernel support at run time too
  * exclusive op running check return value
  * fi resize: support cancel (kernel 5.14)
  * device remove: support cancel (kernel 5.14)
  * documentation about general topics
  * compression
  * zoned mode
  * storage model
  * hardware considerations
  * other
  * libbtrfsutil API overview
  * help text fixes and updates
  * hash speedtest measure time, cycles using perf and print throughput</changelog>
  <changelog author="rgoldwyn@suse.com" date="1628596800">- Update to 5.13.1
  * build: fix build on musl libc due to missing definition of NAME_MAX
  * check:
  * batch more work into one transaction when clearing v1 free space inodes
  * detect directoris with wrong number of links
  * libbtrfsutil: fix race between subvolume iterator and deletion
  * mkfs: be more specific about supported profiles for zoned device
  * other:
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1631448000">- Update to 5.14
  * convert:
  * new option --uuid to copy, generate or set a given uuid
  * improve output
  * mkfs:
  * allow to create degenerate raid0 (on 1 device) and raid10 (on 2 devices)
  * image:
  * improved error messages
  * fix some alignment of restored image
  * subvol delete: allow to delete by id when path is not resolvable
  * check:
  * require alignment of nodesize for 64k page systems
  * detect and fix invalid block groups
  * libbtrfs (deprecated):
  * remove most exported symbols, leave only a few that are used by snapper
  * no version change (still 0.1)
  * remove btrfs-list.h, btrfsck.h
  * fixes:
  * reset generation of space v1 if v2 is used
  * fi us: don't wrongly report missing device size when partition is not readable
  * other:
  * build: experimental features
  * build: better detection of 64bit timestamp support for ext4
  * corrupt-block: block group items
  * new and updated tests
  * refactoring
  * experimental features:
  * new image dump format, with data</changelog>
  <changelog author="rgoldwyn@suse.com" date="1632744000">- Deleted upstreamed patches for upgrade:
  - fate#325871
  * 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch
  - btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch
  - btrfs-progs: check: fix segfault with -Q (bsc#1158560)
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch
  - Enqueue feature to wait for exclusive operation to finish (JSC#SLE-15234)
  * 0001-btrfs-progs-add-get_fsid_fd-for-getting-fsid-using-f.patch
  * 0002-btrfs-progs-add-sysfs-file-reading-helpers.patch
  * 0003-btrfs-progs-add-helpers-for-parsing-filesystem-exclu.patch
  * 0004-btrfs-progs-check-for-exclusive-operation-before-iss.patch
  * 0005-btrfs-progs-add-helper-to-check-or-wait-for-exclusiv.patch
  * 0006-btrfs-progs-add-enqueue-parameter-for-exclusive-ops.patch
  - Correct check_running_fs_exclop() return value (bsc#1184481)
  * btrfs-progs-Correct-check_running_fs_exclop-return-v.patch</changelog>
  <changelog author="nborisov@suse.com" date="1638360000">- Ignore multipath devices when probing devices for a btrfs filesystem (bsc#1192983)
  * 0001-btrfs-progs-Add-optional-dependency-on-libudev.patch
  * 0002-btrfs-progs-Ignore-devices-representing-paths-in-mul.patch
  * 0003-btrfs-progs-Add-fallback-code-for-path-device-ignore.patch</changelog>
  <changelog author="dmueller@suse.com" date="1642593600">- add python-rpm-macros (bsc#1194748)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1661774400">- Upstream behavior of btrfs compression=none (JSC#PED-1711)
  * btrfs-progs_props_dont_translate_value_of_compression_none.patch</changelog>
  <changelog author="tabraham@suse.com" date="1702987200">- btrfs-progs: fix defrag -c option parsing (bsc#1218029)
  * btrfs-progs-fix-defrag-c-option-parsing.patch</changelog>
</package>
<package pkgid="80bb821155c545de3f2481a9808a224be1e706e5f30c80ff18c2bb381b59e36a" name="btrfsprogs" arch="src">
  <version epoch="0" ver="5.14" rel="150500.10.3.1"/>
  <changelog author="info@paolostivanin.com" date="1586174400">- Update to 5.6:
  * inspect logical-resolve: support LOGICAL_INO_V2 as new option '-o',
    helps advanced dedupe tools
  * inspect: user larger buffer (64K) for results
  * subvol delete: support deletion by id (requires kernel 5.7+)
  * dump-tree: new option --hide-names, replace any names
    (file, directory, subvolume, xattr) in the output with stubs
  * various fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1588161600">- Fix content of _dracutmodulesdir variable: this definitively does
  not belong to libexecdir.</changelog>
  <changelog author="dsterba@suse.cz" date="1589371200">- Update to 5.6.1:
  * print warning when multiple block group profiles exist, update 'fi usage'
    summary, add docs to maual page explaining the situation
  * build: optional support for libgcrypt or libsodium, providing hash
    implementations
  * updated docs</changelog>
  <changelog author="dsterba@suse.cz" date="1594036800">- Update to 5.7:
  * mkfs:
  * new option to enable features otherwise enabled at runtime, now
    implemented for quotas, 'mkfs.btrfs -R quota'
  * fix space accounting for small image, DUP and --rootdir
  * option -A removed
  * check: detect ranges with overlapping csum items
  * fi usage: report correct numbers when plain RAID56 profiles are used
  * convert: ensure the data chunks size never exceed device size
  * libbtrfsutil: update documentation regarding subvolume deletion
  * build: support libkcapi as implementation backend for cryptographic
    primitives
  * core: global options for verbosity (-v, -q), subcommands -v or -q are
    aliases and will continue to work but are considered deprecated,
    current command output is preserved to keep scripts working
  * other:
  * build warning fixes
  * btrfs-debugfs ported to python 3</changelog>
  <changelog author="dsterba@suse.cz" date="1603627200">- Update to 5.9:
  * mkfs:
  * switch default to single profile for multi-device filesystem, up to
    now it was raid0 that may not be simple to convert to some other profile
    as raid0 needs a workspace on all device for that
  * new option -R for run-time options (eg. mount time enabled), now
    understands free-space-tree
  * subvolume delete:
  * refuse to delete the default subvolume (kernel will not allow that but
    the error reason is not obvious)
  * warn on EPERM, eg. if send is on progress on the subvolume
  * convert:
  * fix 32bit overflows on large filesystems
  * improved error handling and error messages
  * check free space taking fragmentation into account
  * check:
  * detect and repair wrong inode generation
  * minor improvement in error reporting on roots
  * libbtrfsutils: follow main package versioning (5.9)
  * add pkg-config file definitions
  * python-btrfsutil: follow main package versioning (5.9)
  * inspect tree-stats: print node counts for each level, fanout
  * other:
  * docs:
  * remove obsolete mount options (alloc_start, subvolrootid)
  * deleting default subvolume is not permitted
  * updated or fixed tests
  * .editorconfig updates
  * move files to kernel-shared/
  * CI:
  * updated to use zstd 1.4.5
  * fix reiserfs build
  * more builds with asan, ubsan
  * sb-mod updates
  * build:
  * print .so versions of libraries in configure summary</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dsterba@suse.cz" date="1615118400">- Update to 5.11
  * fix device path canonicalization for device mapper devices
  * receive: remove workaround for setting capabilities, all stable kernels
    have been patched
  * receive: fix duplicate mount path detection
  * rescue: new subcommand create-control-device
  * device stats: minor fix for plain text format output
  * build: detect if e2fsprogs support 64bit timestamps
  * build: drop libmount, required functionality has been reimplemented
  * mkfs: warn when raid56 is used
  * balance convert: warn when raid56 is used
  * other
  * new and updated tests
  * documentation updates
  * seeding device
  * raid56 status
  * CI updates
  * docker images for various distros
- Update to 5.10.1
  * static build works again
  * other:
  * add a way to test static binaries with the testsuite
  * clarify scrub docs
  * update dependencies, minimum version for libmount is 2.24, this may
    change in the future
- Update to 5.10
  * scrub status:
  * print percentage of progress
  * add size unit options
  * fi usage: also print free space from statfs
  * convert: copy full 64 bit timestamp from ext4 if availalble
  * check:
  * add ability to repair extent item generation
  * new option to remove leftovers from inode number cache (-o inode_cache)
  * check for already running exclusive operation (balance, device add/...)
    when starting one
  * preliminary json output support for 'device stats'
  * fixes:
  * subvolume set-default: id 0 correctly falls back to toplevel
  * receive: align internal buffer to allow fast CRC calculation
  * logical-resolve: distinguish -o subvol and bind mounts
  * build: new dependency libmount
  * other
  * doc fixes and updates
  * new tests
  * ci on gitlab temporarily disabled
  * debugging output enhancements</changelog>
  <changelog author="dsterba@suse.cz" date="1620561600">- Update to 5.12
  * libbtrfsutil: relicensed to LGPL v2.1+
  * mkfs: zoned mode support (kernel 5.12+)
  * fi df: show zone_unusable per profile type in zoned mode
  * fi usage: show total amount of zone_unusable
  * fi resize: fix message for exact size
  * image: fix warning and enlarge output file if necessary
  * core
  * refactor chunk allocator for more modes
  * implement zoned mode support: allocation and writes, sb log
  * crypto/hash refactoring and cleanups
  * refactoring and cleanups
  * other
  * test updates
  * CI updates
  * travis-ci integration disabled
  * docker images updated, more coverage
  * incomplete build support for Android removed
  * doc updates
  * chattr mode m for 'NOCOMPRESS"
  * swapfile used from fstab
  * how to add a new export to libbtrfsutil
  * update status of mount options since 5.9
- Update to 5.11.1
  * properly format checksums when a mismatch is reported
  * check: fix false alert on tree block crossing 64K page boundary
  * convert:
  * refuse to convert filesystem with 'needs_recovery'
  * update documentation to require fsck before conversion
  * balance convert: fix raid56 warning when converting other profiles
  * fi resize: improved summary
  * other
  * build: fix checks and autoconf defines
  * fix symlink paths for CI support scripts
  * updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1620820800">- Update to 5.12.1
  * build: fix missing symbols in libbtrfs
  * mkfs: check for minimal number of zones
  * check: fix warning about cache generation when free space tree is enabled
  * fix superblock write in zoned mode on 16K pages</changelog>
  <changelog author="camspam@redhyena.net" date="1623758400">- Fix build for leap
  * --disable-zstd if leap &lt; 42.3
  * --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1623758401">- revert previous change, unintentionally disables zstd on tumbleweed</changelog>
  <changelog author="camspam@redhyena.net" date="1623844800">- Add --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1626091200">- Update to 5.13
  * restore: remove loop checks for extent count and directory scan
  * inspect dump-tree: new options to print node (--csum-headers) and data
    checksums (--csum-items)
  * fi usage:
  * print stripe count for striped profiles
  * print zoned information: size, total unusable
  * mkfs: print note about sha256 accelerated module loading issue
  * check: ability to reset dev_item::bytes_used
  * fixes
  * detect zoned kernel support at run time too
  * exclusive op running check return value
  * fi resize: support cancel (kernel 5.14)
  * device remove: support cancel (kernel 5.14)
  * documentation about general topics
  * compression
  * zoned mode
  * storage model
  * hardware considerations
  * other
  * libbtrfsutil API overview
  * help text fixes and updates
  * hash speedtest measure time, cycles using perf and print throughput</changelog>
  <changelog author="rgoldwyn@suse.com" date="1628596800">- Update to 5.13.1
  * build: fix build on musl libc due to missing definition of NAME_MAX
  * check:
  * batch more work into one transaction when clearing v1 free space inodes
  * detect directoris with wrong number of links
  * libbtrfsutil: fix race between subvolume iterator and deletion
  * mkfs: be more specific about supported profiles for zoned device
  * other:
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1631448000">- Update to 5.14
  * convert:
  * new option --uuid to copy, generate or set a given uuid
  * improve output
  * mkfs:
  * allow to create degenerate raid0 (on 1 device) and raid10 (on 2 devices)
  * image:
  * improved error messages
  * fix some alignment of restored image
  * subvol delete: allow to delete by id when path is not resolvable
  * check:
  * require alignment of nodesize for 64k page systems
  * detect and fix invalid block groups
  * libbtrfs (deprecated):
  * remove most exported symbols, leave only a few that are used by snapper
  * no version change (still 0.1)
  * remove btrfs-list.h, btrfsck.h
  * fixes:
  * reset generation of space v1 if v2 is used
  * fi us: don't wrongly report missing device size when partition is not readable
  * other:
  * build: experimental features
  * build: better detection of 64bit timestamp support for ext4
  * corrupt-block: block group items
  * new and updated tests
  * refactoring
  * experimental features:
  * new image dump format, with data</changelog>
  <changelog author="rgoldwyn@suse.com" date="1632744000">- Deleted upstreamed patches for upgrade:
  - fate#325871
  * 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch
  - btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch
  - btrfs-progs: check: fix segfault with -Q (bsc#1158560)
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch
  - Enqueue feature to wait for exclusive operation to finish (JSC#SLE-15234)
  * 0001-btrfs-progs-add-get_fsid_fd-for-getting-fsid-using-f.patch
  * 0002-btrfs-progs-add-sysfs-file-reading-helpers.patch
  * 0003-btrfs-progs-add-helpers-for-parsing-filesystem-exclu.patch
  * 0004-btrfs-progs-check-for-exclusive-operation-before-iss.patch
  * 0005-btrfs-progs-add-helper-to-check-or-wait-for-exclusiv.patch
  * 0006-btrfs-progs-add-enqueue-parameter-for-exclusive-ops.patch
  - Correct check_running_fs_exclop() return value (bsc#1184481)
  * btrfs-progs-Correct-check_running_fs_exclop-return-v.patch</changelog>
  <changelog author="nborisov@suse.com" date="1638360000">- Ignore multipath devices when probing devices for a btrfs filesystem (bsc#1192983)
  * 0001-btrfs-progs-Add-optional-dependency-on-libudev.patch
  * 0002-btrfs-progs-Ignore-devices-representing-paths-in-mul.patch
  * 0003-btrfs-progs-Add-fallback-code-for-path-device-ignore.patch</changelog>
  <changelog author="dmueller@suse.com" date="1642593600">- add python-rpm-macros (bsc#1194748)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1661774400">- Upstream behavior of btrfs compression=none (JSC#PED-1711)
  * btrfs-progs_props_dont_translate_value_of_compression_none.patch</changelog>
  <changelog author="tabraham@suse.com" date="1702987200">- btrfs-progs: fix defrag -c option parsing (bsc#1218029)
  * btrfs-progs-fix-defrag-c-option-parsing.patch</changelog>
</package>
<package pkgid="00cb276ec7a5e706e3506ee11d339e2a2df7b49cc48a6f828b6773e1fd2039c8" name="btrfsprogs" arch="x86_64">
  <version epoch="0" ver="5.14" rel="150500.10.3.1"/>
  <changelog author="info@paolostivanin.com" date="1586174400">- Update to 5.6:
  * inspect logical-resolve: support LOGICAL_INO_V2 as new option '-o',
    helps advanced dedupe tools
  * inspect: user larger buffer (64K) for results
  * subvol delete: support deletion by id (requires kernel 5.7+)
  * dump-tree: new option --hide-names, replace any names
    (file, directory, subvolume, xattr) in the output with stubs
  * various fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1588161600">- Fix content of _dracutmodulesdir variable: this definitively does
  not belong to libexecdir.</changelog>
  <changelog author="dsterba@suse.cz" date="1589371200">- Update to 5.6.1:
  * print warning when multiple block group profiles exist, update 'fi usage'
    summary, add docs to maual page explaining the situation
  * build: optional support for libgcrypt or libsodium, providing hash
    implementations
  * updated docs</changelog>
  <changelog author="dsterba@suse.cz" date="1594036800">- Update to 5.7:
  * mkfs:
  * new option to enable features otherwise enabled at runtime, now
    implemented for quotas, 'mkfs.btrfs -R quota'
  * fix space accounting for small image, DUP and --rootdir
  * option -A removed
  * check: detect ranges with overlapping csum items
  * fi usage: report correct numbers when plain RAID56 profiles are used
  * convert: ensure the data chunks size never exceed device size
  * libbtrfsutil: update documentation regarding subvolume deletion
  * build: support libkcapi as implementation backend for cryptographic
    primitives
  * core: global options for verbosity (-v, -q), subcommands -v or -q are
    aliases and will continue to work but are considered deprecated,
    current command output is preserved to keep scripts working
  * other:
  * build warning fixes
  * btrfs-debugfs ported to python 3</changelog>
  <changelog author="dsterba@suse.cz" date="1603627200">- Update to 5.9:
  * mkfs:
  * switch default to single profile for multi-device filesystem, up to
    now it was raid0 that may not be simple to convert to some other profile
    as raid0 needs a workspace on all device for that
  * new option -R for run-time options (eg. mount time enabled), now
    understands free-space-tree
  * subvolume delete:
  * refuse to delete the default subvolume (kernel will not allow that but
    the error reason is not obvious)
  * warn on EPERM, eg. if send is on progress on the subvolume
  * convert:
  * fix 32bit overflows on large filesystems
  * improved error handling and error messages
  * check free space taking fragmentation into account
  * check:
  * detect and repair wrong inode generation
  * minor improvement in error reporting on roots
  * libbtrfsutils: follow main package versioning (5.9)
  * add pkg-config file definitions
  * python-btrfsutil: follow main package versioning (5.9)
  * inspect tree-stats: print node counts for each level, fanout
  * other:
  * docs:
  * remove obsolete mount options (alloc_start, subvolrootid)
  * deleting default subvolume is not permitted
  * updated or fixed tests
  * .editorconfig updates
  * move files to kernel-shared/
  * CI:
  * updated to use zstd 1.4.5
  * fix reiserfs build
  * more builds with asan, ubsan
  * sb-mod updates
  * build:
  * print .so versions of libraries in configure summary</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dsterba@suse.cz" date="1615118400">- Update to 5.11
  * fix device path canonicalization for device mapper devices
  * receive: remove workaround for setting capabilities, all stable kernels
    have been patched
  * receive: fix duplicate mount path detection
  * rescue: new subcommand create-control-device
  * device stats: minor fix for plain text format output
  * build: detect if e2fsprogs support 64bit timestamps
  * build: drop libmount, required functionality has been reimplemented
  * mkfs: warn when raid56 is used
  * balance convert: warn when raid56 is used
  * other
  * new and updated tests
  * documentation updates
  * seeding device
  * raid56 status
  * CI updates
  * docker images for various distros
- Update to 5.10.1
  * static build works again
  * other:
  * add a way to test static binaries with the testsuite
  * clarify scrub docs
  * update dependencies, minimum version for libmount is 2.24, this may
    change in the future
- Update to 5.10
  * scrub status:
  * print percentage of progress
  * add size unit options
  * fi usage: also print free space from statfs
  * convert: copy full 64 bit timestamp from ext4 if availalble
  * check:
  * add ability to repair extent item generation
  * new option to remove leftovers from inode number cache (-o inode_cache)
  * check for already running exclusive operation (balance, device add/...)
    when starting one
  * preliminary json output support for 'device stats'
  * fixes:
  * subvolume set-default: id 0 correctly falls back to toplevel
  * receive: align internal buffer to allow fast CRC calculation
  * logical-resolve: distinguish -o subvol and bind mounts
  * build: new dependency libmount
  * other
  * doc fixes and updates
  * new tests
  * ci on gitlab temporarily disabled
  * debugging output enhancements</changelog>
  <changelog author="dsterba@suse.cz" date="1620561600">- Update to 5.12
  * libbtrfsutil: relicensed to LGPL v2.1+
  * mkfs: zoned mode support (kernel 5.12+)
  * fi df: show zone_unusable per profile type in zoned mode
  * fi usage: show total amount of zone_unusable
  * fi resize: fix message for exact size
  * image: fix warning and enlarge output file if necessary
  * core
  * refactor chunk allocator for more modes
  * implement zoned mode support: allocation and writes, sb log
  * crypto/hash refactoring and cleanups
  * refactoring and cleanups
  * other
  * test updates
  * CI updates
  * travis-ci integration disabled
  * docker images updated, more coverage
  * incomplete build support for Android removed
  * doc updates
  * chattr mode m for 'NOCOMPRESS"
  * swapfile used from fstab
  * how to add a new export to libbtrfsutil
  * update status of mount options since 5.9
- Update to 5.11.1
  * properly format checksums when a mismatch is reported
  * check: fix false alert on tree block crossing 64K page boundary
  * convert:
  * refuse to convert filesystem with 'needs_recovery'
  * update documentation to require fsck before conversion
  * balance convert: fix raid56 warning when converting other profiles
  * fi resize: improved summary
  * other
  * build: fix checks and autoconf defines
  * fix symlink paths for CI support scripts
  * updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1620820800">- Update to 5.12.1
  * build: fix missing symbols in libbtrfs
  * mkfs: check for minimal number of zones
  * check: fix warning about cache generation when free space tree is enabled
  * fix superblock write in zoned mode on 16K pages</changelog>
  <changelog author="camspam@redhyena.net" date="1623758400">- Fix build for leap
  * --disable-zstd if leap &lt; 42.3
  * --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1623758401">- revert previous change, unintentionally disables zstd on tumbleweed</changelog>
  <changelog author="camspam@redhyena.net" date="1623844800">- Add --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1626091200">- Update to 5.13
  * restore: remove loop checks for extent count and directory scan
  * inspect dump-tree: new options to print node (--csum-headers) and data
    checksums (--csum-items)
  * fi usage:
  * print stripe count for striped profiles
  * print zoned information: size, total unusable
  * mkfs: print note about sha256 accelerated module loading issue
  * check: ability to reset dev_item::bytes_used
  * fixes
  * detect zoned kernel support at run time too
  * exclusive op running check return value
  * fi resize: support cancel (kernel 5.14)
  * device remove: support cancel (kernel 5.14)
  * documentation about general topics
  * compression
  * zoned mode
  * storage model
  * hardware considerations
  * other
  * libbtrfsutil API overview
  * help text fixes and updates
  * hash speedtest measure time, cycles using perf and print throughput</changelog>
  <changelog author="rgoldwyn@suse.com" date="1628596800">- Update to 5.13.1
  * build: fix build on musl libc due to missing definition of NAME_MAX
  * check:
  * batch more work into one transaction when clearing v1 free space inodes
  * detect directoris with wrong number of links
  * libbtrfsutil: fix race between subvolume iterator and deletion
  * mkfs: be more specific about supported profiles for zoned device
  * other:
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1631448000">- Update to 5.14
  * convert:
  * new option --uuid to copy, generate or set a given uuid
  * improve output
  * mkfs:
  * allow to create degenerate raid0 (on 1 device) and raid10 (on 2 devices)
  * image:
  * improved error messages
  * fix some alignment of restored image
  * subvol delete: allow to delete by id when path is not resolvable
  * check:
  * require alignment of nodesize for 64k page systems
  * detect and fix invalid block groups
  * libbtrfs (deprecated):
  * remove most exported symbols, leave only a few that are used by snapper
  * no version change (still 0.1)
  * remove btrfs-list.h, btrfsck.h
  * fixes:
  * reset generation of space v1 if v2 is used
  * fi us: don't wrongly report missing device size when partition is not readable
  * other:
  * build: experimental features
  * build: better detection of 64bit timestamp support for ext4
  * corrupt-block: block group items
  * new and updated tests
  * refactoring
  * experimental features:
  * new image dump format, with data</changelog>
  <changelog author="rgoldwyn@suse.com" date="1632744000">- Deleted upstreamed patches for upgrade:
  - fate#325871
  * 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch
  - btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch
  - btrfs-progs: check: fix segfault with -Q (bsc#1158560)
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch
  - Enqueue feature to wait for exclusive operation to finish (JSC#SLE-15234)
  * 0001-btrfs-progs-add-get_fsid_fd-for-getting-fsid-using-f.patch
  * 0002-btrfs-progs-add-sysfs-file-reading-helpers.patch
  * 0003-btrfs-progs-add-helpers-for-parsing-filesystem-exclu.patch
  * 0004-btrfs-progs-check-for-exclusive-operation-before-iss.patch
  * 0005-btrfs-progs-add-helper-to-check-or-wait-for-exclusiv.patch
  * 0006-btrfs-progs-add-enqueue-parameter-for-exclusive-ops.patch
  - Correct check_running_fs_exclop() return value (bsc#1184481)
  * btrfs-progs-Correct-check_running_fs_exclop-return-v.patch</changelog>
  <changelog author="nborisov@suse.com" date="1638360000">- Ignore multipath devices when probing devices for a btrfs filesystem (bsc#1192983)
  * 0001-btrfs-progs-Add-optional-dependency-on-libudev.patch
  * 0002-btrfs-progs-Ignore-devices-representing-paths-in-mul.patch
  * 0003-btrfs-progs-Add-fallback-code-for-path-device-ignore.patch</changelog>
  <changelog author="dmueller@suse.com" date="1642593600">- add python-rpm-macros (bsc#1194748)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1661774400">- Upstream behavior of btrfs compression=none (JSC#PED-1711)
  * btrfs-progs_props_dont_translate_value_of_compression_none.patch</changelog>
  <changelog author="tabraham@suse.com" date="1702987200">- btrfs-progs: fix defrag -c option parsing (bsc#1218029)
  * btrfs-progs-fix-defrag-c-option-parsing.patch</changelog>
</package>
<package pkgid="7deac2dbacb5a08875475eea790379e6b439b58a677ae08cef147c784fcc4f45" name="btrfsprogs-udev-rules" arch="noarch">
  <version epoch="0" ver="5.14" rel="150500.10.3.1"/>
  <changelog author="info@paolostivanin.com" date="1586174400">- Update to 5.6:
  * inspect logical-resolve: support LOGICAL_INO_V2 as new option '-o',
    helps advanced dedupe tools
  * inspect: user larger buffer (64K) for results
  * subvol delete: support deletion by id (requires kernel 5.7+)
  * dump-tree: new option --hide-names, replace any names
    (file, directory, subvolume, xattr) in the output with stubs
  * various fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1588161600">- Fix content of _dracutmodulesdir variable: this definitively does
  not belong to libexecdir.</changelog>
  <changelog author="dsterba@suse.cz" date="1589371200">- Update to 5.6.1:
  * print warning when multiple block group profiles exist, update 'fi usage'
    summary, add docs to maual page explaining the situation
  * build: optional support for libgcrypt or libsodium, providing hash
    implementations
  * updated docs</changelog>
  <changelog author="dsterba@suse.cz" date="1594036800">- Update to 5.7:
  * mkfs:
  * new option to enable features otherwise enabled at runtime, now
    implemented for quotas, 'mkfs.btrfs -R quota'
  * fix space accounting for small image, DUP and --rootdir
  * option -A removed
  * check: detect ranges with overlapping csum items
  * fi usage: report correct numbers when plain RAID56 profiles are used
  * convert: ensure the data chunks size never exceed device size
  * libbtrfsutil: update documentation regarding subvolume deletion
  * build: support libkcapi as implementation backend for cryptographic
    primitives
  * core: global options for verbosity (-v, -q), subcommands -v or -q are
    aliases and will continue to work but are considered deprecated,
    current command output is preserved to keep scripts working
  * other:
  * build warning fixes
  * btrfs-debugfs ported to python 3</changelog>
  <changelog author="dsterba@suse.cz" date="1603627200">- Update to 5.9:
  * mkfs:
  * switch default to single profile for multi-device filesystem, up to
    now it was raid0 that may not be simple to convert to some other profile
    as raid0 needs a workspace on all device for that
  * new option -R for run-time options (eg. mount time enabled), now
    understands free-space-tree
  * subvolume delete:
  * refuse to delete the default subvolume (kernel will not allow that but
    the error reason is not obvious)
  * warn on EPERM, eg. if send is on progress on the subvolume
  * convert:
  * fix 32bit overflows on large filesystems
  * improved error handling and error messages
  * check free space taking fragmentation into account
  * check:
  * detect and repair wrong inode generation
  * minor improvement in error reporting on roots
  * libbtrfsutils: follow main package versioning (5.9)
  * add pkg-config file definitions
  * python-btrfsutil: follow main package versioning (5.9)
  * inspect tree-stats: print node counts for each level, fanout
  * other:
  * docs:
  * remove obsolete mount options (alloc_start, subvolrootid)
  * deleting default subvolume is not permitted
  * updated or fixed tests
  * .editorconfig updates
  * move files to kernel-shared/
  * CI:
  * updated to use zstd 1.4.5
  * fix reiserfs build
  * more builds with asan, ubsan
  * sb-mod updates
  * build:
  * print .so versions of libraries in configure summary</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dsterba@suse.cz" date="1615118400">- Update to 5.11
  * fix device path canonicalization for device mapper devices
  * receive: remove workaround for setting capabilities, all stable kernels
    have been patched
  * receive: fix duplicate mount path detection
  * rescue: new subcommand create-control-device
  * device stats: minor fix for plain text format output
  * build: detect if e2fsprogs support 64bit timestamps
  * build: drop libmount, required functionality has been reimplemented
  * mkfs: warn when raid56 is used
  * balance convert: warn when raid56 is used
  * other
  * new and updated tests
  * documentation updates
  * seeding device
  * raid56 status
  * CI updates
  * docker images for various distros
- Update to 5.10.1
  * static build works again
  * other:
  * add a way to test static binaries with the testsuite
  * clarify scrub docs
  * update dependencies, minimum version for libmount is 2.24, this may
    change in the future
- Update to 5.10
  * scrub status:
  * print percentage of progress
  * add size unit options
  * fi usage: also print free space from statfs
  * convert: copy full 64 bit timestamp from ext4 if availalble
  * check:
  * add ability to repair extent item generation
  * new option to remove leftovers from inode number cache (-o inode_cache)
  * check for already running exclusive operation (balance, device add/...)
    when starting one
  * preliminary json output support for 'device stats'
  * fixes:
  * subvolume set-default: id 0 correctly falls back to toplevel
  * receive: align internal buffer to allow fast CRC calculation
  * logical-resolve: distinguish -o subvol and bind mounts
  * build: new dependency libmount
  * other
  * doc fixes and updates
  * new tests
  * ci on gitlab temporarily disabled
  * debugging output enhancements</changelog>
  <changelog author="dsterba@suse.cz" date="1620561600">- Update to 5.12
  * libbtrfsutil: relicensed to LGPL v2.1+
  * mkfs: zoned mode support (kernel 5.12+)
  * fi df: show zone_unusable per profile type in zoned mode
  * fi usage: show total amount of zone_unusable
  * fi resize: fix message for exact size
  * image: fix warning and enlarge output file if necessary
  * core
  * refactor chunk allocator for more modes
  * implement zoned mode support: allocation and writes, sb log
  * crypto/hash refactoring and cleanups
  * refactoring and cleanups
  * other
  * test updates
  * CI updates
  * travis-ci integration disabled
  * docker images updated, more coverage
  * incomplete build support for Android removed
  * doc updates
  * chattr mode m for 'NOCOMPRESS"
  * swapfile used from fstab
  * how to add a new export to libbtrfsutil
  * update status of mount options since 5.9
- Update to 5.11.1
  * properly format checksums when a mismatch is reported
  * check: fix false alert on tree block crossing 64K page boundary
  * convert:
  * refuse to convert filesystem with 'needs_recovery'
  * update documentation to require fsck before conversion
  * balance convert: fix raid56 warning when converting other profiles
  * fi resize: improved summary
  * other
  * build: fix checks and autoconf defines
  * fix symlink paths for CI support scripts
  * updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1620820800">- Update to 5.12.1
  * build: fix missing symbols in libbtrfs
  * mkfs: check for minimal number of zones
  * check: fix warning about cache generation when free space tree is enabled
  * fix superblock write in zoned mode on 16K pages</changelog>
  <changelog author="camspam@redhyena.net" date="1623758400">- Fix build for leap
  * --disable-zstd if leap &lt; 42.3
  * --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1623758401">- revert previous change, unintentionally disables zstd on tumbleweed</changelog>
  <changelog author="camspam@redhyena.net" date="1623844800">- Add --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1626091200">- Update to 5.13
  * restore: remove loop checks for extent count and directory scan
  * inspect dump-tree: new options to print node (--csum-headers) and data
    checksums (--csum-items)
  * fi usage:
  * print stripe count for striped profiles
  * print zoned information: size, total unusable
  * mkfs: print note about sha256 accelerated module loading issue
  * check: ability to reset dev_item::bytes_used
  * fixes
  * detect zoned kernel support at run time too
  * exclusive op running check return value
  * fi resize: support cancel (kernel 5.14)
  * device remove: support cancel (kernel 5.14)
  * documentation about general topics
  * compression
  * zoned mode
  * storage model
  * hardware considerations
  * other
  * libbtrfsutil API overview
  * help text fixes and updates
  * hash speedtest measure time, cycles using perf and print throughput</changelog>
  <changelog author="rgoldwyn@suse.com" date="1628596800">- Update to 5.13.1
  * build: fix build on musl libc due to missing definition of NAME_MAX
  * check:
  * batch more work into one transaction when clearing v1 free space inodes
  * detect directoris with wrong number of links
  * libbtrfsutil: fix race between subvolume iterator and deletion
  * mkfs: be more specific about supported profiles for zoned device
  * other:
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1631448000">- Update to 5.14
  * convert:
  * new option --uuid to copy, generate or set a given uuid
  * improve output
  * mkfs:
  * allow to create degenerate raid0 (on 1 device) and raid10 (on 2 devices)
  * image:
  * improved error messages
  * fix some alignment of restored image
  * subvol delete: allow to delete by id when path is not resolvable
  * check:
  * require alignment of nodesize for 64k page systems
  * detect and fix invalid block groups
  * libbtrfs (deprecated):
  * remove most exported symbols, leave only a few that are used by snapper
  * no version change (still 0.1)
  * remove btrfs-list.h, btrfsck.h
  * fixes:
  * reset generation of space v1 if v2 is used
  * fi us: don't wrongly report missing device size when partition is not readable
  * other:
  * build: experimental features
  * build: better detection of 64bit timestamp support for ext4
  * corrupt-block: block group items
  * new and updated tests
  * refactoring
  * experimental features:
  * new image dump format, with data</changelog>
  <changelog author="rgoldwyn@suse.com" date="1632744000">- Deleted upstreamed patches for upgrade:
  - fate#325871
  * 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch
  - btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch
  - btrfs-progs: check: fix segfault with -Q (bsc#1158560)
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch
  - Enqueue feature to wait for exclusive operation to finish (JSC#SLE-15234)
  * 0001-btrfs-progs-add-get_fsid_fd-for-getting-fsid-using-f.patch
  * 0002-btrfs-progs-add-sysfs-file-reading-helpers.patch
  * 0003-btrfs-progs-add-helpers-for-parsing-filesystem-exclu.patch
  * 0004-btrfs-progs-check-for-exclusive-operation-before-iss.patch
  * 0005-btrfs-progs-add-helper-to-check-or-wait-for-exclusiv.patch
  * 0006-btrfs-progs-add-enqueue-parameter-for-exclusive-ops.patch
  - Correct check_running_fs_exclop() return value (bsc#1184481)
  * btrfs-progs-Correct-check_running_fs_exclop-return-v.patch</changelog>
  <changelog author="nborisov@suse.com" date="1638360000">- Ignore multipath devices when probing devices for a btrfs filesystem (bsc#1192983)
  * 0001-btrfs-progs-Add-optional-dependency-on-libudev.patch
  * 0002-btrfs-progs-Ignore-devices-representing-paths-in-mul.patch
  * 0003-btrfs-progs-Add-fallback-code-for-path-device-ignore.patch</changelog>
  <changelog author="dmueller@suse.com" date="1642593600">- add python-rpm-macros (bsc#1194748)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1661774400">- Upstream behavior of btrfs compression=none (JSC#PED-1711)
  * btrfs-progs_props_dont_translate_value_of_compression_none.patch</changelog>
  <changelog author="tabraham@suse.com" date="1702987200">- btrfs-progs: fix defrag -c option parsing (bsc#1218029)
  * btrfs-progs-fix-defrag-c-option-parsing.patch</changelog>
</package>
<package pkgid="94fe53713f9e4fd5c632f17f170988a93f0e5434141d42373966edba89ee0efa" name="ceph" arch="src">
  <version epoch="0" ver="16.2.13.66+g54799ee0666" rel="150400.3.9.2"/>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit
  + (bsc#1187748) When an RBD is mapped, it is attempted to be deployed as an OSD.</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)
  + (bsc#1196046) mgr/cephadm: try to get FQDN for configuration files</changelog>
  <changelog author="tserong@suse.com" date="1658836800">- Update to 16.2.9-538-g9de83fa4064:
  + (bsc#1201604) cephfs-shell: move source to separate subdirectory</changelog>
  <changelog author="tserong@suse.com" date="1665057600">- Update to 16.2.9-539-gea74dd900cd:
  + (bsc#1202292) ceph.spec.in: Add -DFMT_DEPRECATED_OSTREAM to CXXFLAGS</changelog>
  <changelog author="michael.fritch@suse.com" date="1674820800">- Update to 16.2.11-56-gc067055f8f5:
  + (bsc#1199183) osd, tools, kv: non-aggressive, on-line trimming of accumulated dups
  + (bsc#1200262) ceph-volume: fix fast device alloc size on mulitple device
  + (bsc#1200501) cephadm: update monitoring container images
  + (bsc#1200978) mgr/dashboard: prevent alert redirect
  + (bsc#1201797) mgr/volumes: Add subvolumegroup resize cmd
  + (bsc#1201837) mgr/volumes: Fix subvolume discover during upgrade (CVE-2022-0670)
  + (bsc#1201976) monitoring/ceph-mixin: add RGW host to label info
  + (bsc#1202077) mgr/dashboard: enable addition of custom Prometheus alerts
  + (bsc#1203375) python-common: Add 'KB' to supported suffixes in SizeMatcher
  + (bsc#1204430) ceph-crash: drop privleges to run as "ceph" user, rather than root (CVE-2022-3650)
  + (bsc#1205025) rgw: Guard against malformed bucket URLs (CVE-2022-3854)
  + (bsc#1205436) mgr/dashboard: fix rgw connect when using ssl</changelog>
  <changelog author="tserong@suse.com" date="1674820801">- Update to 16.2.11-57-g9be7fb44a33:
  + ceph.spec.in: Replace %usrmerged macro with regular version check
- checkin.sh: default to ses7p branch</changelog>
  <changelog author="tserong@suse.com" date="1675771200">- Update to 16.2.11-58-g38d6afd3b78:
  + test/CMakeLists.txt: move 'APPEND rgw_libs Boost::filesystem' to top level</changelog>
  <changelog author="tserong@suse.com" date="1678449600">- Update to 16.2.11-62-gce6291a3463:
  + (bsc#1201088) fix FTBFS on gcc 13</changelog>
  <changelog author="tserong@suse.com" date="1680004800">- Update to 16.2.11-65-g8b7e6fc0182:
  + (bsc#1201088) test/librados: fix FTBFS on gcc 13
  + (bsc#1208820) mgr/dashboard: allow to pass controls on iscsi disk create</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="tserong@suse.com" date="1683806400">- Update to 16.2.13-66-g54799ee0666:
  + (bsc#1199880) mgr: don't dump global config holding gil
  + (bsc#1209621) cephadm: fix NFS haproxy failover if active node disappears
  + (bsc#1210153) mgr/cephadm: fix handling of mgr upgrades with 3 or more mgrs
  + (bsc#1210243, bsc#1210314) ceph-volume: fix regression in activate
  + (bsc#1210719) cephadm: mount host /etc/hosts for daemon containers in podman deployments
  + (bsc#1210784) mgr/dashboard: Fix SSO error: 'str' object has no attribute 'decode'
  + (bsc#1210944) cmake: patch boost source to support python 3.11
  + (bsc#1211090) fix FTBFS on s390x</changelog>
  <changelog author="tserong@suse.com" date="1684929600">- Add "#!BuildConstraint" to spec files for compatibility with _multibuild</changelog>
  <changelog author="tserong@suse.com" date="1687867200">- Remove _constraints file, add README-constraints.txt and pre_checkin.env</changelog>
</package>
<package pkgid="24122a822efc64852913983df93827c758350f6b833adb79b86d28beb1b0847f" name="cloud-netconfig-azure" arch="noarch">
  <version epoch="0" ver="1.10" rel="150000.25.14.1"/>
  <changelog author="jgleissner@suse.com" date="1507896000">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
</package>
<package pkgid="3c655f5b6dae30a9e22723ccc179ee0580a9f1c6a38205dcf5031030b0708309" name="cloud-netconfig-azure" arch="src">
  <version epoch="0" ver="1.10" rel="150000.25.14.1"/>
  <changelog author="jgleissner@suse.com" date="1507896000">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
</package>
<package pkgid="ecd39335e529476b669e0946e9bff81c6947dff69ab687ff3f7b8e40341ef55c" name="cloud-netconfig-azure" arch="noarch">
  <version epoch="0" ver="1.8" rel="150000.25.11.1"/>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
</package>
<package pkgid="8d233dda3e49f4e333a5f5294c3b48e43fa5034d6e0d3565b283b850033c59b4" name="cloud-netconfig-azure" arch="src">
  <version epoch="0" ver="1.8" rel="150000.25.11.1"/>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
</package>
<package pkgid="12703ccd307386d0bbe156b3a79ba2362082416d255d7f561296e0b25b7c42b2" name="cloud-netconfig-ec2" arch="noarch">
  <version epoch="0" ver="1.10" rel="150000.25.14.1"/>
  <changelog author="jgleissner@suse.com" date="1507896000">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
</package>
<package pkgid="2e71bfd7f8aca08cbd94f5b02643ca53ba6a35c46e5e4bdd99b661d339e69833" name="cloud-netconfig-ec2" arch="src">
  <version epoch="0" ver="1.10" rel="150000.25.14.1"/>
  <changelog author="jgleissner@suse.com" date="1507896000">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
</package>
<package pkgid="e2f1f16da1088410353e046e1582a29f3852a1af3ac66c25b89c60c8177b0fcb" name="cloud-netconfig-ec2" arch="noarch">
  <version epoch="0" ver="1.8" rel="150000.25.11.1"/>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
</package>
<package pkgid="c6fa23ae082555d6ea55fe248b1900271edb6339a2f50139b884be6204cd5169" name="cloud-netconfig-ec2" arch="src">
  <version epoch="0" ver="1.8" rel="150000.25.11.1"/>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
</package>
<package pkgid="0b997d5b9413679f49df757cf99ba095c8262759bd9bf122881032a558297610" name="cloud-netconfig-gce" arch="noarch">
  <version epoch="0" ver="1.10" rel="150000.25.14.1"/>
  <changelog author="jgleissner@suse.com" date="1507896000">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
</package>
<package pkgid="5e1a179192782a3713a4f580930aadd74d003f6c4f0852604cc1595558da5b90" name="cloud-netconfig-gce" arch="src">
  <version epoch="0" ver="1.10" rel="150000.25.14.1"/>
  <changelog author="jgleissner@suse.com" date="1507896000">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
</package>
<package pkgid="e96addec1958e48b5aa2ee7f4ec229b5d5bdf1a6081f5f25df1ba12ff2be61e4" name="cloud-netconfig-gce" arch="noarch">
  <version epoch="0" ver="1.8" rel="150000.25.11.1"/>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
</package>
<package pkgid="2a53a5a86a5560e8b608cd7447f0050a7bc8843a6ad70297c77c03ac52ba27f7" name="cloud-netconfig-gce" arch="src">
  <version epoch="0" ver="1.8" rel="150000.25.11.1"/>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
</package>
<package pkgid="d9404703e04a9603fbf3d2f27b866495d0ce5bc2560329cffc55cdff064ea054" name="cloud-regionsrv-client" arch="noarch">
  <version epoch="0" ver="10.1.3" rel="150000.6.99.1"/>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
</package>
<package pkgid="e884d71114ea4535dabb64d892f46635fb58fcf81ba3bea5398c35da3f3c50a8" name="cloud-regionsrv-client" arch="src">
  <version epoch="0" ver="10.1.3" rel="150000.6.99.1"/>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
</package>
<package pkgid="6dcf5a787b4c5412b248f58def316f0ebfb7d677ef7a63f891f24b20e8018fdf" name="cloud-regionsrv-client" arch="noarch">
  <version epoch="0" ver="10.1.5" rel="150000.6.102.1"/>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
</package>
<package pkgid="c2e8a49b2d377b718a8cfcf55eceedb7825b59f98b1e789b3ae5ab46489f6303" name="cloud-regionsrv-client" arch="src">
  <version epoch="0" ver="10.1.5" rel="150000.6.102.1"/>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
</package>
<package pkgid="847607a21d6b97e123dd1ce10bf8ec7028964cedba93bc2784cfca03871175bc" name="cloud-regionsrv-client" arch="noarch">
  <version epoch="0" ver="10.1.6" rel="150000.6.105.1"/>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
</package>
<package pkgid="83160df3467a59f21fe46a1d17f4f99679398af5d887960b35cb1fe07f01f589" name="cloud-regionsrv-client" arch="src">
  <version epoch="0" ver="10.1.6" rel="150000.6.105.1"/>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
</package>
<package pkgid="eb8c90a5c3f15d2f66fa75989bcb89a9a6844adc27cf78a0dc811ef87b300230" name="cloud-regionsrv-client-addon-azure" arch="noarch">
  <version epoch="0" ver="1.0.5" rel="150000.6.102.1"/>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
</package>
<package pkgid="d50cc83f0f8b4ae729ba1d00569c45293c80ecc84a6c0868cdf6fb23bf7d40a2" name="cloud-regionsrv-client-addon-azure" arch="noarch">
  <version epoch="0" ver="1.0.5" rel="150000.6.105.1"/>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
</package>
<package pkgid="607559670e6e141fe1a622deeb9509c21b60b3ea7f1acce257ce8b6b7fcd324e" name="cloud-regionsrv-client-addon-azure" arch="noarch">
  <version epoch="0" ver="1.0.5" rel="150000.6.99.1"/>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
</package>
<package pkgid="01f36838871b0cab476e0501a0a30abaf454369130419d33209f661756918252" name="cloud-regionsrv-client-generic-config" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="150000.6.102.1"/>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
</package>
<package pkgid="2e95d2b8350862593de00c2a176ddcc32b1cc0eff6074846e4e6efb66a12049c" name="cloud-regionsrv-client-generic-config" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="150000.6.105.1"/>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
</package>
<package pkgid="831c3b1dc52c7506ad422bada408c5b10a967a775fee4a96e9e0ca69d4924778" name="cloud-regionsrv-client-generic-config" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="150000.6.99.1"/>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
</package>
<package pkgid="49b2b1148e4ae00927daec8e486e450eebc82b759ae78bdbcbdba3b5c3781136" name="cloud-regionsrv-client-plugin-azure" arch="noarch">
  <version epoch="0" ver="2.0.0" rel="150000.6.102.1"/>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
</package>
<package pkgid="b95a62234bca0fb814e914a589e61639adc2e0912d4d7dfef481e38f40cd504d" name="cloud-regionsrv-client-plugin-azure" arch="noarch">
  <version epoch="0" ver="2.0.0" rel="150000.6.105.1"/>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
</package>
<package pkgid="c74a9beaac2b38bf8c629bf24a2b860a189b8f9f51b7b47238d2220817c5845d" name="cloud-regionsrv-client-plugin-azure" arch="noarch">
  <version epoch="0" ver="2.0.0" rel="150000.6.99.1"/>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
</package>
<package pkgid="78fd8ec031ec9b35c2869853fd5162c933b0b0031cb1b31c9a50c43d4cb81bf4" name="cloud-regionsrv-client-plugin-ec2" arch="noarch">
  <version epoch="0" ver="1.0.2" rel="150000.6.99.1"/>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
</package>
<package pkgid="7fad6592da76012d213dc93afaf76888c5a2043962a30831caf88ac22447ad1e" name="cloud-regionsrv-client-plugin-ec2" arch="noarch">
  <version epoch="0" ver="1.0.3" rel="150000.6.102.1"/>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
</package>
<package pkgid="4b6bc3e2c6a051d7fa8de73cbaaf8d89f36057e81eba8802a4cf4cb718b32351" name="cloud-regionsrv-client-plugin-ec2" arch="noarch">
  <version epoch="0" ver="1.0.4" rel="150000.6.105.1"/>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
</package>
<package pkgid="dfdb0e5c703d1d534b415ec9fba6d1a473459197890f0c50688aaeff925a4c39" name="cloud-regionsrv-client-plugin-gce" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="150000.6.102.1"/>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
</package>
<package pkgid="c2d9b7b4f35dcc335c9d69f4f8c3224ac759a8a1dc3098002c86c359417b8f49" name="cloud-regionsrv-client-plugin-gce" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="150000.6.105.1"/>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
</package>
<package pkgid="73d6cb352c25b5e3bec2b70d9bd561ae46832977b63394f03d3e4cb10d152ecd" name="cloud-regionsrv-client-plugin-gce" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="150000.6.99.1"/>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
</package>
<package pkgid="85892e540deaf996ed8950dba4e7a580a380457c2b7303a3c6ab667ec3bebeaf" name="cni" arch="aarch64">
  <version epoch="0" ver="1.1.2" rel="150500.3.2.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1601553600">- Update to version 0.8.0:
  * Specification and Conventions changes
    + docs: add ips and mac to well-known capabilities
    + add interface name validation
    + Add GUID to well known Capabilities
    + Add DeviceID attribute to RuntimeConfig
    + Typo fixes for infiniband GUID
    + Fix linting issues in docs, add headers to json example, update errors into table
  * Documentation changes
    + Update cnitool docs
    + Remove extra ',' chars which makes conflist examples invalid.
  * libcni changes
    + Remove Result.String method
    + libcni: add config caching [v2]
    + clean up : fix staticcheck warnings
    + libcni: add InitCNIConfigWithCacheDir() and deprecate RuntimeConfig.CacheDir
    + skel: clean up errors in skel and add some well-known error codes
    + libcni: find plugin in exec
    + validate containerID and networkName
    + skel: remove needless functions and types
    + libcni: also cache IfName
    + libcni: fix cache file 'result' key name
    + Bump Go version to 1.13
    + When CNI version isn't supplied in config, use default.
    + intercept netplugin std error
    + invoke: capture and return stderr if plugin exits unexpectedly
    + Retry exec commands on text file busy</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615896000">- Set GO111MODULE=auto to build with go1.16+
  * Default changed to GO111MODULE=on in go1.16
  * Set temporarily until using upstream release with go.mod
  * Drop BuildRequires: golang-packaging not currently using macros
  * Add BuildRequires: golang(API) &gt;= 1.13 recommended dependency expression</changelog>
  <changelog author="dmueller@suse.com" date="1619265600">- use buildmode=pie (cnitool is installed into sbindir)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1622462400">- Update to version 0.8.1:
  * This is a security release that fixes a single bug: bsc#1181961 aka CVE-2021-20206
  - Tighten up plugin-finding logic (#811).</changelog>
  <changelog author="idesmi@protonmail.com" date="1648296000">- Update to version v1.0.1:
  * Rewritten spec
    + non-List configurations are removed
    + the version field in the interfaces array was redundant and
    is removed
  * libcni improvements
- Employ RPM macros.go where feasible
- Use vendor tarball
- Remove ./build.sh</changelog>
  <changelog author="andrea.manzini@suse.com" date="1668081600">- Update to version 1.1.2:
  * spec: fix format
  * libcni: handle empty version when parsing version
  * [exec-plugins]: support plugin lists
  This is a minor update to the CNI libraries and tooling.
  This does not bump the protocol / spec version, which remains at v1.0.0</changelog>
</package>
<package pkgid="9c6734be7752bba340bbd795c37b3df3678867dff259c8f1694d69a0a0821e6c" name="cni" arch="s390x">
  <version epoch="0" ver="1.1.2" rel="150500.3.2.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1601553600">- Update to version 0.8.0:
  * Specification and Conventions changes
    + docs: add ips and mac to well-known capabilities
    + add interface name validation
    + Add GUID to well known Capabilities
    + Add DeviceID attribute to RuntimeConfig
    + Typo fixes for infiniband GUID
    + Fix linting issues in docs, add headers to json example, update errors into table
  * Documentation changes
    + Update cnitool docs
    + Remove extra ',' chars which makes conflist examples invalid.
  * libcni changes
    + Remove Result.String method
    + libcni: add config caching [v2]
    + clean up : fix staticcheck warnings
    + libcni: add InitCNIConfigWithCacheDir() and deprecate RuntimeConfig.CacheDir
    + skel: clean up errors in skel and add some well-known error codes
    + libcni: find plugin in exec
    + validate containerID and networkName
    + skel: remove needless functions and types
    + libcni: also cache IfName
    + libcni: fix cache file 'result' key name
    + Bump Go version to 1.13
    + When CNI version isn't supplied in config, use default.
    + intercept netplugin std error
    + invoke: capture and return stderr if plugin exits unexpectedly
    + Retry exec commands on text file busy</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615896000">- Set GO111MODULE=auto to build with go1.16+
  * Default changed to GO111MODULE=on in go1.16
  * Set temporarily until using upstream release with go.mod
  * Drop BuildRequires: golang-packaging not currently using macros
  * Add BuildRequires: golang(API) &gt;= 1.13 recommended dependency expression</changelog>
  <changelog author="dmueller@suse.com" date="1619265600">- use buildmode=pie (cnitool is installed into sbindir)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1622462400">- Update to version 0.8.1:
  * This is a security release that fixes a single bug: bsc#1181961 aka CVE-2021-20206
  - Tighten up plugin-finding logic (#811).</changelog>
  <changelog author="idesmi@protonmail.com" date="1648296000">- Update to version v1.0.1:
  * Rewritten spec
    + non-List configurations are removed
    + the version field in the interfaces array was redundant and
    is removed
  * libcni improvements
- Employ RPM macros.go where feasible
- Use vendor tarball
- Remove ./build.sh</changelog>
  <changelog author="andrea.manzini@suse.com" date="1668081600">- Update to version 1.1.2:
  * spec: fix format
  * libcni: handle empty version when parsing version
  * [exec-plugins]: support plugin lists
  This is a minor update to the CNI libraries and tooling.
  This does not bump the protocol / spec version, which remains at v1.0.0</changelog>
</package>
<package pkgid="bb49162d4e68e9a7bd646d3cb9b48a409a85c84bc0e88c5b1b1e3088180e1e6b" name="cni" arch="src">
  <version epoch="0" ver="1.1.2" rel="150500.3.2.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1601553600">- Update to version 0.8.0:
  * Specification and Conventions changes
    + docs: add ips and mac to well-known capabilities
    + add interface name validation
    + Add GUID to well known Capabilities
    + Add DeviceID attribute to RuntimeConfig
    + Typo fixes for infiniband GUID
    + Fix linting issues in docs, add headers to json example, update errors into table
  * Documentation changes
    + Update cnitool docs
    + Remove extra ',' chars which makes conflist examples invalid.
  * libcni changes
    + Remove Result.String method
    + libcni: add config caching [v2]
    + clean up : fix staticcheck warnings
    + libcni: add InitCNIConfigWithCacheDir() and deprecate RuntimeConfig.CacheDir
    + skel: clean up errors in skel and add some well-known error codes
    + libcni: find plugin in exec
    + validate containerID and networkName
    + skel: remove needless functions and types
    + libcni: also cache IfName
    + libcni: fix cache file 'result' key name
    + Bump Go version to 1.13
    + When CNI version isn't supplied in config, use default.
    + intercept netplugin std error
    + invoke: capture and return stderr if plugin exits unexpectedly
    + Retry exec commands on text file busy</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615896000">- Set GO111MODULE=auto to build with go1.16+
  * Default changed to GO111MODULE=on in go1.16
  * Set temporarily until using upstream release with go.mod
  * Drop BuildRequires: golang-packaging not currently using macros
  * Add BuildRequires: golang(API) &gt;= 1.13 recommended dependency expression</changelog>
  <changelog author="dmueller@suse.com" date="1619265600">- use buildmode=pie (cnitool is installed into sbindir)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1622462400">- Update to version 0.8.1:
  * This is a security release that fixes a single bug: bsc#1181961 aka CVE-2021-20206
  - Tighten up plugin-finding logic (#811).</changelog>
  <changelog author="idesmi@protonmail.com" date="1648296000">- Update to version v1.0.1:
  * Rewritten spec
    + non-List configurations are removed
    + the version field in the interfaces array was redundant and
    is removed
  * libcni improvements
- Employ RPM macros.go where feasible
- Use vendor tarball
- Remove ./build.sh</changelog>
  <changelog author="andrea.manzini@suse.com" date="1668081600">- Update to version 1.1.2:
  * spec: fix format
  * libcni: handle empty version when parsing version
  * [exec-plugins]: support plugin lists
  This is a minor update to the CNI libraries and tooling.
  This does not bump the protocol / spec version, which remains at v1.0.0</changelog>
</package>
<package pkgid="d241b02b30ffdc2b023f6f1abdd34fe4380dad299c2c5733624f2bed61748665" name="cni" arch="x86_64">
  <version epoch="0" ver="1.1.2" rel="150500.3.2.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1601553600">- Update to version 0.8.0:
  * Specification and Conventions changes
    + docs: add ips and mac to well-known capabilities
    + add interface name validation
    + Add GUID to well known Capabilities
    + Add DeviceID attribute to RuntimeConfig
    + Typo fixes for infiniband GUID
    + Fix linting issues in docs, add headers to json example, update errors into table
  * Documentation changes
    + Update cnitool docs
    + Remove extra ',' chars which makes conflist examples invalid.
  * libcni changes
    + Remove Result.String method
    + libcni: add config caching [v2]
    + clean up : fix staticcheck warnings
    + libcni: add InitCNIConfigWithCacheDir() and deprecate RuntimeConfig.CacheDir
    + skel: clean up errors in skel and add some well-known error codes
    + libcni: find plugin in exec
    + validate containerID and networkName
    + skel: remove needless functions and types
    + libcni: also cache IfName
    + libcni: fix cache file 'result' key name
    + Bump Go version to 1.13
    + When CNI version isn't supplied in config, use default.
    + intercept netplugin std error
    + invoke: capture and return stderr if plugin exits unexpectedly
    + Retry exec commands on text file busy</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615896000">- Set GO111MODULE=auto to build with go1.16+
  * Default changed to GO111MODULE=on in go1.16
  * Set temporarily until using upstream release with go.mod
  * Drop BuildRequires: golang-packaging not currently using macros
  * Add BuildRequires: golang(API) &gt;= 1.13 recommended dependency expression</changelog>
  <changelog author="dmueller@suse.com" date="1619265600">- use buildmode=pie (cnitool is installed into sbindir)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1622462400">- Update to version 0.8.1:
  * This is a security release that fixes a single bug: bsc#1181961 aka CVE-2021-20206
  - Tighten up plugin-finding logic (#811).</changelog>
  <changelog author="idesmi@protonmail.com" date="1648296000">- Update to version v1.0.1:
  * Rewritten spec
    + non-List configurations are removed
    + the version field in the interfaces array was redundant and
    is removed
  * libcni improvements
- Employ RPM macros.go where feasible
- Use vendor tarball
- Remove ./build.sh</changelog>
  <changelog author="andrea.manzini@suse.com" date="1668081600">- Update to version 1.1.2:
  * spec: fix format
  * libcni: handle empty version when parsing version
  * [exec-plugins]: support plugin lists
  This is a minor update to the CNI libraries and tooling.
  This does not bump the protocol / spec version, which remains at v1.0.0</changelog>
</package>
<package pkgid="9afc8a9b37afbd92cd95a2a58a3e336613afea6faa078906d58a56d34d1260df" name="cni-plugins" arch="aarch64">
  <version epoch="0" ver="1.1.1" rel="150500.3.2.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dmueller@suse.com" date="1598875200">- Update to version 0.8.7:
  * Fix race condition in GetCurrentNS
  * lo: CNI_IFNAME is no longer ignored
  * cni: bump to 0.8.0
  * Bump Go version to 1.13 and 1.14
  * Add contact info
  * Update firewall README.md CNI-ADMIN
  * firewall: fix some typos in docs
  * portmap DEL noop if no portMappings present
  * flannel: remove net conf file after DEL succeed</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 0.9.0:
  * tuning: revert values on delete (#540)
  * go mod tidy
  * bump to go 1.15
  * Add ability to trigger retests via comments
  * pkg/ns: fix test case to tolerate pids going away.
  * Add github build &amp; test actions
  * bridge: fix testcase to check addresses we care about
  * Remove travis.
  * vendor: bump ginkgo, gover
  * portmap plugin should flush previous udp connections
  * Updating plugin README.md files (#549)
  * update netlink dependencies
  * Xdhcp: fix example configuration
  * VRF: extend supported version to 0.3.1 too.
  * VRF CNI: Add an optional table parameter.
  * Add more tests for the vrf cni plugin.
  * Update github.com/vishvananda/netlink to v1.1.0
  * Introduce a new VRF CNI meta plugin.
  * Travis: run tests on arm64
  * Replace nc with the local echo client.
  * Add an echo client to be used instead of nc.
  * Bump up the ubuntu version used in CI to bionic.
  * flannel: allow input ipam parameters as basis for delegate
  * ipvlan: make master config as optional
  * Remove extraneous test file in Windows plugin</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 0.9.1:
  * ipam/dhcp: Add broadcast flag
  * add flannel to support dual stack ip
  * bandwidth: fix panic in tests
  * host-device: Add support for DPDK device
  * [main/vlan] Fix error handling for delegate IPAM plugin
  * dhcp: default dhcp clien timeout is 10s
  * vlan: fix error message text by removing ptp references
  * dhcp: daemon dhcp client timeout is configurable
  * dhcp: timeout value is set in DHCP daemon
  * remove unused function
  * deps: go mod tidy coreos/go-iptables
  * deps: bump coreos/go-iptables</changelog>
  <changelog author="fvogt@suse.com" date="1648555200">- Update to version 1.1.1:
  * ipam/dhcp: Fix client id in renew/release
  * call ipam.ExceDel after clean up device in netns fix #666
  * portmap: fix checkPorts result when chain does not exist
  * portmap: fix bug that new udp connection deletes all existing conntrack entries
  * Enhanced dad set to 1
  * Add boolean to enable/disable dad
  * Disable DAD for container side veth
  * firewall: support ingressPolicy=(open|same-bridge) for isolating bridges as in Docker
  * Fix host-device gofmt
  * host-device: Bring interfaces up after moving into container
  * pkg/ns: use file system magic numbers from golang.org/x/sys/unix
  * gofmt
  * go mod tidy
  * build: bump to go 1.17
  * Remove arp notify setting per comment
  * plugins: replace arping package with arp_notify
  * fix #685
  * Ran go fmt so tests would pass
  * Fixed DHCP problem that broke when fast retry was added.
  * dhcp ipam: adjust retry mechanism
  * add ipam tests for dpdk device
  * add ipam support for dpdk device
  * ipvlan: Send Gratuitous ARP after IPs are set
  * dhcp ipam: fix client id
  * dhcp ipam: rename inconsistent options among files
  * dhcp ipam: add more options capable for sending
  * dhcp ipam: add fast retry
  * dhcp ipam: support customizing dhcp options
  * dhcp ipam: truncate client id to 254 bytes
  * dhcp ipam: print error correctly without format string
  * dhcp ipam: using full config to regular the code
  * Allow setting sysctls on a particular interface
  * dhcp: remove implemented TODO
  * Don't redundantly filepath.Clean the output of filepath.Join
  * Use crypto/rand.Read, not crypto.Reader.Read
  * bridge: Add macspoofchk support
  * plugins: fix bug where support for CNI version 0.4.0 or 1.0.0 was dropped
  * vendor: bump to libcni v1.0.1
  * static ipam: do not parse the CIDR twice
  * static ipam: improve error msgs when provisioning invalid CIDR
  * bump go to 1.16, other misc fixes
  * vendor: bump all direct dependencies
  * vendor: bump to libcni v1.0
  * docs: Update the CI badge from Travis CI to GitHub Actions
  * bridge: Fix typo in error message for promiscuous mode
  * ip: place veth peer in host namspace directly
  * bridge: Add mac field to specify container iface mac
  * static ipam: decide wrong cidr error msg
  * static ipam: stop wrapping net.ParseCIDR errors
  * static ipam: show confusing error msg
  * utils, hwaddr: Remove unused package
  * ip, link_linux: Remove unused SetHWAddrByIP function
  * plugins: remove flannel
  * refactor(win-bridge): netconf
  * refactor(win-bridge): hcn api processing
  * refactor(win-bridge): hns api processing
  * chore(win-bridge): location related
  * chore(win-bridge): text related
  * Remove Bryan Boreham as maintainer
  * host-local: support ip/prefix in env args and CNI args
  * [sbr]: Use different tableID for every ipCfg        Check tableID not in use for every ipCfg
  * Small typo improves in README.md
  * Allow multiple routes to be added for the same prefix. Enables ECMP
  * Update to lastest vendor/github.com/vishvananda/netlink
  * tuning: always update MAC in CNI result
  * vendor: bump to libcni v1.0-rc1
  * tuning: Add support of altering the allmulticast flag
  * [sbr]: Use different tableID for every ipCfg        Move default table routes which  match the ipCfg config
  * Fix nil-pointer check
  * host-local: support custom IPs allocation through runtime configuration
  * pkg/ip: introduce a new type `IP` to support formated &lt;ip&gt;[/&lt;prefix&gt;]
  * go.mod: github.com/j-keck/arping v1.0.1
  * go.mod: github.com/buger/jsonparser v1.1.1
  * go.mod: github.com/alexflint/go-filemutex v1.1.0
  * go.mod github.com/Microsoft/hcsshim v0.8.16
  * go.mod: godbus/dbus/v5 v5.0.3, coreos/go-systemd v22.2.0
  * go.mod: github.com/mattn/go-shellwords v1.0.11
  * go.mod: github.com/sirupsen/logrus v1.8.1
  * CI: Install linux-modules-extra for VRF module
  * Fix broken links to online docs in plugin READMEs
  * gha: update actions/setup-go@v2
  * remove redundant startRange in RangeIter due to overlap check on multi ranges
  * fix(win-bridge): panic while calling HNS api
  * portmap: use slashes in sysctl template to support interface names which separated by dots
  * pkg/ipam: use slash as sysctl separator so interface name can have dot
  * [macvlan] Stop setting proxy-arp on macvlan interface
  * tuning: increase test coverage to 1.0.0 and older spec versions
  * portmap: increase test coverage to 1.0.0 and older spec versions
  * flannel: increase test coverage to 1.0.0 and older spec versions
  * firewall: increase test coverage to 1.0.0 and older spec versions
  * bandwidth: increase test coverage to 1.0.0 and older spec versions
  * host-local: increase test coverage to 1.0.0 and older spec versions
  * static: increase test coverage to 1.0.0 and older spec versions
  * dhcp: increase test coverage to 1.0.0 and older spec versions
  * dhcp: add -resendmax option to limit lease acquisition time for testcases
  * vlan: increase test coverage to 1.0.0 and older spec versions
  * ptp: increase test coverage to 1.0.0 and older spec versions
  * macvlan: increase test coverage to 1.0.0 and older spec versions
  * loopback: increase test coverage to 1.0.0 and older spec versions
  * ipvlan: increase test coverage to 1.0.0 and older spec versions
  * host-device: increase test coverage to 1.0.0 and older spec versions
  * bridge: increase test coverage to 1.0.0 and older spec versions
  * bridge: simplify version-based testcase code
  * testutils: add test utilities for spec version features
  * plugins: update to spec version 1.0.0
  * vendor: bump CNI to 1.0.0-pre @ 62e54113 (fixes bsc#1181961 aka CVE-2021-20206)
- Drop %go_nostrip</changelog>
</package>
<package pkgid="2fddc8f6d35dbe412febaab71ce5f081244f9e9d3f5667c3a2bda5e85710e849" name="cni-plugins" arch="s390x">
  <version epoch="0" ver="1.1.1" rel="150500.3.2.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dmueller@suse.com" date="1598875200">- Update to version 0.8.7:
  * Fix race condition in GetCurrentNS
  * lo: CNI_IFNAME is no longer ignored
  * cni: bump to 0.8.0
  * Bump Go version to 1.13 and 1.14
  * Add contact info
  * Update firewall README.md CNI-ADMIN
  * firewall: fix some typos in docs
  * portmap DEL noop if no portMappings present
  * flannel: remove net conf file after DEL succeed</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 0.9.0:
  * tuning: revert values on delete (#540)
  * go mod tidy
  * bump to go 1.15
  * Add ability to trigger retests via comments
  * pkg/ns: fix test case to tolerate pids going away.
  * Add github build &amp; test actions
  * bridge: fix testcase to check addresses we care about
  * Remove travis.
  * vendor: bump ginkgo, gover
  * portmap plugin should flush previous udp connections
  * Updating plugin README.md files (#549)
  * update netlink dependencies
  * Xdhcp: fix example configuration
  * VRF: extend supported version to 0.3.1 too.
  * VRF CNI: Add an optional table parameter.
  * Add more tests for the vrf cni plugin.
  * Update github.com/vishvananda/netlink to v1.1.0
  * Introduce a new VRF CNI meta plugin.
  * Travis: run tests on arm64
  * Replace nc with the local echo client.
  * Add an echo client to be used instead of nc.
  * Bump up the ubuntu version used in CI to bionic.
  * flannel: allow input ipam parameters as basis for delegate
  * ipvlan: make master config as optional
  * Remove extraneous test file in Windows plugin</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 0.9.1:
  * ipam/dhcp: Add broadcast flag
  * add flannel to support dual stack ip
  * bandwidth: fix panic in tests
  * host-device: Add support for DPDK device
  * [main/vlan] Fix error handling for delegate IPAM plugin
  * dhcp: default dhcp clien timeout is 10s
  * vlan: fix error message text by removing ptp references
  * dhcp: daemon dhcp client timeout is configurable
  * dhcp: timeout value is set in DHCP daemon
  * remove unused function
  * deps: go mod tidy coreos/go-iptables
  * deps: bump coreos/go-iptables</changelog>
  <changelog author="fvogt@suse.com" date="1648555200">- Update to version 1.1.1:
  * ipam/dhcp: Fix client id in renew/release
  * call ipam.ExceDel after clean up device in netns fix #666
  * portmap: fix checkPorts result when chain does not exist
  * portmap: fix bug that new udp connection deletes all existing conntrack entries
  * Enhanced dad set to 1
  * Add boolean to enable/disable dad
  * Disable DAD for container side veth
  * firewall: support ingressPolicy=(open|same-bridge) for isolating bridges as in Docker
  * Fix host-device gofmt
  * host-device: Bring interfaces up after moving into container
  * pkg/ns: use file system magic numbers from golang.org/x/sys/unix
  * gofmt
  * go mod tidy
  * build: bump to go 1.17
  * Remove arp notify setting per comment
  * plugins: replace arping package with arp_notify
  * fix #685
  * Ran go fmt so tests would pass
  * Fixed DHCP problem that broke when fast retry was added.
  * dhcp ipam: adjust retry mechanism
  * add ipam tests for dpdk device
  * add ipam support for dpdk device
  * ipvlan: Send Gratuitous ARP after IPs are set
  * dhcp ipam: fix client id
  * dhcp ipam: rename inconsistent options among files
  * dhcp ipam: add more options capable for sending
  * dhcp ipam: add fast retry
  * dhcp ipam: support customizing dhcp options
  * dhcp ipam: truncate client id to 254 bytes
  * dhcp ipam: print error correctly without format string
  * dhcp ipam: using full config to regular the code
  * Allow setting sysctls on a particular interface
  * dhcp: remove implemented TODO
  * Don't redundantly filepath.Clean the output of filepath.Join
  * Use crypto/rand.Read, not crypto.Reader.Read
  * bridge: Add macspoofchk support
  * plugins: fix bug where support for CNI version 0.4.0 or 1.0.0 was dropped
  * vendor: bump to libcni v1.0.1
  * static ipam: do not parse the CIDR twice
  * static ipam: improve error msgs when provisioning invalid CIDR
  * bump go to 1.16, other misc fixes
  * vendor: bump all direct dependencies
  * vendor: bump to libcni v1.0
  * docs: Update the CI badge from Travis CI to GitHub Actions
  * bridge: Fix typo in error message for promiscuous mode
  * ip: place veth peer in host namspace directly
  * bridge: Add mac field to specify container iface mac
  * static ipam: decide wrong cidr error msg
  * static ipam: stop wrapping net.ParseCIDR errors
  * static ipam: show confusing error msg
  * utils, hwaddr: Remove unused package
  * ip, link_linux: Remove unused SetHWAddrByIP function
  * plugins: remove flannel
  * refactor(win-bridge): netconf
  * refactor(win-bridge): hcn api processing
  * refactor(win-bridge): hns api processing
  * chore(win-bridge): location related
  * chore(win-bridge): text related
  * Remove Bryan Boreham as maintainer
  * host-local: support ip/prefix in env args and CNI args
  * [sbr]: Use different tableID for every ipCfg        Check tableID not in use for every ipCfg
  * Small typo improves in README.md
  * Allow multiple routes to be added for the same prefix. Enables ECMP
  * Update to lastest vendor/github.com/vishvananda/netlink
  * tuning: always update MAC in CNI result
  * vendor: bump to libcni v1.0-rc1
  * tuning: Add support of altering the allmulticast flag
  * [sbr]: Use different tableID for every ipCfg        Move default table routes which  match the ipCfg config
  * Fix nil-pointer check
  * host-local: support custom IPs allocation through runtime configuration
  * pkg/ip: introduce a new type `IP` to support formated &lt;ip&gt;[/&lt;prefix&gt;]
  * go.mod: github.com/j-keck/arping v1.0.1
  * go.mod: github.com/buger/jsonparser v1.1.1
  * go.mod: github.com/alexflint/go-filemutex v1.1.0
  * go.mod github.com/Microsoft/hcsshim v0.8.16
  * go.mod: godbus/dbus/v5 v5.0.3, coreos/go-systemd v22.2.0
  * go.mod: github.com/mattn/go-shellwords v1.0.11
  * go.mod: github.com/sirupsen/logrus v1.8.1
  * CI: Install linux-modules-extra for VRF module
  * Fix broken links to online docs in plugin READMEs
  * gha: update actions/setup-go@v2
  * remove redundant startRange in RangeIter due to overlap check on multi ranges
  * fix(win-bridge): panic while calling HNS api
  * portmap: use slashes in sysctl template to support interface names which separated by dots
  * pkg/ipam: use slash as sysctl separator so interface name can have dot
  * [macvlan] Stop setting proxy-arp on macvlan interface
  * tuning: increase test coverage to 1.0.0 and older spec versions
  * portmap: increase test coverage to 1.0.0 and older spec versions
  * flannel: increase test coverage to 1.0.0 and older spec versions
  * firewall: increase test coverage to 1.0.0 and older spec versions
  * bandwidth: increase test coverage to 1.0.0 and older spec versions
  * host-local: increase test coverage to 1.0.0 and older spec versions
  * static: increase test coverage to 1.0.0 and older spec versions
  * dhcp: increase test coverage to 1.0.0 and older spec versions
  * dhcp: add -resendmax option to limit lease acquisition time for testcases
  * vlan: increase test coverage to 1.0.0 and older spec versions
  * ptp: increase test coverage to 1.0.0 and older spec versions
  * macvlan: increase test coverage to 1.0.0 and older spec versions
  * loopback: increase test coverage to 1.0.0 and older spec versions
  * ipvlan: increase test coverage to 1.0.0 and older spec versions
  * host-device: increase test coverage to 1.0.0 and older spec versions
  * bridge: increase test coverage to 1.0.0 and older spec versions
  * bridge: simplify version-based testcase code
  * testutils: add test utilities for spec version features
  * plugins: update to spec version 1.0.0
  * vendor: bump CNI to 1.0.0-pre @ 62e54113 (fixes bsc#1181961 aka CVE-2021-20206)
- Drop %go_nostrip</changelog>
</package>
<package pkgid="2231ae77ef458ceb11f23fc4f1cc8b5427bd3c422ce19ff94ad99105d0cadfa0" name="cni-plugins" arch="src">
  <version epoch="0" ver="1.1.1" rel="150500.3.2.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dmueller@suse.com" date="1598875200">- Update to version 0.8.7:
  * Fix race condition in GetCurrentNS
  * lo: CNI_IFNAME is no longer ignored
  * cni: bump to 0.8.0
  * Bump Go version to 1.13 and 1.14
  * Add contact info
  * Update firewall README.md CNI-ADMIN
  * firewall: fix some typos in docs
  * portmap DEL noop if no portMappings present
  * flannel: remove net conf file after DEL succeed</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 0.9.0:
  * tuning: revert values on delete (#540)
  * go mod tidy
  * bump to go 1.15
  * Add ability to trigger retests via comments
  * pkg/ns: fix test case to tolerate pids going away.
  * Add github build &amp; test actions
  * bridge: fix testcase to check addresses we care about
  * Remove travis.
  * vendor: bump ginkgo, gover
  * portmap plugin should flush previous udp connections
  * Updating plugin README.md files (#549)
  * update netlink dependencies
  * Xdhcp: fix example configuration
  * VRF: extend supported version to 0.3.1 too.
  * VRF CNI: Add an optional table parameter.
  * Add more tests for the vrf cni plugin.
  * Update github.com/vishvananda/netlink to v1.1.0
  * Introduce a new VRF CNI meta plugin.
  * Travis: run tests on arm64
  * Replace nc with the local echo client.
  * Add an echo client to be used instead of nc.
  * Bump up the ubuntu version used in CI to bionic.
  * flannel: allow input ipam parameters as basis for delegate
  * ipvlan: make master config as optional
  * Remove extraneous test file in Windows plugin</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 0.9.1:
  * ipam/dhcp: Add broadcast flag
  * add flannel to support dual stack ip
  * bandwidth: fix panic in tests
  * host-device: Add support for DPDK device
  * [main/vlan] Fix error handling for delegate IPAM plugin
  * dhcp: default dhcp clien timeout is 10s
  * vlan: fix error message text by removing ptp references
  * dhcp: daemon dhcp client timeout is configurable
  * dhcp: timeout value is set in DHCP daemon
  * remove unused function
  * deps: go mod tidy coreos/go-iptables
  * deps: bump coreos/go-iptables</changelog>
  <changelog author="fvogt@suse.com" date="1648555200">- Update to version 1.1.1:
  * ipam/dhcp: Fix client id in renew/release
  * call ipam.ExceDel after clean up device in netns fix #666
  * portmap: fix checkPorts result when chain does not exist
  * portmap: fix bug that new udp connection deletes all existing conntrack entries
  * Enhanced dad set to 1
  * Add boolean to enable/disable dad
  * Disable DAD for container side veth
  * firewall: support ingressPolicy=(open|same-bridge) for isolating bridges as in Docker
  * Fix host-device gofmt
  * host-device: Bring interfaces up after moving into container
  * pkg/ns: use file system magic numbers from golang.org/x/sys/unix
  * gofmt
  * go mod tidy
  * build: bump to go 1.17
  * Remove arp notify setting per comment
  * plugins: replace arping package with arp_notify
  * fix #685
  * Ran go fmt so tests would pass
  * Fixed DHCP problem that broke when fast retry was added.
  * dhcp ipam: adjust retry mechanism
  * add ipam tests for dpdk device
  * add ipam support for dpdk device
  * ipvlan: Send Gratuitous ARP after IPs are set
  * dhcp ipam: fix client id
  * dhcp ipam: rename inconsistent options among files
  * dhcp ipam: add more options capable for sending
  * dhcp ipam: add fast retry
  * dhcp ipam: support customizing dhcp options
  * dhcp ipam: truncate client id to 254 bytes
  * dhcp ipam: print error correctly without format string
  * dhcp ipam: using full config to regular the code
  * Allow setting sysctls on a particular interface
  * dhcp: remove implemented TODO
  * Don't redundantly filepath.Clean the output of filepath.Join
  * Use crypto/rand.Read, not crypto.Reader.Read
  * bridge: Add macspoofchk support
  * plugins: fix bug where support for CNI version 0.4.0 or 1.0.0 was dropped
  * vendor: bump to libcni v1.0.1
  * static ipam: do not parse the CIDR twice
  * static ipam: improve error msgs when provisioning invalid CIDR
  * bump go to 1.16, other misc fixes
  * vendor: bump all direct dependencies
  * vendor: bump to libcni v1.0
  * docs: Update the CI badge from Travis CI to GitHub Actions
  * bridge: Fix typo in error message for promiscuous mode
  * ip: place veth peer in host namspace directly
  * bridge: Add mac field to specify container iface mac
  * static ipam: decide wrong cidr error msg
  * static ipam: stop wrapping net.ParseCIDR errors
  * static ipam: show confusing error msg
  * utils, hwaddr: Remove unused package
  * ip, link_linux: Remove unused SetHWAddrByIP function
  * plugins: remove flannel
  * refactor(win-bridge): netconf
  * refactor(win-bridge): hcn api processing
  * refactor(win-bridge): hns api processing
  * chore(win-bridge): location related
  * chore(win-bridge): text related
  * Remove Bryan Boreham as maintainer
  * host-local: support ip/prefix in env args and CNI args
  * [sbr]: Use different tableID for every ipCfg        Check tableID not in use for every ipCfg
  * Small typo improves in README.md
  * Allow multiple routes to be added for the same prefix. Enables ECMP
  * Update to lastest vendor/github.com/vishvananda/netlink
  * tuning: always update MAC in CNI result
  * vendor: bump to libcni v1.0-rc1
  * tuning: Add support of altering the allmulticast flag
  * [sbr]: Use different tableID for every ipCfg        Move default table routes which  match the ipCfg config
  * Fix nil-pointer check
  * host-local: support custom IPs allocation through runtime configuration
  * pkg/ip: introduce a new type `IP` to support formated &lt;ip&gt;[/&lt;prefix&gt;]
  * go.mod: github.com/j-keck/arping v1.0.1
  * go.mod: github.com/buger/jsonparser v1.1.1
  * go.mod: github.com/alexflint/go-filemutex v1.1.0
  * go.mod github.com/Microsoft/hcsshim v0.8.16
  * go.mod: godbus/dbus/v5 v5.0.3, coreos/go-systemd v22.2.0
  * go.mod: github.com/mattn/go-shellwords v1.0.11
  * go.mod: github.com/sirupsen/logrus v1.8.1
  * CI: Install linux-modules-extra for VRF module
  * Fix broken links to online docs in plugin READMEs
  * gha: update actions/setup-go@v2
  * remove redundant startRange in RangeIter due to overlap check on multi ranges
  * fix(win-bridge): panic while calling HNS api
  * portmap: use slashes in sysctl template to support interface names which separated by dots
  * pkg/ipam: use slash as sysctl separator so interface name can have dot
  * [macvlan] Stop setting proxy-arp on macvlan interface
  * tuning: increase test coverage to 1.0.0 and older spec versions
  * portmap: increase test coverage to 1.0.0 and older spec versions
  * flannel: increase test coverage to 1.0.0 and older spec versions
  * firewall: increase test coverage to 1.0.0 and older spec versions
  * bandwidth: increase test coverage to 1.0.0 and older spec versions
  * host-local: increase test coverage to 1.0.0 and older spec versions
  * static: increase test coverage to 1.0.0 and older spec versions
  * dhcp: increase test coverage to 1.0.0 and older spec versions
  * dhcp: add -resendmax option to limit lease acquisition time for testcases
  * vlan: increase test coverage to 1.0.0 and older spec versions
  * ptp: increase test coverage to 1.0.0 and older spec versions
  * macvlan: increase test coverage to 1.0.0 and older spec versions
  * loopback: increase test coverage to 1.0.0 and older spec versions
  * ipvlan: increase test coverage to 1.0.0 and older spec versions
  * host-device: increase test coverage to 1.0.0 and older spec versions
  * bridge: increase test coverage to 1.0.0 and older spec versions
  * bridge: simplify version-based testcase code
  * testutils: add test utilities for spec version features
  * plugins: update to spec version 1.0.0
  * vendor: bump CNI to 1.0.0-pre @ 62e54113 (fixes bsc#1181961 aka CVE-2021-20206)
- Drop %go_nostrip</changelog>
</package>
<package pkgid="362af06b56866a41b96f9b5df68bce976fddc2c8303301f60eb5d550e00e1acf" name="cni-plugins" arch="x86_64">
  <version epoch="0" ver="1.1.1" rel="150500.3.2.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dmueller@suse.com" date="1598875200">- Update to version 0.8.7:
  * Fix race condition in GetCurrentNS
  * lo: CNI_IFNAME is no longer ignored
  * cni: bump to 0.8.0
  * Bump Go version to 1.13 and 1.14
  * Add contact info
  * Update firewall README.md CNI-ADMIN
  * firewall: fix some typos in docs
  * portmap DEL noop if no portMappings present
  * flannel: remove net conf file after DEL succeed</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 0.9.0:
  * tuning: revert values on delete (#540)
  * go mod tidy
  * bump to go 1.15
  * Add ability to trigger retests via comments
  * pkg/ns: fix test case to tolerate pids going away.
  * Add github build &amp; test actions
  * bridge: fix testcase to check addresses we care about
  * Remove travis.
  * vendor: bump ginkgo, gover
  * portmap plugin should flush previous udp connections
  * Updating plugin README.md files (#549)
  * update netlink dependencies
  * Xdhcp: fix example configuration
  * VRF: extend supported version to 0.3.1 too.
  * VRF CNI: Add an optional table parameter.
  * Add more tests for the vrf cni plugin.
  * Update github.com/vishvananda/netlink to v1.1.0
  * Introduce a new VRF CNI meta plugin.
  * Travis: run tests on arm64
  * Replace nc with the local echo client.
  * Add an echo client to be used instead of nc.
  * Bump up the ubuntu version used in CI to bionic.
  * flannel: allow input ipam parameters as basis for delegate
  * ipvlan: make master config as optional
  * Remove extraneous test file in Windows plugin</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 0.9.1:
  * ipam/dhcp: Add broadcast flag
  * add flannel to support dual stack ip
  * bandwidth: fix panic in tests
  * host-device: Add support for DPDK device
  * [main/vlan] Fix error handling for delegate IPAM plugin
  * dhcp: default dhcp clien timeout is 10s
  * vlan: fix error message text by removing ptp references
  * dhcp: daemon dhcp client timeout is configurable
  * dhcp: timeout value is set in DHCP daemon
  * remove unused function
  * deps: go mod tidy coreos/go-iptables
  * deps: bump coreos/go-iptables</changelog>
  <changelog author="fvogt@suse.com" date="1648555200">- Update to version 1.1.1:
  * ipam/dhcp: Fix client id in renew/release
  * call ipam.ExceDel after clean up device in netns fix #666
  * portmap: fix checkPorts result when chain does not exist
  * portmap: fix bug that new udp connection deletes all existing conntrack entries
  * Enhanced dad set to 1
  * Add boolean to enable/disable dad
  * Disable DAD for container side veth
  * firewall: support ingressPolicy=(open|same-bridge) for isolating bridges as in Docker
  * Fix host-device gofmt
  * host-device: Bring interfaces up after moving into container
  * pkg/ns: use file system magic numbers from golang.org/x/sys/unix
  * gofmt
  * go mod tidy
  * build: bump to go 1.17
  * Remove arp notify setting per comment
  * plugins: replace arping package with arp_notify
  * fix #685
  * Ran go fmt so tests would pass
  * Fixed DHCP problem that broke when fast retry was added.
  * dhcp ipam: adjust retry mechanism
  * add ipam tests for dpdk device
  * add ipam support for dpdk device
  * ipvlan: Send Gratuitous ARP after IPs are set
  * dhcp ipam: fix client id
  * dhcp ipam: rename inconsistent options among files
  * dhcp ipam: add more options capable for sending
  * dhcp ipam: add fast retry
  * dhcp ipam: support customizing dhcp options
  * dhcp ipam: truncate client id to 254 bytes
  * dhcp ipam: print error correctly without format string
  * dhcp ipam: using full config to regular the code
  * Allow setting sysctls on a particular interface
  * dhcp: remove implemented TODO
  * Don't redundantly filepath.Clean the output of filepath.Join
  * Use crypto/rand.Read, not crypto.Reader.Read
  * bridge: Add macspoofchk support
  * plugins: fix bug where support for CNI version 0.4.0 or 1.0.0 was dropped
  * vendor: bump to libcni v1.0.1
  * static ipam: do not parse the CIDR twice
  * static ipam: improve error msgs when provisioning invalid CIDR
  * bump go to 1.16, other misc fixes
  * vendor: bump all direct dependencies
  * vendor: bump to libcni v1.0
  * docs: Update the CI badge from Travis CI to GitHub Actions
  * bridge: Fix typo in error message for promiscuous mode
  * ip: place veth peer in host namspace directly
  * bridge: Add mac field to specify container iface mac
  * static ipam: decide wrong cidr error msg
  * static ipam: stop wrapping net.ParseCIDR errors
  * static ipam: show confusing error msg
  * utils, hwaddr: Remove unused package
  * ip, link_linux: Remove unused SetHWAddrByIP function
  * plugins: remove flannel
  * refactor(win-bridge): netconf
  * refactor(win-bridge): hcn api processing
  * refactor(win-bridge): hns api processing
  * chore(win-bridge): location related
  * chore(win-bridge): text related
  * Remove Bryan Boreham as maintainer
  * host-local: support ip/prefix in env args and CNI args
  * [sbr]: Use different tableID for every ipCfg        Check tableID not in use for every ipCfg
  * Small typo improves in README.md
  * Allow multiple routes to be added for the same prefix. Enables ECMP
  * Update to lastest vendor/github.com/vishvananda/netlink
  * tuning: always update MAC in CNI result
  * vendor: bump to libcni v1.0-rc1
  * tuning: Add support of altering the allmulticast flag
  * [sbr]: Use different tableID for every ipCfg        Move default table routes which  match the ipCfg config
  * Fix nil-pointer check
  * host-local: support custom IPs allocation through runtime configuration
  * pkg/ip: introduce a new type `IP` to support formated &lt;ip&gt;[/&lt;prefix&gt;]
  * go.mod: github.com/j-keck/arping v1.0.1
  * go.mod: github.com/buger/jsonparser v1.1.1
  * go.mod: github.com/alexflint/go-filemutex v1.1.0
  * go.mod github.com/Microsoft/hcsshim v0.8.16
  * go.mod: godbus/dbus/v5 v5.0.3, coreos/go-systemd v22.2.0
  * go.mod: github.com/mattn/go-shellwords v1.0.11
  * go.mod: github.com/sirupsen/logrus v1.8.1
  * CI: Install linux-modules-extra for VRF module
  * Fix broken links to online docs in plugin READMEs
  * gha: update actions/setup-go@v2
  * remove redundant startRange in RangeIter due to overlap check on multi ranges
  * fix(win-bridge): panic while calling HNS api
  * portmap: use slashes in sysctl template to support interface names which separated by dots
  * pkg/ipam: use slash as sysctl separator so interface name can have dot
  * [macvlan] Stop setting proxy-arp on macvlan interface
  * tuning: increase test coverage to 1.0.0 and older spec versions
  * portmap: increase test coverage to 1.0.0 and older spec versions
  * flannel: increase test coverage to 1.0.0 and older spec versions
  * firewall: increase test coverage to 1.0.0 and older spec versions
  * bandwidth: increase test coverage to 1.0.0 and older spec versions
  * host-local: increase test coverage to 1.0.0 and older spec versions
  * static: increase test coverage to 1.0.0 and older spec versions
  * dhcp: increase test coverage to 1.0.0 and older spec versions
  * dhcp: add -resendmax option to limit lease acquisition time for testcases
  * vlan: increase test coverage to 1.0.0 and older spec versions
  * ptp: increase test coverage to 1.0.0 and older spec versions
  * macvlan: increase test coverage to 1.0.0 and older spec versions
  * loopback: increase test coverage to 1.0.0 and older spec versions
  * ipvlan: increase test coverage to 1.0.0 and older spec versions
  * host-device: increase test coverage to 1.0.0 and older spec versions
  * bridge: increase test coverage to 1.0.0 and older spec versions
  * bridge: simplify version-based testcase code
  * testutils: add test utilities for spec version features
  * plugins: update to spec version 1.0.0
  * vendor: bump CNI to 1.0.0-pre @ 62e54113 (fixes bsc#1181961 aka CVE-2021-20206)
- Drop %go_nostrip</changelog>
</package>
<package pkgid="559df2fbfa9744882be4caa7c4af8617237a66478039366ab5e0371b1a799c43" name="conmon" arch="aarch64">
  <version epoch="0" ver="2.1.10" rel="150500.9.9.1"/>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- New upstream release 2.1.7
  2.1.7:
  [#]## Bug Fixes
  Fix leaking symbolic links in the opt_socket_path directory
  cgroup: Stumble on if we can't set up oom handling (bsc#1208737)
  2.1.6:
  [#]## Bug Fixes
  * Fix OOM watcher for cgroupv2 `oom_kill` events
  [#]## Misc
  * Use --detach instead of -d
  * ctrl: drop fifo perms to 0660
- Remove merged patch:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch
- Bump go version to 1.19 (bsc#1209307)</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to version 2.1.8:
  * stdio: ignore EIO for terminals (bsc#1217773)
  * ensure console socket buffers are properly sized
  * conmon: drop return after pexit()
  * ctrl: make accept4 failures fatal
  * logging: avoid opening /dev/null for each write
  * oom: restore old OOM score
  * Use default umask 0022
  * cli: log parsing errors to stderr
  * Changes to build conmon for riscv64
  * Changes to build conmon for ppc64le
  * Fix close_other_fds on FreeBSD</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695902400">- go 1.19 EOL, swith to go &gt;= 1.20
  * [bsc#1215806]</changelog>
  <changelog author="dcermak@suse.com" date="1702641600">- New upstream release 2.1.9
  [#]## Bug fixes
  * fix some issues flagged by SAST scan
  * src: fix write after end of buffer
  * src: open all files with O_CLOEXEC
  * oom-score: restore oom score before running exit command
  [#]## Features
  * Forward more messages on the sd-notify socket
  * logging: -l passthrough accepts TTYs</changelog>
  <changelog author="dcermak@suse.com" date="1702900800">- Add fix-incorrect-free-in-conn_sock.patch
  This fixes a regression in 2.1.9
  (https://github.com/containers/conmon/issues/475 and
  https://github.com/containers/conmon/issues/477)</changelog>
  <changelog author="dcermak@suse.com" date="1702987200">- New upstream release 2.1.10
  Bug fixes:
  * Fix incorrect free in conn_sock (removes fix-incorrect-free-in-conn_sock.patch)
  * logging: Respect log-size-max immediately after open</changelog>
</package>
<package pkgid="26f6b544b43a4ac7fe41ec4a9b351b9ed72ff308e38df3fdba5d6bc29b41a1a9" name="conmon" arch="s390x">
  <version epoch="0" ver="2.1.10" rel="150500.9.9.1"/>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- New upstream release 2.1.7
  2.1.7:
  [#]## Bug Fixes
  Fix leaking symbolic links in the opt_socket_path directory
  cgroup: Stumble on if we can't set up oom handling (bsc#1208737)
  2.1.6:
  [#]## Bug Fixes
  * Fix OOM watcher for cgroupv2 `oom_kill` events
  [#]## Misc
  * Use --detach instead of -d
  * ctrl: drop fifo perms to 0660
- Remove merged patch:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch
- Bump go version to 1.19 (bsc#1209307)</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to version 2.1.8:
  * stdio: ignore EIO for terminals (bsc#1217773)
  * ensure console socket buffers are properly sized
  * conmon: drop return after pexit()
  * ctrl: make accept4 failures fatal
  * logging: avoid opening /dev/null for each write
  * oom: restore old OOM score
  * Use default umask 0022
  * cli: log parsing errors to stderr
  * Changes to build conmon for riscv64
  * Changes to build conmon for ppc64le
  * Fix close_other_fds on FreeBSD</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695902400">- go 1.19 EOL, swith to go &gt;= 1.20
  * [bsc#1215806]</changelog>
  <changelog author="dcermak@suse.com" date="1702641600">- New upstream release 2.1.9
  [#]## Bug fixes
  * fix some issues flagged by SAST scan
  * src: fix write after end of buffer
  * src: open all files with O_CLOEXEC
  * oom-score: restore oom score before running exit command
  [#]## Features
  * Forward more messages on the sd-notify socket
  * logging: -l passthrough accepts TTYs</changelog>
  <changelog author="dcermak@suse.com" date="1702900800">- Add fix-incorrect-free-in-conn_sock.patch
  This fixes a regression in 2.1.9
  (https://github.com/containers/conmon/issues/475 and
  https://github.com/containers/conmon/issues/477)</changelog>
  <changelog author="dcermak@suse.com" date="1702987200">- New upstream release 2.1.10
  Bug fixes:
  * Fix incorrect free in conn_sock (removes fix-incorrect-free-in-conn_sock.patch)
  * logging: Respect log-size-max immediately after open</changelog>
</package>
<package pkgid="972f694bf6cd2f797f07de1373bce5e31c4f3ef35d8ec4b4608943e8615e93bc" name="conmon" arch="src">
  <version epoch="0" ver="2.1.10" rel="150500.9.9.1"/>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- New upstream release 2.1.7
  2.1.7:
  [#]## Bug Fixes
  Fix leaking symbolic links in the opt_socket_path directory
  cgroup: Stumble on if we can't set up oom handling (bsc#1208737)
  2.1.6:
  [#]## Bug Fixes
  * Fix OOM watcher for cgroupv2 `oom_kill` events
  [#]## Misc
  * Use --detach instead of -d
  * ctrl: drop fifo perms to 0660
- Remove merged patch:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch
- Bump go version to 1.19 (bsc#1209307)</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to version 2.1.8:
  * stdio: ignore EIO for terminals (bsc#1217773)
  * ensure console socket buffers are properly sized
  * conmon: drop return after pexit()
  * ctrl: make accept4 failures fatal
  * logging: avoid opening /dev/null for each write
  * oom: restore old OOM score
  * Use default umask 0022
  * cli: log parsing errors to stderr
  * Changes to build conmon for riscv64
  * Changes to build conmon for ppc64le
  * Fix close_other_fds on FreeBSD</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695902400">- go 1.19 EOL, swith to go &gt;= 1.20
  * [bsc#1215806]</changelog>
  <changelog author="dcermak@suse.com" date="1702641600">- New upstream release 2.1.9
  [#]## Bug fixes
  * fix some issues flagged by SAST scan
  * src: fix write after end of buffer
  * src: open all files with O_CLOEXEC
  * oom-score: restore oom score before running exit command
  [#]## Features
  * Forward more messages on the sd-notify socket
  * logging: -l passthrough accepts TTYs</changelog>
  <changelog author="dcermak@suse.com" date="1702900800">- Add fix-incorrect-free-in-conn_sock.patch
  This fixes a regression in 2.1.9
  (https://github.com/containers/conmon/issues/475 and
  https://github.com/containers/conmon/issues/477)</changelog>
  <changelog author="dcermak@suse.com" date="1702987200">- New upstream release 2.1.10
  Bug fixes:
  * Fix incorrect free in conn_sock (removes fix-incorrect-free-in-conn_sock.patch)
  * logging: Respect log-size-max immediately after open</changelog>
</package>
<package pkgid="d98ed6e7595c12a34b99f367b8b3de6e38e00d46568da0ea8e05ca276fa4b3ec" name="conmon" arch="x86_64">
  <version epoch="0" ver="2.1.10" rel="150500.9.9.1"/>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- New upstream release 2.1.7
  2.1.7:
  [#]## Bug Fixes
  Fix leaking symbolic links in the opt_socket_path directory
  cgroup: Stumble on if we can't set up oom handling (bsc#1208737)
  2.1.6:
  [#]## Bug Fixes
  * Fix OOM watcher for cgroupv2 `oom_kill` events
  [#]## Misc
  * Use --detach instead of -d
  * ctrl: drop fifo perms to 0660
- Remove merged patch:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch
- Bump go version to 1.19 (bsc#1209307)</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to version 2.1.8:
  * stdio: ignore EIO for terminals (bsc#1217773)
  * ensure console socket buffers are properly sized
  * conmon: drop return after pexit()
  * ctrl: make accept4 failures fatal
  * logging: avoid opening /dev/null for each write
  * oom: restore old OOM score
  * Use default umask 0022
  * cli: log parsing errors to stderr
  * Changes to build conmon for riscv64
  * Changes to build conmon for ppc64le
  * Fix close_other_fds on FreeBSD</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695902400">- go 1.19 EOL, swith to go &gt;= 1.20
  * [bsc#1215806]</changelog>
  <changelog author="dcermak@suse.com" date="1702641600">- New upstream release 2.1.9
  [#]## Bug fixes
  * fix some issues flagged by SAST scan
  * src: fix write after end of buffer
  * src: open all files with O_CLOEXEC
  * oom-score: restore oom score before running exit command
  [#]## Features
  * Forward more messages on the sd-notify socket
  * logging: -l passthrough accepts TTYs</changelog>
  <changelog author="dcermak@suse.com" date="1702900800">- Add fix-incorrect-free-in-conn_sock.patch
  This fixes a regression in 2.1.9
  (https://github.com/containers/conmon/issues/475 and
  https://github.com/containers/conmon/issues/477)</changelog>
  <changelog author="dcermak@suse.com" date="1702987200">- New upstream release 2.1.10
  Bug fixes:
  * Fix incorrect free in conn_sock (removes fix-incorrect-free-in-conn_sock.patch)
  * logging: Respect log-size-max immediately after open</changelog>
</package>
<package pkgid="b1d0a2e65e670e7570f4412c572a5d691c6468975765d4190311a80f5d314f4c" name="conmon" arch="aarch64">
  <version epoch="0" ver="2.1.7" rel="150500.9.6.1"/>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- New upstream release 2.1.7
  2.1.7:
  [#]## Bug Fixes
  Fix leaking symbolic links in the opt_socket_path directory
  cgroup: Stumble on if we can't set up oom handling (bsc#1208737)
  2.1.6:
  [#]## Bug Fixes
  * Fix OOM watcher for cgroupv2 `oom_kill` events
  [#]## Misc
  * Use --detach instead of -d
  * ctrl: drop fifo perms to 0660
- Remove merged patch:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch
- Bump go version to 1.19 (bsc#1209307)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695988800">- go 1.19 EOL, swith to go &gt;= 1.20
  * [bsc#1215806]</changelog>
</package>
<package pkgid="e4904bfec1ccc1e418a87353eafd4b557cd9f3dd1594bddf8674cada86adec2a" name="conmon" arch="s390x">
  <version epoch="0" ver="2.1.7" rel="150500.9.6.1"/>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- New upstream release 2.1.7
  2.1.7:
  [#]## Bug Fixes
  Fix leaking symbolic links in the opt_socket_path directory
  cgroup: Stumble on if we can't set up oom handling (bsc#1208737)
  2.1.6:
  [#]## Bug Fixes
  * Fix OOM watcher for cgroupv2 `oom_kill` events
  [#]## Misc
  * Use --detach instead of -d
  * ctrl: drop fifo perms to 0660
- Remove merged patch:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch
- Bump go version to 1.19 (bsc#1209307)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695988800">- go 1.19 EOL, swith to go &gt;= 1.20
  * [bsc#1215806]</changelog>
</package>
<package pkgid="c75ed0fb0246f249b4561ba1c1eadc0a1f7e4a4fabdcb48bb014201520c31ceb" name="conmon" arch="src">
  <version epoch="0" ver="2.1.7" rel="150500.9.6.1"/>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- New upstream release 2.1.7
  2.1.7:
  [#]## Bug Fixes
  Fix leaking symbolic links in the opt_socket_path directory
  cgroup: Stumble on if we can't set up oom handling (bsc#1208737)
  2.1.6:
  [#]## Bug Fixes
  * Fix OOM watcher for cgroupv2 `oom_kill` events
  [#]## Misc
  * Use --detach instead of -d
  * ctrl: drop fifo perms to 0660
- Remove merged patch:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch
- Bump go version to 1.19 (bsc#1209307)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695988800">- go 1.19 EOL, swith to go &gt;= 1.20
  * [bsc#1215806]</changelog>
</package>
<package pkgid="107fcc01882b51bc2c6d991bda1ebcc901f6e927be114c648fcfd52d1135733e" name="conmon" arch="x86_64">
  <version epoch="0" ver="2.1.7" rel="150500.9.6.1"/>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- New upstream release 2.1.7
  2.1.7:
  [#]## Bug Fixes
  Fix leaking symbolic links in the opt_socket_path directory
  cgroup: Stumble on if we can't set up oom handling (bsc#1208737)
  2.1.6:
  [#]## Bug Fixes
  * Fix OOM watcher for cgroupv2 `oom_kill` events
  [#]## Misc
  * Use --detach instead of -d
  * ctrl: drop fifo perms to 0660
- Remove merged patch:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch
- Bump go version to 1.19 (bsc#1209307)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695988800">- go 1.19 EOL, swith to go &gt;= 1.20
  * [bsc#1215806]</changelog>
</package>
<package pkgid="5cb10dc3a213814033157f1d7bdbc9b116e394263960fb46f6f4e46a88b83727" name="containerd" arch="aarch64">
  <version epoch="0" ver="1.6.21" rel="150000.95.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="b4f43097ef410ee2472268c24968541bbb92248d808ee39263f1ef4702b95394" name="containerd" arch="s390x">
  <version epoch="0" ver="1.6.21" rel="150000.95.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="d10f7882fabfaa38f2a6c5df86010654ee63a1df05695d6a5ac43a8185259b1e" name="containerd" arch="src">
  <version epoch="0" ver="1.6.21" rel="150000.95.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="b158ed1e4273459c38b77f51bdd534c5b59012a21efe9dccf0dd9f7689eea138" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.6.21" rel="150000.95.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="0b702e954cdfb560ebdabd455443729dc9cf84f6652086b97a44dfe90882e440" name="containerd" arch="aarch64">
  <version epoch="0" ver="1.7.10" rel="150000.106.1"/>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
</package>
<package pkgid="508d8c987569955feae56c13a76de0d33581ad67d034ab6a832fcb4b15d251bb" name="containerd" arch="s390x">
  <version epoch="0" ver="1.7.10" rel="150000.106.1"/>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
</package>
<package pkgid="6c0ed88a1a813e0d0e63ff7e2731563ddafd1e44bf729f947bfe7c43037b5710" name="containerd" arch="src">
  <version epoch="0" ver="1.7.10" rel="150000.106.1"/>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
</package>
<package pkgid="ffe4d877cb43b009ccabc59cdcc58e5a58891c876fd65c63b8de49c95186d9b7" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.7.10" rel="150000.106.1"/>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
</package>
<package pkgid="a1634c9ae58c9d6c557eb6533db28f986b7b08674a2def7437eb2bb274ebe241" name="containerd" arch="aarch64">
  <version epoch="0" ver="1.7.7" rel="150000.100.1"/>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="270a056cc5ed1e9b34ef96d31619c98ff18bfe1c6dbcde4f315d95310afee263" name="containerd" arch="s390x">
  <version epoch="0" ver="1.7.7" rel="150000.100.1"/>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="99af1341d77b8711d5f27b9133227fdea7eeae719ac1890c8a36680a1e23e31a" name="containerd" arch="src">
  <version epoch="0" ver="1.7.7" rel="150000.100.1"/>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="9c640d5e50b38122f4013c48266339b1e7266cda832f70c4c4b737129af981d0" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.7.7" rel="150000.100.1"/>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="94366b6471ebae62ff2057674c5a53b910daf8055418a021281be7fad86efb09" name="containerd" arch="aarch64">
  <version epoch="0" ver="1.7.8" rel="150000.103.1"/>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="7135991c78e69fce45b8523cdcc77c48e0f5b3fd94fd325fc9590778586b9c6f" name="containerd" arch="s390x">
  <version epoch="0" ver="1.7.8" rel="150000.103.1"/>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="ce360e545ebda16670bb21f7ed97d0086cc2e339b587b1c033f75e2d41c8bf6f" name="containerd" arch="src">
  <version epoch="0" ver="1.7.8" rel="150000.103.1"/>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="16c9911872258bfdff7fa97f0b31fb978959d5ce66ed63875bb680fa252b1dd7" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.7.8" rel="150000.103.1"/>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="fc1f59d188ef4825e1ad0e971a9024f66d99907987c8e9c0766241173e19b1a2" name="containerized-data-importer" arch="src">
  <version epoch="0" ver="1.57.0" rel="150500.6.3.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1621512000">- Disable changelog generation via tar_scm service (too verbose)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1621512001">- Update to version 1.34.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.34.0</changelog>
  <changelog author="fvogt@suse.com" date="1622808000">- Add REGISTRY variable</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1623672000">- Use registry.suse.com as the default fallback for sle
- Rename macro registry_path to kubevirt_registry_path
- Update to version 1.35.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.35.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1625054400">- Generate meta info for containers during rpm build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1626091200">- Update to version 1.36.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.36.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1628596800">- Update to version 1.37.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.37.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1633953600">- Update to version 1.40.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1636718400">- Update to version 1.41.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1637928000">- Detect SLE15 SP4 build environment</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639915200">- Update to version 1.42.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641816000">- Update to version 1.43.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1650974400">- Increase storage requirements in _constraints (bsc#1198791)</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Pack only cdi-operator and cdi-cr release manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Update to version 1.51.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.51.0
- Fix CVE-2022-1996 go-restful: CORS bypass (bsc#1200528)
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 1.55.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.55.0
- Drop upstreamed patches:
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665835200">- Build tools/cdi-containerimage-server with CGO_ENABLED=0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1679659200">- Use recent golang compiler (bsc#1208916)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1692187200">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0
- Add registry path for SLE15 SP6</changelog>
</package>
<package pkgid="ca1dca758cf0dd1100040b99d68362ddbef7d54ac42d7e48678c205f455e1dcc" name="containerized-data-importer" arch="src">
  <version epoch="0" ver="1.58.0" rel="150500.6.6.1"/>
  <changelog author="fvogt@suse.com" date="1622808000">- Add REGISTRY variable</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1623672000">- Use registry.suse.com as the default fallback for sle
- Rename macro registry_path to kubevirt_registry_path
- Update to version 1.35.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.35.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1625054400">- Generate meta info for containers during rpm build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1626091200">- Update to version 1.36.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.36.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1628596800">- Update to version 1.37.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.37.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1633953600">- Update to version 1.40.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1636718400">- Update to version 1.41.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1637928000">- Detect SLE15 SP4 build environment</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639915200">- Update to version 1.42.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641816000">- Update to version 1.43.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1650974400">- Increase storage requirements in _constraints (bsc#1198791)</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Pack only cdi-operator and cdi-cr release manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Update to version 1.51.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.51.0
- Fix CVE-2022-1996 go-restful: CORS bypass (bsc#1200528)
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 1.55.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.55.0
- Drop upstreamed patches:
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665835200">- Build tools/cdi-containerimage-server with CGO_ENABLED=0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1679659200">- Use recent golang compiler (bsc#1208916)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1692187200">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1695038400">- Enable the build for ALP and remove no longer supported SLE versions
  from the distro check</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
</package>
<package pkgid="21540ddaec31ada1b572826d17e01005822d397d0567a9f21eaedb9f81d362b8" name="containerized-data-importer" arch="src">
  <version epoch="0" ver="1.58.0" rel="150500.6.9.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1623672000">- Use registry.suse.com as the default fallback for sle
- Rename macro registry_path to kubevirt_registry_path
- Update to version 1.35.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.35.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1625054400">- Generate meta info for containers during rpm build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1626091200">- Update to version 1.36.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.36.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1628596800">- Update to version 1.37.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.37.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1633953600">- Update to version 1.40.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1636718400">- Update to version 1.41.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1637928000">- Detect SLE15 SP4 build environment</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639915200">- Update to version 1.42.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641816000">- Update to version 1.43.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1650974400">- Increase storage requirements in _constraints (bsc#1198791)</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Pack only cdi-operator and cdi-cr release manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Update to version 1.51.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.51.0
- Fix CVE-2022-1996 go-restful: CORS bypass (bsc#1200528)
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 1.55.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.55.0
- Drop upstreamed patches:
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665835200">- Build tools/cdi-containerimage-server with CGO_ENABLED=0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1679659200">- Use recent golang compiler (bsc#1208916)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1692187200">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1695038400">- Enable the build for ALP and remove no longer supported SLE versions
  from the distro check</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
</package>
<package pkgid="690db399955b5dbd23e44f98b54679d4c9a207ad161ebf1f2e90b580ab4145c2" name="containerized-data-importer-manifests" arch="x86_64">
  <version epoch="0" ver="1.57.0" rel="150500.6.3.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1621512000">- Disable changelog generation via tar_scm service (too verbose)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1621512001">- Update to version 1.34.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.34.0</changelog>
  <changelog author="fvogt@suse.com" date="1622808000">- Add REGISTRY variable</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1623672000">- Use registry.suse.com as the default fallback for sle
- Rename macro registry_path to kubevirt_registry_path
- Update to version 1.35.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.35.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1625054400">- Generate meta info for containers during rpm build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1626091200">- Update to version 1.36.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.36.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1628596800">- Update to version 1.37.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.37.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1633953600">- Update to version 1.40.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1636718400">- Update to version 1.41.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1637928000">- Detect SLE15 SP4 build environment</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639915200">- Update to version 1.42.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641816000">- Update to version 1.43.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1650974400">- Increase storage requirements in _constraints (bsc#1198791)</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Pack only cdi-operator and cdi-cr release manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Update to version 1.51.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.51.0
- Fix CVE-2022-1996 go-restful: CORS bypass (bsc#1200528)
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 1.55.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.55.0
- Drop upstreamed patches:
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665835200">- Build tools/cdi-containerimage-server with CGO_ENABLED=0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1679659200">- Use recent golang compiler (bsc#1208916)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1692187200">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0
- Add registry path for SLE15 SP6</changelog>
</package>
<package pkgid="a15151ce4b6edcd80ded9d94b226d964c974638307f32e0e5b7841b2c4450478" name="containerized-data-importer-manifests" arch="x86_64">
  <version epoch="0" ver="1.58.0" rel="150500.6.6.1"/>
  <changelog author="fvogt@suse.com" date="1622808000">- Add REGISTRY variable</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1623672000">- Use registry.suse.com as the default fallback for sle
- Rename macro registry_path to kubevirt_registry_path
- Update to version 1.35.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.35.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1625054400">- Generate meta info for containers during rpm build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1626091200">- Update to version 1.36.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.36.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1628596800">- Update to version 1.37.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.37.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1633953600">- Update to version 1.40.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1636718400">- Update to version 1.41.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1637928000">- Detect SLE15 SP4 build environment</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639915200">- Update to version 1.42.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641816000">- Update to version 1.43.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1650974400">- Increase storage requirements in _constraints (bsc#1198791)</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Pack only cdi-operator and cdi-cr release manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Update to version 1.51.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.51.0
- Fix CVE-2022-1996 go-restful: CORS bypass (bsc#1200528)
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 1.55.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.55.0
- Drop upstreamed patches:
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665835200">- Build tools/cdi-containerimage-server with CGO_ENABLED=0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1679659200">- Use recent golang compiler (bsc#1208916)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1692187200">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1695038400">- Enable the build for ALP and remove no longer supported SLE versions
  from the distro check</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
</package>
<package pkgid="f829c7ecc5890e3b8b8fd2695001c0c48523a436613cf5d6a9b7c2333c949ec9" name="containerized-data-importer-manifests" arch="x86_64">
  <version epoch="0" ver="1.58.0" rel="150500.6.9.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1623672000">- Use registry.suse.com as the default fallback for sle
- Rename macro registry_path to kubevirt_registry_path
- Update to version 1.35.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.35.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1625054400">- Generate meta info for containers during rpm build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1626091200">- Update to version 1.36.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.36.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1628596800">- Update to version 1.37.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.37.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1633953600">- Update to version 1.40.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1636718400">- Update to version 1.41.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1637928000">- Detect SLE15 SP4 build environment</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639915200">- Update to version 1.42.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641816000">- Update to version 1.43.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1650974400">- Increase storage requirements in _constraints (bsc#1198791)</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Pack only cdi-operator and cdi-cr release manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Update to version 1.51.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.51.0
- Fix CVE-2022-1996 go-restful: CORS bypass (bsc#1200528)
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 1.55.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.55.0
- Drop upstreamed patches:
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665835200">- Build tools/cdi-containerimage-server with CGO_ENABLED=0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1679659200">- Use recent golang compiler (bsc#1208916)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1692187200">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1695038400">- Enable the build for ALP and remove no longer supported SLE versions
  from the distro check</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
</package>
<package pkgid="e98502330e65c62613722ecc1953b62f05263289ee7237a971dc2216c17a372d" name="cpio" arch="aarch64">
  <version epoch="0" ver="2.13" rel="150400.3.3.1"/>
  <changelog author="kstreitova@suse.com" date="1455883200">- add cpio-2.12-out_of_bounds_write.patch to fix an out of bounds
  write in a way cpio parses certain cpio files [bsc#963448],
  [CVE-2016-2037]</changelog>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="mpluskal@suse.com" date="1536926400">- Use URL to fetch keyring
- Do not force building with PIE, it is default now anyways
- Use https for URLs
- Install license</changelog>
  <changelog author="bwiedemann@suse.com" date="1537963200">- Use gettextize --no-changelog to drop build date
  to make package build reproducible (boo#1047218)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="kstreitova@suse.com" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
  <changelog author="kstreitova@suse.com" date="1585483200">- starting with GCC 10, the default of '-fcommon' option will
  change to '-fno-common'. Because cpio build fails with
  'fno-common', add '-fcommon' option to optflags as a temporary
  workaround for this problem till it's properly fixed [bsc#1160870]</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 2.13:
  * CVE-2015-1197, CVE-2016-2037, CVE-2019-14866
- remove patches (upstream):
  cpio-2.12-out_of_bounds_write.patch, cpio-2.12-CVE-2019-14866.patch,
  cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch,
  cpio-check_for_symlinks.patch</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- add cpio-revert-CVE-2015-1197-fix.patch as recommended by upstream
  to fix https://lists.gnu.org/archive/html/bug-cpio/2019-11/msg00016.html</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628510400">- Fix CVE-2021-38185 Remote code execution caused by an integer overflow in ds_fgetstr
  (CVE-2021-38185, bsc#1189206)
  * fix-CVE-2021-38185.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1629288000">- Fix regression in last update (bsc#1189465)
  * fix-CVE-2021-38185_2.patch
  * fix-CVE-2021-38185_3.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635422400">- Update keyring</changelog>
  <changelog author="danilo.spinella@suse.com" date="1705060800">- Fix CVE-2023-7207, path traversal vulnerability (bsc#1218571)
  * fix-CVE-2023-7207.patch</changelog>
</package>
<package pkgid="1f31c481ae06512b804c51f4e76e4b637ead3d7cd2b62777dd886b67d9727e2e" name="cpio" arch="s390x">
  <version epoch="0" ver="2.13" rel="150400.3.3.1"/>
  <changelog author="kstreitova@suse.com" date="1455883200">- add cpio-2.12-out_of_bounds_write.patch to fix an out of bounds
  write in a way cpio parses certain cpio files [bsc#963448],
  [CVE-2016-2037]</changelog>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="mpluskal@suse.com" date="1536926400">- Use URL to fetch keyring
- Do not force building with PIE, it is default now anyways
- Use https for URLs
- Install license</changelog>
  <changelog author="bwiedemann@suse.com" date="1537963200">- Use gettextize --no-changelog to drop build date
  to make package build reproducible (boo#1047218)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="kstreitova@suse.com" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
  <changelog author="kstreitova@suse.com" date="1585483200">- starting with GCC 10, the default of '-fcommon' option will
  change to '-fno-common'. Because cpio build fails with
  'fno-common', add '-fcommon' option to optflags as a temporary
  workaround for this problem till it's properly fixed [bsc#1160870]</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 2.13:
  * CVE-2015-1197, CVE-2016-2037, CVE-2019-14866
- remove patches (upstream):
  cpio-2.12-out_of_bounds_write.patch, cpio-2.12-CVE-2019-14866.patch,
  cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch,
  cpio-check_for_symlinks.patch</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- add cpio-revert-CVE-2015-1197-fix.patch as recommended by upstream
  to fix https://lists.gnu.org/archive/html/bug-cpio/2019-11/msg00016.html</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628510400">- Fix CVE-2021-38185 Remote code execution caused by an integer overflow in ds_fgetstr
  (CVE-2021-38185, bsc#1189206)
  * fix-CVE-2021-38185.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1629288000">- Fix regression in last update (bsc#1189465)
  * fix-CVE-2021-38185_2.patch
  * fix-CVE-2021-38185_3.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635422400">- Update keyring</changelog>
  <changelog author="danilo.spinella@suse.com" date="1705060800">- Fix CVE-2023-7207, path traversal vulnerability (bsc#1218571)
  * fix-CVE-2023-7207.patch</changelog>
</package>
<package pkgid="1c298f7a79057d934ec9893e5f59c06c0d9cdafe295d57ca2ebdcf50215f30db" name="cpio" arch="src">
  <version epoch="0" ver="2.13" rel="150400.3.3.1"/>
  <changelog author="kstreitova@suse.com" date="1455883200">- add cpio-2.12-out_of_bounds_write.patch to fix an out of bounds
  write in a way cpio parses certain cpio files [bsc#963448],
  [CVE-2016-2037]</changelog>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="mpluskal@suse.com" date="1536926400">- Use URL to fetch keyring
- Do not force building with PIE, it is default now anyways
- Use https for URLs
- Install license</changelog>
  <changelog author="bwiedemann@suse.com" date="1537963200">- Use gettextize --no-changelog to drop build date
  to make package build reproducible (boo#1047218)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="kstreitova@suse.com" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
  <changelog author="kstreitova@suse.com" date="1585483200">- starting with GCC 10, the default of '-fcommon' option will
  change to '-fno-common'. Because cpio build fails with
  'fno-common', add '-fcommon' option to optflags as a temporary
  workaround for this problem till it's properly fixed [bsc#1160870]</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 2.13:
  * CVE-2015-1197, CVE-2016-2037, CVE-2019-14866
- remove patches (upstream):
  cpio-2.12-out_of_bounds_write.patch, cpio-2.12-CVE-2019-14866.patch,
  cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch,
  cpio-check_for_symlinks.patch</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- add cpio-revert-CVE-2015-1197-fix.patch as recommended by upstream
  to fix https://lists.gnu.org/archive/html/bug-cpio/2019-11/msg00016.html</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628510400">- Fix CVE-2021-38185 Remote code execution caused by an integer overflow in ds_fgetstr
  (CVE-2021-38185, bsc#1189206)
  * fix-CVE-2021-38185.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1629288000">- Fix regression in last update (bsc#1189465)
  * fix-CVE-2021-38185_2.patch
  * fix-CVE-2021-38185_3.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635422400">- Update keyring</changelog>
  <changelog author="danilo.spinella@suse.com" date="1705060800">- Fix CVE-2023-7207, path traversal vulnerability (bsc#1218571)
  * fix-CVE-2023-7207.patch</changelog>
</package>
<package pkgid="5e11adc2e99e4bdf72d18c0d8947a624912ad2b50b31f9759482122f3990529a" name="cpio" arch="x86_64">
  <version epoch="0" ver="2.13" rel="150400.3.3.1"/>
  <changelog author="kstreitova@suse.com" date="1455883200">- add cpio-2.12-out_of_bounds_write.patch to fix an out of bounds
  write in a way cpio parses certain cpio files [bsc#963448],
  [CVE-2016-2037]</changelog>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="mpluskal@suse.com" date="1536926400">- Use URL to fetch keyring
- Do not force building with PIE, it is default now anyways
- Use https for URLs
- Install license</changelog>
  <changelog author="bwiedemann@suse.com" date="1537963200">- Use gettextize --no-changelog to drop build date
  to make package build reproducible (boo#1047218)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="kstreitova@suse.com" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
  <changelog author="kstreitova@suse.com" date="1585483200">- starting with GCC 10, the default of '-fcommon' option will
  change to '-fno-common'. Because cpio build fails with
  'fno-common', add '-fcommon' option to optflags as a temporary
  workaround for this problem till it's properly fixed [bsc#1160870]</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 2.13:
  * CVE-2015-1197, CVE-2016-2037, CVE-2019-14866
- remove patches (upstream):
  cpio-2.12-out_of_bounds_write.patch, cpio-2.12-CVE-2019-14866.patch,
  cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch,
  cpio-check_for_symlinks.patch</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- add cpio-revert-CVE-2015-1197-fix.patch as recommended by upstream
  to fix https://lists.gnu.org/archive/html/bug-cpio/2019-11/msg00016.html</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628510400">- Fix CVE-2021-38185 Remote code execution caused by an integer overflow in ds_fgetstr
  (CVE-2021-38185, bsc#1189206)
  * fix-CVE-2021-38185.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1629288000">- Fix regression in last update (bsc#1189465)
  * fix-CVE-2021-38185_2.patch
  * fix-CVE-2021-38185_3.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635422400">- Update keyring</changelog>
  <changelog author="danilo.spinella@suse.com" date="1705060800">- Fix CVE-2023-7207, path traversal vulnerability (bsc#1218571)
  * fix-CVE-2023-7207.patch</changelog>
</package>
<package pkgid="8a531cef423708de94c25207dca0338fa4423984c032fd52788d1cb180cf5e93" name="cpio" arch="aarch64">
  <version epoch="0" ver="2.13" rel="150400.3.6.1"/>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="mpluskal@suse.com" date="1536926400">- Use URL to fetch keyring
- Do not force building with PIE, it is default now anyways
- Use https for URLs
- Install license</changelog>
  <changelog author="bwiedemann@suse.com" date="1537963200">- Use gettextize --no-changelog to drop build date
  to make package build reproducible (boo#1047218)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="kstreitova@suse.com" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
  <changelog author="kstreitova@suse.com" date="1585483200">- starting with GCC 10, the default of '-fcommon' option will
  change to '-fno-common'. Because cpio build fails with
  'fno-common', add '-fcommon' option to optflags as a temporary
  workaround for this problem till it's properly fixed [bsc#1160870]</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 2.13:
  * CVE-2015-1197, CVE-2016-2037, CVE-2019-14866
- remove patches (upstream):
  cpio-2.12-out_of_bounds_write.patch, cpio-2.12-CVE-2019-14866.patch,
  cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch,
  cpio-check_for_symlinks.patch</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- add cpio-revert-CVE-2015-1197-fix.patch as recommended by upstream
  to fix https://lists.gnu.org/archive/html/bug-cpio/2019-11/msg00016.html</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628510400">- Fix CVE-2021-38185 Remote code execution caused by an integer overflow in ds_fgetstr
  (CVE-2021-38185, bsc#1189206)
  * fix-CVE-2021-38185.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1629288000">- Fix regression in last update (bsc#1189465)
  * fix-CVE-2021-38185_2.patch
  * fix-CVE-2021-38185_3.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635422400">- Update keyring</changelog>
  <changelog author="danilo.spinella@suse.com" date="1705060800">- Fix CVE-2023-7207, path traversal vulnerability (bsc#1218571)
  * fix-CVE-2023-7207.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1706529600">- Fix cpio not working after the fix in bsc#1218571, fixes bsc#1219238
  * fix-bsc1219238.patch</changelog>
</package>
<package pkgid="0ca87787e31e6407a436c058a06a8172ddfe6b74c92672331fb560c8a84a549f" name="cpio" arch="s390x">
  <version epoch="0" ver="2.13" rel="150400.3.6.1"/>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="mpluskal@suse.com" date="1536926400">- Use URL to fetch keyring
- Do not force building with PIE, it is default now anyways
- Use https for URLs
- Install license</changelog>
  <changelog author="bwiedemann@suse.com" date="1537963200">- Use gettextize --no-changelog to drop build date
  to make package build reproducible (boo#1047218)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="kstreitova@suse.com" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
  <changelog author="kstreitova@suse.com" date="1585483200">- starting with GCC 10, the default of '-fcommon' option will
  change to '-fno-common'. Because cpio build fails with
  'fno-common', add '-fcommon' option to optflags as a temporary
  workaround for this problem till it's properly fixed [bsc#1160870]</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 2.13:
  * CVE-2015-1197, CVE-2016-2037, CVE-2019-14866
- remove patches (upstream):
  cpio-2.12-out_of_bounds_write.patch, cpio-2.12-CVE-2019-14866.patch,
  cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch,
  cpio-check_for_symlinks.patch</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- add cpio-revert-CVE-2015-1197-fix.patch as recommended by upstream
  to fix https://lists.gnu.org/archive/html/bug-cpio/2019-11/msg00016.html</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628510400">- Fix CVE-2021-38185 Remote code execution caused by an integer overflow in ds_fgetstr
  (CVE-2021-38185, bsc#1189206)
  * fix-CVE-2021-38185.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1629288000">- Fix regression in last update (bsc#1189465)
  * fix-CVE-2021-38185_2.patch
  * fix-CVE-2021-38185_3.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635422400">- Update keyring</changelog>
  <changelog author="danilo.spinella@suse.com" date="1705060800">- Fix CVE-2023-7207, path traversal vulnerability (bsc#1218571)
  * fix-CVE-2023-7207.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1706529600">- Fix cpio not working after the fix in bsc#1218571, fixes bsc#1219238
  * fix-bsc1219238.patch</changelog>
</package>
<package pkgid="ae7729815ba1e674de121c124fb5485876c4d1a354fa60321594d647f1ac203d" name="cpio" arch="src">
  <version epoch="0" ver="2.13" rel="150400.3.6.1"/>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="mpluskal@suse.com" date="1536926400">- Use URL to fetch keyring
- Do not force building with PIE, it is default now anyways
- Use https for URLs
- Install license</changelog>
  <changelog author="bwiedemann@suse.com" date="1537963200">- Use gettextize --no-changelog to drop build date
  to make package build reproducible (boo#1047218)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="kstreitova@suse.com" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
  <changelog author="kstreitova@suse.com" date="1585483200">- starting with GCC 10, the default of '-fcommon' option will
  change to '-fno-common'. Because cpio build fails with
  'fno-common', add '-fcommon' option to optflags as a temporary
  workaround for this problem till it's properly fixed [bsc#1160870]</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 2.13:
  * CVE-2015-1197, CVE-2016-2037, CVE-2019-14866
- remove patches (upstream):
  cpio-2.12-out_of_bounds_write.patch, cpio-2.12-CVE-2019-14866.patch,
  cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch,
  cpio-check_for_symlinks.patch</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- add cpio-revert-CVE-2015-1197-fix.patch as recommended by upstream
  to fix https://lists.gnu.org/archive/html/bug-cpio/2019-11/msg00016.html</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628510400">- Fix CVE-2021-38185 Remote code execution caused by an integer overflow in ds_fgetstr
  (CVE-2021-38185, bsc#1189206)
  * fix-CVE-2021-38185.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1629288000">- Fix regression in last update (bsc#1189465)
  * fix-CVE-2021-38185_2.patch
  * fix-CVE-2021-38185_3.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635422400">- Update keyring</changelog>
  <changelog author="danilo.spinella@suse.com" date="1705060800">- Fix CVE-2023-7207, path traversal vulnerability (bsc#1218571)
  * fix-CVE-2023-7207.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1706529600">- Fix cpio not working after the fix in bsc#1218571, fixes bsc#1219238
  * fix-bsc1219238.patch</changelog>
</package>
<package pkgid="cbc2d14dddebff945bf47329fcaa16699429f0f858cc0a5d71d1e7ea77891e2d" name="cpio" arch="x86_64">
  <version epoch="0" ver="2.13" rel="150400.3.6.1"/>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="mpluskal@suse.com" date="1536926400">- Use URL to fetch keyring
- Do not force building with PIE, it is default now anyways
- Use https for URLs
- Install license</changelog>
  <changelog author="bwiedemann@suse.com" date="1537963200">- Use gettextize --no-changelog to drop build date
  to make package build reproducible (boo#1047218)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="kstreitova@suse.com" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
  <changelog author="kstreitova@suse.com" date="1585483200">- starting with GCC 10, the default of '-fcommon' option will
  change to '-fno-common'. Because cpio build fails with
  'fno-common', add '-fcommon' option to optflags as a temporary
  workaround for this problem till it's properly fixed [bsc#1160870]</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 2.13:
  * CVE-2015-1197, CVE-2016-2037, CVE-2019-14866
- remove patches (upstream):
  cpio-2.12-out_of_bounds_write.patch, cpio-2.12-CVE-2019-14866.patch,
  cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch,
  cpio-check_for_symlinks.patch</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- add cpio-revert-CVE-2015-1197-fix.patch as recommended by upstream
  to fix https://lists.gnu.org/archive/html/bug-cpio/2019-11/msg00016.html</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628510400">- Fix CVE-2021-38185 Remote code execution caused by an integer overflow in ds_fgetstr
  (CVE-2021-38185, bsc#1189206)
  * fix-CVE-2021-38185.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1629288000">- Fix regression in last update (bsc#1189465)
  * fix-CVE-2021-38185_2.patch
  * fix-CVE-2021-38185_3.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635422400">- Update keyring</changelog>
  <changelog author="danilo.spinella@suse.com" date="1705060800">- Fix CVE-2023-7207, path traversal vulnerability (bsc#1218571)
  * fix-CVE-2023-7207.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1706529600">- Fix cpio not working after the fix in bsc#1218571, fixes bsc#1219238
  * fix-bsc1219238.patch</changelog>
</package>
<package pkgid="c71c2d6235e833e5b659eff4a8d3987f527975b4332303c95761b31ec77d2c32" name="crypto-policies" arch="noarch">
  <version epoch="0" ver="20210917.c9d86d1" rel="150400.3.6.1"/>
  <changelog author="pmonreal@suse.com" date="1608638400">- Add crypto-policies-typos.patch to fix some typos</changelog>
  <changelog author="pmonreal@suse.com" date="1611230400">- Test only supported modules
- Add crypto-policies-test_supported_modules_only.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1611230401">- Fix the man pages generation
- Add crypto-policies-asciidoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1611230402">- Update to git version 20210118
  * Output sigalgs required by nss &gt;=3.59
  * Bump Python requirement to 3.6
  * Kerberos 5: Fix policy generator to account for macs
  * Add AES-192 support (non-TLS scenarios)
  * Add documentation of the --check option</changelog>
  <changelog author="pmonreal@suse.com" date="1612267200">- Update to git version 20210127
  * Bump Python requirement to 3.6
  * Output sigalgs required by nss &gt;=3.59
  * Do not require bind during build
  * Break build cycles with openssl and gnutls</changelog>
  <changelog author="dimstar@opensuse.org" date="1612267201">- Convert to use a proper git source _service:
  + To update, one just needs to update the commit/revision in the
    _service file and run `osc service dr`.
  + The version of the package is defined by the commit date of the
    revision, followed by the abbreviated git hash (The same
    revision used before results thus in a downgrade to 20210118,
    but as this is a alltime new package, this is acceptable.</changelog>
  <changelog author="pmonreal@suse.com" date="1612526400">- Do not build the manpages to avoid build cycles
- Add crypto-policies-no-build-manpages.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1612785600">- Use gzip instead of xz in obscpio and sources</changelog>
  <changelog author="pmonreal@suse.com" date="1612785601">- Add a BuildIgnore for crypto-policies</changelog>
  <changelog author="dimstar@opensuse.org" date="1612872000">- Use tar_scm service, not obs_scm: With crypto-policies entering
  Ring0 (distro bootstrap) we want to be sure to keep the buildtime
  deps as low as possible.
- Add python3-base BuildRequires: previously, OBS' tar service
  pulled this in for us.</changelog>
  <changelog author="pmonreal@suse.com" date="1613563200">- Update to version 20210213.5c710c0: [bsc#1180938]
  * setup_directories(): perform safer creation of directories
  * save_config(): avoid re-opening output file for each iteration
  * save_config(): break after first match to avoid unnecessary stat() calls
  * CryptoPolicy.parse(): actually stop parsing line on syntax error
  * ProfileConfig.parse_string(): correctly extended subpolicies
  * Exclude RC4 from LEGACY
  * Introduce rc4_md5_in_krb5 to narrow AD_SUPPORT
  * code style: fix 'not in' membership testing
  * pylintrc: tighten up a bit
  * formatting: avoid long lines
  * formatting: use f-strings instead of format()
  * formatting: reformat all python code with autopep8
  * nss: postponing the version check again, to 3.61
  * Revert "Unfortunately we have to keep ignoring the openssh check for sk-"</changelog>
  <changelog author="pmonreal@suse.com" date="1614168000">- Disable DTLS0.9 protocol in GnuTLS DEFAULT policy. [bsc#1180938]
  * The minimum DTLS protocol version in the DEFAULT and FUTURE
    policies is DTLS1.2.
  * Fixed upstream: 05203d21f6d0ea9bbdb351e4600f1e273720bb8e</changelog>
  <changelog author="pmonreal@suse.com" date="1614254400">- Remove not needed scripts: fips-finish-install fips-mode-setup</changelog>
  <changelog author="pmonreal@suse.com" date="1614254401">- Update to version 20210225.05203d2:
  * Disable DTLS0.9 protocol in the DEFAULT policy.
  * policies/FIPS: insignificant reformatting
  * policygenerators/libssh: respect ssh_certs
  * policies/modules/OSPP: tighten to follow RHEL 8
  * crypto-policies(7): drop not-reenableable comment
  * follow up on disabling RC4</changelog>
  <changelog author="pmonreal@suse.com" date="1632484800">- Update to version 20210917.c9d86d1:
  * openssl: fix disabling ChaCha20
  * pacify pylint 2.11: use format strings
  * pacify pylint 2.11: specify explicit encoding
  * fix minor things found by new pylint
  * update-crypto-policies: --check against regenerated
  * update-crypto-policies: fix --check's walking order
  * policygenerators/gnutls: revert disabling DTLS0.9...
  * policygenerators/java: add javasystem backend
  * LEGACY: bump 1023 key size to 1024
  * cryptopolicies: fix 'and' in deprecation warnings
  * *ssh: condition ecdh-sha2-nistp384 on SECP384R1
  * nss: hopefully the last fix for nss sigalgs check
  * cryptopolicies: Python 3.10 compatibility
  * nss: postponing check + testing at least something
  * Rename 'policy modules' to 'subpolicies'
  * validation.rules: fix a missing word in error
  * cryptopolicies: raise errors right after warnings
  * update-crypto-policies: capitalize warnings
  * cryptopolicies: syntax-precheck scope errors
  * .gitlab-ci.yml, Makefile: enable codespell
  * all: fix several typos
  * docs: don't leave zero TLS/DTLS protocols on
  * openssl: separate TLS/DTLS MinProtocol/MaxProtocol
  * alg_lists: order protocols new-to-old for consistency
  * alg_lists: max_{d,}tls_version
  * update-crypto-policies: fix pregenerated + local.d
  * openssh: allow validation with pre-8.5
  * .gitlab-ci.yml: run commit-range against upstream
  * openssh: Use the new name for PubkeyAcceptedKeyTypes
  * sha1_in_dnssec: deprecate
  * .gitlab-ci.yml: test commit ranges
  * FIPS:OSPP: sign = -*-SHA2-224
  * scoped policies: documentation update
  * scoped policies: use new features to the fullest...
  * scoped policies: rewrite + minimal policy changes
  * scoped policies: rewrite preparations
  * nss: postponing the version check again, to 3.64
- Remove patches fixed upstream: crypto-policies-typos.patch
- Rebase: crypto-policies-test_supported_modules_only.patch
- Merge crypto-policies-asciidoc.patch into
    crypto-policies-no-build-manpages.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1632484801">- Remove the scripts and documentation regarding
  fips-finish-install and test-fips-setup
  * Add crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683547200">- Update the update-crypto-policies(8) man pages and README.SUSE
  to mention the supported back-end policies. [bsc#1209998]</changelog>
  <changelog author="pmonreal@suse.com" date="1689595200">- FIPS: Enable to set the kernel FIPS mode with fips-mode-setup
  and fips-finish-install commands, add also the man pages.
  * Adapt the fips-mode-setup script for SLE [jsc#PED-5041]
  * Rebase crypto-policies-FIPS.patch
  * Simplify the man pages creation:
  - Rebase crypto-policies-no-build-manpages.patch
  - Add crypto-policies-asciidoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- FIPS: Adapt the fips-mode-setup script to use the pbl command
  from the perl-Bootloader package to replace grubby. Add a note
  for transactional systems. Ship the man 8 pages for
  fips-mode-setup and fips-finish-install [jsc#PED-5041].
  * Rebase crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693483200">- Make the supported versions change in the update-crypto-policies(8)
  man page persistent [bsc#1209998].
  * Add patch crypto-policies-supported.patch
  * Rebase patches:
  - crypto-policies-asciidoc.patch
  - crypto-policies-no-build-manpages.patch</changelog>
</package>
<package pkgid="6784cfec7e4bc403389b8a3bf538c43d26b44fb335526a393235e216370b1922" name="crypto-policies" arch="src">
  <version epoch="0" ver="20210917.c9d86d1" rel="150400.3.6.1"/>
  <changelog author="pmonreal@suse.com" date="1608638400">- Add crypto-policies-typos.patch to fix some typos</changelog>
  <changelog author="pmonreal@suse.com" date="1611230400">- Test only supported modules
- Add crypto-policies-test_supported_modules_only.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1611230401">- Fix the man pages generation
- Add crypto-policies-asciidoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1611230402">- Update to git version 20210118
  * Output sigalgs required by nss &gt;=3.59
  * Bump Python requirement to 3.6
  * Kerberos 5: Fix policy generator to account for macs
  * Add AES-192 support (non-TLS scenarios)
  * Add documentation of the --check option</changelog>
  <changelog author="pmonreal@suse.com" date="1612267200">- Update to git version 20210127
  * Bump Python requirement to 3.6
  * Output sigalgs required by nss &gt;=3.59
  * Do not require bind during build
  * Break build cycles with openssl and gnutls</changelog>
  <changelog author="dimstar@opensuse.org" date="1612267201">- Convert to use a proper git source _service:
  + To update, one just needs to update the commit/revision in the
    _service file and run `osc service dr`.
  + The version of the package is defined by the commit date of the
    revision, followed by the abbreviated git hash (The same
    revision used before results thus in a downgrade to 20210118,
    but as this is a alltime new package, this is acceptable.</changelog>
  <changelog author="pmonreal@suse.com" date="1612526400">- Do not build the manpages to avoid build cycles
- Add crypto-policies-no-build-manpages.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1612785600">- Use gzip instead of xz in obscpio and sources</changelog>
  <changelog author="pmonreal@suse.com" date="1612785601">- Add a BuildIgnore for crypto-policies</changelog>
  <changelog author="dimstar@opensuse.org" date="1612872000">- Use tar_scm service, not obs_scm: With crypto-policies entering
  Ring0 (distro bootstrap) we want to be sure to keep the buildtime
  deps as low as possible.
- Add python3-base BuildRequires: previously, OBS' tar service
  pulled this in for us.</changelog>
  <changelog author="pmonreal@suse.com" date="1613563200">- Update to version 20210213.5c710c0: [bsc#1180938]
  * setup_directories(): perform safer creation of directories
  * save_config(): avoid re-opening output file for each iteration
  * save_config(): break after first match to avoid unnecessary stat() calls
  * CryptoPolicy.parse(): actually stop parsing line on syntax error
  * ProfileConfig.parse_string(): correctly extended subpolicies
  * Exclude RC4 from LEGACY
  * Introduce rc4_md5_in_krb5 to narrow AD_SUPPORT
  * code style: fix 'not in' membership testing
  * pylintrc: tighten up a bit
  * formatting: avoid long lines
  * formatting: use f-strings instead of format()
  * formatting: reformat all python code with autopep8
  * nss: postponing the version check again, to 3.61
  * Revert "Unfortunately we have to keep ignoring the openssh check for sk-"</changelog>
  <changelog author="pmonreal@suse.com" date="1614168000">- Disable DTLS0.9 protocol in GnuTLS DEFAULT policy. [bsc#1180938]
  * The minimum DTLS protocol version in the DEFAULT and FUTURE
    policies is DTLS1.2.
  * Fixed upstream: 05203d21f6d0ea9bbdb351e4600f1e273720bb8e</changelog>
  <changelog author="pmonreal@suse.com" date="1614254400">- Remove not needed scripts: fips-finish-install fips-mode-setup</changelog>
  <changelog author="pmonreal@suse.com" date="1614254401">- Update to version 20210225.05203d2:
  * Disable DTLS0.9 protocol in the DEFAULT policy.
  * policies/FIPS: insignificant reformatting
  * policygenerators/libssh: respect ssh_certs
  * policies/modules/OSPP: tighten to follow RHEL 8
  * crypto-policies(7): drop not-reenableable comment
  * follow up on disabling RC4</changelog>
  <changelog author="pmonreal@suse.com" date="1632484800">- Update to version 20210917.c9d86d1:
  * openssl: fix disabling ChaCha20
  * pacify pylint 2.11: use format strings
  * pacify pylint 2.11: specify explicit encoding
  * fix minor things found by new pylint
  * update-crypto-policies: --check against regenerated
  * update-crypto-policies: fix --check's walking order
  * policygenerators/gnutls: revert disabling DTLS0.9...
  * policygenerators/java: add javasystem backend
  * LEGACY: bump 1023 key size to 1024
  * cryptopolicies: fix 'and' in deprecation warnings
  * *ssh: condition ecdh-sha2-nistp384 on SECP384R1
  * nss: hopefully the last fix for nss sigalgs check
  * cryptopolicies: Python 3.10 compatibility
  * nss: postponing check + testing at least something
  * Rename 'policy modules' to 'subpolicies'
  * validation.rules: fix a missing word in error
  * cryptopolicies: raise errors right after warnings
  * update-crypto-policies: capitalize warnings
  * cryptopolicies: syntax-precheck scope errors
  * .gitlab-ci.yml, Makefile: enable codespell
  * all: fix several typos
  * docs: don't leave zero TLS/DTLS protocols on
  * openssl: separate TLS/DTLS MinProtocol/MaxProtocol
  * alg_lists: order protocols new-to-old for consistency
  * alg_lists: max_{d,}tls_version
  * update-crypto-policies: fix pregenerated + local.d
  * openssh: allow validation with pre-8.5
  * .gitlab-ci.yml: run commit-range against upstream
  * openssh: Use the new name for PubkeyAcceptedKeyTypes
  * sha1_in_dnssec: deprecate
  * .gitlab-ci.yml: test commit ranges
  * FIPS:OSPP: sign = -*-SHA2-224
  * scoped policies: documentation update
  * scoped policies: use new features to the fullest...
  * scoped policies: rewrite + minimal policy changes
  * scoped policies: rewrite preparations
  * nss: postponing the version check again, to 3.64
- Remove patches fixed upstream: crypto-policies-typos.patch
- Rebase: crypto-policies-test_supported_modules_only.patch
- Merge crypto-policies-asciidoc.patch into
    crypto-policies-no-build-manpages.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1632484801">- Remove the scripts and documentation regarding
  fips-finish-install and test-fips-setup
  * Add crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683547200">- Update the update-crypto-policies(8) man pages and README.SUSE
  to mention the supported back-end policies. [bsc#1209998]</changelog>
  <changelog author="pmonreal@suse.com" date="1689595200">- FIPS: Enable to set the kernel FIPS mode with fips-mode-setup
  and fips-finish-install commands, add also the man pages.
  * Adapt the fips-mode-setup script for SLE [jsc#PED-5041]
  * Rebase crypto-policies-FIPS.patch
  * Simplify the man pages creation:
  - Rebase crypto-policies-no-build-manpages.patch
  - Add crypto-policies-asciidoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- FIPS: Adapt the fips-mode-setup script to use the pbl command
  from the perl-Bootloader package to replace grubby. Add a note
  for transactional systems. Ship the man 8 pages for
  fips-mode-setup and fips-finish-install [jsc#PED-5041].
  * Rebase crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693483200">- Make the supported versions change in the update-crypto-policies(8)
  man page persistent [bsc#1209998].
  * Add patch crypto-policies-supported.patch
  * Rebase patches:
  - crypto-policies-asciidoc.patch
  - crypto-policies-no-build-manpages.patch</changelog>
</package>
<package pkgid="3a547a754e29219f29a84072f4afb1507e9f4dd4789d411438b6218d80a5c955" name="cups" arch="src">
  <version epoch="0" ver="2.2.7" rel="150000.3.51.2"/>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
</package>
<package pkgid="2f2351e2c88043e0d16bb3e227dae76b82d48770dcc338f1784edc474b3f6200" name="cups-config" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.51.2"/>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
</package>
<package pkgid="67307e20b3f5af69f9446de0b9582233f35146d5b5cb4187a24fa5fb90fdc1a6" name="cups-config" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.51.2"/>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
</package>
<package pkgid="15b14dc9059560ea9fcae0755ddabd1ce0e0654e3540db3bfc1ea7cbf3aac4bf" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.51.2"/>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
</package>
<package pkgid="c481adeab307e2c0b9174d35ca0aa97575f67424a81b05479a676f02c53d929e" name="curl" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.32.1"/>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
</package>
<package pkgid="fb5923d131be18a18658ef561323b8476442311472c64f171bc102c01bfbddfe" name="curl" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.32.1"/>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
</package>
<package pkgid="e3c3a5f408941dc3cf8e8126a55d4d979d455a28a842061f90cb044374be0d59" name="curl" arch="src">
  <version epoch="0" ver="8.0.1" rel="150400.5.32.1"/>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
</package>
<package pkgid="e92e64cb25e1dc17228d9301a46a87a955807c79c093a12fe795aa8d457dc125" name="curl" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.32.1"/>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
</package>
<package pkgid="917dd0c9a0bae75ddd3f2735fd549259b09dbe5b07a8f288cd43a28abad5007e" name="curl" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.36.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
</package>
<package pkgid="e2fc7a89a3bbff26173216b2295c4f30de0b8fb46029713bbb19e16906e785a6" name="curl" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.36.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
</package>
<package pkgid="bc0a076ffd7dc01dc1246cc8925e3047011ab167c82c0866007baac4f079a84b" name="curl" arch="src">
  <version epoch="0" ver="8.0.1" rel="150400.5.36.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
</package>
<package pkgid="736fd786fbe92b195a251f4211f2db9711bbd1e51fc8ec0c317243c24ca06fcc" name="curl" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.36.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
</package>
<package pkgid="28986a3a0f188d6b9925289f050a437d706aed4b266392644be6878353266134" name="curl" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.41.1"/>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
</package>
<package pkgid="ef6fd0e8777b6a946d24bab9a9ed28f50f920c60c5c9535386eb4a5af5700019" name="curl" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.41.1"/>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
</package>
<package pkgid="4895bbea9f7694b60076f17fd669b04fc81f1e417a57b35d8375646b6246df2c" name="curl" arch="src">
  <version epoch="0" ver="8.0.1" rel="150400.5.41.1"/>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
</package>
<package pkgid="aa1cb5e7ee2f550526908edc9e94d8b167ef15da42499143c72decc90794f40e" name="curl" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.41.1"/>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
</package>
<package pkgid="28e4f11e2489f51f3b14d597ab80890ce879c8c19000a425c41172a210aa92e6" name="device-mapper" arch="aarch64">
  <version epoch="0" ver="2.03.22_1.02.196" rel="150500.7.9.1"/>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6753)
  - device-mapper version upgrade to 1.02.196
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="66273e91f835516b5e3e72697c444715f4ab4272bcc1ee24953339c4b2348ee4" name="device-mapper" arch="s390x">
  <version epoch="0" ver="2.03.22_1.02.196" rel="150500.7.9.1"/>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6753)
  - device-mapper version upgrade to 1.02.196
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="252edd8bbb5e46d58e061a8ce95bf92703c2109fe77b6c4edb8c7276fb03eb54" name="device-mapper" arch="x86_64">
  <version epoch="0" ver="2.03.22_1.02.196" rel="150500.7.9.1"/>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6753)
  - device-mapper version upgrade to 1.02.196
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="03386654027f3dd0abc7b587b565191caf902ef37c23421727b2290be07c93da" name="docker" arch="aarch64">
  <version epoch="0" ver="24.0.7_ce" rel="150000.190.4"/>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
</package>
<package pkgid="4402fd84a4211e8796c83c4606c52cfa876a0c3580935fb9b5941f8ed4a782ae" name="docker" arch="s390x">
  <version epoch="0" ver="24.0.7_ce" rel="150000.190.4"/>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
</package>
<package pkgid="909b62eb0397f964cb517f9733c3f3657c44963e8e86a0f65d3306f2f4a2e2f2" name="docker" arch="src">
  <version epoch="0" ver="24.0.7_ce" rel="150000.190.4"/>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
</package>
<package pkgid="260f33928825b4b7e666ba37c68cc3efb52dec6a2c8b0c2d68a06dece2e202a5" name="docker" arch="x86_64">
  <version epoch="0" ver="24.0.7_ce" rel="150000.190.4"/>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
</package>
<package pkgid="695f3d0bf51edec24b6a9ebc5e791f41b09d94a5fb4101b37dff44909bb7c7fc" name="docker" arch="aarch64">
  <version epoch="0" ver="24.0.7_ce" rel="150000.193.1"/>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="dcermak@suse.com" date="1707912000">- Vendor latest buildkit v0.11:
  Add patch 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch that
  vendors in the latest v0.11 buildkit branch including bugfixes for the following:
  * bsc#1219438: CVE-2024-23653
  * bsc#1219268: CVE-2024-23652
  * bsc#1219267: CVE-2024-23651
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- switch from %patchN to %patch -PN syntax
- remove unused rpmlint filters and add filters to silence pointless bash &amp; zsh
  completion warnings</changelog>
</package>
<package pkgid="bab1854e84b7b40c553d5676a94f6b7cc7b9b1d10a77d559b17be12439cca16f" name="docker" arch="s390x">
  <version epoch="0" ver="24.0.7_ce" rel="150000.193.1"/>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="dcermak@suse.com" date="1707912000">- Vendor latest buildkit v0.11:
  Add patch 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch that
  vendors in the latest v0.11 buildkit branch including bugfixes for the following:
  * bsc#1219438: CVE-2024-23653
  * bsc#1219268: CVE-2024-23652
  * bsc#1219267: CVE-2024-23651
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- switch from %patchN to %patch -PN syntax
- remove unused rpmlint filters and add filters to silence pointless bash &amp; zsh
  completion warnings</changelog>
</package>
<package pkgid="3a283ce8e934edddf044c2f74518990393659dc14a19fbcb9ce488b1e385510c" name="docker" arch="src">
  <version epoch="0" ver="24.0.7_ce" rel="150000.193.1"/>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="dcermak@suse.com" date="1707912000">- Vendor latest buildkit v0.11:
  Add patch 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch that
  vendors in the latest v0.11 buildkit branch including bugfixes for the following:
  * bsc#1219438: CVE-2024-23653
  * bsc#1219268: CVE-2024-23652
  * bsc#1219267: CVE-2024-23651
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- switch from %patchN to %patch -PN syntax
- remove unused rpmlint filters and add filters to silence pointless bash &amp; zsh
  completion warnings</changelog>
</package>
<package pkgid="3d295c0578c5f9a52a01a49d62717fcabdd60aad580bc223892e6944aaf6ef6c" name="docker" arch="x86_64">
  <version epoch="0" ver="24.0.7_ce" rel="150000.193.1"/>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="dcermak@suse.com" date="1707912000">- Vendor latest buildkit v0.11:
  Add patch 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch that
  vendors in the latest v0.11 buildkit branch including bugfixes for the following:
  * bsc#1219438: CVE-2024-23653
  * bsc#1219268: CVE-2024-23652
  * bsc#1219267: CVE-2024-23651
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- switch from %patchN to %patch -PN syntax
- remove unused rpmlint filters and add filters to silence pointless bash &amp; zsh
  completion warnings</changelog>
</package>
<package pkgid="40e573578141089eff65a9343e1262fc9ea665807e0a46acd2dba6f065b6bef8" name="dracut" arch="aarch64">
  <version epoch="0" ver="055+suse.371.g5237e44a" rel="150500.3.12.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
</package>
<package pkgid="c20d87498570ba204e8e80e590e43fa4d2b40cabfc1556e0c2d12829af476394" name="dracut" arch="s390x">
  <version epoch="0" ver="055+suse.371.g5237e44a" rel="150500.3.12.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
</package>
<package pkgid="9afb3cb094e58c2291a163e9f14e4cabacd740bc17065ff826f86d4956608d08" name="dracut" arch="src">
  <version epoch="0" ver="055+suse.371.g5237e44a" rel="150500.3.12.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
</package>
<package pkgid="60460696c1ab819a45d4d0c91518a9c8beda23cfaea12b3ffa3476f2139ef46d" name="dracut" arch="x86_64">
  <version epoch="0" ver="055+suse.371.g5237e44a" rel="150500.3.12.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
</package>
<package pkgid="e0b0f8e5b8be86f84d687ca3c3841c6aeeec340ea554b8a370cd9b56c54c1cdd" name="dracut" arch="aarch64">
  <version epoch="0" ver="055+suse.375.g1167ed75" rel="150500.3.15.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.375.g1167ed75:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
</package>
<package pkgid="a0141ea95484365db061a3f82cca831d44f44d9f5368471182345d4182a73154" name="dracut" arch="s390x">
  <version epoch="0" ver="055+suse.375.g1167ed75" rel="150500.3.15.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.375.g1167ed75:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
</package>
<package pkgid="a7280ee640e63b5cf165e7b33433060b1545565cfe95e0adecc803db55d4b0ce" name="dracut" arch="src">
  <version epoch="0" ver="055+suse.375.g1167ed75" rel="150500.3.15.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.375.g1167ed75:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
</package>
<package pkgid="2fc35ace77c620b8781594d0ec7cce11179500703dbefd0c1b868499c94c3eec" name="dracut" arch="x86_64">
  <version epoch="0" ver="055+suse.375.g1167ed75" rel="150500.3.15.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.375.g1167ed75:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
</package>
<package pkgid="f9ceb458b618359e18359ee04af0d613af12fca50dcccfbbfa5f2451f0ac7fbb" name="dracut-fips" arch="aarch64">
  <version epoch="0" ver="055+suse.371.g5237e44a" rel="150500.3.12.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
</package>
<package pkgid="7ef1bf8d46889225a63b9bd85afc15a833851ff0a761e961f5c1c0a82d5b2889" name="dracut-fips" arch="s390x">
  <version epoch="0" ver="055+suse.371.g5237e44a" rel="150500.3.12.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
</package>
<package pkgid="a88cbc957cee21c0bd621c5f10f17af9556a802d527559543b692e7d41c4530b" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="055+suse.371.g5237e44a" rel="150500.3.12.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
</package>
<package pkgid="a2e9239fd18b94136ea7223e04b76cd5f42caeb99f1764c5eed6ed3c3025eb9a" name="dracut-fips" arch="aarch64">
  <version epoch="0" ver="055+suse.375.g1167ed75" rel="150500.3.15.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.375.g1167ed75:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
</package>
<package pkgid="48d0a3a7687ea015e920db9981df51eb9adf47fc2305c47a0cf0c058c7567e34" name="dracut-fips" arch="s390x">
  <version epoch="0" ver="055+suse.375.g1167ed75" rel="150500.3.15.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.375.g1167ed75:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
</package>
<package pkgid="41cb9c338e5f46afbe4e8d4ecac610a1da0389fa116c918d86e43b0cd41c2198" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="055+suse.375.g1167ed75" rel="150500.3.15.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.375.g1167ed75:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
</package>
<package pkgid="ce68b0d67b811e335e369cffda796fe030aad13bb4456ea2b83faec6a7525bc0" name="dracut-kiwi-lib" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.62.1"/>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
</package>
<package pkgid="66f8c51551b33bb50b95e51bc19686fa8af84099079457397f6303d36b0e3510" name="dracut-kiwi-lib" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.62.1"/>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
</package>
<package pkgid="1013b7f33fce5167b1e00164c2e51ce657faff2fc215f96eedbcd36c5a7264e1" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.62.1"/>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
</package>
<package pkgid="00640ce9e572a5b26855c00d2407e55621c72c807b72b97170fe700cfc37767d" name="dracut-kiwi-lib" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.65.1"/>
  <changelog author="dcassany@suse.com" date="1646222400">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
</package>
<package pkgid="aaee246cf684ebc3b33412df3f6d58e705b01791e5f41bb883b9ab2caf726163" name="dracut-kiwi-lib" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.65.1"/>
  <changelog author="dcassany@suse.com" date="1646222400">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
</package>
<package pkgid="24d4ffa74ebcc64fd5cbcfbdbc8fd1a809f6bf2d80f5d8926f6dd4c5ac0e9476" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.65.1"/>
  <changelog author="dcassany@suse.com" date="1646222400">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
</package>
<package pkgid="381689ee668bb43c1511144703d4221852d587e7e36def5464a017d3ff2dcbe2" name="dracut-kiwi-lib" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.68.1"/>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
</package>
<package pkgid="b10a43220aa1fb249ae2a2fadcedd6ba160ed3c771acd0f5cf3492872614fce8" name="dracut-kiwi-lib" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.68.1"/>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
</package>
<package pkgid="fb8dfcb21d1c0705a17ce758550929431b0e46150ea18f261ebec466154b8ce8" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.68.1"/>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
</package>
<package pkgid="28b5238048b0c08d133566a9fbb7aec1e2c941b51f7729130f38225df8ba65db" name="dracut-kiwi-oem-dump" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.62.1"/>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
</package>
<package pkgid="d6f1b5b59d7875ef5a189570fb939dff12466d6e078db632f9bf060fe745a9db" name="dracut-kiwi-oem-dump" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.62.1"/>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
</package>
<package pkgid="0a8678c6ec501b7d540ad111c944046e1aea063dc1183c2a87aab6e191e519fa" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.62.1"/>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
</package>
<package pkgid="c702a0eaa67082339d84e1d0c2b3471e37d8d0710e64522948ea2f65c8af953f" name="dracut-kiwi-oem-dump" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.65.1"/>
  <changelog author="dcassany@suse.com" date="1646222400">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
</package>
<package pkgid="ddef90c7d5171e00981383f48bb1339b26c04ac22932eecab56c50e169b10941" name="dracut-kiwi-oem-dump" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.65.1"/>
  <changelog author="dcassany@suse.com" date="1646222400">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
</package>
<package pkgid="7b703919efd67f97f4f4e607b829ce7421c508b4809f27ceba64c7e283cf2877" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.65.1"/>
  <changelog author="dcassany@suse.com" date="1646222400">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
</package>
<package pkgid="9520018872d831a84b50f567a14c40f3e998971e33c30845d6358e2e025c6052" name="dracut-kiwi-oem-dump" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.68.1"/>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
</package>
<package pkgid="6b47d70c834a08bb391531faa0e6cd2afefb4ccb6b0e387672f3a3e08fd47e91" name="dracut-kiwi-oem-dump" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.68.1"/>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
</package>
<package pkgid="bdc16bdd0bcaffd99935a88ddd9506ee30cb960751469ca3df286b75f8c3d324" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.68.1"/>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
</package>
<package pkgid="aa7740e01794215cddf495e99b217576c647dfcf394dbfe0577e49e3bc905db7" name="dracut-kiwi-oem-repart" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.62.1"/>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
</package>
<package pkgid="03993b88d69e8bf5a7ce04ee7787e886f7163bbb0ab2efa50de1981056001553" name="dracut-kiwi-oem-repart" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.62.1"/>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
</package>
<package pkgid="a443c1297f99be70a036cf7d64964ee6c9ffb773fe05032ef7328646eff70a5b" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.62.1"/>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
</package>
<package pkgid="0b23060d74abfa7ed82d1514c9734500b524dab6a88e66b03f665b4471995712" name="dracut-kiwi-oem-repart" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.65.1"/>
  <changelog author="dcassany@suse.com" date="1646222400">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
</package>
<package pkgid="3251dbc2b954fc4dc6951f33175e7575634d7cd9fb162f815b1848162a164b05" name="dracut-kiwi-oem-repart" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.65.1"/>
  <changelog author="dcassany@suse.com" date="1646222400">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
</package>
<package pkgid="483987de08bdc3815763aec174133f2f7abb9bc528d4f9665cfdfab3f9a28bd0" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.65.1"/>
  <changelog author="dcassany@suse.com" date="1646222400">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
</package>
<package pkgid="a22d49754c0989f7a67308ea252eec34db5bc65cd0146decf58e775686e45164" name="dracut-kiwi-oem-repart" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.68.1"/>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
</package>
<package pkgid="6d4afc97fc8be378087810ea1163d7644bab33bab71ea2e7bf88a43caf33d7b2" name="dracut-kiwi-oem-repart" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.68.1"/>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
</package>
<package pkgid="df1f6565fc6cbe68c90747f208a5116e2a1aad16870fa5ed2fe5504e7eaabd06" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.68.1"/>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
</package>
<package pkgid="cc3ad995405914ea70220124880e287a6198e43989c9c4bd1ddcf84b5ea2f49d" name="dracut-transactional-update" arch="noarch">
  <version epoch="0" ver="4.1.6" rel="150500.3.3.1"/>
  <changelog author="iforster@suse.com" date="1631880000">- Version 3.5.5
  - t-u: Use tukit for SUSEConnect call [bsc#1190574]
    Correctly registers repositories</changelog>
  <changelog author="iforster@suse.com" date="1632398400">- Version 3.5.6
  - tukit: Add S/390 bootloader support [bsc#1189807]
  - t-u: support purge-kernels with t-u patch [bsc#1190788]</changelog>
  <changelog author="iforster@suse.com" date="1634040000">- Version 3.5.7
  Various fixes affecting Salt support:
  - t-u: Don't squash stderr messages into stdout
  - t-u: Correctly handle case when the snapshot has been deleted due to
    using --drop-if-no-change: Don't show reboot messages and avoid an awk
    error message [bsc#1191475]
  - tukit: Make inotify handler less sensitive / ignore more directories
    [bsc#1191475]</changelog>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]
  - Fixed selfupdate
  - Code cleanup</changelog>
  <changelog author="iforster@suse.com" date="1651579200">- Version 4.0.0~rc3
  - Add Snapshot interface
  - Reworked signal handling: All public signals are sent from the
    main thread now, keeping the same sender for everything
  - Implement D-Bus call "Execute" for Transactions
  - Implement interface for listing Snapshots
  - Implement Reboot interface
  - Fix bug when using --continue on old snapshots
  - Fix hypothetical integer overflow in snapshot list [bsc#1196826]
  - Fix wrong sort order in status command
    [gh#openSUSE/transactional-update#80]</changelog>
  <changelog author="iforster@suse.com" date="1652788800">- Version 4.0.0~rc4
  - Fix building with GCC 12
  - Fix stack overflow with very long commands / ids [bsc#1196149]
  - Use separate mount namespace for chroot, allowing overwriting
    the bind mounts from the update environment - this could have
    lead to data loss of the bind mount previously
  - Fix C error and exception handling for snapshots</changelog>
  <changelog author="schubi@suse.com" date="1655812800">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="iforster@suse.com" date="1659441600">- Version 4.0.0
  - Last minute interface change: Changed "List" method of Snapshot D-Bus
    interface to return a map of properties instead of a comma separated
    list of strings; this will allow retrieving the snapshot properties
    even if they contain a comma in their value [boo#1202147]
  - Remove "Snapshot.hpp" as a public API for now - all public
    functionality is part of SnapshotManager.hpp
  - Add header file documentation for SnapshotManager.hpp
  - Add method to delete snapshot
    [gh#openSUSE/transactional-update#52]
  - Allow setting description of snapshot
    [gh#openSUSE/transactional-update#55]
  - create_dirs_from_rpmdb: set SELinux file context of missing directories
    [gh#openSUSE/transactional-update#84], [bsc#1197242]
  - Fix broken logrotate due to typo in config file
    [gh#openSUSE/transactional-update#87]
  - create_dirs_from_rpmdb: Fix handling return code of create_dirs()
    [gh#openSUSE/transactional-update#86]
  - Fix broken "shell" prompt after selfupdate
  - Add documented D-Bus interface definition files
  - Add tukit_sm_get_current and tukit_sm_get_default to C interface
  - Fixed typos</changelog>
  <changelog author="fvogt@suse.com" date="1661169600">- Version 4.0.1
  - create_dirs_from_rpmdb: Just warn if no default SELinux context found
    [gh#openSUSE/transactional-update#88], [bsc#1188215]
  - create_dirs_from_rpmdb: Don't update the rpmdb cookie on failure
    [gh#openSUSE/transactional-update#88]
  - Handle directories owned by multiple packages
    [gh#openSUSE/transactional-update#90], [bsc#1188215]</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration of logrotate configuration to /usr/etc: Saving user
  changed configuration files in /etc and restoring them while
  an RPM update.</changelog>
  <changelog author="iforster@suse.com" date="1664539200">- Version 4.1.0
  - t-u: Add a "setup-kdump" command; implements [jsc#PED-1441]
  - Export TRANSACTIONAL_UPDATE_ROOT (the path to the snapshot) in
    the update environment; implements [jsc#PED-1078]
  - Add support for "notify" reboot method for desktop use
    [gh#openSUSE/transactional-update#93]
  - Fix kdump initrd recreation detection; the check was performed in the
    active snapshot instead of the target snapshot
  - Document register command [bsc#1202900]
  - Avoid unnecessary snapshots for register command [bsc#1202901]
  - Various optimizations for register command
  - Remove bogus error message when triggering reboot
  - Rework /etc overlay documentation in "The Transactional Update Guide"
  - Fix incorrect manpage formatting
  - Remove leftover "salt" reboot method in configuration example file
  - Replace deprecated std::mem_fn with lambdas</changelog>
  <changelog author="iforster@suse.com" date="1674043200">- Version 4.1.1
  - Mount user specific binddirs last: Prevously the internal mounts would
    potentially overwrite user bind mounts [boo#1205011]
  - selinux: Relabel shadowed /var files during update to make sure they
    don't interfere with the update [boo#1205937]
  - Clean up /var/lib/overlay more aggressively [boo#1206947]
  - tukit: Merge /etc overlay into parent if --discard is used together
    with --continue - previously the files were incorrectly always merged
    with the currently running system
  - status: do not execute the status command if experimental
  - Don't delete created mount point dirs any more
  - Small code optimizations</changelog>
  <changelog author="iforster@suse.com" date="1674475200">- Version 4.1.2
  - Don't try to mount user mounts if they don't exist [boo#1207366]</changelog>
  <changelog author="iforster@suse.com" date="1675857600">- Version 4.1.3
  - Suppress SELinux relabelling output in quiet mode
  - Documentation readability improvements</changelog>
  <changelog author="iforster@suse.com" date="1678449600">- Version 4.1.4
  - Workaround for broken Tumbleweed package libfdisk1</changelog>
  <changelog author="iforster@suse.com" date="1696507200">- Version 4.1.6
  - Use permissions of real /etc when creating overlay
    [bsc#1215878]
- Version 4.1.5
  - Add support for configuration file snippets</changelog>
</package>
<package pkgid="371b67760dddcca1ed5910efe8679c240d4cfe199de028021f2eefaba4301724" name="duktape" arch="src">
  <version epoch="0" ver="2.6.0" rel="150500.4.2.1"/>
  <changelog author="avvissu@yandex.by" date="1496145600">- Initial package</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Correct RPM group.</changelog>
  <changelog author="avvissu@yandex.by" date="1501329600">- Update to 2.1.1:
  * maintenance release</changelog>
  <changelog author="avvissu@yandex.by" date="1507204800">- Update to 2.2.0:
  * call handling, API improvements, performance</changelog>
  <changelog author="avvissu@yandex.by" date="1524744000">- Update to 2.2.1:
  * maintenance release</changelog>
  <changelog author="sean@suspend.net" date="1539864000">- Update to 2.3.0:
  * ES2015 improvements</changelog>
  <changelog author="avvissu@yandex.by" date="1564401600">- Update to 2.4.0:
  * Minor fixes and improvements</changelog>
  <changelog author="mrey@suse.com" date="1595937600">- Update to 2.5.0:
  * CBOR support, minor fixes and improvements
- spec file changes
  * change http to https in URLs
  * use RPM macros</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1604059200">- Update to 2.6.0:
  * Various fixes and portability improvements.</changelog>
  <changelog author="meissner@suse.com" date="1669636800">- duktape-link-m.patch: link against libm for sin() and related functions,
  in case the compiler with -Os creates external references. bsc#1205805</changelog>
</package>
<package pkgid="6e2b5d6494d0797f088628dced4677981cdc61db5303dcc5b9318bb40fe9a30d" name="duktape" arch="src">
  <version epoch="0" ver="2.6.0" rel="150500.4.5.1"/>
  <changelog author="avvissu@yandex.by" date="1496145600">- Initial package</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Correct RPM group.</changelog>
  <changelog author="avvissu@yandex.by" date="1501329600">- Update to 2.1.1:
  * maintenance release</changelog>
  <changelog author="avvissu@yandex.by" date="1507204800">- Update to 2.2.0:
  * call handling, API improvements, performance</changelog>
  <changelog author="avvissu@yandex.by" date="1524744000">- Update to 2.2.1:
  * maintenance release</changelog>
  <changelog author="sean@suspend.net" date="1539864000">- Update to 2.3.0:
  * ES2015 improvements</changelog>
  <changelog author="avvissu@yandex.by" date="1564401600">- Update to 2.4.0:
  * Minor fixes and improvements</changelog>
  <changelog author="mrey@suse.com" date="1595937600">- Update to 2.5.0:
  * CBOR support, minor fixes and improvements
- spec file changes
  * change http to https in URLs
  * use RPM macros</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1604059200">- Update to 2.6.0:
  * Various fixes and portability improvements.</changelog>
  <changelog author="meissner@suse.com" date="1669636800">- duktape-link-m.patch: link against libm for sin() and related functions,
  in case the compiler with -Os creates external references. bsc#1205805</changelog>
  <changelog author="yfjiang@suse.com" date="1705060800">- Ship libduktape206-32bit: needed by libproxy since version 0.5.</changelog>
</package>
<package pkgid="c836a55d2f67fa6618dd7f1680f08d14f94d83f23eb0f4eca5530a6ca6083bee" name="efibootmgr" arch="aarch64">
  <version epoch="0" ver="17" rel="150400.3.2.2"/>
  <changelog author="glin@suse.com" date="1414584000">- Update version number to 0.11.0
- Rebase patches
  (efibootmgr-0.11.0-derhat.diff,
  efibootmgr-0.11.0-check-boot-order.diff)
- Drop efibootmgr-0.6.0-set_boot_order.diff since the data size of
  the variable is handled properly now
- Drop efibootmgr-0.6.0-fail-visibly.diff since err() and warn()
  are introduced to show more meaningful messages
- Drop upstreamed patch
  (efibootmgr-0.6.0-gcc-Wall.diff,
  efibootmgr-0.6.0-write-unique-id-once.diff)</changelog>
  <changelog author="dmueller@suse.com" date="1414756800">- efibootmgr-0.6.0-check-boot-order.diff, efibootmgr-0.6.0-derhat.diff:
  pass source validator check
- switch homepage to https://github.com/vathpela/efibootmgr</changelog>
  <changelog author="mpluskal@suse.com" date="1419249600">- Enable i586 build</changelog>
  <changelog author="rw@suse.com" date="1422619200">- Introduce partition UUID as selector for delete.  [bsc#870211]
  (efibootmgr-0.6.0-delete-by-uuid.diff)</changelog>
  <changelog author="rw@suse.com" date="1426075200">- Allow disk/partition as selector for delete as well.  [bsc#870211]
  (efibootmgr-delete-multiple.diff)
- Remove version number from patches.
  (add efibootmgr-derhat.diff, efibootmgr-fail-visibly.diff,
  efibootmgr-gcc-Wall.diff, efibootmgr-set_boot_order.diff,
  efibootmgr-write-unique-id-once.diff;
  drop efibootmgr-0.6.0-check-boot-order.diff,
  efibootmgr-0.6.0-delete-by-uuid.diff, efibootmgr-0.6.0-derhat.diff,
  efibootmgr-0.6.0-fail-visibly.diff, efibootmgr-0.6.0-gcc-Wall.diff,
  efibootmgr-0.6.0-set_boot_order.diff,
  efibootmgr-0.6.0-write-unique-id-once.diff)
  Note: this entry reflects obsoleted, SLE-only changes!</changelog>
  <changelog author="mpluskal@suse.com" date="1434110400">- Update to 0.12
  * This release is mostly a maintenance release that uses
    libefivar's new library API for creating device paths and load
    options.
  * Also DHCPv4 network boot entries are now something you can
    create without knowing an awful lot about ACPI.
- Refresh patches
  efibootmgr-0.11.0-derhat.diff as efibootmgr-derhat.diff
  efibootmgr-0.11.0-check-boot-order.diff as
  efibootmgr-check-boot-order.diff
- Update project and download url</changelog>
  <changelog author="rw@suse.com" date="1437739200">- Refresh for SLE12.  [bsc#929677]
  (efibootmgr-gcc-Wall.diff, efibootmgr-delete-multiple.diff)</changelog>
  <changelog author="rw@suse.com" date="1442318400">- Properly latch long to short option for delete.  [bsc#945705]
  (efibootmgr-delete-multiple.diff)</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Add efibootmgr-fix-efivar-0.24.patch fix the compilation errors
  caused by the efivar update</changelog>
  <changelog author="rw@suse.com" date="1468497600">- Add support for Memory Address Range Mirroring.
  [fate#320999, bsc#987599]
  (add MARM-add-m-and-M-options.diff,
  MARM-fix-insufficient-validation-check-of-M-option.diff,
  MARM-introduce-man-for-m-and-M-option.diff,
  MARM-extend-man-for-M-option.diff,
  MARM-sanitize-set_mirror.diff)</changelog>
  <changelog author="arvidjaar@gmail.com" date="1471694400">- add efibootmgr-fix-usage-of-efi_loadopt_path-again.patch - fix
  efibootmgr -v with new efivar (boo#993458)</changelog>
  <changelog author="msuchanek@suse.com" date="1487246400">- Build on all archs. There is no reason not to. [boo#1025520]
- Depend on new enough efivar. Build fails otherwise.</changelog>
  <changelog author="rw@suse.com" date="1488542400">- Update to 14 plus upstream fixes.  [fate#322108]
  (0001-Don-t-use-fshort-wchar-when-building-63.patch,
  0002-Remove-extra-const-keywords-gcc-7-gripes-about.patch,
  0003-Add-support-for-parsing-optional-data-as-ucs2.patch)
- Forward port and refresh SLE patches
  (efibootmgr-derhat.diff, MARM-sanitize-set_mirror.diff
  efibootmgr-delete-multiple.diff)
- Drop upstreamed patches
  (efibootmgr-check-boot-order.diff,
  efibootmgr-fix-efivar-0.24.patch,
  efibootmgr-fix-usage-of-efi_loadopt_path-again.patch,
  MARM-add-m-and-M-options.diff,
  MARM-extend-man-for-M-option.diff,
  MARM-fix-insufficient-validation-check-of-M-option.diff,
  MARM-introduce-man-for-m-and-M-option.diff)</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- forcefully enable PIE</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="info@paolostivanin.com" date="1627992000">- Update to v17:  [jsc#SLE-22542]
  * use efivar's logging facility more (more info in -v2 , -v3, etc)
  * Various bug fixes
  * Better -e parsing
  * fix pkg-config invocation for ldflags
  * Make efibootmgr use EFIDIR / efibootmgr.efidir like fwupdate does
  * make --loader default build-time configurable
  * sanitize set_mirror()/get_mirror()
  * Add support for parsing loader options as UCS2
  * GCC 7 fixes
  * Don't use -fshort-wchar since we don't run on EFI machines.
- Drop 0001-Don-t-use-fshort-wchar-when-building-63.patch (upstreamed)
- Drop 0002-Remove-extra-const-keywords-gcc-7-gripes-about.patch
  (upstreamed)
- Drop 0003-Add-support-for-parsing-optional-data-as-ucs2.patch
  (upstreamed)
- Drop MARM-sanitize-set_mirror.diff (upstreamed)
- Drop efibootmgr-derhat.diff (upstreamed)
- Rebase efibootmgr-delete-multiple.diff</changelog>
</package>
<package pkgid="f37363189d4a42f87e6ecc41ea084359c38548778a369a5a08db282dcaf22725" name="efibootmgr" arch="src">
  <version epoch="0" ver="17" rel="150400.3.2.2"/>
  <changelog author="rw@suse.com" date="1364385600">- Print EFI status for failed '--create' as well.  [bnc#811767]
  (efibootmgr-0.5.4-fail-visibly.diff)</changelog>
  <changelog author="rw@suse.com" date="1387454400">- Update version number to 0.6.0,
- Integrate SLE11 patches.  [bnc#830784]
  (efibootmgr-0.6.0-fail-visibly.diff,
  efibootmgr-0.6.0-set_boot_order.diff)
- Fix gcc warnings.
  (efibootmgr-0.6.0-gcc-Wall.diff)
- Make default '--loader' build-time configurable.
  (efibootmgr-0.6.0-derhat.diff)
- Don't let '--write-signature' overwrite unique signatures.
  (efibootmgr-0.6.0-write-unique-id-once.diff)
- Drop obsolete patches
  (efibootmgr-0.5.4.diff,
  efibootmgr-0.5.4-catchup.diff,
  efibootmgr-0.5.4-sector-size.diff)</changelog>
  <changelog author="glin@suse.com" date="1404734400">- Add efibootmgr-0.6.0-check-boot-order.diff to delete BootOrder
  if there is no more boot option. [bnc#883545]</changelog>
  <changelog author="schwab@suse.de" date="1410264000">- Enable for aarch64 [fate#318444]</changelog>
  <changelog author="glin@suse.com" date="1414584000">- Update version number to 0.11.0
- Rebase patches
  (efibootmgr-0.11.0-derhat.diff,
  efibootmgr-0.11.0-check-boot-order.diff)
- Drop efibootmgr-0.6.0-set_boot_order.diff since the data size of
  the variable is handled properly now
- Drop efibootmgr-0.6.0-fail-visibly.diff since err() and warn()
  are introduced to show more meaningful messages
- Drop upstreamed patch
  (efibootmgr-0.6.0-gcc-Wall.diff,
  efibootmgr-0.6.0-write-unique-id-once.diff)</changelog>
  <changelog author="dmueller@suse.com" date="1414756800">- efibootmgr-0.6.0-check-boot-order.diff, efibootmgr-0.6.0-derhat.diff:
  pass source validator check
- switch homepage to https://github.com/vathpela/efibootmgr</changelog>
  <changelog author="mpluskal@suse.com" date="1419249600">- Enable i586 build</changelog>
  <changelog author="rw@suse.com" date="1422619200">- Introduce partition UUID as selector for delete.  [bsc#870211]
  (efibootmgr-0.6.0-delete-by-uuid.diff)</changelog>
  <changelog author="rw@suse.com" date="1426075200">- Allow disk/partition as selector for delete as well.  [bsc#870211]
  (efibootmgr-delete-multiple.diff)
- Remove version number from patches.
  (add efibootmgr-derhat.diff, efibootmgr-fail-visibly.diff,
  efibootmgr-gcc-Wall.diff, efibootmgr-set_boot_order.diff,
  efibootmgr-write-unique-id-once.diff;
  drop efibootmgr-0.6.0-check-boot-order.diff,
  efibootmgr-0.6.0-delete-by-uuid.diff, efibootmgr-0.6.0-derhat.diff,
  efibootmgr-0.6.0-fail-visibly.diff, efibootmgr-0.6.0-gcc-Wall.diff,
  efibootmgr-0.6.0-set_boot_order.diff,
  efibootmgr-0.6.0-write-unique-id-once.diff)
  Note: this entry reflects obsoleted, SLE-only changes!</changelog>
  <changelog author="mpluskal@suse.com" date="1434110400">- Update to 0.12
  * This release is mostly a maintenance release that uses
    libefivar's new library API for creating device paths and load
    options.
  * Also DHCPv4 network boot entries are now something you can
    create without knowing an awful lot about ACPI.
- Refresh patches
  efibootmgr-0.11.0-derhat.diff as efibootmgr-derhat.diff
  efibootmgr-0.11.0-check-boot-order.diff as
  efibootmgr-check-boot-order.diff
- Update project and download url</changelog>
  <changelog author="rw@suse.com" date="1437739200">- Refresh for SLE12.  [bsc#929677]
  (efibootmgr-gcc-Wall.diff, efibootmgr-delete-multiple.diff)</changelog>
  <changelog author="rw@suse.com" date="1442318400">- Properly latch long to short option for delete.  [bsc#945705]
  (efibootmgr-delete-multiple.diff)</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Add efibootmgr-fix-efivar-0.24.patch fix the compilation errors
  caused by the efivar update</changelog>
  <changelog author="rw@suse.com" date="1468497600">- Add support for Memory Address Range Mirroring.
  [fate#320999, bsc#987599]
  (add MARM-add-m-and-M-options.diff,
  MARM-fix-insufficient-validation-check-of-M-option.diff,
  MARM-introduce-man-for-m-and-M-option.diff,
  MARM-extend-man-for-M-option.diff,
  MARM-sanitize-set_mirror.diff)</changelog>
  <changelog author="arvidjaar@gmail.com" date="1471694400">- add efibootmgr-fix-usage-of-efi_loadopt_path-again.patch - fix
  efibootmgr -v with new efivar (boo#993458)</changelog>
  <changelog author="msuchanek@suse.com" date="1487246400">- Build on all archs. There is no reason not to. [boo#1025520]
- Depend on new enough efivar. Build fails otherwise.</changelog>
  <changelog author="rw@suse.com" date="1488542400">- Update to 14 plus upstream fixes.  [fate#322108]
  (0001-Don-t-use-fshort-wchar-when-building-63.patch,
  0002-Remove-extra-const-keywords-gcc-7-gripes-about.patch,
  0003-Add-support-for-parsing-optional-data-as-ucs2.patch)
- Forward port and refresh SLE patches
  (efibootmgr-derhat.diff, MARM-sanitize-set_mirror.diff
  efibootmgr-delete-multiple.diff)
- Drop upstreamed patches
  (efibootmgr-check-boot-order.diff,
  efibootmgr-fix-efivar-0.24.patch,
  efibootmgr-fix-usage-of-efi_loadopt_path-again.patch,
  MARM-add-m-and-M-options.diff,
  MARM-extend-man-for-M-option.diff,
  MARM-fix-insufficient-validation-check-of-M-option.diff,
  MARM-introduce-man-for-m-and-M-option.diff)</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- forcefully enable PIE</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="info@paolostivanin.com" date="1627992000">- Update to v17:  [jsc#SLE-22542]
  * use efivar's logging facility more (more info in -v2 , -v3, etc)
  * Various bug fixes
  * Better -e parsing
  * fix pkg-config invocation for ldflags
  * Make efibootmgr use EFIDIR / efibootmgr.efidir like fwupdate does
  * make --loader default build-time configurable
  * sanitize set_mirror()/get_mirror()
  * Add support for parsing loader options as UCS2
  * GCC 7 fixes
  * Don't use -fshort-wchar since we don't run on EFI machines.
- Drop 0001-Don-t-use-fshort-wchar-when-building-63.patch (upstreamed)
- Drop 0002-Remove-extra-const-keywords-gcc-7-gripes-about.patch
  (upstreamed)
- Drop 0003-Add-support-for-parsing-optional-data-as-ucs2.patch
  (upstreamed)
- Drop MARM-sanitize-set_mirror.diff (upstreamed)
- Drop efibootmgr-derhat.diff (upstreamed)
- Rebase efibootmgr-delete-multiple.diff</changelog>
</package>
<package pkgid="51f73df6e9a9a658a7b884b206914891ab87a2c919cb13998af33e544db630a0" name="efibootmgr" arch="x86_64">
  <version epoch="0" ver="17" rel="150400.3.2.2"/>
  <changelog author="glin@suse.com" date="1414584000">- Update version number to 0.11.0
- Rebase patches
  (efibootmgr-0.11.0-derhat.diff,
  efibootmgr-0.11.0-check-boot-order.diff)
- Drop efibootmgr-0.6.0-set_boot_order.diff since the data size of
  the variable is handled properly now
- Drop efibootmgr-0.6.0-fail-visibly.diff since err() and warn()
  are introduced to show more meaningful messages
- Drop upstreamed patch
  (efibootmgr-0.6.0-gcc-Wall.diff,
  efibootmgr-0.6.0-write-unique-id-once.diff)</changelog>
  <changelog author="dmueller@suse.com" date="1414756800">- efibootmgr-0.6.0-check-boot-order.diff, efibootmgr-0.6.0-derhat.diff:
  pass source validator check
- switch homepage to https://github.com/vathpela/efibootmgr</changelog>
  <changelog author="mpluskal@suse.com" date="1419249600">- Enable i586 build</changelog>
  <changelog author="rw@suse.com" date="1422619200">- Introduce partition UUID as selector for delete.  [bsc#870211]
  (efibootmgr-0.6.0-delete-by-uuid.diff)</changelog>
  <changelog author="rw@suse.com" date="1426075200">- Allow disk/partition as selector for delete as well.  [bsc#870211]
  (efibootmgr-delete-multiple.diff)
- Remove version number from patches.
  (add efibootmgr-derhat.diff, efibootmgr-fail-visibly.diff,
  efibootmgr-gcc-Wall.diff, efibootmgr-set_boot_order.diff,
  efibootmgr-write-unique-id-once.diff;
  drop efibootmgr-0.6.0-check-boot-order.diff,
  efibootmgr-0.6.0-delete-by-uuid.diff, efibootmgr-0.6.0-derhat.diff,
  efibootmgr-0.6.0-fail-visibly.diff, efibootmgr-0.6.0-gcc-Wall.diff,
  efibootmgr-0.6.0-set_boot_order.diff,
  efibootmgr-0.6.0-write-unique-id-once.diff)
  Note: this entry reflects obsoleted, SLE-only changes!</changelog>
  <changelog author="mpluskal@suse.com" date="1434110400">- Update to 0.12
  * This release is mostly a maintenance release that uses
    libefivar's new library API for creating device paths and load
    options.
  * Also DHCPv4 network boot entries are now something you can
    create without knowing an awful lot about ACPI.
- Refresh patches
  efibootmgr-0.11.0-derhat.diff as efibootmgr-derhat.diff
  efibootmgr-0.11.0-check-boot-order.diff as
  efibootmgr-check-boot-order.diff
- Update project and download url</changelog>
  <changelog author="rw@suse.com" date="1437739200">- Refresh for SLE12.  [bsc#929677]
  (efibootmgr-gcc-Wall.diff, efibootmgr-delete-multiple.diff)</changelog>
  <changelog author="rw@suse.com" date="1442318400">- Properly latch long to short option for delete.  [bsc#945705]
  (efibootmgr-delete-multiple.diff)</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Add efibootmgr-fix-efivar-0.24.patch fix the compilation errors
  caused by the efivar update</changelog>
  <changelog author="rw@suse.com" date="1468497600">- Add support for Memory Address Range Mirroring.
  [fate#320999, bsc#987599]
  (add MARM-add-m-and-M-options.diff,
  MARM-fix-insufficient-validation-check-of-M-option.diff,
  MARM-introduce-man-for-m-and-M-option.diff,
  MARM-extend-man-for-M-option.diff,
  MARM-sanitize-set_mirror.diff)</changelog>
  <changelog author="arvidjaar@gmail.com" date="1471694400">- add efibootmgr-fix-usage-of-efi_loadopt_path-again.patch - fix
  efibootmgr -v with new efivar (boo#993458)</changelog>
  <changelog author="msuchanek@suse.com" date="1487246400">- Build on all archs. There is no reason not to. [boo#1025520]
- Depend on new enough efivar. Build fails otherwise.</changelog>
  <changelog author="rw@suse.com" date="1488542400">- Update to 14 plus upstream fixes.  [fate#322108]
  (0001-Don-t-use-fshort-wchar-when-building-63.patch,
  0002-Remove-extra-const-keywords-gcc-7-gripes-about.patch,
  0003-Add-support-for-parsing-optional-data-as-ucs2.patch)
- Forward port and refresh SLE patches
  (efibootmgr-derhat.diff, MARM-sanitize-set_mirror.diff
  efibootmgr-delete-multiple.diff)
- Drop upstreamed patches
  (efibootmgr-check-boot-order.diff,
  efibootmgr-fix-efivar-0.24.patch,
  efibootmgr-fix-usage-of-efi_loadopt_path-again.patch,
  MARM-add-m-and-M-options.diff,
  MARM-extend-man-for-M-option.diff,
  MARM-fix-insufficient-validation-check-of-M-option.diff,
  MARM-introduce-man-for-m-and-M-option.diff)</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- forcefully enable PIE</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="info@paolostivanin.com" date="1627992000">- Update to v17:  [jsc#SLE-22542]
  * use efivar's logging facility more (more info in -v2 , -v3, etc)
  * Various bug fixes
  * Better -e parsing
  * fix pkg-config invocation for ldflags
  * Make efibootmgr use EFIDIR / efibootmgr.efidir like fwupdate does
  * make --loader default build-time configurable
  * sanitize set_mirror()/get_mirror()
  * Add support for parsing loader options as UCS2
  * GCC 7 fixes
  * Don't use -fshort-wchar since we don't run on EFI machines.
- Drop 0001-Don-t-use-fshort-wchar-when-building-63.patch (upstreamed)
- Drop 0002-Remove-extra-const-keywords-gcc-7-gripes-about.patch
  (upstreamed)
- Drop 0003-Add-support-for-parsing-optional-data-as-ucs2.patch
  (upstreamed)
- Drop MARM-sanitize-set_mirror.diff (upstreamed)
- Drop efibootmgr-derhat.diff (upstreamed)
- Rebase efibootmgr-delete-multiple.diff</changelog>
</package>
<package pkgid="850da0cc500e88b74e5ddae42281e7aae6dfd341d1c72d8b70b27161031235b4" name="fdo-client" arch="aarch64">
  <version epoch="0" ver="1.0.0+git20210816.baa09b5" rel="150500.3.3.1"/>
  <changelog author="schubi@suse.de" date="1634299200">- This is the successor of sdo-client
  EPIC: SLE/SLE-22946</changelog>
  <changelog author="schubi@suse.com" date="1700136000">- Removed build key via utils/keys_gen.sh. (bsc#1216293)</changelog>
</package>
<package pkgid="ded89d8be22042e30952b8d90a34d619e87f7d9b0846578489d31497f6707556" name="fdo-client" arch="s390x">
  <version epoch="0" ver="1.0.0+git20210816.baa09b5" rel="150500.3.3.1"/>
  <changelog author="schubi@suse.de" date="1634299200">- This is the successor of sdo-client
  EPIC: SLE/SLE-22946</changelog>
  <changelog author="schubi@suse.com" date="1700136000">- Removed build key via utils/keys_gen.sh. (bsc#1216293)</changelog>
</package>
<package pkgid="3dd68fe578be2abd4a2ce389959d2dd84fa8b6b75ad2a1dcf0bd5efb3a4dea1e" name="fdo-client" arch="src">
  <version epoch="0" ver="1.0.0+git20210816.baa09b5" rel="150500.3.3.1"/>
  <changelog author="schubi@suse.de" date="1634299200">- This is the successor of sdo-client
  EPIC: SLE/SLE-22946</changelog>
  <changelog author="schubi@suse.com" date="1700136000">- Removed build key via utils/keys_gen.sh. (bsc#1216293)</changelog>
</package>
<package pkgid="7396625e44de0b9f27aa90ea00e0dcae592a8fde608da33f0c9c8c86f0c092ac" name="fdo-client" arch="x86_64">
  <version epoch="0" ver="1.0.0+git20210816.baa09b5" rel="150500.3.3.1"/>
  <changelog author="schubi@suse.de" date="1634299200">- This is the successor of sdo-client
  EPIC: SLE/SLE-22946</changelog>
  <changelog author="schubi@suse.com" date="1700136000">- Removed build key via utils/keys_gen.sh. (bsc#1216293)</changelog>
</package>
<package pkgid="aa13193577adb5d6f4e85c52dd45b9e04aa4dca160f0fc5f260f27293527204f" name="fdo-client-devel" arch="aarch64">
  <version epoch="0" ver="1.0.0+git20210816.baa09b5" rel="150500.3.3.1"/>
  <changelog author="schubi@suse.de" date="1634299200">- This is the successor of sdo-client
  EPIC: SLE/SLE-22946</changelog>
  <changelog author="schubi@suse.com" date="1700136000">- Removed build key via utils/keys_gen.sh. (bsc#1216293)</changelog>
</package>
<package pkgid="683c6c55f3bcfc074bc000e10c0cf78d40a81a1a60f2c25d4ba7a730e83bb0ec" name="fdo-client-devel" arch="s390x">
  <version epoch="0" ver="1.0.0+git20210816.baa09b5" rel="150500.3.3.1"/>
  <changelog author="schubi@suse.de" date="1634299200">- This is the successor of sdo-client
  EPIC: SLE/SLE-22946</changelog>
  <changelog author="schubi@suse.com" date="1700136000">- Removed build key via utils/keys_gen.sh. (bsc#1216293)</changelog>
</package>
<package pkgid="b5147d5d3630f4f5cdbb275af0a19df8896b164e3717dd4b636080aae75141b5" name="fdo-client-devel" arch="x86_64">
  <version epoch="0" ver="1.0.0+git20210816.baa09b5" rel="150500.3.3.1"/>
  <changelog author="schubi@suse.de" date="1634299200">- This is the successor of sdo-client
  EPIC: SLE/SLE-22946</changelog>
  <changelog author="schubi@suse.com" date="1700136000">- Removed build key via utils/keys_gen.sh. (bsc#1216293)</changelog>
</package>
<package pkgid="d01e771eead0ca67f082a3438cb442116903fc7f0baa044c4d63a3caf3d08b36" name="gcc13" arch="src">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.3.3"/>
  <changelog author="mliska@suse.cz" date="1679659200">- Use --enable-link-serialization rather that --enable-link-mutex,
  the benefit of the former one is that the linker jobs are not
  holding tokens of the make's jobserver.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1679659201">- Add %limit_build for gcc13 to avoid OOM</changelog>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
</package>
<package pkgid="c0c100358474c8820b6ca95007cd5d85b0acb9d79ab79bf7c96a576bc505dce6" name="gcc13" arch="src">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.6.1"/>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
</package>
<package pkgid="e4fa25e50d308e8ef222a93bb3f9df60b51da10b35bcd4da1ec627528898fed8" name="git" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.30.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
</package>
<package pkgid="cb31dd7ef558b46dd53d3fb7dd6466fb21f710c0540213ad7ff3ee89afb282ad" name="git" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.30.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
</package>
<package pkgid="63a9366e1c09ded162fbbe58bf18fc777cfa41c5a98435809afe2e02edd95ef1" name="git" arch="src">
  <version epoch="0" ver="2.35.3" rel="150300.10.30.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
</package>
<package pkgid="8a954af8f97bcb82a244850356f8990302006240c216f82ca1414edae4f91b3b" name="git" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.30.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
</package>
<package pkgid="44b780bd7f5b7f2c67c2952837cf875015d1b783328e5e32515bda0c40b8c2c2" name="git" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.33.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
</package>
<package pkgid="3534611bc56e3413bc8ba5e7b1ffb8ede5e4faf1d449bfda572ecbbe2f949286" name="git" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.33.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
</package>
<package pkgid="d72a815c946d8eebba5860ae64bc0ad2de79049995e83a6834dfe6fb30dec65a" name="git" arch="src">
  <version epoch="0" ver="2.35.3" rel="150300.10.33.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
</package>
<package pkgid="4f9dded842a597632e5da56bcdf9eb0ea088ca64b58b6f41254478d828007912" name="git" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.33.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
</package>
<package pkgid="2a7df55772f4cd629a82e3ad1090fd36c8c3a7e354359ee6af6e2a6a762bebd7" name="git-core" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.30.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
</package>
<package pkgid="30e26fd086cbd42c7c011a8cac04bc044d1e375c06d3e23f08fa7a46ebbab567" name="git-core" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.30.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
</package>
<package pkgid="06c12a745a2ff425e27bc8dbabb28a311535631e3b711c4299a9bc0942f5f6ad" name="git-core" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.30.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
</package>
<package pkgid="caf0e7e4889b7b4744a2f232a1d27cec9f7afe388665a5ea29792a769279890d" name="git-core" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.33.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
</package>
<package pkgid="736dc2150f5281358e7a839a249c073e8229c7844ffa20f69ff087ebfdf9cc12" name="git-core" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.33.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
</package>
<package pkgid="36c75314693ab88511ba42ccef983108fcbe50c77a87084275781109573d9cf3" name="git-core" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.33.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
</package>
<package pkgid="30acda6fd66c3c1bf2663eecf0cf55830b83f9291e52fcd711c84392e9775154" name="glibc" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.63.1"/>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
</package>
<package pkgid="ad649d262dbd3b40a327662abe0be17d6445167921e6a8b09d23dee2d88514f7" name="glibc" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.63.1"/>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
</package>
<package pkgid="d0ea80a2074b614361e6b3cca38eadae45a623f187334324f4181298d98cddcd" name="glibc" arch="src">
  <version epoch="0" ver="2.31" rel="150300.63.1"/>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
</package>
<package pkgid="4605e7cd661b0e322fafa1aca67b1963e316f23af0637db0966f5643e1834460" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.63.1"/>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
</package>
<package pkgid="5e1c1af73a4417eebf1eb9984276c9cd3098e05945f69c583aec6c1bb9b59f09" name="glibc-devel" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.63.1"/>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
</package>
<package pkgid="1e42cd387f0f246aad86b0288b503c8c7a72d0d5146dc11a448239da6460302f" name="glibc-devel" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.63.1"/>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
</package>
<package pkgid="3c938332f6d797bf39bc4940e1d029d511dfcd9c6afaae27d52112374b66495a" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.63.1"/>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
</package>
<package pkgid="9f01671f44dbf858a609d85be7f61922fade4a66bc6dcf238407d41389648f93" name="glibc-locale" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.63.1"/>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
</package>
<package pkgid="8c341d756d66e6f088c4b7a31f084720e29c59e836edbc73b5e5ab8d173e5583" name="glibc-locale" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.63.1"/>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
</package>
<package pkgid="4dd56c5df933804b6c5191b47758d8cff23999edf9869a0a0e5023d3142472bb" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.63.1"/>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
</package>
<package pkgid="8587611444fe60667d2110a9284c55e29090f2d16c21f210c8333a68b45a47e2" name="glibc-locale-base" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.63.1"/>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
</package>
<package pkgid="ba2dea237ae8f2976c1d96a46e27cfa63561d5974ddcd9704626be32512078c3" name="glibc-locale-base" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.63.1"/>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
</package>
<package pkgid="66d9e0aee5e99a6c79ef53246e613f036f757c5548205bc0f9937a0ff3428e00" name="glibc-locale-base" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.63.1"/>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
</package>
<package pkgid="6bf60d010e937b97c96b17ad96b2283867e210dc286018e20d6d2db20918e198" name="gnutls" arch="aarch64">
  <version epoch="0" ver="3.7.3" rel="150400.4.38.1"/>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
</package>
<package pkgid="708bc3185d1be493a4a40ffacdc0cab74252275ba58f56ec350e5c18fb9341bc" name="gnutls" arch="s390x">
  <version epoch="0" ver="3.7.3" rel="150400.4.38.1"/>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
</package>
<package pkgid="92d1c5187baa2047f07d6a3ca95899b0fd79b215a0088705e5248f0639538f83" name="gnutls" arch="src">
  <version epoch="0" ver="3.7.3" rel="150400.4.38.1"/>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
</package>
<package pkgid="618bb64ce420906d0099308edf6513aaa60fa9bd2ce280e222f503d5a410a289" name="gnutls" arch="x86_64">
  <version epoch="0" ver="3.7.3" rel="150400.4.38.1"/>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
</package>
<package pkgid="1da26ca59648118e86e87321bddbb97035be6685796c80a82b79fa37f757f080" name="gnutls" arch="aarch64">
  <version epoch="0" ver="3.7.3" rel="150400.4.41.3"/>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
</package>
<package pkgid="8f1f10fd34541f9b5fa7d660bab40fdd517727120b4b5a3007c8ec729340e03a" name="gnutls" arch="s390x">
  <version epoch="0" ver="3.7.3" rel="150400.4.41.3"/>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
</package>
<package pkgid="1100ef7707542ea98d37893c3f59694127c703b1b97c25a87f5d0a3d8983d063" name="gnutls" arch="src">
  <version epoch="0" ver="3.7.3" rel="150400.4.41.3"/>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
</package>
<package pkgid="6ae1955ea03dbd3f320a74e91b5ff05bbe4cb2c1bf82702d237c9a93bbf5039d" name="gnutls" arch="x86_64">
  <version epoch="0" ver="3.7.3" rel="150400.4.41.3"/>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
</package>
<package pkgid="0b0038c39e192fb8210733f25d3a9fa98aeb101328cb160a6ad3d22a5dfd37f4" name="gpg2" arch="aarch64">
  <version epoch="0" ver="2.2.27" rel="150300.3.8.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1575720000">- update to 2.2.19:
  * gpg: Fix double free when decrypting for hidden recipients
  * gpg: Use auto-key-locate for encryption even for mail addressed
    given with angle brackets
  * gpgsm: Add special case for certain expired intermediate
    certificates</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578571200">- Security fix: [bsc#1157900, CVE-2019-14855, jsc#SLE-16534]
  * Web of Trust forgeries using collisions in SHA-1 signatures
  * Ignore all SHA-1 signatures in 3rd party key signatures.
  * Forbid the creation of SHA-1 third-party key signatures.
  * Add option --allow-weak-key-signatures
- Add gnupg-CVE-2019-14855.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578657600">- Accept key updates even without UIDs [bsc#1143158]
- Add patches:
  * gnupg-allow-import-of-previously-known-keys-even-without-UIDs.patch
  * gnupg-accept_subkeys_with_a_good_revocation_but_no_self-sig_during_import.patch
  * gnupg-add-test-cases-for-import-without-uid.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582113600">- Fix build with GCC-10: [bsc#1160394]
  * Always use EXTERN_UNLESS_MAIN_MODULE pattern
  * In GCC-10, the default option -fcommon will change to -fno-common
- Add gpg2-gcc10-build-fno-common.patch</changelog>
  <changelog author="fvogt@suse.com" date="1584100800">- Split dirmngr into a subpackage to avoid a hard dependency of
  gpg2 on libgnutls</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1584705600">- GnuPG 2.2.20:
  * Protect the error counter against overflow to guarantee that the
    tools can't be tricked into returning success after an error
  * gpg: Make really sure that --verify-files always returns an error
  * gpg: Fix key listing --with-secret if a pattern is given
  * gpg: Fix detection of certain keys used as default-key
  * gpg: Fix default-key selection when a card is available
  * gpg: Fix key expiration and key usage for keys created with a
    creation date of zero
  * gpgsm: Fix import of some CR,LF terminated certificates
  * gpg: New options --include-key-block and --auto-key-import to
    allow encrypted replies after an initial signed message
  * gpg: Allow the use of a fingerprint with --trusted-key
  * gpg: New property "fpr" for use by --export-filter
  * scdaemon: Disable the pinpad if a KDF DO is used
  * dirmngr: Improve finding OCSP certificates
- drop gpg2-gcc10-build-fno-common.patch, upstream</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588248000">- Fix gpgme and gpgme-qt builds on gpg2 2.2.20 update [bsc#1170811]
- Refresh patches:
  * gnupg-2.2.8-files-are-digests.patch
  * gnupg-add_legacy_FIPS_mode_option.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590062400">- Fix warning: agent returned different signature type ssh-rsa
  * The gpg-agent's ssh-agent does not handle flags in signing
    requests properly [bsc#1161268, bsc#1172308]
  * Add gnupg-gpg-agent-ssh-agent.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594296000">- GnuPG 2.2.21:
  * gpg: Improve symmetric decryption speed by about 25%
  * gpg: Support decryption of AEAD encrypted data packets
  * gpg: Add option --no-include-key-block
  * gpg: Allow for extra padding in ECDH
  * gpg: Only a single pinentry is shown for symmetric encryption if
    the pinentry supports this
  * gpg: Print a note if no keys are given to --delete-key
  * gpg,gpgsm: The ridiculous passphrase quality bar is not anymore
    shown
  * gpgsm: Certificates without a CRL distribution point are now
    considered valid without looking up a CRL. The new option
  - -enable-issuer-based-crl-check can be used to revert to the
    former behaviour
  * gpgsm: Support rsaPSS signature verification
  * gpgsm: Unless CRL checking is disabled lookup a missing issuer
    certificate using the certificate's authorityInfoAccess
  * gpgsm: Print the certificate's serial number also in decimal
    notation
  * gpgsm: Fix possible NULL-deref in messages of --gen-key
  * scd: Support the CardOS 5 based D-Trust Card 3.1
  * dirmngr: Allow http URLs with "LOOKUP --url"
  * wkd: Take name of sendmail from configure. Fixes an OpenBSD
    specific bug</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1594728000">- Fix regression in latest gpg2 that makes gpgme fail to build [bsc#1174007]
- Add gnupg-gpgme-t-encrypt-sym.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1598961600">- GnuPG 2.2.22:
  * gpg: Change the default key algorithm to rsa3072
  * gpg: Add regular expression support for Trust Signatures on
    all platforms
  * gpg: Ignore --personal-digest-prefs for ECDSA keys
  * gpgsm: Make rsaPSS a de-vs compliant scheme
  * gpgsm: Show also the SHA256 fingerprint in key listings
  * gpgsm: Do not require a default keyring for --gpgconf-list
  * gpg-agent: Default to extended key format and record the
    creation time of keys
    Add new option --disable-extended-key-format
  * gpg-agent: Support the WAYLAND_DISPLAY envvar
  * gpg-agent: Allow using --gpgconf-list even if HOME does not
    exist
  * gpg-agent: Make the Pinentry work even if the envvar TERM is
    set to the empty string
  * scdaemon: Add a workaround for Gnuk tokens &lt;= 2.15 which
    wrongly incremented the error counter when using the
    "verify" command of "gpg --edit-key" with only the signature
    key being present
  * dirmngr: Better handle systems with disabled IPv6
  * gpgpslit: Install tool.  It was not installed in the past to
    avoid conflicts with the version installed by GnuPG 1.4
  * gpgtar: Make --files-from and --null work as documented
- drop gnupg-gpgme-t-encrypt-sym.patch, upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1599048000">- Fix segv importing certain keys (e.g. ed25519). [bsc#1176034]
- Add gnupg-2.2.22-fix-segv-import-keys.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599134400">- GnuPG 2.2.23:
  * gpg: fix AHEAD preference list overflow boo#1176034 /  CVE-2020-25125
  * gpg: fix possible segv in the key cleaning code
  * gpgsm: fix a minor RFC2253 parser gub
  * scdaemon: Fix a PIN verify failure on certain OpenPGP card
    implementations</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1605614400">- GnuPG 2.2.24:
  * gpg: New command --quick-revoke-sig
  * gpg: Do not use weak digest algos if selected by recipient
    preference during sign+encrypt
  * gpg: Switch to AES256 for symmetric encryption in de-vs mode
  * gpg: Silence weak digest warnings with --quiet
  * gpg: Print new status line CANCELED_BY_USER for a cancel during
    symmetric encryption
  * gpg: Fix the encrypt+sign hash algo preference selection for
    ECDSA.  This is in particular needed for keys created from
    existing smartcard based keys
  * agent: Fix secret key import of GnuPG 2.3 generated Ed25519
    keys
  * agent: Keep some permissions of private-keys-v1.d
  * dirmngr: Align sks-keyservers.netCA.pem use between ntbtls and
    gnutls builds
  * dirmngr: Fix the pool keyserver case for a single host in the
    pool
  * scd: Fix the use case of verify_chv2 by CHECKPIN
  * scd: Various improvements to the ccid-driver
  * scd: Minor fixes for Yubikey
  * gpgconf: New option --show-versions
  * i18n: Complete overhaul and completion of the Italian
    translation</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606132800">- GnuPG 2.2.25:
  * scd: Fix regression in 2.2.24 requiring gpg --card-status
    before signing or decrypting
  * gpgsm: Using Libksba 1.5.0 signatures with a rarely used
    combination of attributes can now be verified</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1610452800">- GnuPG 2.2.27:
  * gpgconf: Fix case with neither local nor global gpg.conf
  * gpgconf: Fix description of two new options
- includes changes from 2.2.26:
  * gpg: New AKL method "ntds"
  * gpg: Fix --trusted-key with fingerprint arg
  * scd: Fix writing of ECC keys to an OpenPGP card
  * scd: Make an USB error fix specific to SPR532 readers
  * dirmngr: With new LDAP keyservers store the new attributes.
    Never store the useless pgpSignerID. Fix a long standing
    bug storing some keys on an ldap server.
  * dirmngr: Support the new Active Direcory LDAP schema for
    keyservers
  * dirmngr: Allow LDAP OpenPGP searches via fingerprint
  * dirmngr: Do not block other threads during keyserver LDAP calls
  * Support global configuration files
  * Fix the iconv fallback handling to UTF-8</changelog>
  <changelog author="pmonreal@suse.com" date="1613995200">- Update gpg2 for SLE15-SP3 [jsc#SLE-17559, bsc#1182572]
- Remove patches fixed upstream:
  * gnupg-gpg-agent-ssh-agent.patch
  * gnupg-2.2.22-fix-segv-import-keys.patch
  * gnupg-Allow-redirection-from-https-to-http-for-CRLs.patch
  * gnupg-CRL-fetching-via-https.patch
  * gnupg-CVE-2018-1000858.patch
  * gnupg-CVE-2018-12020.patch
  * gnupg-CVE-2019-13050_0_of_5.patch
  * gnupg-CVE-2019-13050_1_of_5.patch
  * gnupg-CVE-2019-13050_2_of_5.patch
  * gnupg-CVE-2019-13050_3_of_5.patch
  * gnupg-CVE-2019-13050_4_of_5.patch
  * gnupg-CVE-2019-13050_5_of_5.patch
  * gnupg-CVE-2019-14855.patch
- Update gpg2.keyring</changelog>
  <changelog author="meissner@suse.com" date="1654689600">- gnupg-detect_FIPS_mode.patch: use AES as default cipher instead
  of 3DES if we are in FIPS mode. (bsc#1196125)</changelog>
  <changelog author="david.anes@suse.com" date="1658145600">- Security fix [CVE-2022-34903, bsc#1201225]
  - Vulnerable to status injection
  - Added patch gnupg-CVE-2022-34903.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1700654400">- Suppress error message on trial reading as PEM format when using
  dirmngr to validate broken DER encoded files (bsc#1217212)
  * Add patches:
  - gnupg-dirmngr-Suppress-error-message-on-trial-reading-as-PEM.patch
  - gnupg-dirmngr-Clear-the-error-count-to-try-certificate-as-binary.patch</changelog>
</package>
<package pkgid="5623c4da70e202323f869688139d4dc6c9c6f6d2b1fb65fecf60b4ac94410f0e" name="gpg2" arch="s390x">
  <version epoch="0" ver="2.2.27" rel="150300.3.8.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1575720000">- update to 2.2.19:
  * gpg: Fix double free when decrypting for hidden recipients
  * gpg: Use auto-key-locate for encryption even for mail addressed
    given with angle brackets
  * gpgsm: Add special case for certain expired intermediate
    certificates</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578571200">- Security fix: [bsc#1157900, CVE-2019-14855, jsc#SLE-16534]
  * Web of Trust forgeries using collisions in SHA-1 signatures
  * Ignore all SHA-1 signatures in 3rd party key signatures.
  * Forbid the creation of SHA-1 third-party key signatures.
  * Add option --allow-weak-key-signatures
- Add gnupg-CVE-2019-14855.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578657600">- Accept key updates even without UIDs [bsc#1143158]
- Add patches:
  * gnupg-allow-import-of-previously-known-keys-even-without-UIDs.patch
  * gnupg-accept_subkeys_with_a_good_revocation_but_no_self-sig_during_import.patch
  * gnupg-add-test-cases-for-import-without-uid.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582113600">- Fix build with GCC-10: [bsc#1160394]
  * Always use EXTERN_UNLESS_MAIN_MODULE pattern
  * In GCC-10, the default option -fcommon will change to -fno-common
- Add gpg2-gcc10-build-fno-common.patch</changelog>
  <changelog author="fvogt@suse.com" date="1584100800">- Split dirmngr into a subpackage to avoid a hard dependency of
  gpg2 on libgnutls</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1584705600">- GnuPG 2.2.20:
  * Protect the error counter against overflow to guarantee that the
    tools can't be tricked into returning success after an error
  * gpg: Make really sure that --verify-files always returns an error
  * gpg: Fix key listing --with-secret if a pattern is given
  * gpg: Fix detection of certain keys used as default-key
  * gpg: Fix default-key selection when a card is available
  * gpg: Fix key expiration and key usage for keys created with a
    creation date of zero
  * gpgsm: Fix import of some CR,LF terminated certificates
  * gpg: New options --include-key-block and --auto-key-import to
    allow encrypted replies after an initial signed message
  * gpg: Allow the use of a fingerprint with --trusted-key
  * gpg: New property "fpr" for use by --export-filter
  * scdaemon: Disable the pinpad if a KDF DO is used
  * dirmngr: Improve finding OCSP certificates
- drop gpg2-gcc10-build-fno-common.patch, upstream</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588248000">- Fix gpgme and gpgme-qt builds on gpg2 2.2.20 update [bsc#1170811]
- Refresh patches:
  * gnupg-2.2.8-files-are-digests.patch
  * gnupg-add_legacy_FIPS_mode_option.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590062400">- Fix warning: agent returned different signature type ssh-rsa
  * The gpg-agent's ssh-agent does not handle flags in signing
    requests properly [bsc#1161268, bsc#1172308]
  * Add gnupg-gpg-agent-ssh-agent.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594296000">- GnuPG 2.2.21:
  * gpg: Improve symmetric decryption speed by about 25%
  * gpg: Support decryption of AEAD encrypted data packets
  * gpg: Add option --no-include-key-block
  * gpg: Allow for extra padding in ECDH
  * gpg: Only a single pinentry is shown for symmetric encryption if
    the pinentry supports this
  * gpg: Print a note if no keys are given to --delete-key
  * gpg,gpgsm: The ridiculous passphrase quality bar is not anymore
    shown
  * gpgsm: Certificates without a CRL distribution point are now
    considered valid without looking up a CRL. The new option
  - -enable-issuer-based-crl-check can be used to revert to the
    former behaviour
  * gpgsm: Support rsaPSS signature verification
  * gpgsm: Unless CRL checking is disabled lookup a missing issuer
    certificate using the certificate's authorityInfoAccess
  * gpgsm: Print the certificate's serial number also in decimal
    notation
  * gpgsm: Fix possible NULL-deref in messages of --gen-key
  * scd: Support the CardOS 5 based D-Trust Card 3.1
  * dirmngr: Allow http URLs with "LOOKUP --url"
  * wkd: Take name of sendmail from configure. Fixes an OpenBSD
    specific bug</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1594728000">- Fix regression in latest gpg2 that makes gpgme fail to build [bsc#1174007]
- Add gnupg-gpgme-t-encrypt-sym.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1598961600">- GnuPG 2.2.22:
  * gpg: Change the default key algorithm to rsa3072
  * gpg: Add regular expression support for Trust Signatures on
    all platforms
  * gpg: Ignore --personal-digest-prefs for ECDSA keys
  * gpgsm: Make rsaPSS a de-vs compliant scheme
  * gpgsm: Show also the SHA256 fingerprint in key listings
  * gpgsm: Do not require a default keyring for --gpgconf-list
  * gpg-agent: Default to extended key format and record the
    creation time of keys
    Add new option --disable-extended-key-format
  * gpg-agent: Support the WAYLAND_DISPLAY envvar
  * gpg-agent: Allow using --gpgconf-list even if HOME does not
    exist
  * gpg-agent: Make the Pinentry work even if the envvar TERM is
    set to the empty string
  * scdaemon: Add a workaround for Gnuk tokens &lt;= 2.15 which
    wrongly incremented the error counter when using the
    "verify" command of "gpg --edit-key" with only the signature
    key being present
  * dirmngr: Better handle systems with disabled IPv6
  * gpgpslit: Install tool.  It was not installed in the past to
    avoid conflicts with the version installed by GnuPG 1.4
  * gpgtar: Make --files-from and --null work as documented
- drop gnupg-gpgme-t-encrypt-sym.patch, upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1599048000">- Fix segv importing certain keys (e.g. ed25519). [bsc#1176034]
- Add gnupg-2.2.22-fix-segv-import-keys.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599134400">- GnuPG 2.2.23:
  * gpg: fix AHEAD preference list overflow boo#1176034 /  CVE-2020-25125
  * gpg: fix possible segv in the key cleaning code
  * gpgsm: fix a minor RFC2253 parser gub
  * scdaemon: Fix a PIN verify failure on certain OpenPGP card
    implementations</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1605614400">- GnuPG 2.2.24:
  * gpg: New command --quick-revoke-sig
  * gpg: Do not use weak digest algos if selected by recipient
    preference during sign+encrypt
  * gpg: Switch to AES256 for symmetric encryption in de-vs mode
  * gpg: Silence weak digest warnings with --quiet
  * gpg: Print new status line CANCELED_BY_USER for a cancel during
    symmetric encryption
  * gpg: Fix the encrypt+sign hash algo preference selection for
    ECDSA.  This is in particular needed for keys created from
    existing smartcard based keys
  * agent: Fix secret key import of GnuPG 2.3 generated Ed25519
    keys
  * agent: Keep some permissions of private-keys-v1.d
  * dirmngr: Align sks-keyservers.netCA.pem use between ntbtls and
    gnutls builds
  * dirmngr: Fix the pool keyserver case for a single host in the
    pool
  * scd: Fix the use case of verify_chv2 by CHECKPIN
  * scd: Various improvements to the ccid-driver
  * scd: Minor fixes for Yubikey
  * gpgconf: New option --show-versions
  * i18n: Complete overhaul and completion of the Italian
    translation</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606132800">- GnuPG 2.2.25:
  * scd: Fix regression in 2.2.24 requiring gpg --card-status
    before signing or decrypting
  * gpgsm: Using Libksba 1.5.0 signatures with a rarely used
    combination of attributes can now be verified</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1610452800">- GnuPG 2.2.27:
  * gpgconf: Fix case with neither local nor global gpg.conf
  * gpgconf: Fix description of two new options
- includes changes from 2.2.26:
  * gpg: New AKL method "ntds"
  * gpg: Fix --trusted-key with fingerprint arg
  * scd: Fix writing of ECC keys to an OpenPGP card
  * scd: Make an USB error fix specific to SPR532 readers
  * dirmngr: With new LDAP keyservers store the new attributes.
    Never store the useless pgpSignerID. Fix a long standing
    bug storing some keys on an ldap server.
  * dirmngr: Support the new Active Direcory LDAP schema for
    keyservers
  * dirmngr: Allow LDAP OpenPGP searches via fingerprint
  * dirmngr: Do not block other threads during keyserver LDAP calls
  * Support global configuration files
  * Fix the iconv fallback handling to UTF-8</changelog>
  <changelog author="pmonreal@suse.com" date="1613995200">- Update gpg2 for SLE15-SP3 [jsc#SLE-17559, bsc#1182572]
- Remove patches fixed upstream:
  * gnupg-gpg-agent-ssh-agent.patch
  * gnupg-2.2.22-fix-segv-import-keys.patch
  * gnupg-Allow-redirection-from-https-to-http-for-CRLs.patch
  * gnupg-CRL-fetching-via-https.patch
  * gnupg-CVE-2018-1000858.patch
  * gnupg-CVE-2018-12020.patch
  * gnupg-CVE-2019-13050_0_of_5.patch
  * gnupg-CVE-2019-13050_1_of_5.patch
  * gnupg-CVE-2019-13050_2_of_5.patch
  * gnupg-CVE-2019-13050_3_of_5.patch
  * gnupg-CVE-2019-13050_4_of_5.patch
  * gnupg-CVE-2019-13050_5_of_5.patch
  * gnupg-CVE-2019-14855.patch
- Update gpg2.keyring</changelog>
  <changelog author="meissner@suse.com" date="1654689600">- gnupg-detect_FIPS_mode.patch: use AES as default cipher instead
  of 3DES if we are in FIPS mode. (bsc#1196125)</changelog>
  <changelog author="david.anes@suse.com" date="1658145600">- Security fix [CVE-2022-34903, bsc#1201225]
  - Vulnerable to status injection
  - Added patch gnupg-CVE-2022-34903.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1700654400">- Suppress error message on trial reading as PEM format when using
  dirmngr to validate broken DER encoded files (bsc#1217212)
  * Add patches:
  - gnupg-dirmngr-Suppress-error-message-on-trial-reading-as-PEM.patch
  - gnupg-dirmngr-Clear-the-error-count-to-try-certificate-as-binary.patch</changelog>
</package>
<package pkgid="1ed24e5b0813cd7dd16d072dd035171cd30f4e7ff015348f7ee360407b0eec9c" name="gpg2" arch="src">
  <version epoch="0" ver="2.2.27" rel="150300.3.8.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1575720000">- update to 2.2.19:
  * gpg: Fix double free when decrypting for hidden recipients
  * gpg: Use auto-key-locate for encryption even for mail addressed
    given with angle brackets
  * gpgsm: Add special case for certain expired intermediate
    certificates</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578571200">- Security fix: [bsc#1157900, CVE-2019-14855, jsc#SLE-16534]
  * Web of Trust forgeries using collisions in SHA-1 signatures
  * Ignore all SHA-1 signatures in 3rd party key signatures.
  * Forbid the creation of SHA-1 third-party key signatures.
  * Add option --allow-weak-key-signatures
- Add gnupg-CVE-2019-14855.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578657600">- Accept key updates even without UIDs [bsc#1143158]
- Add patches:
  * gnupg-allow-import-of-previously-known-keys-even-without-UIDs.patch
  * gnupg-accept_subkeys_with_a_good_revocation_but_no_self-sig_during_import.patch
  * gnupg-add-test-cases-for-import-without-uid.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582113600">- Fix build with GCC-10: [bsc#1160394]
  * Always use EXTERN_UNLESS_MAIN_MODULE pattern
  * In GCC-10, the default option -fcommon will change to -fno-common
- Add gpg2-gcc10-build-fno-common.patch</changelog>
  <changelog author="fvogt@suse.com" date="1584100800">- Split dirmngr into a subpackage to avoid a hard dependency of
  gpg2 on libgnutls</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1584705600">- GnuPG 2.2.20:
  * Protect the error counter against overflow to guarantee that the
    tools can't be tricked into returning success after an error
  * gpg: Make really sure that --verify-files always returns an error
  * gpg: Fix key listing --with-secret if a pattern is given
  * gpg: Fix detection of certain keys used as default-key
  * gpg: Fix default-key selection when a card is available
  * gpg: Fix key expiration and key usage for keys created with a
    creation date of zero
  * gpgsm: Fix import of some CR,LF terminated certificates
  * gpg: New options --include-key-block and --auto-key-import to
    allow encrypted replies after an initial signed message
  * gpg: Allow the use of a fingerprint with --trusted-key
  * gpg: New property "fpr" for use by --export-filter
  * scdaemon: Disable the pinpad if a KDF DO is used
  * dirmngr: Improve finding OCSP certificates
- drop gpg2-gcc10-build-fno-common.patch, upstream</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588248000">- Fix gpgme and gpgme-qt builds on gpg2 2.2.20 update [bsc#1170811]
- Refresh patches:
  * gnupg-2.2.8-files-are-digests.patch
  * gnupg-add_legacy_FIPS_mode_option.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590062400">- Fix warning: agent returned different signature type ssh-rsa
  * The gpg-agent's ssh-agent does not handle flags in signing
    requests properly [bsc#1161268, bsc#1172308]
  * Add gnupg-gpg-agent-ssh-agent.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594296000">- GnuPG 2.2.21:
  * gpg: Improve symmetric decryption speed by about 25%
  * gpg: Support decryption of AEAD encrypted data packets
  * gpg: Add option --no-include-key-block
  * gpg: Allow for extra padding in ECDH
  * gpg: Only a single pinentry is shown for symmetric encryption if
    the pinentry supports this
  * gpg: Print a note if no keys are given to --delete-key
  * gpg,gpgsm: The ridiculous passphrase quality bar is not anymore
    shown
  * gpgsm: Certificates without a CRL distribution point are now
    considered valid without looking up a CRL. The new option
  - -enable-issuer-based-crl-check can be used to revert to the
    former behaviour
  * gpgsm: Support rsaPSS signature verification
  * gpgsm: Unless CRL checking is disabled lookup a missing issuer
    certificate using the certificate's authorityInfoAccess
  * gpgsm: Print the certificate's serial number also in decimal
    notation
  * gpgsm: Fix possible NULL-deref in messages of --gen-key
  * scd: Support the CardOS 5 based D-Trust Card 3.1
  * dirmngr: Allow http URLs with "LOOKUP --url"
  * wkd: Take name of sendmail from configure. Fixes an OpenBSD
    specific bug</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1594728000">- Fix regression in latest gpg2 that makes gpgme fail to build [bsc#1174007]
- Add gnupg-gpgme-t-encrypt-sym.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1598961600">- GnuPG 2.2.22:
  * gpg: Change the default key algorithm to rsa3072
  * gpg: Add regular expression support for Trust Signatures on
    all platforms
  * gpg: Ignore --personal-digest-prefs for ECDSA keys
  * gpgsm: Make rsaPSS a de-vs compliant scheme
  * gpgsm: Show also the SHA256 fingerprint in key listings
  * gpgsm: Do not require a default keyring for --gpgconf-list
  * gpg-agent: Default to extended key format and record the
    creation time of keys
    Add new option --disable-extended-key-format
  * gpg-agent: Support the WAYLAND_DISPLAY envvar
  * gpg-agent: Allow using --gpgconf-list even if HOME does not
    exist
  * gpg-agent: Make the Pinentry work even if the envvar TERM is
    set to the empty string
  * scdaemon: Add a workaround for Gnuk tokens &lt;= 2.15 which
    wrongly incremented the error counter when using the
    "verify" command of "gpg --edit-key" with only the signature
    key being present
  * dirmngr: Better handle systems with disabled IPv6
  * gpgpslit: Install tool.  It was not installed in the past to
    avoid conflicts with the version installed by GnuPG 1.4
  * gpgtar: Make --files-from and --null work as documented
- drop gnupg-gpgme-t-encrypt-sym.patch, upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1599048000">- Fix segv importing certain keys (e.g. ed25519). [bsc#1176034]
- Add gnupg-2.2.22-fix-segv-import-keys.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599134400">- GnuPG 2.2.23:
  * gpg: fix AHEAD preference list overflow boo#1176034 /  CVE-2020-25125
  * gpg: fix possible segv in the key cleaning code
  * gpgsm: fix a minor RFC2253 parser gub
  * scdaemon: Fix a PIN verify failure on certain OpenPGP card
    implementations</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1605614400">- GnuPG 2.2.24:
  * gpg: New command --quick-revoke-sig
  * gpg: Do not use weak digest algos if selected by recipient
    preference during sign+encrypt
  * gpg: Switch to AES256 for symmetric encryption in de-vs mode
  * gpg: Silence weak digest warnings with --quiet
  * gpg: Print new status line CANCELED_BY_USER for a cancel during
    symmetric encryption
  * gpg: Fix the encrypt+sign hash algo preference selection for
    ECDSA.  This is in particular needed for keys created from
    existing smartcard based keys
  * agent: Fix secret key import of GnuPG 2.3 generated Ed25519
    keys
  * agent: Keep some permissions of private-keys-v1.d
  * dirmngr: Align sks-keyservers.netCA.pem use between ntbtls and
    gnutls builds
  * dirmngr: Fix the pool keyserver case for a single host in the
    pool
  * scd: Fix the use case of verify_chv2 by CHECKPIN
  * scd: Various improvements to the ccid-driver
  * scd: Minor fixes for Yubikey
  * gpgconf: New option --show-versions
  * i18n: Complete overhaul and completion of the Italian
    translation</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606132800">- GnuPG 2.2.25:
  * scd: Fix regression in 2.2.24 requiring gpg --card-status
    before signing or decrypting
  * gpgsm: Using Libksba 1.5.0 signatures with a rarely used
    combination of attributes can now be verified</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1610452800">- GnuPG 2.2.27:
  * gpgconf: Fix case with neither local nor global gpg.conf
  * gpgconf: Fix description of two new options
- includes changes from 2.2.26:
  * gpg: New AKL method "ntds"
  * gpg: Fix --trusted-key with fingerprint arg
  * scd: Fix writing of ECC keys to an OpenPGP card
  * scd: Make an USB error fix specific to SPR532 readers
  * dirmngr: With new LDAP keyservers store the new attributes.
    Never store the useless pgpSignerID. Fix a long standing
    bug storing some keys on an ldap server.
  * dirmngr: Support the new Active Direcory LDAP schema for
    keyservers
  * dirmngr: Allow LDAP OpenPGP searches via fingerprint
  * dirmngr: Do not block other threads during keyserver LDAP calls
  * Support global configuration files
  * Fix the iconv fallback handling to UTF-8</changelog>
  <changelog author="pmonreal@suse.com" date="1613995200">- Update gpg2 for SLE15-SP3 [jsc#SLE-17559, bsc#1182572]
- Remove patches fixed upstream:
  * gnupg-gpg-agent-ssh-agent.patch
  * gnupg-2.2.22-fix-segv-import-keys.patch
  * gnupg-Allow-redirection-from-https-to-http-for-CRLs.patch
  * gnupg-CRL-fetching-via-https.patch
  * gnupg-CVE-2018-1000858.patch
  * gnupg-CVE-2018-12020.patch
  * gnupg-CVE-2019-13050_0_of_5.patch
  * gnupg-CVE-2019-13050_1_of_5.patch
  * gnupg-CVE-2019-13050_2_of_5.patch
  * gnupg-CVE-2019-13050_3_of_5.patch
  * gnupg-CVE-2019-13050_4_of_5.patch
  * gnupg-CVE-2019-13050_5_of_5.patch
  * gnupg-CVE-2019-14855.patch
- Update gpg2.keyring</changelog>
  <changelog author="meissner@suse.com" date="1654689600">- gnupg-detect_FIPS_mode.patch: use AES as default cipher instead
  of 3DES if we are in FIPS mode. (bsc#1196125)</changelog>
  <changelog author="david.anes@suse.com" date="1658145600">- Security fix [CVE-2022-34903, bsc#1201225]
  - Vulnerable to status injection
  - Added patch gnupg-CVE-2022-34903.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1700654400">- Suppress error message on trial reading as PEM format when using
  dirmngr to validate broken DER encoded files (bsc#1217212)
  * Add patches:
  - gnupg-dirmngr-Suppress-error-message-on-trial-reading-as-PEM.patch
  - gnupg-dirmngr-Clear-the-error-count-to-try-certificate-as-binary.patch</changelog>
</package>
<package pkgid="4b6099a7710c559a83df70595e11054230d122c4b6be604b7bfba48e76f5e97f" name="gpg2" arch="x86_64">
  <version epoch="0" ver="2.2.27" rel="150300.3.8.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1575720000">- update to 2.2.19:
  * gpg: Fix double free when decrypting for hidden recipients
  * gpg: Use auto-key-locate for encryption even for mail addressed
    given with angle brackets
  * gpgsm: Add special case for certain expired intermediate
    certificates</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578571200">- Security fix: [bsc#1157900, CVE-2019-14855, jsc#SLE-16534]
  * Web of Trust forgeries using collisions in SHA-1 signatures
  * Ignore all SHA-1 signatures in 3rd party key signatures.
  * Forbid the creation of SHA-1 third-party key signatures.
  * Add option --allow-weak-key-signatures
- Add gnupg-CVE-2019-14855.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578657600">- Accept key updates even without UIDs [bsc#1143158]
- Add patches:
  * gnupg-allow-import-of-previously-known-keys-even-without-UIDs.patch
  * gnupg-accept_subkeys_with_a_good_revocation_but_no_self-sig_during_import.patch
  * gnupg-add-test-cases-for-import-without-uid.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582113600">- Fix build with GCC-10: [bsc#1160394]
  * Always use EXTERN_UNLESS_MAIN_MODULE pattern
  * In GCC-10, the default option -fcommon will change to -fno-common
- Add gpg2-gcc10-build-fno-common.patch</changelog>
  <changelog author="fvogt@suse.com" date="1584100800">- Split dirmngr into a subpackage to avoid a hard dependency of
  gpg2 on libgnutls</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1584705600">- GnuPG 2.2.20:
  * Protect the error counter against overflow to guarantee that the
    tools can't be tricked into returning success after an error
  * gpg: Make really sure that --verify-files always returns an error
  * gpg: Fix key listing --with-secret if a pattern is given
  * gpg: Fix detection of certain keys used as default-key
  * gpg: Fix default-key selection when a card is available
  * gpg: Fix key expiration and key usage for keys created with a
    creation date of zero
  * gpgsm: Fix import of some CR,LF terminated certificates
  * gpg: New options --include-key-block and --auto-key-import to
    allow encrypted replies after an initial signed message
  * gpg: Allow the use of a fingerprint with --trusted-key
  * gpg: New property "fpr" for use by --export-filter
  * scdaemon: Disable the pinpad if a KDF DO is used
  * dirmngr: Improve finding OCSP certificates
- drop gpg2-gcc10-build-fno-common.patch, upstream</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588248000">- Fix gpgme and gpgme-qt builds on gpg2 2.2.20 update [bsc#1170811]
- Refresh patches:
  * gnupg-2.2.8-files-are-digests.patch
  * gnupg-add_legacy_FIPS_mode_option.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590062400">- Fix warning: agent returned different signature type ssh-rsa
  * The gpg-agent's ssh-agent does not handle flags in signing
    requests properly [bsc#1161268, bsc#1172308]
  * Add gnupg-gpg-agent-ssh-agent.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594296000">- GnuPG 2.2.21:
  * gpg: Improve symmetric decryption speed by about 25%
  * gpg: Support decryption of AEAD encrypted data packets
  * gpg: Add option --no-include-key-block
  * gpg: Allow for extra padding in ECDH
  * gpg: Only a single pinentry is shown for symmetric encryption if
    the pinentry supports this
  * gpg: Print a note if no keys are given to --delete-key
  * gpg,gpgsm: The ridiculous passphrase quality bar is not anymore
    shown
  * gpgsm: Certificates without a CRL distribution point are now
    considered valid without looking up a CRL. The new option
  - -enable-issuer-based-crl-check can be used to revert to the
    former behaviour
  * gpgsm: Support rsaPSS signature verification
  * gpgsm: Unless CRL checking is disabled lookup a missing issuer
    certificate using the certificate's authorityInfoAccess
  * gpgsm: Print the certificate's serial number also in decimal
    notation
  * gpgsm: Fix possible NULL-deref in messages of --gen-key
  * scd: Support the CardOS 5 based D-Trust Card 3.1
  * dirmngr: Allow http URLs with "LOOKUP --url"
  * wkd: Take name of sendmail from configure. Fixes an OpenBSD
    specific bug</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1594728000">- Fix regression in latest gpg2 that makes gpgme fail to build [bsc#1174007]
- Add gnupg-gpgme-t-encrypt-sym.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1598961600">- GnuPG 2.2.22:
  * gpg: Change the default key algorithm to rsa3072
  * gpg: Add regular expression support for Trust Signatures on
    all platforms
  * gpg: Ignore --personal-digest-prefs for ECDSA keys
  * gpgsm: Make rsaPSS a de-vs compliant scheme
  * gpgsm: Show also the SHA256 fingerprint in key listings
  * gpgsm: Do not require a default keyring for --gpgconf-list
  * gpg-agent: Default to extended key format and record the
    creation time of keys
    Add new option --disable-extended-key-format
  * gpg-agent: Support the WAYLAND_DISPLAY envvar
  * gpg-agent: Allow using --gpgconf-list even if HOME does not
    exist
  * gpg-agent: Make the Pinentry work even if the envvar TERM is
    set to the empty string
  * scdaemon: Add a workaround for Gnuk tokens &lt;= 2.15 which
    wrongly incremented the error counter when using the
    "verify" command of "gpg --edit-key" with only the signature
    key being present
  * dirmngr: Better handle systems with disabled IPv6
  * gpgpslit: Install tool.  It was not installed in the past to
    avoid conflicts with the version installed by GnuPG 1.4
  * gpgtar: Make --files-from and --null work as documented
- drop gnupg-gpgme-t-encrypt-sym.patch, upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1599048000">- Fix segv importing certain keys (e.g. ed25519). [bsc#1176034]
- Add gnupg-2.2.22-fix-segv-import-keys.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599134400">- GnuPG 2.2.23:
  * gpg: fix AHEAD preference list overflow boo#1176034 /  CVE-2020-25125
  * gpg: fix possible segv in the key cleaning code
  * gpgsm: fix a minor RFC2253 parser gub
  * scdaemon: Fix a PIN verify failure on certain OpenPGP card
    implementations</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1605614400">- GnuPG 2.2.24:
  * gpg: New command --quick-revoke-sig
  * gpg: Do not use weak digest algos if selected by recipient
    preference during sign+encrypt
  * gpg: Switch to AES256 for symmetric encryption in de-vs mode
  * gpg: Silence weak digest warnings with --quiet
  * gpg: Print new status line CANCELED_BY_USER for a cancel during
    symmetric encryption
  * gpg: Fix the encrypt+sign hash algo preference selection for
    ECDSA.  This is in particular needed for keys created from
    existing smartcard based keys
  * agent: Fix secret key import of GnuPG 2.3 generated Ed25519
    keys
  * agent: Keep some permissions of private-keys-v1.d
  * dirmngr: Align sks-keyservers.netCA.pem use between ntbtls and
    gnutls builds
  * dirmngr: Fix the pool keyserver case for a single host in the
    pool
  * scd: Fix the use case of verify_chv2 by CHECKPIN
  * scd: Various improvements to the ccid-driver
  * scd: Minor fixes for Yubikey
  * gpgconf: New option --show-versions
  * i18n: Complete overhaul and completion of the Italian
    translation</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606132800">- GnuPG 2.2.25:
  * scd: Fix regression in 2.2.24 requiring gpg --card-status
    before signing or decrypting
  * gpgsm: Using Libksba 1.5.0 signatures with a rarely used
    combination of attributes can now be verified</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1610452800">- GnuPG 2.2.27:
  * gpgconf: Fix case with neither local nor global gpg.conf
  * gpgconf: Fix description of two new options
- includes changes from 2.2.26:
  * gpg: New AKL method "ntds"
  * gpg: Fix --trusted-key with fingerprint arg
  * scd: Fix writing of ECC keys to an OpenPGP card
  * scd: Make an USB error fix specific to SPR532 readers
  * dirmngr: With new LDAP keyservers store the new attributes.
    Never store the useless pgpSignerID. Fix a long standing
    bug storing some keys on an ldap server.
  * dirmngr: Support the new Active Direcory LDAP schema for
    keyservers
  * dirmngr: Allow LDAP OpenPGP searches via fingerprint
  * dirmngr: Do not block other threads during keyserver LDAP calls
  * Support global configuration files
  * Fix the iconv fallback handling to UTF-8</changelog>
  <changelog author="pmonreal@suse.com" date="1613995200">- Update gpg2 for SLE15-SP3 [jsc#SLE-17559, bsc#1182572]
- Remove patches fixed upstream:
  * gnupg-gpg-agent-ssh-agent.patch
  * gnupg-2.2.22-fix-segv-import-keys.patch
  * gnupg-Allow-redirection-from-https-to-http-for-CRLs.patch
  * gnupg-CRL-fetching-via-https.patch
  * gnupg-CVE-2018-1000858.patch
  * gnupg-CVE-2018-12020.patch
  * gnupg-CVE-2019-13050_0_of_5.patch
  * gnupg-CVE-2019-13050_1_of_5.patch
  * gnupg-CVE-2019-13050_2_of_5.patch
  * gnupg-CVE-2019-13050_3_of_5.patch
  * gnupg-CVE-2019-13050_4_of_5.patch
  * gnupg-CVE-2019-13050_5_of_5.patch
  * gnupg-CVE-2019-14855.patch
- Update gpg2.keyring</changelog>
  <changelog author="meissner@suse.com" date="1654689600">- gnupg-detect_FIPS_mode.patch: use AES as default cipher instead
  of 3DES if we are in FIPS mode. (bsc#1196125)</changelog>
  <changelog author="david.anes@suse.com" date="1658145600">- Security fix [CVE-2022-34903, bsc#1201225]
  - Vulnerable to status injection
  - Added patch gnupg-CVE-2022-34903.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1700654400">- Suppress error message on trial reading as PEM format when using
  dirmngr to validate broken DER encoded files (bsc#1217212)
  * Add patches:
  - gnupg-dirmngr-Suppress-error-message-on-trial-reading-as-PEM.patch
  - gnupg-dirmngr-Clear-the-error-count-to-try-certificate-as-binary.patch</changelog>
</package>
<package pkgid="256e2973e46f2d04a120c3643cf363502341dc84ee2c8fd1a3b19d584eb7fc06" name="groff" arch="src">
  <version epoch="0" ver="1.22.4" rel="150400.5.2.1"/>
  <changelog author="mvyskocil@suse.com" date="1370433600">- modify groff_1.22.2-2.debian.diff - remove the part related to
  src/preproc/html/pre-html.cpp, fixes bnc#755533</changelog>
  <changelog author="werner@suse.de" date="1371470400">- Move important non-graphical macros from groff-full back to groff
  as otherwise many packages do not build anymore</changelog>
  <changelog author="werner@suse.de" date="1371470401">- Take care of mmroff.1.gz as well as of mmroff perl script</changelog>
  <changelog author="mvyskocil@suse.com" date="1372161600">- move man.local and mdoc.local from groff-full to groff
  * fixes libssh2.org testsuite</changelog>
  <changelog author="meissner@suse.com" date="1419076800">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1423051200">- Version bump to latest release 1.22.3:
  * X11 resources for `gxditview', which were previously installed in
    /usr/X11/lib/X11/app-defaults no matter which `prefix' was set, are
    now installed in appresdir=$prefix/lib/X11/app-defaults.  If
    `appresdir' is not a standard X11 resource directory, the environment
    variable XFILESEARCHPATH should be set to this path.  The standard
    default directories depends on the system `libXt'.
  * This new preprocessor (contributed by Bernd Warken) allows embedding of
    code for GNU LilyPond (http://www.lilypond.org), a music typesetter.  The
    data gets automatically processed and embedded as EPS images.
  * Bernd Warken contributed a new preprocessor to handle Perl code that can
    be evaluated and then processed by groff.
  * Another preprocessor from Bernd Warken to pretty-print Pinyin syllables
    like `guo2wang2' as `guówáng'.
  * The pdfroff utility script now activates its `--no-toc-relocation' option
    by default, unless a request similar to:
    .if !\n[PHASE] .tm pdfroff-option:set toc_relocation=enabled
    is invoked during input file processing; (`.if !\n[PHASE] ...' ensures
    that the effect of the `.tm' request is restricted to the document setup
    phase of processing, as pdfroff sets it to 1 or 2 in the output phase,
    but leaves it unset in the setup phase).
    The bundled `spdf.tmac' macro package, which implicitly activates
    `-mpdfmark' for `ms' macro users, ensures that TOC relocation is
    appropriately enabled, when the `.TC' macro is invoked.
  * The -mom macro package now has full support for eqn, pic, and tbl, as well
    as captioning and labelling of pdf images and preprocessor output.  Lists
    of Figures, Equations, and Tables can now be autogenerated.  PDF_IMAGE has
    a new FRAME option.
  * A French introduction to the -me macro package has been added (file
    `meintro_fr.me').
  * In -mdoc, command %C is now available, providing a city or place
    reference.
- Refreshed patches:
  * groff-1.21-CVE-2009-5081.patch
  * groff-1.21-groffer-libexecdir.patch
  * groff-force-locale-usage.patch
- Replaced patches:
  * deleted groff_1.22.2-2.debian.diff
  * added groff_1.22.3-1.debian.diff
- New patches:
  * groff-multi-thread.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1469102400">- Add patch for bnc#989903 and move all scripts from libdir to
  libexecdir</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1513252800">- Replace xorg-x11-devel buildrequires by the needed individual
  libraries</changelog>
  <changelog author="tchvatal@suse.com" date="1513598400">- Set the license to GPL-3.0+ as per COPYING</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="bwiedemann@suse.com" date="1540900800">- add groff-reproducible-mdate.patch and groff-use-SDE.patch to allow
  to override build time to make package build reproducible (boo#1047218)</changelog>
  <changelog author="tchvatal@suse.com" date="1546516800">- Switch to multibuild in order to avoid having to manage 2
  differentiating spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1546603200">- Version update to 1.22.4:
  * Many fixes for hyphenation helping
  * Various build tweaks
  * See the NEWS file for details
- New signature -&gt; update keyring file
- Remove upstream merged patches:
  * groff-multi-thread.patch
  * groff-reproducible-mdate.patch
  * groff-use-SDE.patch
- Remove groff-1.21-groffer-libexecdir.patch as upstream redid
  the autotools rules and uses configure option now
- Rebase patch groff-1.20.1-deunicode.patch
- Rebase patch groff-1.21-CVE-2009-5081.patch
- Drop patch groff-1.21-CVE-2009-5080.patch as it seems the shell
  script now properly safeguards against this
- Rebase patch 0002-documentation-for-the-locale-keyword.patch
- Recreate groff-force-locale-usage.patch for autotools buildsystem
- Add patch 0004-don-t-use-usr-bin-env-in-shebang.patch
- Remove groff_1.22.3-1.debian.diff and replace it with split
  debian patches:
  * bash-scripts.patch
  * sort-perl-hash-keys.patch</changelog>
  <changelog author="jengelh@inai.de" date="1547294400">- Trim tm signs</changelog>
  <changelog author="i@marguerite.su" date="1550491200">- install essential build files needed by ghostscript-fonts-grops</changelog>
  <changelog author="mcepl@suse.com" date="1576497600">- Add man page roff(7) to alternatives to avoid conflict with
  mandoc.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- don't recommend groff-full as that would pull in X etc by default.
  Instead use packageand on groff and ghostscript-library to only install
  groff-full when other deps are already there.</changelog>
  <changelog author="dimstar@opensuse.org" date="1602331200">- Don't create recursive link 'current' inside
  /usr/share/groff/%{version}.</changelog>
  <changelog author="sbrabec@suse.com" date="1638273600">- Remove /usr/share/groff/current from groff-full. It creates file
  conflicts during version upgrade (bsc#1192195#c8).</changelog>
  <changelog author="sbrabec@suse.com" date="1644235200">- Do not fail with rpm --excludedocs (bsc#1192195).</changelog>
</package>
<package pkgid="d3b7e3102f24be3b2c41420cb7b1bebc640b51f68efa1012de36b8474547d344" name="groff" arch="x86_64">
  <version epoch="0" ver="1.22.4" rel="150400.5.2.1"/>
  <changelog author="meissner@suse.com" date="1419076800">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1423051200">- Version bump to latest release 1.22.3:
  * X11 resources for `gxditview', which were previously installed in
    /usr/X11/lib/X11/app-defaults no matter which `prefix' was set, are
    now installed in appresdir=$prefix/lib/X11/app-defaults.  If
    `appresdir' is not a standard X11 resource directory, the environment
    variable XFILESEARCHPATH should be set to this path.  The standard
    default directories depends on the system `libXt'.
  * This new preprocessor (contributed by Bernd Warken) allows embedding of
    code for GNU LilyPond (http://www.lilypond.org), a music typesetter.  The
    data gets automatically processed and embedded as EPS images.
  * Bernd Warken contributed a new preprocessor to handle Perl code that can
    be evaluated and then processed by groff.
  * Another preprocessor from Bernd Warken to pretty-print Pinyin syllables
    like `guo2wang2' as `guówáng'.
  * The pdfroff utility script now activates its `--no-toc-relocation' option
    by default, unless a request similar to:
    .if !\n[PHASE] .tm pdfroff-option:set toc_relocation=enabled
    is invoked during input file processing; (`.if !\n[PHASE] ...' ensures
    that the effect of the `.tm' request is restricted to the document setup
    phase of processing, as pdfroff sets it to 1 or 2 in the output phase,
    but leaves it unset in the setup phase).
    The bundled `spdf.tmac' macro package, which implicitly activates
    `-mpdfmark' for `ms' macro users, ensures that TOC relocation is
    appropriately enabled, when the `.TC' macro is invoked.
  * The -mom macro package now has full support for eqn, pic, and tbl, as well
    as captioning and labelling of pdf images and preprocessor output.  Lists
    of Figures, Equations, and Tables can now be autogenerated.  PDF_IMAGE has
    a new FRAME option.
  * A French introduction to the -me macro package has been added (file
    `meintro_fr.me').
  * In -mdoc, command %C is now available, providing a city or place
    reference.
- Refreshed patches:
  * groff-1.21-CVE-2009-5081.patch
  * groff-1.21-groffer-libexecdir.patch
  * groff-force-locale-usage.patch
- Replaced patches:
  * deleted groff_1.22.2-2.debian.diff
  * added groff_1.22.3-1.debian.diff
- New patches:
  * groff-multi-thread.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1469102400">- Add patch for bnc#989903 and move all scripts from libdir to
  libexecdir</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1513252800">- Replace xorg-x11-devel buildrequires by the needed individual
  libraries</changelog>
  <changelog author="tchvatal@suse.com" date="1513598400">- Set the license to GPL-3.0+ as per COPYING</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="bwiedemann@suse.com" date="1540900800">- add groff-reproducible-mdate.patch and groff-use-SDE.patch to allow
  to override build time to make package build reproducible (boo#1047218)</changelog>
  <changelog author="tchvatal@suse.com" date="1546516800">- Switch to multibuild in order to avoid having to manage 2
  differentiating spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1546603200">- Version update to 1.22.4:
  * Many fixes for hyphenation helping
  * Various build tweaks
  * See the NEWS file for details
- New signature -&gt; update keyring file
- Remove upstream merged patches:
  * groff-multi-thread.patch
  * groff-reproducible-mdate.patch
  * groff-use-SDE.patch
- Remove groff-1.21-groffer-libexecdir.patch as upstream redid
  the autotools rules and uses configure option now
- Rebase patch groff-1.20.1-deunicode.patch
- Rebase patch groff-1.21-CVE-2009-5081.patch
- Drop patch groff-1.21-CVE-2009-5080.patch as it seems the shell
  script now properly safeguards against this
- Rebase patch 0002-documentation-for-the-locale-keyword.patch
- Recreate groff-force-locale-usage.patch for autotools buildsystem
- Add patch 0004-don-t-use-usr-bin-env-in-shebang.patch
- Remove groff_1.22.3-1.debian.diff and replace it with split
  debian patches:
  * bash-scripts.patch
  * sort-perl-hash-keys.patch</changelog>
  <changelog author="jengelh@inai.de" date="1547294400">- Trim tm signs</changelog>
  <changelog author="i@marguerite.su" date="1550491200">- install essential build files needed by ghostscript-fonts-grops</changelog>
  <changelog author="mcepl@suse.com" date="1576497600">- Add man page roff(7) to alternatives to avoid conflict with
  mandoc.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- don't recommend groff-full as that would pull in X etc by default.
  Instead use packageand on groff and ghostscript-library to only install
  groff-full when other deps are already there.</changelog>
  <changelog author="dimstar@opensuse.org" date="1602331200">- Don't create recursive link 'current' inside
  /usr/share/groff/%{version}.</changelog>
  <changelog author="sbrabec@suse.com" date="1638273600">- Remove /usr/share/groff/current from groff-full. It creates file
  conflicts during version upgrade (bsc#1192195#c8).</changelog>
  <changelog author="sbrabec@suse.com" date="1644235200">- Do not fail with rpm --excludedocs (bsc#1192195).</changelog>
</package>
<package pkgid="c228b81978153134f4e30a003f49148fd3e22f3d24a1739ef6e89fb40fdaa0c1" name="grub2" arch="aarch64">
  <version epoch="0" ver="2.06" rel="150500.29.11.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="1e104d9466e952af7ca2faddd6184cd2916725846ac7b873c214a1681c7b4d2c" name="grub2" arch="s390x">
  <version epoch="0" ver="2.06" rel="150500.29.11.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="92544a84ad3e84c1cf57aab6e3c0509d82290825a674d1c357a79b8f5bb1fb06" name="grub2" arch="src">
  <version epoch="0" ver="2.06" rel="150500.29.11.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="9cbfdb1e0000e0808b9fbae0586799ab054b448328a9ad8cdd6120f0ab4f7ee2" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.06" rel="150500.29.11.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="feb43575a44c41c6ae31d3b44e8ba9c6d3e511e10e727de09da748c525c69c73" name="grub2" arch="aarch64">
  <version epoch="0" ver="2.06" rel="150500.29.13.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="07ae8eb22b86b936737e1e7034744005539690ef417d2ae5cdeed6ebd5e732af" name="grub2" arch="s390x">
  <version epoch="0" ver="2.06" rel="150500.29.13.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="52fc247c9becf2b583a644b3cf6ec53de7bac8816fd3a46e68c78548083b6f12" name="grub2" arch="src">
  <version epoch="0" ver="2.06" rel="150500.29.13.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="b869aa4c77228158e5438c9854456a394e2ea3039908b112befc7e14a28888f6" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.06" rel="150500.29.13.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="5df8781b0ede4cad2fe442f5044b4695f8ffe970af56b796476196a73e87a99b" name="grub2" arch="aarch64">
  <version epoch="0" ver="2.06" rel="150500.29.16.1"/>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
</package>
<package pkgid="748f8323110fd2cba67ecffd96fcffb17214476c0b1020444e12cecbd586abb5" name="grub2" arch="s390x">
  <version epoch="0" ver="2.06" rel="150500.29.16.1"/>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
</package>
<package pkgid="be84dd05b63bb56bcbff21cdbe5f0e8f5793b33808f1e98c733e458fd24ba789" name="grub2" arch="src">
  <version epoch="0" ver="2.06" rel="150500.29.16.1"/>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
</package>
<package pkgid="afa6af57fbca58013827cdb4f6f04c92c4bc5b9770f1d2d0d2523b6196924c02" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.06" rel="150500.29.16.1"/>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
</package>
<package pkgid="ce22197a7b677eb6934a8903afe3def0ad3069a28c463ed498ffee8d42e5456f" name="grub2" arch="aarch64">
  <version epoch="0" ver="2.06" rel="150500.29.8.1"/>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
</package>
<package pkgid="55cb4b88f21d8fc6648344775a4085830869931772ef26d0e935e86242dbd5b1" name="grub2" arch="s390x">
  <version epoch="0" ver="2.06" rel="150500.29.8.1"/>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
</package>
<package pkgid="d4066cedcd93c0b8bc934408ef56199069ed750dbc47332e1f16d5e0040d625f" name="grub2" arch="src">
  <version epoch="0" ver="2.06" rel="150500.29.8.1"/>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
</package>
<package pkgid="9fcf301cd8dfad6632372bcc5d8560f12559b193a6e226a3fd28cd2aa17ad2cd" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.06" rel="150500.29.8.1"/>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
</package>
<package pkgid="220278ba80d706a7364a59932bf56ce1e594efbf218b5d03e0e5b64396218682" name="grub2-arm64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.11.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="8e3cb0cd6b58d3d08321cc7532f430cdba21e2839bc82db7416755e2c39a72d0" name="grub2-arm64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.13.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="441daad3fba8f1249d0a36abf9589d544d36e092749158344b3412c8431f2562" name="grub2-arm64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.16.1"/>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
</package>
<package pkgid="61d8f4fd4aacca0b5c2c4c04af3bd1a5ab652036b12a4b639e39eb37a9b2e41b" name="grub2-arm64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.8.1"/>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
</package>
<package pkgid="0851d06be61f41d26473998dfb224543b9109b0ea71fd1be90e59b1b20ee242a" name="grub2-i386-pc" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.11.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="0b517b87e8d4c86be29866d30c7fa0c1473cb640ccdb480309de04e373db8ce4" name="grub2-i386-pc" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.13.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="2420a4dc6d083812c9bf67bba0ab6803e88c787dd70384b84f762a83dca0db8f" name="grub2-i386-pc" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.16.1"/>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
</package>
<package pkgid="e4675a06907138dcffad11e1b0e2a8362160643437802b5c2f768ca35d2920c6" name="grub2-i386-pc" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.8.1"/>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
</package>
<package pkgid="d2986a55ab9aa5ed044668d2df87768522311ac5d4b34e0d82418da67b02d0cd" name="grub2-s390x-emu" arch="s390x">
  <version epoch="0" ver="2.06" rel="150500.29.11.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="24a662ff2bd77b87b17b91dc84cc3d2e441a99326e70cd84e10639953fd4dc73" name="grub2-s390x-emu" arch="s390x">
  <version epoch="0" ver="2.06" rel="150500.29.13.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="38eda49eb1c2d9e5121a3f9b5552172895c35b2a77974369d064f1c340c8ba00" name="grub2-s390x-emu" arch="s390x">
  <version epoch="0" ver="2.06" rel="150500.29.16.1"/>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
</package>
<package pkgid="0eed197b9aae2a903e61bb5c6b86c503ae5872c3500cbfae8633fa2805ca35a8" name="grub2-s390x-emu" arch="s390x">
  <version epoch="0" ver="2.06" rel="150500.29.8.1"/>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
</package>
<package pkgid="dbd3906c3033991bbff9ea60a6c371d91b7e587910ee025a12eb9cc9d484f5f7" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.11.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="09af4f7191984210e97e68dc67e251f6e501e2ed9e977d98caa58ac664a2295e" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.13.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="be57b379ad16c39ffbff99ad84ffccf11feaebc3d17de5acfa126ba4622b933e" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.16.1"/>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
</package>
<package pkgid="812cf04648769b5c4c3b942f2e644916d9fbed488d3d212094c1b0333df88d34" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.8.1"/>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
</package>
<package pkgid="9c023e7c22c3bad743bc79267c4b3e9cbe3ec4f95f41f079203198f73de21412" name="grub2-x86_64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.11.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="263ddbbe03ec7f4ae73710254d87bbd97d1dcaa17ee5f72854012862efeb75c8" name="grub2-x86_64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.13.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="6c436c9249b642493552340b46d86f521e332a175f4f342d93d61d6222672040" name="grub2-x86_64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.16.1"/>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
</package>
<package pkgid="b0b3ec2e850805fc7685231b8a7ab92fbefb5ce7d9e182eb381df41a7aad5f0f" name="grub2-x86_64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.8.1"/>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
</package>
<package pkgid="8727b1abc0d2885f62ecaa9689588860b9f0435abe6ea2d0a0dcc11a7f687489" name="grub2-x86_64-xen" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.11.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="4c8f81cc26c478baa10a59b28278cfdc1fe4186fcd8846ffe729239f0dac87b8" name="grub2-x86_64-xen" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.13.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="4ecc5840adedabd050d28e103bd4bf532a655a88c668d30fd8a4632b31e09f7f" name="grub2-x86_64-xen" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.16.1"/>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
</package>
<package pkgid="ef559f657f2337593e5823d8da014bd3ca2f18774481361fae2e073886accf29" name="grub2-x86_64-xen" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.8.1"/>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
</package>
<package pkgid="4ee206e40fbbc02041fa16382195fb24737a4d182254ade432d2a9c88beb7c54" name="haproxy" arch="aarch64">
  <version epoch="0" ver="2.4.22+git0.f8e3218e2" rel="150400.3.19.1"/>
  <changelog author="mrueckert@suse.de" date="1614772800">- Update to version 2.3.6+git0.7851701ed:
  * [RELEASE] Released version 2.3.6
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on read error/timeout
  * BUG/MINOR: mux-h2: Fix typo in scheme adjustment
  * DOC: spoe: Add a note about fragmentation support in HAProxy
  * BUG/MEDIUM: spoe: Kill applets if there are pending connections and nbthread &gt; 1
  * BUG/MINOR: connection: Use the client's dst family for adressless servers
  * BUG/MINOR: tcp-act: Don't forget to set the original port for IPv4 set-dst rule
  * BUG/MINOR: http-ana: Only consider dst address to process originalto option
  * BUG/MINOR: mux-h1: Immediately report H1C errors from h1_snd_buf()
  * BUG/MINOR: stats: fix compare of no-maint url suffix
  * CLEANUP: muxes: Remove useless if condition in show_fd function
  * BUG/MINOR: ssl: potential null pointer dereference in ckchs_dup()
  * BUG/MEDIUM: resolvers: Reset address for unresolved servers
  * BUG/MEDIUM: resolvers: Reset server address and port for obselete SRV records
  * BUG/MINOR: resolvers: new callback to properly handle SRV record errors
  * BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record
  * BUG/MINOR: resolvers: Fix condition to release received ARs if not assigned
  * BUG/MINOR: fd: properly wait for !running_mask in fd_set_running_excl()
  * BUG/MINOR: proxy: wake up all threads when sending the hard-stop signal
  * BUG/MEDIUM: cli/shutdown sessions: make it thread-safe
  * BUG/MEDIUM: proxy: use thread-safe stream killing on hard-stop
  * BUG/MEDIUM: vars: make functions vars_get_by_{name,desc} thread-safe
  * BUG/MINOR: sample: secure convs that accept base64 string and var name as args
  * MINOR: Configure the `cpp` userdiff driver for *.[ch] in .gitattributes
  * BUG/MINOR: ssl/cli: potential null pointer dereference in "set ssl cert"
  * BUG/MEDIUM: mux-h1: Fix handling of responses to CONNECT other than 200-ok
  * BUG/MINOR: server: Be sure to cut the last parsed field of a server-state line
  * BUG/MINOR: server: Init params before parsing a new server-state line
  * BUG/MINOR: http-rules: Always replace the response status on a return action
  * BUG/MEDIUM: spoe: Resolve the sink if a SPOE logs in a ring buffer
  * BUG/MEDIUM: lists: Avoid an infinite loop in MT_LIST_TRY_ADDQ().
  * DOC: explain the relation between pool-low-conn and tune.idle-pool.shared
  * BUILD: ssl: introduce fine guard for OpenSSL specific SCTL functions
  * BUG/MINOR: sample: Always consider zero size string samples as unsafe
  * BUG/MEDIUM: checks: don't needlessly take the server lock in health_adjust()
  * BUG/MINOR: checks: properly handle wrapping time in __health_adjust()
  * BUG/MINOR: session: atomically increment the tracked sessions counter
  * BUG/MINOR: server: Remove RMAINT from admin state when loading server state
  * CLEANUP: channel: fix comment in ci_putblk.
  * DOC: tune: explain the origin of block size for ssl.cachesize
  * BUG/MINOR: server: Don't call fopen() with server-state filepath set to NULL
  * BUG/MINOR: cfgparse: do not mention "addr:port" as supported on proxy lines
  * BUG/MINOR: stats: revert the change on ST_CONVDONE
  * BUG/MEDIUM: config: don't pick unset values from last defaults section
  * CLEANUP: deinit: release global and per-proxy server-state variables on deinit
  * BUG/MINOR: server: Fix server-state-file-name directive
  * BUG/MINOR: backend: hold correctly lock when killing idle conn
  * BUG/MINOR: tools: Fix a memory leak on error path in parse_dotted_uints()
  * BUG/MINOR: server: re-align state file fields number
  * BUG/MEDIUM: mux-h1: Always set CS_FL_EOI for response in MSG_DONE state
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on internal errors
  * BUG/MINOR: intops: fix mul32hi()'s off-by-one
  * BUILD: ssl: guard SSL_CTX_set_msg_callback with SSL_CTRL_SET_MSG_CALLBACK macro
  * BUILD: ssl: guard SSL_CTX_add_server_custom_ext with special macro
  * BUILD: ssl: fix typo in HAVE_SSL_CTX_ADD_SERVER_CUSTOM_EXT macro
  * MINOR: check: do not ignore a connection header for http-check send</changelog>
  <changelog author="mrueckert@suse.de" date="1615896000">- Update to version 2.3.7+git0.2d39ce334:
  * [RELEASE] Released version 2.3.7
  * BUG/MINOR: resolvers: Add missing case-insensitive comparisons of DNS hostnames
  * MINOR: resolvers: Don't try to match immediatly renewed ADD items
  * MINOR: resolvers: Use milliseconds for cached items in resolver responses
  * BUG/MEDIUM: resolvers: Skip DNS resolution at startup if SRV resolution is set
  * BUG/MEDIUM: resolvers: Don't release resolution from a requester callbacks
  * MINOR: resolvers: Directly call srvrq_update_srv_state() when possible
  * MINOR: resolvers: Add function to change the srv status based on SRV resolution
  * MINOR: resolvers: Purge answer items when a SRV resolution triggers an error
  * MINOR: resolvers: Use a function to remove answers attached to a resolution
  * BUG/MEDIUM: resolvers: Trigger a DNS resolution if an ADD item is obsolete
  * BUG/MINOR; resolvers: Ignore DNS resolution for expired SRV item
  * MINOR: resolvers: new function find_srvrq_answer_record()
  * BUG/MEDIUM: resolvers: Fix the loop looking for an existing ADD item
  * BUG/MEDIUM: resolvers: Don't set an address-less server as UP
  * BUG/MINOR: resolvers: Unlink DNS resolution to set RMAINT on SRV resolution
  * BUG/MINOR: resolvers: Reset server address on DNS error only on status change
  * BUG/MINOR: resolvers: Consider server to have no IP on DNS resolution error
  * Revert "BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record"
  * CLEANUP: tcp-rules: add missing actions in the tcp-request error message
  * BUG/MINOR: tcpcheck: Fix double free on error path when parsing tcp/http-check
  * BUG/MINOR: session: Add some forgotten tests on session's listener
  * BUG/MINOR: proxy/session: Be sure to have a listener to increment its counters
  * BUG/MINOR: tcpcheck: Update .health threshold of agent inside an agent-check
  * BUG/MEDIUM: filters: Set CF_FL_ANALYZE on channels when filters are attached
  * BUILD: atomic/arm64: force the register pairs to use in __ha_cas_dw()
  * BUG/MEDIUM: stick-tables: fix ref counter in table entry using multiple http tracksc.
  * OPTIM: task: automatically adjust the default runqueue-depth to the threads
  * MINOR: task: give the scheduler a bit more flexibility in the runqueue size
  * MEDIUM: task: remove the tasks_run_queue counter and have one per thread
  * MEDIUM: ssl: implement xprt_set_used and xprt_set_idle to relax context checks
  * MINOR: xprt: add new xprt_set_idle and xprt_set_used methods
  * MEDIUM: muxes: mark idle conns tasklets with TASK_F_USR1
  * MINOR: task: add an application specific flag to the state: TASK_F_USR1
  * BUG/MEDIUM: ssl: properly remove the TASK_HEAVY flag at end of handshake
  * MINOR: ssl: mark the SSL handshake tasklet as heavy
  * MINOR: task: limit the number of subsequent heavy tasks with flag TASK_HEAVY
  * MEDIUM: backend: use a trylock when trying to grab an idle connection
  * MINOR: pools: double the local pool cache size to 1 MB
  * MEDIUM: pools: add CONFIG_HAP_NO_GLOBAL_POOLS and CONFIG_HAP_GLOBAL_POOLS
  * MEDIUM: streams: do not use the streams lock anymore
  * MINOR: streams: use one list per stream instead of a global one
  * MINOR: cli/streams: make "show sess" dump all streams till the new epoch
  * MINOR: stream: add an "epoch" to figure which streams appeared when
  * MINOR: dynbuf: pass offer_buffers() the number of buffers instead of a threshold
  * MINOR: dynbuf: use regular lists instead of mt_lists for buffer_wait
  * MINOR: dynbuf: make the buffer wait queue per thread
  * OPTIM: lb-leastconn: do not unlink the server if it did not change
  * OPTIM: lb-leastconn: do not take the server lock on take_conn/drop_conn
  * OPTIM: lb-first: do not take the server lock on take_conn/drop_conn
  * MINOR: lb/api: let callers of take_conn/drop_conn tell if they have the lock
  * MINOR: server: move actconns to the per-thread structure
  * OPTIM: server: switch the actconn list to an mt-list
  * MINOR: listener: refine the default MAX_ACCEPT from 64 to 4
  * MINOR: tasks: refine the default run queue depth
  * BUG/MEDIUM: session: NULL dereference possible when accessing the listener
  * MINOR: atomic: implement a more efficient arm64 __ha_cas_dw() using pairs
  * MINOR: atomic: add armv8.1-a atomics variant for cas-dw
  * BUG/MINOR: mt-list: always perform a cpu_relax call on failure
  * REORG: atomic: reimplement pl_cpu_relax() from atomic-ops.h
  * BUG/MINOR: ssl: don't truncate the file descriptor to 16 bits in debug mode
  * BUG/MINOR: hlua: Don't strip last non-LWS char in hlua_pushstrippedstring()
  * BUG/MINOR: backend: fix condition for reuse on mode HTTP</changelog>
  <changelog author="mrueckert@suse.de" date="1616673600">- Update to version 2.3.8+git0.e572195c7:
  * [RELEASE] Released version 2.3.8
  * BUG/MINOR: http_fetch: make hdr_ip() reject trailing characters
  * MINOR: tools: make url2ipv4 return the exact number of bytes parsed
  * BUG/MEDIUM: thread: Fix a deadlock if an isolated thread is marked as harmless
  * BUG/MEDIUM: fd: Take the fd_mig_lock when closing if no DWCAS is available.
  * CLEANUP: fd: remove unused fd_set_running_excl()
  * BUG/MEDIUM: fd: do not wait on FD removal in fd_delete()
  * MINOR: fd: remove the unneeded running bit from fd_insert()
  * MINOR: fd: make fd_clr_running() return the remaining running mask
  * BUG/MEDIUM: lua: Always init the lua stack before referencing the context
  * BUG/MEDIUM: debug/lua: Use internal hlua function to dump the lua traceback
  * MINOR: lua: Slightly improve function dumping the lua traceback
  * BUILD: ssl: guard ecdh functions with SSL_CTX_set_tmp_ecdh macro
  * BUG/MINOR: ssl: Prevent disk access when using "add ssl crt-list"
  * BUG/MEDIUM: debug/lua: Don't dump the lua stack if not dumpable
  * MEDIUM: lua: Use a per-thread counter to track some non-reentrant parts of lua
  * MINOR/BUG: mworker/cli: do not use the unix_bind prefix for the master CLI socket
  * BUG/MINOR: protocol: add missing support of dgram unix socket.
  * BUG/MEDIUM: freq_ctr/threads: use the global_now_ms variable
  * MINOR: time: also provide a global, monotonic global_now_ms timer
  * BUG/MEDIUM: mux-fcgi: Fix locking of idle_conns lock in the FCGI I/O callback
  * BUG/MINOR: freq_ctr/threads: make use of the last updated global time
  * MINOR: time: export the global_now variable</changelog>
  <changelog author="mrueckert@suse.de" date="1617105600">- Update to version 2.3.9+git1.afb63bc04:
  * BUILD: backend: fix build breakage in idle conn locking fix
  * [RELEASE] Released version 2.3.9
  * BUG/MEDIUM: time: make sure to always initialize the global tick
  * BUG/MINOR: stats: Apply proper styles in HTML status page.
  * BUG/MINOR: payload: Wait for more data if buffer is empty in payload/payload_lv
  * MEDIUM: backend: use a trylock to grab a connection on high FD counts as well
  * BUG/MEDIUM: mux-h1: make h1_shutw_conn() idempotent</changelog>
  <changelog author="mrueckert@suse.de" date="1619179200">- Update to version 2.3.10+git0.4764f0e4e:
  * [RELEASE] Released version 2.3.10
  * BUG/MEDIUM: peers: re-work refcnt on table to protect against flush
  * BUG/MEDIUM: peers: re-work connection to new process during reload.
  * BUG/MINOR: peers: remove useless table check if initial resync is finished
  * BUG/MEDIUM: mux-h2: Properly handle shutdowns when received with data
  * BUG/MINOR: mworker: don't use oldpids[] anymore for reload
  * BUG/MINOR: mworker/init: don't reset nb_oldpids in non-mworker cases
  * BUG/MEDIUM: config: fix cpu-map notation with both process and threads
  * BUG/MEDIUM: mux-h2: Fix dfl calculation when merging CONTINUATION frames
  * BUG/MAJOR: mux-h2: Properly detect too large frames when decoding headers
  * BUG/MINOR: server: free srv.lb_nodes in free_server
  * BUG/MINOR: mux-h1: Release idle server H1 connection if data are received
  * BUG/MINOR: logs: Report the true number of retries if there was no connection
  * BUG/MINOR: http_htx: Remove BUG_ON() from http_get_stline() function
  * BUG/MINOR: http-fetch: Make method smp safe if headers were already forwarded
  * BUG/MINOR: ssl-samples: Fix ssl_bc_* samples when called from a health-check
  * MINOR: connection: Make bc_http_major compatible with tcp-checks
  * BUG/MINOR: connection: Fix fc_http_major and bc_http_major for TCP connections
  * MINOR: logs: Add support of checks as session origin to format lf strings
  * BUG/MINOR: checks: Set missing id to the dummy checks frontend
  * BUG/MEDIUM: threads: Ignore current thread to end its harmless period
  * DOC: ssl: Certificate hot update only works on fronted certificates
  * BUG/MEDIUM: sample: Fix adjusting size in field converter
  * MINOR: No longer rely on deprecated sample fetches for predefined ACLs
  * DOC: clarify that compression works for HTTP/2
  * BUG/MINOR: tools: fix parsing "us" unit for timers
  * CONTRIB: halog: fix issue with array of type char
  * REGTESTS: ssl: mark set_ssl_cert_bundle.vtc as broken
  * DOC: Explicitly state only IPv4 are supported by forwardfor/originalto options
  * REGTESTS: ssl: "set ssl cert" and multi-certificates bundle
  * BUG/MINOR: ssl: Add missing free on SSL_CTX in ckch_inst_free
  * BUG/MINOR: http_fetch: make hdr_ip() resistant to empty fields
  * BUG/MINOR: ssl: Prevent removal of crt-list line if the instance is a default one
  * BUG/MINOR: ssl: Fix update of default certificate
  * BUILD: tcp: use IPPROTO_IPV6 instead of SOL_IPV6 on FreeBSD/MacOS
  * BUG/MINOR: tcp: fix silent-drop workaround for IPv6</changelog>
  <changelog author="mrueckert@suse.de" date="1620993600">- Update to version 2.4.0+git0.6cbbecf09:
  https://www.haproxy.com/blog/announcing-haproxy-2-4/
  for all the details see /usr/share/doc/packages/haproxy/CHANGELOG
- refreshed patches to apply cleanly again
  haproxy-1.6.0-makefile_lib.patch
  haproxy-1.6.0-sec-options.patch
  lua54.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1623931200">- Update to version 2.4.1+git0.1ce7d4925:
  * [RELEASE] Released version 2.4.1
  * BUG/MINOR: mux-h2/traces: bring back the lost "sent H2 REQ/RES" traces
  * BUG/MINOR: mux-h2/traces: bring back the lost "rcvd H2 REQ" trace
  * MINOR: mux-h2: obey http-ignore-probes during the preface
  * BUG/MINOR: stats: make "show stat typed desc" work again
  * CLEANUP: mux-h2/traces: better align user messages
  * MINOR: mux-h2/trace: report a few connection-level info during h2_init()
  * MINOR: connection: add helper conn_append_debug_info()
  * BUG/MINOR: server: explicitly set "none" init-addr for dynamic servers
  * BUG/MINOR: mux-h1: do not skip the error response on bad requests
  * MINOR: backend: only skip LB when there are actual connections
  * BUG/MAJOR: queue: set SF_ASSIGNED when setting strm-&gt;target on dequeue
  * CLEANUP: global: remove unused definition of stopping_task[]
  * BUG/MINOR: mworker: fix typo in chroot error message
  * BUG/MINOR: ssl: use atomic ops to update global shctx stats
  * BUG/MEDIUM: shctx: use at least thread-based locking on USE_PRIVATE_CACHE
  * BUG/MEDIUM: server: do not auto insert a dynamic server in px addr_node
  * BUG/MINOR: server: do not keep an invalid dynamic server in px ids tree
  * BUG/MEDIUM: server: do not forget to generate the dynamic servers ids
  * BUG/MEDIUM: server: clear dynamic srv on delete from proxy id/name trees
  * BUG/MEDIUM: server: extend thread-isolate over much of CLI 'add server'
  * BUG/MINOR: stick-table: insert srv in used_name tree even with fixed id
  * DOC: lua: Add a warning about buffers modification in HTTP
  * BUG/MAJOR: resolvers: segfault using server template without SRV RECORDs
  * MEDIUM: resolvers: add a ref between servers and srv request or used SRV record
  * MEDIUM: resolvers: add a ref on server to the used A/AAAA answer item
  * BUG/MINOR: resolvers: answser item list was randomly purged or errors
  * CLEANUP: l7-retries: do not test the buffer before calling b_alloc()
  * BUG/MINOR: mux-fcgi: Expose SERVER_SOFTWARE parameter by default
  * BUG/MAJOR: htx: Fix htx_defrag() when an HTX block is expanded
  * CLEANUP: pools: remove now unused seq and pool_free_list
  * BUG/MAJOR: pools: fix possible race with free() in the lockless variant
  * MEDIUM: pools: use a single pool_gc() function for locked and lockless
  * MINOR: pools: call malloc_trim() under thread isolation
  * MINOR: pools: do not maintain the lock during pool_flush()
  * BUG/MINOR: pools: make DEBUG_UAF always write to the to-be-freed location
  * BUG/MINOR: pools: fix a possible memory leak in the lockless pool_flush()
  * BUG/MEDIUM: compression: Add a flag to know the filter is still processing data
  * BUG/MEDIUM: compression: Properly get the next block to iterate on payload
  * BUG/MEDIUM: compression: Fix loop skipping unused blocks to get the next block
  * BUG/MEDIUM: opentracing: initialization before establishing daemon and/or chroot mode
  * Revert "BUG/MINOR: opentracing: initialization after establishing daemon mode"
  * BUG/MINOR: ssl: OCSP stapling does not work if expire too far in the future
  * BUILD: make tune.ssl.keylog available again
  * DOC: use the req.ssl_sni in examples
  * MINOR: errors: allow empty va_args for diag variadic macro
  * BUG/MAJOR: stream-int: Release SI endpoint on server side ASAP on retry
  * DOC/MINOR: move uuid in the configuration to the right alphabetical order
  * BUG/MINOR: vars: Be sure to have a session to get checks variables
  * CLEANUP: http-ana: Remove useless if statement about L7 retries
  * BUG/MINOR: proxy: Missing calloc return value check in chash_init_server_tree
  * BUG/MINOR: http: Missing calloc return value check in make_arg_list
  * BUG/MINOR: http: Missing calloc return value check while parsing redirect rule
  * BUG/MINOR: worker: Missing calloc return value check in mworker_env_to_proc_list
  * BUG/MINOR: compression: Missing calloc return value check in comp_append_type/algo
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request rule
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request/tcp-response
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_defproxy_cpy
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_parse_declare
  * BUG/MINOR: http: Missing calloc return value check in parse_http_req_capture
  * BUG/MINOR: ssl: Missing calloc return value check in ssl_init_single_engine
  * BUG/MINOR: peers: Missing calloc return value check in peers_register_table
  * BUG/MINOR: server: Missing calloc return value check in srv_parse_source
  * DOC: intro: Fix typo in starter guide
  * MINOR: cfgparse: Fail when encountering extra arguments in macro
  * MINOR: http-ana: Perform L7 retries because of status codes in response analyser
  * BUG/MINOR: http-ana: Handle L7 retries on refused early data before K/A aborts
  * BUG/MINOR: http-ana: Send the right error if max retries is reached on L7 retry
  * Revert "MEDIUM: http-ana: Deal with L7 retries in HTTP analysers"
  * BUG/MINOR: http-comp: Preserve HTTP_MSGF_COMPRESSIONG flag on the response
  * BUG/MEDIUM: filters: Exec pre/post analysers only one time per filter
  * BUILD/MINOR: opentracing: fixed build when using clang
  * BUG/MAJOR: server: prevent deadlock when using 'set maxconn server'
  * BUG/MEDIUM: ebtree: Invalid read when looking for dup entry</changelog>
  <changelog author="mrueckert@suse.de" date="1625659200">- Update to version 2.4.2+git0.553dee326:
  * [RELEASE] Released version 2.4.2
  * REGTESTS: add http scheme-based normalization test
  * MEDIUM: h2: apply scheme-based normalization on h2 requests
  * MEDIUM: h1-htx: apply scheme-based normalization on h1 requests
  * MEDIUM: http: implement scheme-based normalization
  * MINOR: http: implement http_get_scheme
  * Revert "MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules"
  * BUG/MINOR: cli: fix server name output in "show fd"
  * BUG/MEDIUM: sock: make sure to never miss early connection failures
  * DOC: stick-table: add missing documentation about gpt0 stored type
  * BUG/MINOR: peers: fix data_type bit computation more than 32 data_types
  * BUG/MINOR: stick-table: fix several printf sign errors dumping tables
  * DOC: config: use CREATE USER for mysql-check
  * BUG/MEDIUM: resolvers: Make 1st server of a template take part to SRV resolution
  * BUG/MINOR: mqtt: Support empty client ID in CONNECT message
  * BUG/MINOR: mqtt: Fix parser for string with more than 127 characters
  * BUG/MINOR: tcpcheck: Fix numbering of implicit HTTP send/expect rules
  * BUILD: Makefile: fix linkage for Haiku.
  * BUG/MINOR: checks: return correct error code for srv_parse_agent_check
  * MINOR: resolvers: Reset server IP on error in resolv_get_ip_from_response()
  * BUG/MINOR: resolvers: Reset server IP when no ip is found in the response
  * BUG/MINOR: resolvers: Always attach server on matching record on resolution
  * CLEANUP: dns: Remove a forgotten debug message
  * DOC: config: Add missing actions in "tcp-request session" documentation
  * MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules
  * REGTESTS: fix maxconn update with agent-check
  * BUG/MAJOR: server: fix deadlock when changing maxconn via agent-check
  * BUG/MINOR: cache: Correctly handle existing-but-empty 'accept-encoding' header
  * BUG/MINOR: server/cli: Fix locking in function processing "set server" command
  * BUG/MINOR: resolvers: Use resolver's lock in resolv_srvrq_expire_task()
  * BUG/MEDIUM: resolvers: Add a task on servers to check SRV resolution status
  * MINOR: resolvers: Remove server from named_servers tree when removing a SRV item
  * MINOR: resolvers: Clean server in a dedicated function when removing a SRV item
  * BUG/MEDIUM: server/cli: Fix ABBA deadlock when fqdn is set from the CLI
  * BUG/MINOR: server: Forbid to set fqdn on the CLI if SRV resolution is enabled
  * BUG/MINOR: server-state: load SRV resolution only if params match the config</changelog>
  <changelog author="mrueckert@suse.de" date="1629201600">- Update to version 2.4.3+git0.4dd5a5a6c:
    CVE-2021-39240 CVE-2021-39241 CVE-2021-39242
    (boo#1189366 boo#1189548 boo#1189549)
  * [RELEASE] Released version 2.4.3
  * REGTESTS: add a test to prevent h2 desync attacks
  * BUG/MEDIUM: h2: give :authority precedence over Host
  * BUG/MAJOR: h2: enforce stricter syntax checks on the :method pseudo-header
  * BUG/MAJOR: h2: verify that :path starts with a '/' before concatenating it
  * BUG/MAJOR: h2: verify early that non-http/https schemes match the valid syntax
  * MINOR: http: add a new function http_validate_scheme() to validate a scheme
  * DOC/MINOR: fix typo in management document
  * CLEANUP: assorted typo fixes in the code and comments
  * BUG/MEDIUM: cfgcheck: verify existing log-forward listeners during config check
  * BUG/MEDIUM: spoe: Fix policy to close applets when SPOE connections are queued
  * DOC: config: Fix 'http-response send-spoe-group' documentation
  * DOC: Improve the lua documentation
  * BUG/MINOR: tcpcheck: Properly detect pending HTTP data in output buffer
  * BUG/MINOR: buffer: fix buffer_dump() formatting
  * BUG/MEDIUM: spoe: Create a SPOE applet if necessary when the last one is released
  * MINOR: spoe: Add a pointer on the filter config in the spoe_agent structure
  * ADMIN: dyncookie: implement a simple dynamic cookie calculator
  * MINOR: server: unmark deprecated on enable health/agent cli
  * BUG/MINOR: server: update last_change on maint-&gt;ready transitions too
  * BUG/MINOR: server: remove srv from px list on CLI 'add server' error
  * BUILD: opentracing: fixed build when using pkg-config utility
  * DOC: internals: document the FD takeover process
  * BUG/MINOR: fd: protect fd state harder against a concurrent takeover
  * BUG/MINOR: pollers: always program an update for migrated FDs
  * BUG/MINOR: poll: fix abnormally high skip_fd counter
  * BUG/MINOR: select: fix excess number of dead/skip reported
  * BUG/MEDIUM: pollers: clear the sleeping bit after waking up, not before
  * BUG/MEDIUM: connection: close a rare race between idle conn close and takeover
  * BUG/MINOR: connection: Add missing error labels to conn_err_code_str
  * BUG/MEDIUM: mux-h2: Handle remaining read0 cases on partial frames
  * BUG/MINOR: mux-h1: Be sure to swap H1C to splice mode when rcv_pipe() is called
  * BUG/MINOR: mux-h2: Obey dontlognull option during the preface
  * BUG/MINOR: mux-h1: Obey dontlognull option for empty requests
  * BUG/MINOR: systemd: must check the configuration using -Ws
  * BUG/MINOR: resolvers: Use a null-terminated string to lookup in servers tree
  * BUG/MINOR: check: fix the condition to validate a port-less server
  * BUG/MINOR: stats: Add missing agent stats on servers
  * BUG/MEDIUM: ssl_sample: fix segfault for srv samples on invalid request
  * BUILD/MINOR: memprof fix macOs build.
  * BUG/MINOR: mworker: do not export HAPROXY_MWORKER_REEXEC across programs
  * BUG/MEDIUM: mworker: do not register an exit handler if exit is expected
  * BUILD: lua: silence a build warning with TCC
  * BUILD: add detection of missing important CFLAGS
  * BUG/MINOR: ssl: Default-server configuration ignored by server
  * MINOR: mux_h2: define config to disable h2 websocket support
  * BUILD: http_htx: fix ci compilation error with isdigit for Windows</changelog>
  <changelog author="mrueckert@suse.de" date="1631016000">- Update to version 2.4.4+git0.acb1d0bea: CVE-2021-40346 (boo#1189877)
  * [RELEASE] Released version 2.4.4
  * Revert "BUG/MINOR: stream-int: Don't block reads in si_update_rx() if chn may receive"
  * BUG/MAJOR: htx: fix missing header name length check in htx_add_header/trailer
  * CLEANUP: htx: remove comments about "must be &lt; 256 MB"
  * BUG/MINOR: config: reject configs using HTTP with bufsize &gt;= 256 MB
  * DOC: configuration: remove wrong tcp-request examples in tcp-response
  * BUG/MINOR: vars: fix set-var/unset-var exclusivity in the keyword parser
  * CLEANUP: Add missing include guard to signal.h
  * BUG/MINOR: tools: Fix loop condition in dump_text()
  * BUG/MINOR threads: Use get_(local|gm)time instead of (local|gm)time
  * BUG/MINOR: ebtree: remove dependency on incorrect macro for bits per long
  * MINOR: time: add report_idle() to report process-wide idle time
  * BUG/MINOR: time: fix idle time computation for long sleeps
  * BUG/MINOR: lua: use strlcpy2() not strncpy() to copy sample keywords
  * MINOR: compiler: implement an ONLY_ONCE() macro
  * BUG/MINOR: base64: base64urldec() ignores padding in output size check
  * BUG/MEDIUM: base64: check output boundaries within base64{dec,urldec}
  * BUG/MINOR: stick-table: fix the sc-set-gpt* parser when using expressions
  * MINOR: hlua: take the global Lua lock inside a global function
  * REGTESTS: abortonclose: after retries, 503 is expected, not close
  * REGTESTS: http_upgrade: fix incorrect expectation on TCP-&gt;H1-&gt;H2
  * BUG/MEDIUM: h2: match absolute-path not path-absolute for :path</changelog>
  <changelog author="mrueckert@suse.de" date="1633089600">- Update to version 2.4.5+git0.e74a1b34b:
  * [RELEASE] Released version 2.4.5
  * MINOR: tasks: catch TICK_ETERNITY with BUG_ON() in __task_queue()
  * BUG/MINOR: tcp-rules: Stop content rules eval on read error and end-of-input
  * BUG/MINOR: tcpcheck: Don't use arg list for default proxies during parsing
  * MINOR: arg: Be able to forbid unresolved args when building an argument list
  * BUG/MAJOR: lua: use task_wakeup() to properly run a task once
  * BUG/MEDIUM: lua: fix wakeup condition from sleep()
  * MINOR: Makefile: add MEMORY_POOLS to the list of DEBUG_xxx options
  * DOC: peers: fix doc "enable" statement on "peers" sections
  * BUG/MINOR: mux-h1/mux-fcgi: Sanitize TE header to only send "trailers"
  * MINOR: stream-int: Notify mux when the buffer is not stuck when calling rcv_buf
  * BUG/MEDIUM: stream-int: Defrag HTX message in si_cs_recv() if necessary
  * MINOR: htx: Add a function to know if the free space wraps
  * MINOR: htx: Add an HTX flag to know when a message is fragmented
  * MINOR: stream-int: Set CO_RFL transient/persistent flags apart in si_cs_rcv()
  * BUG/MEDIUM: stream: Stop waiting for more data if SI is blocked on RXBLK_ROOM
  * BUG/MEDIUM: stream-int: Notify stream that the mux wants more room to xfer data
  * BUG/MEDIUM: mux-h1: Adjust conditions to ask more space in the channel buffer
  * BUG/MINOR: stats: use refcount to protect dynamic server on dump
  * MINOR: server: return the next srv instance on free_server
  * BUG/MINOR: server: do not use refcount in free_server in stopping mode
  * MINOR: global: define MODE_STOPPING
  * MINOR: server: implement a refcount for dynamic servers
  * BUG/MINOR: http-ana: increment internal_errors counter on response error
  * BUG/MINOR: h1-htx: Fix a typo when request parser is reset
  * BUG/MEDIUM: leastconn: fix rare possibility of divide by zero
  * BUG/MINOR: server: allow 'enable health' only if check configured
  * BUILD: threads: fix -Wundef for _POSIX_PRIORITY_SCHEDULING on libmusl
  * BUILD: halog: fix a -Wundef warning on non-glibc systems
  * BUILD: compiler: fixed a missing test on  defined(__GNUC__)
  * BUILD: fix dragonfly build again on __read_mostly
  * BUG/MINOR: vars: do not talk about global section in CLI errors for set-var
  * BUG/MINOR: vars: truncate the variable name in error reports about scope.
  * BUG/MINOR: vars: properly set the argument parsing context in the expression
  * MINOR: sample: add missing ARGC_ entries
  * BUG/MINOR: vars: improve accuracy of the rules used to check expression validity
  * BUILD: tools: properly guard __GLIBC__ with defined()
  * BUILD: ssl: fix two remaining occurrences of #if USE_OPENSSL
  * BUILD: ssl: next round of build warnings on LIBRESSL_VERSION_NUMBER
  * BUILD/MINOR: regex: avoid a build warning on USE_PCRE2 with -Wundef
  * IMPORT: slz: silence a build warning with -Wundef
  * BUILD/MINOR: ssl: avoid a build warning on LIBRESSL_VERSION with -Wundef
  * BUILD/MINOR: defaults: eliminate warning on MAXHOSTNAMELEN with -Wundef
  * BUILD: activity: use #ifdef not #if on USE_MEMORY_PROFILING
  * MINOR: proc: setting the process to produce a core dump on FreeBSD.
  * MINOR: tools: add FreeBSD support to get_exec_path()
  * BUILD: tools: get the absolute path of the current binary on NetBSD.
  * BUG/MINOR: flt-trace: fix an infinite loop when random-parsing is set
  * BUG/MINOR: cli/payload: do not search for args inside payload
  * BUILD: ist: prevent gcc11 maybe-uninitialized warning on istalloc
  * BUG/MINOR: connection: prevent null deref on mux cleanup task allocation
  * DOC: management: certificate files must be sanitized before injection
  * BUG/MINOR: tcpcheck: Improve LDAP response parsing to fix LDAP check
  * BUG/MAJOR: mux-h1: Don't eval input data if an error was reported
  * MINOR: pools: use mallinfo2() when available instead of mallinfo()
  * MINOR: pools: automatically disable malloc_trim() with external allocators
  * CLEANUP: pools: factor all malloc_trim() calls into trim_all_pools()
  * BUG/MINOR: compat: make sure __WORDSIZE is always defined
  * BUG/MEDIUM: stream-int: Don't block SI on a channel policy if EOI is reached
  * CLEANUP: mux-h1: Remove condition rejecting upgrade requests with payload
  * MINOR: htx: Skip headers with no value when adding a header list to a message
  * BUG/MEDIUM: mux-h1: Remove "Upgrade:" header for requests with payload
  * BUG/MINOR: systemd: ExecStartPre must use -Ws
  * BUG/MINOR: filters: Set right FLT_END analyser depending on channel
  * BUG/MINOR: filters: Always set FLT_END analyser when CF_FLT_ANALYZE flag is set
  * BUG/MEDIUM: http-ana: Reset channels analysers when returning an error
  * BUG/MINOR: stream: Don't release a stream if FLT_END is still registered
  * BUG/MINOR: lua: Don't yield in channel.append() and channel.set()
  * BUG/MINOR: lua: Yield in channel functions only if lua context can yield
  * MINOR: lua: Add a flag on lua context to know the yield capability at run time</changelog>
  <changelog author="mrueckert@suse.de" date="1633348800">- Update to version 2.4.6+git0.d83fd76a1:
  * [RELEASE] Released version 2.4.6
  * BUG/MEDIUM: filters: Fix a typo when a filter is attached blocking the release</changelog>
  <changelog author="mrueckert@suse.de" date="1633348801">- Update to version 2.4.7+git0.b5e51a5e2:
  * [RELEASE] Released version 2.4.7
  * BUG/MEDIUM: http-ana: Clear request analyzers when applying redirect rule</changelog>
  <changelog author="mrueckert@suse.de" date="1635940800">- Update to version 2.4.8+git0.d1f8d41e0:
  * [RELEASE] Released version 2.4.8
  * SCRIPTS: git-show-backports: re-enable file-based filtering
  * DOC/peers: some grammar fixes for peers 2.1 spec
  * MINOR: stream: Improve dump of bogus streams
  * BUILD/MINOR: cpuset freebsd build fix
  * DOC: config: Fix alphabetical order of fc_* samples
  * BUG/MINOR: sample: fix backend direction flags consecutive to last fix
  * BUG/MEDIUM: sample: Cumulate frontend and backend sample validity flags
  * BUG/MEDIUM: stream-int: Block reads if channel cannot receive more data
  * BUG/MINOR: http: Authorization value can have multiple spaces after the scheme
  * BUG/MEDIUM: http-ana: Drain request data waiting the tarpit timeout expiration
  * MINOR: halog: Add support for extracting captures using -hdr
  * BUG/MINOR: halog: Add missing newlines in die() messages
  * CLEANUP: halog: Use consistent indentation in help()
  * MINOR: halog: Rename -qry to -query
  * DOC: halog: Move the `-qry` parameter into the correct section in help text
  * MINOR: halog: Add -qry parameter allowing to preserve the query string in -uX
  * BUG/MEDIUM: resolvers: Track api calls with a counter to free resolutions
  * BUG/MEDIUM: resolvers: Don't recursively perform requester unlink
  * MEDIUM: resolvers: remove the last occurrences of the "safe" argument
  * MEDIUM: resolvers: use a kill list to preserve the list consistency
  * CLEANUP: resolvers: replace all LIST_DELETE with LIST_DEL_INIT
  * CLEANUP: resolvers: simplify resolv_link_resolution() regarding requesters
  * CLEANUP: always initialize the answer_list
  * CLEANUP: resolvers: do not export resolv_purge_resolution_answer_records()
  * BUG/MEDIUM: mux-h1: Perform a connection shutdown when the h1c is released
  * BUG/MINOR: mux-h1: Save shutdown mode if the shutdown is delayed
  * BUILD: atomic: fix build on mac/arm64
  * BUG/MINOR: backend: fix improper insert in avail tree for always reuse
  * BUILD: fix compilation on NetBSD
  * MINOR: memprof: add one pointer size to the size of allocations
  * MINOR: memprof: report the delta between alloc and free on realloc()
  * BUG/MEDIUM: lua: fix memory leaks with realloc() on non-glibc systems
  * BUG/MINOR: mux-h2: do not prevent from sending a final GOAWAY frame
  * BUG/MINOR: task: do not set TASK_F_USR1 for no reason
  * BUG/MAJOR: buf: fix varint API post- vs pre- increment
  * BUG/MEDIUM: resolvers: always check a valid item in query_list
  * BUILD: resolvers: avoid a possible warning on null-deref
  * BUG/MAJOR: resolvers: add other missing references during resolution removal
  * MINOR: resolvers: merge address and target into a union "data"
  * BUG/MEDIUM: resolvers: use correct storage for the target address
  * BUG/MEDIUM: resolvers: fix truncated TLD consecutive to the API fix
  * MINOR: resolvers: fix the resolv_dn_label_to_str() API about trailing zero
  * BUG/MINOR: resolvers: do not reject host names of length 255 in SRV records
  * BUG/MEDIUM: resolver: make sure to always use the correct hostname length
  * MINOR: resolvers: fix the resolv_str_to_dn_label() API about trailing zero
  * BUG/MAJOR: dns: attempt to lock globaly for msg waiter list instead of use barrier
  * BUG/MAJOR: dns: tcp session can remain attached to a list after a free
  * BUG/MEDIUM: tcpcheck: Properly catch early HTTP parsing errors
  * Revert "CLEANUP: server: always include the storage for SSL settings"
  * BUG/MEDIUM: stream: Keep FLT_END analyzers if a stream detects a channel error
  * BUG/MEDIUM: cpuset: fix cpuset size for FreeBSD
  * BUG/MINOR: sample: Fix 'fix_tag_value' sample when waiting for more data
  * BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back
  * MINOR: initcall: Rename __GLOBL and __GLOBL1.
  * DOC: configuration: add clarification on escaping in keyword arguments
  * BUG/MEDIUM: mux_h2: Handle others remaining read0 cases on partial frames
  * BUG/MEDIUM: sample: properly verify that variables cast to sample
  * MINOR: sample: provide a generic var-to-sample conversion function
  * CLEANUP: sample: uninline sample_conv_var2smp_str()
  * CLEANUP: sample: rename sample_conv_var2smp() to *_sint
  * CLEANUP: server: always include the storage for SSL settings</changelog>
  <changelog author="varkoly@suse.com" date="1646740800">- (bsc#1196408) VUL-0: CVE-2022-0711: haproxy: Denial of service via set-cookie2 header
  o Apply upstream patch:
    0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch</changelog>
  <changelog author="varkoly@suse.com" date="1674043200">- VUL-0: CVE-2023-0056: haproxy: segfault DoS (bsc#1207181)
  o Apply upstream patch:
    0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch</changelog>
  <changelog author="varkoly@suse.com" date="1676030400">- VUL-0: serious vulnerability in the HTTP/1 parser (bsc#1208132)
  o Apply upstream patch:
    2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- The output buffer is not zero-initialized. If we don't clear reserved
  bytes, fcgi requests sent to backend will leak sensitive data.
  o Apply proposed patch:
    0001-output-buffer-is-not-zero-initialized.path</changelog>
  <changelog author="varkoly@suse.com" date="1681214400">- ECO: Maint: Update haproxy to latest maintenance release for all SLE15 (jsc#PED-3821)
- rebase and rename haproxy-1.6.0-sec-options.patch -&gt; haproxy-2.4.22-sec-options.patch
- remove patches covered by new release:
  lua54.patch
  0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch
  0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch
  0001-output-buffer-is-not-zero-initialized.path
  2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- Update to version 2.4.22+git0.f8e3218e2:
  * [RELEASE] Released version 2.4.22
  * BUG/CRITICAL: http: properly reject empty http header field names
  * CI: github: don't warn on deprecated openssl functions on windows
  * BUG/MEDIUM: stconn: Schedule a shutw on shutr if data must be sent first
  * DOC: proxy-protocol: fix wrong byte in provided example
  * DOC: config: 'http-send-name-header' option may be used in default section
  * DOC: config: fix option spop-check proxy compatibility
  * BUG/MEDIUM: cache: use the correct time reference when comparing dates
  * BUG/MEDIUM: stick-table: do not leave entries in end of window during purge
  * BUG/MINOR: ssl/crt-list: warn when a line is malformated
  * BUG/MEDIUM: ssl: wrong eviction from the session cache tree
  * BUG/MINOR: fcgi-app: prevent 'use-fcgi-app' in default section
  * [RELEASE] Released version 2.4.21
  * BUG/MINOR: sink: free the forwarding task on exit
  * BUILD: hpack: include global.h for the trash that is needed in debug mode
  * BUG/MINOR: mux-h2: add missing traces on failed headers decoding
  * BUG/MINOR: listener: close tiny race between resume_listener() and stopping
  * DOC: config: fix "Address formats" chapter syntax
  * BUG/MINOR: mux-fcgi: Correctly set pathinfo
  * DOC: config: fix aliases for protocol prefixes "udp4@" and "udp6@"
  * DOC: config: fix wrong section number for "protocol prefixes"
  * BUG/MINOR: listeners: fix suspend/resume of inherited FDs
  * BUG/MINOR: http-ana: make set-status also update txn-&gt;status
  * BUG/MINOR: http-fetch: Don't block HTTP sample fetch eval in HTTP_MSG_ERROR state
  * BUG/MINOR: http-ana: Report SF_FINST_R flag on error waiting the request body
  * BUG/MINOR: promex: Don't forget to consume the request on error
  * BUG/MINOR: resolvers: Wait the resolution execution for a do_resolv action
  * BUG/MINOR: h1-htx: Remove flags about protocol upgrade on non-101 responses
  * CLEANUP: htx: fix a typo in an error message of http_str_to_htx
  * BUG/MINOR: http: Memory leak of http redirect rules' format string
  * REGTEST: fix the race conditions in hmac.vtc
  * REGTEST: fix the race conditions in digest.vtc
  * REGTEST: fix the race conditions in json_query.vtc
  * BUG/MAJOR: buf: Fix copy of wrapping output data when a buffer is realigned
  * BUG/MINOR: http-fetch: Only fill txn status during prefetch if not already set
  * BUILD: makefile: sort the features list
  * BUILD: makefile: build the features list dynamically
  * BUG/MINOR: pool/stats: Use ullong to report total pool usage in bytes in stats
  * BUG/MEDIUM: mux-h2: Refuse interim responses with end-stream flag set
  * BUG/MINOR: ssl: Fix memory leak of find_chain in ssl_sock_load_cert_chain
  * LICENSE: wurfl: clarify the dummy library license.
  * BUG/MEDIUM: resolvers: Use tick_first() to update the resolvers task timeout
  * REGTESTS: startup: check maxconn computation
  * REGTESTS: fix the race conditions in iff.vtc
  * BUG/MAJOR: fcgi: Fix uninitialized reserved bytes
  * DOC: promex: Add missing backend metrics
  * MINOR: promex: introduce haproxy_backend_agg_check_status
  * BUG/MINOR: promex: create haproxy_backend_agg_server_status
  * BUG/MEDIUM: mworker: fix segv in early failure of mworker mode with peers
  * BUG/MINOR: ssl: Fix potential overflow
  * BUG/MEDIUM: ssl: Verify error codes can exceed 63
  * BUG/MINOR: resolvers: Don't wait periodic resolution on healthcheck failure
  * BUILD: peers: peers-t.h depends on stick-table-t.h
  * CI: github: change "ubuntu-latest" to "ubuntu-20.04"
  * BUG/MEDIIM: stconn: Flush output data before forwarding close to write side
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * [RELEASE] Released version 2.4.20
  * Revert "CI: determine actual OpenSSL version dynamically"
  * Revert "CI: switch to the "latest" LibreSSL"
  * SCRIPTS: announce-release: add a link to the data plane API
  * DOC: config: clarify the -m dir and -m dom pattern matching methods
  * DOC: config: clarify the fact that "retries" is not just for connections
  * DOC: config: explain how default matching method for ACL works
  * DOC: config: mention that a single monitor-uri rule is supported
  * DOC: config: clarify the fact that SNI should not be used in HTTP scenarios
  * DOC: config: provide some configuration hints for "http-reuse"
  * Revert "BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action"
  * BUG/MINOR: mux-h1: Fix handling of 408-Request-Time-Out
  * BUILD: http-htx: Silent build error about a possible NULL start-line
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * BUG/MINOR: log: fix parse_log_message rfc5424 size check
  * BUG/MINOR: cfgparse-listen: fix ebpt_next_dup pointer dereference on proxy "from" inheritance
  * BUILD: listener: fix build warning on global_listener_rwlock without threads
  * BUG/MINOR: server/idle: at least use atomic stores when updating max_used_conns
  * BUILD: peers: Remove unused variables
  * BUG/MEDIUM: peers: messages about unkown tables not correctly ignored
  * BUG/MINOR: ssl: don't initialize the keylog callback when not required
  * BUG/MINOR: http_ana/txn: don't re-initialize txn and req var lists
  * BUG/MEDIUM: listener: Fix race condition when updating the global mngmt task
  * BUG/MINOR: pool/cli: use ullong to report total pool usage in bytes
  * BUG/MEDIUM: ring: fix creation of server in uninitialized ring
  * DOC: config: fix alphabetical ordering of global section
  * REG-TESTS: cache: Remove T-E header for 304-Not-Modified responses
  * BUG/MINOR: mux-h1: Do not send a last null chunk on body-less answers
  * BUG/MEDIUM: mux-fcgi: Avoid value length overflow when it doesn't fit at once
  * BUG/MINOR: mux-fcgi: Be sure to send empty STDING record in case of zero-copy
  * BUG/MINOR: resolvers: Set port before IP address when processing SRV records
  * BUG/MINOR: http-htx: Fix error handling during parsing http replies
  * BUG/MEDIUM: wdt/clock: properly handle early task hangs
  * CI: emit the compiler's version in the build reports
  * CI: switch to the "latest" LibreSSL
  * BUG/MINOR: ssl: ocsp structure not freed properly in case of error
  * BUG/MINOR: ssl: Memory leak of AUTHORITY_KEYID struct when loading issuer
  * CI: add monthly gcc cross compile jobs
  * BUG/MINOR: log: fixing bug in tcp syslog_io_handler Octet-Counting
  * BUG/MEDIUM: stick-table: fix a race condition when updating the expiration task
  * BUG/MAJOR: stick-table: don't process store-response rules for applets
  * DOC: management: add forgotten "show startup-logs"
  * BUG/MINOR: stick-table: Use server_id instead of std_t_sint in process_store_rules()
  * CI: SSL: temporarily stick to LibreSSL=3.5.3
  * CI: SSL: use proper version generating when "latest" semantic is used
  * BUG/MINOR: sink: Set default connect/server timeout for implicit ring buffers
  * BUG/MINOR: sink: Only use backend capability for the sink proxies
  * BUG/MEDIUM: compression: handle rewrite errors when updating response headers
  * BUG/MINOR: ring: Properly parse connect timeout
  * BUG/MINOR: log: Preserve message facility when the log target is a ring buffer
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in workflow definition
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in matrix.py
  * BUG/MINOR: server: make sure "show servers state" hides private bits
  * BUG/MAJOR: stick-tables: do not try to index a server name for applets
  * DOC: configuration: missing 'if' in tcp-request content example
  * BUG/MINOR: backend: only enforce turn-around state when not redispatching
  * BUG/MINOR: smtpchk: SMTP Service check should gracefully close SMTP transaction
  * MINOR: smtpchk: Update expect rule to fully match replies to EHLO commands
  * BUG/MINOR: mux-h1: Account consumed output data on synchronous connection error
  * BUILD: http_fetch: silence an uninitiialized warning with gcc-4/5/6 at -Os
  * BUG/MINOR: http-fetch: Update method after a prefetch in smp_fetch_meth()
  * BUILD: h1: silence an initiialized warning with gcc-4.7 and -Os
  * BUG/MEDIUM: lua: handle stick table implicit arguments right.
  * BUG/MEDIUM: lua: Don't crash in hlua_lua2arg_check on failure
  * DOC: config: Fix pgsql-check documentation to make user param mandatory
  * BUG/MINOR: checks: update pgsql regex on auth packet
  * [RELEASE] Released version 2.4.19
  * BUG/MEDIUM: resolvers: Remove aborted resolutions from query_ids tree
  * REGTESTS: 4be_1srv_smtpchk_httpchk_layer47errors: Return valid SMTP replies
  * BUG/MINOR: log: improper behavior when escaping log data
  * SCRIPTS: announce-release: update some URLs to https
  * BUILD: fd: fix a build warning on the DWCAS
  * BUG/MEDIUM: captures: free() an error capture out of the proxy lock
  * DOC: fix TOC in starter guide for subsection 3.3.8. Statistics
  * REGTESTS: ssl/log: test the log-forward with SSL
  * BUG/MEDIUM: sink: bad init sequence on tcp sink from a ring.
  * REGTESTS: log: test the log-forward feature
  * REGTESTS: healthcheckmail: Relax matching on the healthcheck log message
  * BUG/MINOR: stats: fixing stat shows disabled frontend status as 'OPEN'
  * MINOR: listener: small API change
  * BUG/MEDIUM: proxy: ensure pause_proxy() and resume_proxy() own PROXY_LOCK
  * CI: cirrus-ci: bump FreeBSD image to 13-1
  * BUG/MINOR: signals/poller: ensure wakeup from signals
  * BUG/MINOR: signals/poller: set the poller timeout to 0 when there are signals
  * BUG/MINOR: task: always reset a new tasklet's call date
  * BUG/MINOR: h1: Support headers case adjustment for TCP proxies
  * BUILD: makefile: enable crypt(3) for NetBSD
  * BUG/MINOR: regex: Properly handle PCRE2 lib compiled without JIT support
  * BUG/MINOR: mux-fcgi: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h1: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h2: fix the "show fd" dest buffer for the subscriber
  * BUG/MEDIUM: mux-h1: always use RST to kill idle connections in pools
  * REGTESTS: http_request_buffer: Add a barrier to not mix up log messages
  * BUG/MEDIUM: mux-h1: do not refrain from signaling errors after end of input
  * BUG/MINOR: tcpcheck: Disable QUICKACK for default tcp-check (with no rule)
  * BUG/MINOR: hlua: Rely on CF_EOI to detect end of message in HTTP applets
  * BUG/MEDIUM: peers: Don't start resync on reload if local peer is not up-to-date
  * BUG/MEDIUM: peers: Don't use resync timer when local resync is in progress
  * BUG/MEDIUM: peers: Add connect and server timeut to peers proxy
  * BUG/MEDIUM: spoe: Properly update streams waiting for a ACK in async mode
  * DOC: configuration: do-resolve doesn't work with a port in the string
  * REGTESTS: Fix prometheus script to perform HTTP health-checks
  * BUG/MINOR: tcpcheck: Disable QUICKACK only if data should be sent after connect
  * BUG/MINOR: resolvers: return the correct value in resolvers_finalize_config()
  * BUG/MAJOR: mworker: fix infinite loop on master with no proxies.
  * BUG/MAJOR: log-forward: Fix log-forward proxies not fully initialized
  * BUG/MEDIUM: mux-h2: do not fiddle with -&gt;dsi to indicate demux is idle
  * BUG/MEDIUM: http-ana: fix crash or wrong header deletion by http-restrict-req-hdr-names
  * BUILD: http: silence an uninitialized warning affecting gcc-5
  * BUG/MEDIUM: ring: fix too lax 'size' parser
  * BUILD: debug: silence warning on gcc-5
  * BUG/MEDIUM: task: relax one thread consistency check in task_unlink_wq()
  * BUG/MEDIUM: poller: use fd_delete() to release the poller pipes
  * BUILD: cfgparse: always defined _GNU_SOURCE for sched.h and crypt.h
  * BUG/MINOR: sink: fix a race condition between the writer and the reader
  * BUG/MINOR: ring/cli: fix a race condition between the writer and the reader
  * BUG/MEDIUM: proxy: Perform a custom copy for default server settings
  * REORG: server: Export srv_settings_cpy() function
  * MINOR: server: Constify source server to copy its settings
  * BUG/MEDIUM: dns: Properly initialize new DNS session
  * BUG/MINOR: peers: Use right channel flag to consider the peer as connected
  * BUG/MEDIUM: peers: limit reconnect attempts of the old process on reload
  * MINOR: peers: Use a dedicated reconnect timeout when stopping the local peer
  * BUG/MEDIUM: pattern: only visit equivalent nodes when skipping versions
  * MINOR: ebtree: add ebmb_lookup_shorter() to pursue lookups
  * MINOR: http-htx: Use new HTTP functions for the scheme based normalization
  * BUG/MEDIUM: h1: Improve authority validation for CONNCET request
  * MINOR: http: Add function to detect default port
  * MINOR: http: Add function to get port part of a host
  * BUG/MEDIUM: mworker: use default maxconn in wait mode
  * [RELEASE] Released version 2.4.18
  * BUG/MINOR: sockpair: wrong return value for fd_send_uxst()
  * BUG/MINOR: backend: Fallback on RR algo if balance on source is impossible
  * BUILD: add detection for unsupported compiler models
  * BUG/MEDIUM: mworker: proc_self incorrectly set crashes upon reload
  * REGTESTS: Fix some scripts to be compatible with 2.4 and prior
  * BUG/MINOR: tools: fix statistical_prng_range()'s output range
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds (try 2)
  * BUILD: makefile: Fix install(1) handling for OpenBSD/NetBSD/Solaris/AIX
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds
  * MEDIUM: mworker: set the iocb of the socketpair without using fd_insert()
  * BUG/MEDIUM: mux-h1: Handle connection error after a synchronous send
  * BUG/MEDIUM: http-ana: Don't wait to have an empty buf to switch in TUNNEL state
  * BUG/MINOR: mux-h1: Be sure to commit htx changes in the demux buffer
  * REGTEESTS: filters: Fix CONNECT request in random-forwarding script
  * BUG/MEDIUM: http-fetch: Don't fetch the method if there is no stream
  * BUG/MINOR: http-htx: Fix scheme based normalization for URIs wih userinfo
  * BUG/MINOR: peers: fix possible NULL dereferences at config parsing
  * BUG/MINOR: http-act: Properly generate 103 responses when several rules are used
  * BUG/MINOR: http-check: Preserve headers if not redefined by an implicit rule
  * BUG/MINOR: peers/config: always fill the bind_conf's argument
  * MINOR: fd: Add BUG_ON checks on fd_insert()
  * CI: re-enable gcc asan builds
  * BUILD: Makefile: Add Lua 5.4 autodetect
  * BUG/MEDIUM: ssl/fd: unexpected fd close using async engine
  * MINOR: fd: add a new FD_DISOWN flag to prevent from closing a deleted FD
  * BUG/MINOR: http-fetch: Use integer value when possible in "method" sample fetch
  * BUG/MINOR: http-ana: Set method to HTTP_METH_OTHER when an HTTP txn is created
  * BUG/MINOR: ssl: Do not look for key in extra files if already in pem
  * MEDIUM: mux-h2: try to coalesce outgoing WINDOW_UPDATE frames
  * BUG/MEDIUM: ssl/cli: crash when crt inserted into a crt-list
  * BUG/MINOR: tcp-rules: Make action call final on read error and delay expiration
  * BUG/MINOR: cli/stats: add missing trailing LF after "show info json"
  * BUG/MINOR: server: do not enable DNS resolution on disabled proxies
  * BUG/MINOR: cli/stats: add missing trailing LF after JSON outputs
  * REGTESTS: healthcheckmail: Relax health-check failure condition
  * REGTESTS: healthcheckmail: Update the test to be functionnal again
  * BUG/MINOR: checks: Properly handle email alerts in trace messages
  * BUG/MINOR: trace: Test server existence for health-checks to get proxy
  * BUG/MEDIUM: mailers: Set the object type for check attached to an email alert
  * BUILD: compiler: implement unreachable for older compilers too
  * REGTESTS: restrict_req_hdr_names: Extend supported versions
  * REGTESTS: http_abortonclose: Extend supported versions
  * BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_cert I/O handler
  * BUG/MINOR: ssl_ckch: Dump cert transaction only once if show command yield
  * REGTESTS: http_request_buffer: Increase client timeout to wait "slow" clients
  * REGTESTS: abortonclose: Add a barrier to not mix up log messages
  * MEDIUM: http-ana: Always report rewrite failures as PRXCOND in logs
  * BUG/MEDIUM: ssl/crt-list: Rework 'add ssl crt-list' to handle full buffer cases
  * BUG/MEDIUM: ssl_ckch: Rework 'commit ssl cert' to handle full buffer cases
  * BUG/MINOR: ssl_ckch: Don't duplicate path when replacing a cert entry
  * BUG/MEDIUM: ssl_ckch: Don't delete a cert entry if it is being modified
  * BUG/MINOR: ssl_ckch: Free error msg if commit changes on a cert entry fails
  * DOC: intro: adjust the numbering of paragrams to keep the output ordered
  * DOC: peers: fix port number and addresses on new peers section format
  * DOC: peers: clarify when entry expiration date is renewed.
  * DOC: peers: indicate that some server settings are not usable
  * SCRIPTS: make publish-release try to launch make-releases-json
  * SCRIPTS: add make-releases-json to recreate a releases.json file in download dirs
  * REGTESTS: Do not use REQUIRE_VERSION for HAProxy 2.5+ (2)
  * BUG/MEDIUM: sample: Fix adjusting size in word converter
  * BUG/MEDIUM: peers: prevent unitialized multiple listeners on peers section
  * BUG/MEDIUM: peers: fix segfault using multiple bind on peers sections
  * BUG/MEDIUM: resolvers: Don't defer resolutions release in deinit function
  * BUG/MEDIUM: http: Properly reject non-HTTP/1.x protocols
  * BUG/MEDIUM: tools: Fix `inet_ntop` usage in sa2str
  * CI: determine actual OpenSSL version dynamically
  * BUILD/MINOR: cpuset fix build for FreeBSD 13.1
  * BUG/MINOR: peers: fix error reporting of "bind" lines
  * BUG/MINOR: cfgparse: abort earlier in case of allocation error
  * BUG/MINOR: check: Reinit the buffer wait list at the end of a check
  * BUG/MEDIUM: config: Reset outline buffer size on realloc error in readcfgfile()
  * REGTESTS: abortonclose: Fix some race conditions
  * BUG/MINOR: ssl: Fix crash when no private key is found in pem
  * MINOR: tools: add get_exec_path implementation for solaris based systems.
  * BUILD: fix build warning on solaris based systems with __maybe_unused.
  * MEDIUM: http-ana: Add a proxy option to restrict chars in request header names
  * CI: determine actual LibreSSL version dynamically
  * [RELEASE] Released version 2.4.17
  * CLEANUP: mux-h1: Fix comments and error messages for global options
  * BUG/MEDIUM: wdt: don't trigger the watchdog when p is unitialized
  * BUG/MINOR: conn_stream: do not confirm a connection from the frontend path
  * BUG/MINOR: server: Make SRV_STATE_LINE_MAXLEN value from 512 to 2kB (2000 bytes).
  * DOC: install: update gcc version requirements
  * BUG/MEDIUM: ssl: fix the gcc-12 broken fix :-(
  * BUILD: listener: shut report of possible null-deref in listener_accept()
  * BUILD: debug: work around gcc-12 excessive -Warray-bounds warnings
  * BUILD: ssl: work around bogus warning in gcc 12's -Wformat-truncation
  * CI: dynamically determine actual version of h2spec
  * DOC: fix typo "ant" for "and" in INSTALL
  * BUG/MINOR: map/cli: make sure patterns don't vanish under "show map"'s init
  * BUG/MINOR: map/cli: protect the backref list during "show map" errors
  * BUG/MEDIUM: cli: make "show cli sockets" really yield
  * BUG/MEDIUM: resolvers: make "show resolvers" properly yield
  * BUG/MINOR: tcp/http: release the expr of set-{src,dst}[-port]
  * DOC: config: Update doc for PR/PH session states to warn about rewrite failures
  * MINOR: mux-h2: report a trace event when failing to create a new stream
  * BUG/MINOR: mux-h2: mark the stream as open before processing it not after
  * BUG/MAJOR: dns: multi-thread concurrency issue on UDP socket
  * BUG/MEDIUM: mux-h1: Be able to handle trailers when C-L header was specified
  * BUG/MEDIUM: mux-fcgi: Be sure to never set EOM flag on an empty HTX message
  * SCRIPTS: announce-release: add URL of dev packages
  * CI: github actions: update LibreSSL to 3.5.2
  * [RELEASE] Released version 2.4.16
  * BUILD: opentracing: Fix OT build due to misuse of var_clear()
  * BUILD: proto_uxst: do not set unused flag
  * BUILD: sockpair: do not set unused flag
  * BUILD: fd: remove unused variable totlen in fd_write_frag_line()
  * CLEANUP: acl: Remove unused variable when releasing an acl expression
  * BUG/MINOR: pools: make sure to also destroy shared pools in pool_destroy_all()
  * BUG/MINOR: resolvers: Fix memory leak in resolvers_deinit()
  * BUILD: compiler: properly distinguish weak and global symbols
  * REGTESTS: fix the race conditions in be2dec.vtc ad field.vtc
  * MEDIUM: queue: use tasklet_instant_wakeup() to wake tasks
  * MINOR: task: add a new task_instant_wakeup() function
  * BUG/MINOR: rules: Fix check_capture() function to use the right rule arguments
  * DOC: remove my name from the config doc
  * BUG/MAJOR: connection: Never remove connection from idle lists outside the lock
  * BUG/MINOR: cache: Disable cache if applet creation fails
  * SCRIPTS: announce-release: add shortened links to pending issues
  * DOC: lua: update a few doc URLs
  * SCRIPTS: announce-release: update the doc's URL
  * BUG/MEDIUM: compression: Don't forget to update htx_sl and http_msg flags
  * BUG/MEDIUM: fcgi-app: Use http_msg flags to know if C-L header can be added
  * BUG/MEDIUM: stream: do not abort connection setup too early
  * BUILD: compiler: use a more portable set of asm(".weak") statements
  * BUILD: sched: workaround crazy and dangerous warning in Clang 14
  * BUG/MEDIUM: mux-h1: Don't request more room on partial trailers
  * BUG/MINOR: mux-h2: use timeout http-request as a fallback for http-keep-alive
  * BUG/MINOR: mux-h2: do not use timeout http-keep-alive on backend side
  * BUILD: debug: mark the __start_mem_stats/__stop_mem_stats symbols as weak
  * BUG/MINOR: cache: do not display expired entries in "show cache"
  * BUG/MINOR: mux-h2: do not send GOAWAY if SETTINGS were not sent
  * CI: cirrus: switch to FreeBSD-13.0
  * CI: Update to actions/cache@v3
  * CI: Update to actions/checkout@v3
  * DEBUG: opentracing: show return values of all functions in the debug output
  * CLEANUP: opentracing: added variable to store variable length
  * CLEANUP: opentracing: added flt_ot_smp_init() function
  * CLEANUP: opentracing: removed unused function flt_ot_var_get()
  * CLEANUP: opentracing: removed unused function flt_ot_var_unset()
  * DOC: opentracing: corrected comments in function descriptions
  * EXAMPLES: opentracing: refined shell scripts for testing filter performance
  * BUG/MINOR: opentracing: setting the return value in function flt_ot_var_set()
  * BUG/MEDIUM: http-act: Don't replace URI if path is not found or invalid
  * BUG/MEDIUM: http-conv: Fix url_enc() to not crush const samples
  * BUG/MEDIUM: mux-h1: Set outgoing message to DONE when payload length is reached
  * BUG/MEDIUM: promex: Be sure to never set EOM flag on an empty HTX message
  * BUG/MEDIUM: hlua: Don't set EOM flag on an empty HTX message in HTTP applet
  * BUG/MEDIUM: stats: Be sure to never set EOM flag on an empty HTX message
  * BUG/MINOR: fcgi-app: Don't add C-L header on response to HEAD requests
  * CI: github actions: update OpenSSL to 3.0.2
  * BUG/MAJOR: mux_pt: always report the connection error to the conn_stream
  * BUG/MINOR: cli/stream: fix "shutdown session" to iterate over all threads
  * BUG/MINOR: samples: add missing context names for sample fetch functions
  * DOC: reflect H2 timeout changes
  * BUG/MEDIUM: mux-h2: make use of http-request and keep-alive timeouts
  * MEDIUM: mux-h2: slightly relax timeout management rules
  * BUG/MEDIUM: stream-int: do not rely on the connection error once established
  * BUG/MEDIUM: mux-h1: Properly detect full buffer cases during message parsing
  * BUG/MEDIUM: mux-fcgi: Properly handle return value of headers/trailers parsing
  * BUG/MINOR: tools: url2sa reads too far when no port nor path
  * DOC: config: Explictly add supported MQTT versions
  * MEDIUM: mqtt: support mqtt_is_valid and mqtt_field_value converters for MQTTv3.1
  * BUG/MEDIUM: trace: avoid race condition when retrieving session from conn-&gt;owner
  * BUG/MEDIUM: mux-h1: only turn CO_FL_ERROR to CS_FL_ERROR with empty ibuf
  * CI: github actions: switch to LibreSSL-3.5.1
  * BUG/MINOR: server/ssl: free the SNI sample expression
  * BUG/MINOR: tools: fix url2sa return value with IPv4
  * [RELEASE] Released version 2.4.15
  * BUILD: tree-wide: mark a few numeric constants as explicitly long long
  * DOC: Fix usage/examples of deprecated ACLs
  * BUG/MINOR: stream: make the call_rate only count the no-progress calls
  * BUG/MINOR: session: fix theoretical risk of memleak in session_accept_fd()
  * BUG/MAJOR: mux-pt: Always destroy the backend connection on detach
  * DEBUG: stream: Fix stream trace message to print response buffer state
  * DEBUG: stream: Add the missing descriptions for stream trace events
  * BUG/MEDIUM: mcli: Properly handle errors and timeouts during reponse processing
  * DEBUG: cache: Update underlying buffer when loading HTX message in cache applet
  * BUG/MINOR: promex: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cache: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: stats: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: hlua: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cli: shows correct mode in "show sess"
  * BUG/MINOR: add missing modes in proxy_mode_str()
  * BUILD: pools: fix backport of no-memory-trimming on non-linux OS
  * MINOR: pools: add a new global option "no-memory-trimming"
  * BUG/MEDIUM: pools: fix ha_free() on area in the process of being freed
  * BUG/MINOR: pool: always align pool_heads to 64 bytes
  * REGTESTS: fix the race conditions in secure_memcmp.vtc
  * REGTESTS: fix the race conditions in normalize_uri.vtc
  * BUG/MEDIUM: htx: Fix a possible null derefs in htx_xfer_blks()
  * CI: github actions: use cache for SSL libs
  * CI: github actions: use cache for OpenTracing
  * CI: github actions: add OpenTracing builds
  * CI: github actions: add the output of $CC -dM -E-
  * [RELEASE] Released version 2.4.14
  * BUG/MEDIUM: stream: Abort processing if response buffer allocation fails
  * CI: github: enable pool debugging by default
  * REGTESTS: fix the race conditions in 40be_2srv_odd_health_checks
  * BUG/MINOR: proxy: preset the error message pointer to NULL in parse_new_proxy()
  * BUG/MAJOR: mux-h2: Be sure to always report HTX parsing error to the app layer
  * BUG/MEDIUM: mux-h1: Don't wake h1s if mux is blocked on lack of output buffer
  * BUG/MEDIUM: htx: Be sure to have a buffer to perform a raw copy of a message
  * BUG/MINOR: tools: url2sa reads ipv4 too far
  * BUG/MINOR: mailers: negotiate SMTP, not ESMTP
  * CI: github actions: update OpenSSL to 3.0.1
  * CI: github: switch to OpenSSL 3.0.0
  * CI: github actions: relax OpenSSL-3.0.0 version comparision
  * CI: github actions: -Wno-deprecated-declarations with OpenSSL 3.0.0
  * CI: github actions: add OpenSSL-3.0.0 builds
  * BUILD: adopt script/build-ssl.sh for OpenSSL-3.0.0beta2
  * BUILD: fix compilation for OpenSSL-3.0.0-alpha17
  * CI: ssl: keep the old method for ancient OpenSSL versions
  * CI: ssl: do not needlessly build the OpenSSL docs
  * CI: ssl: enable parallel builds for OpenSSL on Linux
  * BUG/MAJOR: compiler: relax alignment constraints on certain structures
  * BUG/MEDIUM: fd: always align fdtab[] to 64 bytes
  * BUG/MEDIUM: resolvers: Really ignore trailing dot in domain names
  * BUG/MINOR: sink: Use the right field in appctx context in release callback
  * BUG/MINOR: mworker: fix a FD leak of a sockpair upon a failed reload
  * BUG/MEDIUM: mworker: close unused transferred FDs on load failure
  * MINOR: sock: move the unused socket cleaning code into its own function
  * [RELEASE] Released version 2.4.13
  * BUG/MINOR: mux-h2: update the session's idle delay before creating the stream
  * BUG/MEDIUM: h2/hpack: fix emission of HPACK DTSU after settings change
  * REGTESTS: peers: leave a bit more time to peers to synchronize
  * BUG/MAJOR: spoe: properly detach all agents when releasing the applet
  * BUG/MAJOR: http/htx: prevent unbounded loop in http_manage_server_side_cookies
  * BUG/MEDIUM: listener: read-lock the listener during accept()
  * MINOR: listener: replace the listener's spinlock with an rwlock
  * BUG/MINOR: mworker: does not erase the pidfile upon reload
  * BUG/MAJOR: sched: prevent rare concurrent wakeup of multi-threaded tasks
  * DEBUG: pools: replace the link pointer with the caller's address on pool_free()
  * DEBUG: pools: let's add reverse mapping from cache heads to thread and pool
  * DEBUG: pools: add extra sanity checks when picking objects from a local cache
  * BUG/MINOR: pools: always flush pools about to be destroyed
  * BUG/MEDIUM: mworker: don't lose the stats socket on failed reload
  * DEBUG: pools: add new build option DEBUG_POOL_INTEGRITY
  * BUILD: debug/cli: condition test of O_ASYNC to its existence
  * DEBUG: cli: add a new "debug dev fd" expert command
  * MEDIUM: h2/hpack: emit a Dynamic Table Size Update after settings change
  * BUG/MEDIUM: mcli: always realign wrapping buffers before parsing them
  * BUG/MEDIUM: mcli: do not try to parse empty buffers
  * BUG/MEDIUM: cli: Never wait for more data on client shutdown
  * BUG/MINOR: cli: avoid O(bufsize) parsing cost on pipelined commands
  * MINOR: channel: add new function co_getdelim() to support multiple delimiters
  * MEDIUM: cli: yield between each pipelined command
  * BUG/MEDIUM: server: avoid changing healthcheck ctx with set server ssl
  * BUILD/MINOR: fix solaris build with clang.
  * BUG/MEDIUM: htx: Adjust length to add DATA block in an empty HTX buffer
  * BUG/MEDIUM: connection: properly leave stopping list on error
  * [RELEASE] Released version 2.4.12
  * BUG/MAJOR: mux-h1: Don't decrement .curr_len for unsent data
  * BUG/MEDIUM: mworker: don't use _getsocks in wait mode
  * [RELEASE] Released version 2.4.11
  * BUG/MEDIUM: http-ana: Preserve response's FLT_END analyser on L7 retry
  * BUG/MINOR: cli: fix _getsocks with musl libc
  * BUILD/MINOR: tools: solaris build fix on dladdr.
  * BUILD/MINOR: cpuset FreeBSD 14 build fix.
  * BUG/MEDIUM: ssl: free the ckch instance linked to a server
  * BUG/MINOR: ssl: free the fields in srv-&gt;ssl_ctx
  * MINOR: debug: add support for -dL to dump library names at boot
  * MINOR: debug: add ability to dump loaded shared libraries
  * MINOR: compat: detect support for dl_iterate_phdr()
  * BUG/MINOR: mux-h1: Fix splicing for messages with unknown length
  * BUG/MEDIUM: mux-h1: Fix splicing by properly detecting end of message
  * BUILD: makefile: add -Wno-atomic-alignment to work around clang abusive warning
  * MINOR: proxy: add option idle-close-on-response
  * REGTESTS: ssl: fix ssl_default_server.vtc
  * BUG/MEDIUM: ssl: initialize correctly ssl w/ default-server
  * DOC: fix misspelled keyword "resolve_retries" in resolvers
  * BUILD: ssl: unbreak the build with newer libressl
  * BUILD: cli: clear a maybe-unused  warning on some older compilers
  * BUG/MINOR: pools: don't mark ourselves as harmless in DEBUG_UAF mode
  * BUG/MEDIUM: backend: fix possible sockaddr leak on redispatch
  * [RELEASE] Released version 2.4.10
  * BUG/MINOR: backend: restore the SF_SRV_REUSED flag original purpose
  * BUG/MINOR: backend: do not set sni on connection reuse
  * MINOR: pools: work around possibly slow malloc_trim() during gc
  * BUG/MEDIUM: mworker/cli: crash when trying to access an old PID in prompt mode
  * DOC: config: retry-on list is space-delimited
  * DOC: config: Specify %Ta is only available in HTTP mode
  * DOC: spoe: Clarify use of the event directive in spoe-message section
  * BUG/MINOR: cli/server: Don't crash when a server is added with a custom id
  * IMPORT: slz: use the correct CRC32 instruction when running in 32-bit mode
  * BUILD: tree-wide: avoid warnings caused by redundant checks of obj_types
  * MINOR: cli: "show version" displays the current process version
  * CI: Github Actions: temporarily disable BoringSSL builds
  * BUILD: bug: Fix error when compiling with -DDEBUG_STRICT_NOCRASH
  * MINOR: mux-h1: Improve H1 traces by adding info about http parsers
  * BUG/MAJOR: segfault using multiple log forward sections.
  * BUG/MEDIUM: resolvers: Detach query item on response error
  * BUG/MINOR: server: Don't rely on last default-server to init server SSL context
  * BUG/MEDIUM: cli: Properly set stream analyzers to process one command at a time
  * BUILD/MINOR: server: fix compilation without SSL
  * [RELEASE] Released version 2.4.9
  * BUG/MINOR: cache: Fix loop on cache entries in "show cache"
  * MINOR: promex: backend aggregated server check status
  * MINOR: server: add ws keyword
  * MEDIUM: server/backend: implement websocket protocol selection
  * MINOR: connection: add alternative mux_ops param for conn_install_mux_be
  * MINOR: connection: implement function to update ALPN
  * MINOR: stream/mux: implement websocket stream flag
  * BUG/MINOR: ssl: make SSL counters atomic
  * MINOR: shctx: add a few BUG_ON() for consistency checks
  * BUG/MINOR: shctx: do not look for available blocks when the first one is enough
  * BUG/MEDIUM: shctx: leave the block allocator when enough blocks are found
  * BUG/MEDIUM: cache/cli: make "show cache" thread-safe
  * BUG/MEDIUM: mux-h2: always process a pending shut read
  * BUG/MEDIUM: ssl: abort with the correct SSL error when SNI not found
  * CLEANUP: ssl: fix wrong #else commentary
  * BUG/MINOR: ssl: free correctly the sni in the backend SSL cache
  * BUG/MEDIUM: ssl: backend TLS resumption with sni and TLSv1.3
  * BUILD: makefile: simplify detection of libatomic
  * BUG/MEDIUM: mux-h1: Handle delayed silent shut in h1_process() to release H1C
  * BUG/MINOR: stick-table/cli: Check for invalid ipv6 key
  * BUG/MEDIUM: connection: make cs_shutr/cs_shutw//cs_close() idempotent
  * BUG/MINOR: mux-h2: Fix H2_CF_DEM_SHORT_READ value
  * BUG/MINOR: mworker: doesn't launch the program postparser
  * BUG/MEDIUM: conn-stream: Don't reset CS flags on close
  * MINOR: mux-h1: Slightly Improve H1 traces
  * DOC: lua: Be explicit with the Reply object limits
  * Revert "BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back"
  * BUG/MINOR: http-ana: Apply stop to the current section for http-response rules
  * DOC: config: Fix typo in ssl_fc_unique_id description
  * BUG/MINOR: cache: properly ignore unparsable max-age in quotes
  * BUG/MINOR: resolvers: throw log message if trash not large enough for query
  * BUG/MINOR: resolvers: fix sent messages were counted twice
  * BUG/MEDIUM: mux-h2: reject upgrade if no RFC8441 support
  * MINOR: mux-h2: add trace on extended connect usage
  * MINOR: mux-h2: perform a full cycle shutdown+drain on close
  * MINOR: connection: add a new CO_FL_WANT_DRAIN flag to force drain on close</changelog>
  <changelog author="varkoly@suse.com" date="1692014400">- VUL-0: CVE-2023-40225: haproxy: reject any empty content-length header value
  (bsc#1214102) Apply upstream patch adapted for 2.4.22 (patch h2_parse_cont_len_header() instead of http_parse_cont_len_header())
  Add patch: 0001-BUG-MAJOR-http-reject-any-empty-content-length-heade.patch</changelog>
  <changelog author="varkoly@suse.com" date="1701345600">- VUL-0: CVE-2023-45539: haproxy: misinterpretation of a path_end rule with # as part of the URI component
  (bsc#1217653) Apply upstream patch.
  Add patch: 0001-BUG-MINOR-h1-do-not-accept-as-part-of-the-URI-compon.patch</changelog>
</package>
<package pkgid="70a46549d0ba581bd6318d12f1a04a0405626e45e8e7dd280df45ec3a2b06d41" name="haproxy" arch="s390x">
  <version epoch="0" ver="2.4.22+git0.f8e3218e2" rel="150400.3.19.1"/>
  <changelog author="mrueckert@suse.de" date="1614772800">- Update to version 2.3.6+git0.7851701ed:
  * [RELEASE] Released version 2.3.6
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on read error/timeout
  * BUG/MINOR: mux-h2: Fix typo in scheme adjustment
  * DOC: spoe: Add a note about fragmentation support in HAProxy
  * BUG/MEDIUM: spoe: Kill applets if there are pending connections and nbthread &gt; 1
  * BUG/MINOR: connection: Use the client's dst family for adressless servers
  * BUG/MINOR: tcp-act: Don't forget to set the original port for IPv4 set-dst rule
  * BUG/MINOR: http-ana: Only consider dst address to process originalto option
  * BUG/MINOR: mux-h1: Immediately report H1C errors from h1_snd_buf()
  * BUG/MINOR: stats: fix compare of no-maint url suffix
  * CLEANUP: muxes: Remove useless if condition in show_fd function
  * BUG/MINOR: ssl: potential null pointer dereference in ckchs_dup()
  * BUG/MEDIUM: resolvers: Reset address for unresolved servers
  * BUG/MEDIUM: resolvers: Reset server address and port for obselete SRV records
  * BUG/MINOR: resolvers: new callback to properly handle SRV record errors
  * BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record
  * BUG/MINOR: resolvers: Fix condition to release received ARs if not assigned
  * BUG/MINOR: fd: properly wait for !running_mask in fd_set_running_excl()
  * BUG/MINOR: proxy: wake up all threads when sending the hard-stop signal
  * BUG/MEDIUM: cli/shutdown sessions: make it thread-safe
  * BUG/MEDIUM: proxy: use thread-safe stream killing on hard-stop
  * BUG/MEDIUM: vars: make functions vars_get_by_{name,desc} thread-safe
  * BUG/MINOR: sample: secure convs that accept base64 string and var name as args
  * MINOR: Configure the `cpp` userdiff driver for *.[ch] in .gitattributes
  * BUG/MINOR: ssl/cli: potential null pointer dereference in "set ssl cert"
  * BUG/MEDIUM: mux-h1: Fix handling of responses to CONNECT other than 200-ok
  * BUG/MINOR: server: Be sure to cut the last parsed field of a server-state line
  * BUG/MINOR: server: Init params before parsing a new server-state line
  * BUG/MINOR: http-rules: Always replace the response status on a return action
  * BUG/MEDIUM: spoe: Resolve the sink if a SPOE logs in a ring buffer
  * BUG/MEDIUM: lists: Avoid an infinite loop in MT_LIST_TRY_ADDQ().
  * DOC: explain the relation between pool-low-conn and tune.idle-pool.shared
  * BUILD: ssl: introduce fine guard for OpenSSL specific SCTL functions
  * BUG/MINOR: sample: Always consider zero size string samples as unsafe
  * BUG/MEDIUM: checks: don't needlessly take the server lock in health_adjust()
  * BUG/MINOR: checks: properly handle wrapping time in __health_adjust()
  * BUG/MINOR: session: atomically increment the tracked sessions counter
  * BUG/MINOR: server: Remove RMAINT from admin state when loading server state
  * CLEANUP: channel: fix comment in ci_putblk.
  * DOC: tune: explain the origin of block size for ssl.cachesize
  * BUG/MINOR: server: Don't call fopen() with server-state filepath set to NULL
  * BUG/MINOR: cfgparse: do not mention "addr:port" as supported on proxy lines
  * BUG/MINOR: stats: revert the change on ST_CONVDONE
  * BUG/MEDIUM: config: don't pick unset values from last defaults section
  * CLEANUP: deinit: release global and per-proxy server-state variables on deinit
  * BUG/MINOR: server: Fix server-state-file-name directive
  * BUG/MINOR: backend: hold correctly lock when killing idle conn
  * BUG/MINOR: tools: Fix a memory leak on error path in parse_dotted_uints()
  * BUG/MINOR: server: re-align state file fields number
  * BUG/MEDIUM: mux-h1: Always set CS_FL_EOI for response in MSG_DONE state
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on internal errors
  * BUG/MINOR: intops: fix mul32hi()'s off-by-one
  * BUILD: ssl: guard SSL_CTX_set_msg_callback with SSL_CTRL_SET_MSG_CALLBACK macro
  * BUILD: ssl: guard SSL_CTX_add_server_custom_ext with special macro
  * BUILD: ssl: fix typo in HAVE_SSL_CTX_ADD_SERVER_CUSTOM_EXT macro
  * MINOR: check: do not ignore a connection header for http-check send</changelog>
  <changelog author="mrueckert@suse.de" date="1615896000">- Update to version 2.3.7+git0.2d39ce334:
  * [RELEASE] Released version 2.3.7
  * BUG/MINOR: resolvers: Add missing case-insensitive comparisons of DNS hostnames
  * MINOR: resolvers: Don't try to match immediatly renewed ADD items
  * MINOR: resolvers: Use milliseconds for cached items in resolver responses
  * BUG/MEDIUM: resolvers: Skip DNS resolution at startup if SRV resolution is set
  * BUG/MEDIUM: resolvers: Don't release resolution from a requester callbacks
  * MINOR: resolvers: Directly call srvrq_update_srv_state() when possible
  * MINOR: resolvers: Add function to change the srv status based on SRV resolution
  * MINOR: resolvers: Purge answer items when a SRV resolution triggers an error
  * MINOR: resolvers: Use a function to remove answers attached to a resolution
  * BUG/MEDIUM: resolvers: Trigger a DNS resolution if an ADD item is obsolete
  * BUG/MINOR; resolvers: Ignore DNS resolution for expired SRV item
  * MINOR: resolvers: new function find_srvrq_answer_record()
  * BUG/MEDIUM: resolvers: Fix the loop looking for an existing ADD item
  * BUG/MEDIUM: resolvers: Don't set an address-less server as UP
  * BUG/MINOR: resolvers: Unlink DNS resolution to set RMAINT on SRV resolution
  * BUG/MINOR: resolvers: Reset server address on DNS error only on status change
  * BUG/MINOR: resolvers: Consider server to have no IP on DNS resolution error
  * Revert "BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record"
  * CLEANUP: tcp-rules: add missing actions in the tcp-request error message
  * BUG/MINOR: tcpcheck: Fix double free on error path when parsing tcp/http-check
  * BUG/MINOR: session: Add some forgotten tests on session's listener
  * BUG/MINOR: proxy/session: Be sure to have a listener to increment its counters
  * BUG/MINOR: tcpcheck: Update .health threshold of agent inside an agent-check
  * BUG/MEDIUM: filters: Set CF_FL_ANALYZE on channels when filters are attached
  * BUILD: atomic/arm64: force the register pairs to use in __ha_cas_dw()
  * BUG/MEDIUM: stick-tables: fix ref counter in table entry using multiple http tracksc.
  * OPTIM: task: automatically adjust the default runqueue-depth to the threads
  * MINOR: task: give the scheduler a bit more flexibility in the runqueue size
  * MEDIUM: task: remove the tasks_run_queue counter and have one per thread
  * MEDIUM: ssl: implement xprt_set_used and xprt_set_idle to relax context checks
  * MINOR: xprt: add new xprt_set_idle and xprt_set_used methods
  * MEDIUM: muxes: mark idle conns tasklets with TASK_F_USR1
  * MINOR: task: add an application specific flag to the state: TASK_F_USR1
  * BUG/MEDIUM: ssl: properly remove the TASK_HEAVY flag at end of handshake
  * MINOR: ssl: mark the SSL handshake tasklet as heavy
  * MINOR: task: limit the number of subsequent heavy tasks with flag TASK_HEAVY
  * MEDIUM: backend: use a trylock when trying to grab an idle connection
  * MINOR: pools: double the local pool cache size to 1 MB
  * MEDIUM: pools: add CONFIG_HAP_NO_GLOBAL_POOLS and CONFIG_HAP_GLOBAL_POOLS
  * MEDIUM: streams: do not use the streams lock anymore
  * MINOR: streams: use one list per stream instead of a global one
  * MINOR: cli/streams: make "show sess" dump all streams till the new epoch
  * MINOR: stream: add an "epoch" to figure which streams appeared when
  * MINOR: dynbuf: pass offer_buffers() the number of buffers instead of a threshold
  * MINOR: dynbuf: use regular lists instead of mt_lists for buffer_wait
  * MINOR: dynbuf: make the buffer wait queue per thread
  * OPTIM: lb-leastconn: do not unlink the server if it did not change
  * OPTIM: lb-leastconn: do not take the server lock on take_conn/drop_conn
  * OPTIM: lb-first: do not take the server lock on take_conn/drop_conn
  * MINOR: lb/api: let callers of take_conn/drop_conn tell if they have the lock
  * MINOR: server: move actconns to the per-thread structure
  * OPTIM: server: switch the actconn list to an mt-list
  * MINOR: listener: refine the default MAX_ACCEPT from 64 to 4
  * MINOR: tasks: refine the default run queue depth
  * BUG/MEDIUM: session: NULL dereference possible when accessing the listener
  * MINOR: atomic: implement a more efficient arm64 __ha_cas_dw() using pairs
  * MINOR: atomic: add armv8.1-a atomics variant for cas-dw
  * BUG/MINOR: mt-list: always perform a cpu_relax call on failure
  * REORG: atomic: reimplement pl_cpu_relax() from atomic-ops.h
  * BUG/MINOR: ssl: don't truncate the file descriptor to 16 bits in debug mode
  * BUG/MINOR: hlua: Don't strip last non-LWS char in hlua_pushstrippedstring()
  * BUG/MINOR: backend: fix condition for reuse on mode HTTP</changelog>
  <changelog author="mrueckert@suse.de" date="1616673600">- Update to version 2.3.8+git0.e572195c7:
  * [RELEASE] Released version 2.3.8
  * BUG/MINOR: http_fetch: make hdr_ip() reject trailing characters
  * MINOR: tools: make url2ipv4 return the exact number of bytes parsed
  * BUG/MEDIUM: thread: Fix a deadlock if an isolated thread is marked as harmless
  * BUG/MEDIUM: fd: Take the fd_mig_lock when closing if no DWCAS is available.
  * CLEANUP: fd: remove unused fd_set_running_excl()
  * BUG/MEDIUM: fd: do not wait on FD removal in fd_delete()
  * MINOR: fd: remove the unneeded running bit from fd_insert()
  * MINOR: fd: make fd_clr_running() return the remaining running mask
  * BUG/MEDIUM: lua: Always init the lua stack before referencing the context
  * BUG/MEDIUM: debug/lua: Use internal hlua function to dump the lua traceback
  * MINOR: lua: Slightly improve function dumping the lua traceback
  * BUILD: ssl: guard ecdh functions with SSL_CTX_set_tmp_ecdh macro
  * BUG/MINOR: ssl: Prevent disk access when using "add ssl crt-list"
  * BUG/MEDIUM: debug/lua: Don't dump the lua stack if not dumpable
  * MEDIUM: lua: Use a per-thread counter to track some non-reentrant parts of lua
  * MINOR/BUG: mworker/cli: do not use the unix_bind prefix for the master CLI socket
  * BUG/MINOR: protocol: add missing support of dgram unix socket.
  * BUG/MEDIUM: freq_ctr/threads: use the global_now_ms variable
  * MINOR: time: also provide a global, monotonic global_now_ms timer
  * BUG/MEDIUM: mux-fcgi: Fix locking of idle_conns lock in the FCGI I/O callback
  * BUG/MINOR: freq_ctr/threads: make use of the last updated global time
  * MINOR: time: export the global_now variable</changelog>
  <changelog author="mrueckert@suse.de" date="1617105600">- Update to version 2.3.9+git1.afb63bc04:
  * BUILD: backend: fix build breakage in idle conn locking fix
  * [RELEASE] Released version 2.3.9
  * BUG/MEDIUM: time: make sure to always initialize the global tick
  * BUG/MINOR: stats: Apply proper styles in HTML status page.
  * BUG/MINOR: payload: Wait for more data if buffer is empty in payload/payload_lv
  * MEDIUM: backend: use a trylock to grab a connection on high FD counts as well
  * BUG/MEDIUM: mux-h1: make h1_shutw_conn() idempotent</changelog>
  <changelog author="mrueckert@suse.de" date="1619179200">- Update to version 2.3.10+git0.4764f0e4e:
  * [RELEASE] Released version 2.3.10
  * BUG/MEDIUM: peers: re-work refcnt on table to protect against flush
  * BUG/MEDIUM: peers: re-work connection to new process during reload.
  * BUG/MINOR: peers: remove useless table check if initial resync is finished
  * BUG/MEDIUM: mux-h2: Properly handle shutdowns when received with data
  * BUG/MINOR: mworker: don't use oldpids[] anymore for reload
  * BUG/MINOR: mworker/init: don't reset nb_oldpids in non-mworker cases
  * BUG/MEDIUM: config: fix cpu-map notation with both process and threads
  * BUG/MEDIUM: mux-h2: Fix dfl calculation when merging CONTINUATION frames
  * BUG/MAJOR: mux-h2: Properly detect too large frames when decoding headers
  * BUG/MINOR: server: free srv.lb_nodes in free_server
  * BUG/MINOR: mux-h1: Release idle server H1 connection if data are received
  * BUG/MINOR: logs: Report the true number of retries if there was no connection
  * BUG/MINOR: http_htx: Remove BUG_ON() from http_get_stline() function
  * BUG/MINOR: http-fetch: Make method smp safe if headers were already forwarded
  * BUG/MINOR: ssl-samples: Fix ssl_bc_* samples when called from a health-check
  * MINOR: connection: Make bc_http_major compatible with tcp-checks
  * BUG/MINOR: connection: Fix fc_http_major and bc_http_major for TCP connections
  * MINOR: logs: Add support of checks as session origin to format lf strings
  * BUG/MINOR: checks: Set missing id to the dummy checks frontend
  * BUG/MEDIUM: threads: Ignore current thread to end its harmless period
  * DOC: ssl: Certificate hot update only works on fronted certificates
  * BUG/MEDIUM: sample: Fix adjusting size in field converter
  * MINOR: No longer rely on deprecated sample fetches for predefined ACLs
  * DOC: clarify that compression works for HTTP/2
  * BUG/MINOR: tools: fix parsing "us" unit for timers
  * CONTRIB: halog: fix issue with array of type char
  * REGTESTS: ssl: mark set_ssl_cert_bundle.vtc as broken
  * DOC: Explicitly state only IPv4 are supported by forwardfor/originalto options
  * REGTESTS: ssl: "set ssl cert" and multi-certificates bundle
  * BUG/MINOR: ssl: Add missing free on SSL_CTX in ckch_inst_free
  * BUG/MINOR: http_fetch: make hdr_ip() resistant to empty fields
  * BUG/MINOR: ssl: Prevent removal of crt-list line if the instance is a default one
  * BUG/MINOR: ssl: Fix update of default certificate
  * BUILD: tcp: use IPPROTO_IPV6 instead of SOL_IPV6 on FreeBSD/MacOS
  * BUG/MINOR: tcp: fix silent-drop workaround for IPv6</changelog>
  <changelog author="mrueckert@suse.de" date="1620993600">- Update to version 2.4.0+git0.6cbbecf09:
  https://www.haproxy.com/blog/announcing-haproxy-2-4/
  for all the details see /usr/share/doc/packages/haproxy/CHANGELOG
- refreshed patches to apply cleanly again
  haproxy-1.6.0-makefile_lib.patch
  haproxy-1.6.0-sec-options.patch
  lua54.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1623931200">- Update to version 2.4.1+git0.1ce7d4925:
  * [RELEASE] Released version 2.4.1
  * BUG/MINOR: mux-h2/traces: bring back the lost "sent H2 REQ/RES" traces
  * BUG/MINOR: mux-h2/traces: bring back the lost "rcvd H2 REQ" trace
  * MINOR: mux-h2: obey http-ignore-probes during the preface
  * BUG/MINOR: stats: make "show stat typed desc" work again
  * CLEANUP: mux-h2/traces: better align user messages
  * MINOR: mux-h2/trace: report a few connection-level info during h2_init()
  * MINOR: connection: add helper conn_append_debug_info()
  * BUG/MINOR: server: explicitly set "none" init-addr for dynamic servers
  * BUG/MINOR: mux-h1: do not skip the error response on bad requests
  * MINOR: backend: only skip LB when there are actual connections
  * BUG/MAJOR: queue: set SF_ASSIGNED when setting strm-&gt;target on dequeue
  * CLEANUP: global: remove unused definition of stopping_task[]
  * BUG/MINOR: mworker: fix typo in chroot error message
  * BUG/MINOR: ssl: use atomic ops to update global shctx stats
  * BUG/MEDIUM: shctx: use at least thread-based locking on USE_PRIVATE_CACHE
  * BUG/MEDIUM: server: do not auto insert a dynamic server in px addr_node
  * BUG/MINOR: server: do not keep an invalid dynamic server in px ids tree
  * BUG/MEDIUM: server: do not forget to generate the dynamic servers ids
  * BUG/MEDIUM: server: clear dynamic srv on delete from proxy id/name trees
  * BUG/MEDIUM: server: extend thread-isolate over much of CLI 'add server'
  * BUG/MINOR: stick-table: insert srv in used_name tree even with fixed id
  * DOC: lua: Add a warning about buffers modification in HTTP
  * BUG/MAJOR: resolvers: segfault using server template without SRV RECORDs
  * MEDIUM: resolvers: add a ref between servers and srv request or used SRV record
  * MEDIUM: resolvers: add a ref on server to the used A/AAAA answer item
  * BUG/MINOR: resolvers: answser item list was randomly purged or errors
  * CLEANUP: l7-retries: do not test the buffer before calling b_alloc()
  * BUG/MINOR: mux-fcgi: Expose SERVER_SOFTWARE parameter by default
  * BUG/MAJOR: htx: Fix htx_defrag() when an HTX block is expanded
  * CLEANUP: pools: remove now unused seq and pool_free_list
  * BUG/MAJOR: pools: fix possible race with free() in the lockless variant
  * MEDIUM: pools: use a single pool_gc() function for locked and lockless
  * MINOR: pools: call malloc_trim() under thread isolation
  * MINOR: pools: do not maintain the lock during pool_flush()
  * BUG/MINOR: pools: make DEBUG_UAF always write to the to-be-freed location
  * BUG/MINOR: pools: fix a possible memory leak in the lockless pool_flush()
  * BUG/MEDIUM: compression: Add a flag to know the filter is still processing data
  * BUG/MEDIUM: compression: Properly get the next block to iterate on payload
  * BUG/MEDIUM: compression: Fix loop skipping unused blocks to get the next block
  * BUG/MEDIUM: opentracing: initialization before establishing daemon and/or chroot mode
  * Revert "BUG/MINOR: opentracing: initialization after establishing daemon mode"
  * BUG/MINOR: ssl: OCSP stapling does not work if expire too far in the future
  * BUILD: make tune.ssl.keylog available again
  * DOC: use the req.ssl_sni in examples
  * MINOR: errors: allow empty va_args for diag variadic macro
  * BUG/MAJOR: stream-int: Release SI endpoint on server side ASAP on retry
  * DOC/MINOR: move uuid in the configuration to the right alphabetical order
  * BUG/MINOR: vars: Be sure to have a session to get checks variables
  * CLEANUP: http-ana: Remove useless if statement about L7 retries
  * BUG/MINOR: proxy: Missing calloc return value check in chash_init_server_tree
  * BUG/MINOR: http: Missing calloc return value check in make_arg_list
  * BUG/MINOR: http: Missing calloc return value check while parsing redirect rule
  * BUG/MINOR: worker: Missing calloc return value check in mworker_env_to_proc_list
  * BUG/MINOR: compression: Missing calloc return value check in comp_append_type/algo
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request rule
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request/tcp-response
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_defproxy_cpy
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_parse_declare
  * BUG/MINOR: http: Missing calloc return value check in parse_http_req_capture
  * BUG/MINOR: ssl: Missing calloc return value check in ssl_init_single_engine
  * BUG/MINOR: peers: Missing calloc return value check in peers_register_table
  * BUG/MINOR: server: Missing calloc return value check in srv_parse_source
  * DOC: intro: Fix typo in starter guide
  * MINOR: cfgparse: Fail when encountering extra arguments in macro
  * MINOR: http-ana: Perform L7 retries because of status codes in response analyser
  * BUG/MINOR: http-ana: Handle L7 retries on refused early data before K/A aborts
  * BUG/MINOR: http-ana: Send the right error if max retries is reached on L7 retry
  * Revert "MEDIUM: http-ana: Deal with L7 retries in HTTP analysers"
  * BUG/MINOR: http-comp: Preserve HTTP_MSGF_COMPRESSIONG flag on the response
  * BUG/MEDIUM: filters: Exec pre/post analysers only one time per filter
  * BUILD/MINOR: opentracing: fixed build when using clang
  * BUG/MAJOR: server: prevent deadlock when using 'set maxconn server'
  * BUG/MEDIUM: ebtree: Invalid read when looking for dup entry</changelog>
  <changelog author="mrueckert@suse.de" date="1625659200">- Update to version 2.4.2+git0.553dee326:
  * [RELEASE] Released version 2.4.2
  * REGTESTS: add http scheme-based normalization test
  * MEDIUM: h2: apply scheme-based normalization on h2 requests
  * MEDIUM: h1-htx: apply scheme-based normalization on h1 requests
  * MEDIUM: http: implement scheme-based normalization
  * MINOR: http: implement http_get_scheme
  * Revert "MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules"
  * BUG/MINOR: cli: fix server name output in "show fd"
  * BUG/MEDIUM: sock: make sure to never miss early connection failures
  * DOC: stick-table: add missing documentation about gpt0 stored type
  * BUG/MINOR: peers: fix data_type bit computation more than 32 data_types
  * BUG/MINOR: stick-table: fix several printf sign errors dumping tables
  * DOC: config: use CREATE USER for mysql-check
  * BUG/MEDIUM: resolvers: Make 1st server of a template take part to SRV resolution
  * BUG/MINOR: mqtt: Support empty client ID in CONNECT message
  * BUG/MINOR: mqtt: Fix parser for string with more than 127 characters
  * BUG/MINOR: tcpcheck: Fix numbering of implicit HTTP send/expect rules
  * BUILD: Makefile: fix linkage for Haiku.
  * BUG/MINOR: checks: return correct error code for srv_parse_agent_check
  * MINOR: resolvers: Reset server IP on error in resolv_get_ip_from_response()
  * BUG/MINOR: resolvers: Reset server IP when no ip is found in the response
  * BUG/MINOR: resolvers: Always attach server on matching record on resolution
  * CLEANUP: dns: Remove a forgotten debug message
  * DOC: config: Add missing actions in "tcp-request session" documentation
  * MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules
  * REGTESTS: fix maxconn update with agent-check
  * BUG/MAJOR: server: fix deadlock when changing maxconn via agent-check
  * BUG/MINOR: cache: Correctly handle existing-but-empty 'accept-encoding' header
  * BUG/MINOR: server/cli: Fix locking in function processing "set server" command
  * BUG/MINOR: resolvers: Use resolver's lock in resolv_srvrq_expire_task()
  * BUG/MEDIUM: resolvers: Add a task on servers to check SRV resolution status
  * MINOR: resolvers: Remove server from named_servers tree when removing a SRV item
  * MINOR: resolvers: Clean server in a dedicated function when removing a SRV item
  * BUG/MEDIUM: server/cli: Fix ABBA deadlock when fqdn is set from the CLI
  * BUG/MINOR: server: Forbid to set fqdn on the CLI if SRV resolution is enabled
  * BUG/MINOR: server-state: load SRV resolution only if params match the config</changelog>
  <changelog author="mrueckert@suse.de" date="1629201600">- Update to version 2.4.3+git0.4dd5a5a6c:
    CVE-2021-39240 CVE-2021-39241 CVE-2021-39242
    (boo#1189366 boo#1189548 boo#1189549)
  * [RELEASE] Released version 2.4.3
  * REGTESTS: add a test to prevent h2 desync attacks
  * BUG/MEDIUM: h2: give :authority precedence over Host
  * BUG/MAJOR: h2: enforce stricter syntax checks on the :method pseudo-header
  * BUG/MAJOR: h2: verify that :path starts with a '/' before concatenating it
  * BUG/MAJOR: h2: verify early that non-http/https schemes match the valid syntax
  * MINOR: http: add a new function http_validate_scheme() to validate a scheme
  * DOC/MINOR: fix typo in management document
  * CLEANUP: assorted typo fixes in the code and comments
  * BUG/MEDIUM: cfgcheck: verify existing log-forward listeners during config check
  * BUG/MEDIUM: spoe: Fix policy to close applets when SPOE connections are queued
  * DOC: config: Fix 'http-response send-spoe-group' documentation
  * DOC: Improve the lua documentation
  * BUG/MINOR: tcpcheck: Properly detect pending HTTP data in output buffer
  * BUG/MINOR: buffer: fix buffer_dump() formatting
  * BUG/MEDIUM: spoe: Create a SPOE applet if necessary when the last one is released
  * MINOR: spoe: Add a pointer on the filter config in the spoe_agent structure
  * ADMIN: dyncookie: implement a simple dynamic cookie calculator
  * MINOR: server: unmark deprecated on enable health/agent cli
  * BUG/MINOR: server: update last_change on maint-&gt;ready transitions too
  * BUG/MINOR: server: remove srv from px list on CLI 'add server' error
  * BUILD: opentracing: fixed build when using pkg-config utility
  * DOC: internals: document the FD takeover process
  * BUG/MINOR: fd: protect fd state harder against a concurrent takeover
  * BUG/MINOR: pollers: always program an update for migrated FDs
  * BUG/MINOR: poll: fix abnormally high skip_fd counter
  * BUG/MINOR: select: fix excess number of dead/skip reported
  * BUG/MEDIUM: pollers: clear the sleeping bit after waking up, not before
  * BUG/MEDIUM: connection: close a rare race between idle conn close and takeover
  * BUG/MINOR: connection: Add missing error labels to conn_err_code_str
  * BUG/MEDIUM: mux-h2: Handle remaining read0 cases on partial frames
  * BUG/MINOR: mux-h1: Be sure to swap H1C to splice mode when rcv_pipe() is called
  * BUG/MINOR: mux-h2: Obey dontlognull option during the preface
  * BUG/MINOR: mux-h1: Obey dontlognull option for empty requests
  * BUG/MINOR: systemd: must check the configuration using -Ws
  * BUG/MINOR: resolvers: Use a null-terminated string to lookup in servers tree
  * BUG/MINOR: check: fix the condition to validate a port-less server
  * BUG/MINOR: stats: Add missing agent stats on servers
  * BUG/MEDIUM: ssl_sample: fix segfault for srv samples on invalid request
  * BUILD/MINOR: memprof fix macOs build.
  * BUG/MINOR: mworker: do not export HAPROXY_MWORKER_REEXEC across programs
  * BUG/MEDIUM: mworker: do not register an exit handler if exit is expected
  * BUILD: lua: silence a build warning with TCC
  * BUILD: add detection of missing important CFLAGS
  * BUG/MINOR: ssl: Default-server configuration ignored by server
  * MINOR: mux_h2: define config to disable h2 websocket support
  * BUILD: http_htx: fix ci compilation error with isdigit for Windows</changelog>
  <changelog author="mrueckert@suse.de" date="1631016000">- Update to version 2.4.4+git0.acb1d0bea: CVE-2021-40346 (boo#1189877)
  * [RELEASE] Released version 2.4.4
  * Revert "BUG/MINOR: stream-int: Don't block reads in si_update_rx() if chn may receive"
  * BUG/MAJOR: htx: fix missing header name length check in htx_add_header/trailer
  * CLEANUP: htx: remove comments about "must be &lt; 256 MB"
  * BUG/MINOR: config: reject configs using HTTP with bufsize &gt;= 256 MB
  * DOC: configuration: remove wrong tcp-request examples in tcp-response
  * BUG/MINOR: vars: fix set-var/unset-var exclusivity in the keyword parser
  * CLEANUP: Add missing include guard to signal.h
  * BUG/MINOR: tools: Fix loop condition in dump_text()
  * BUG/MINOR threads: Use get_(local|gm)time instead of (local|gm)time
  * BUG/MINOR: ebtree: remove dependency on incorrect macro for bits per long
  * MINOR: time: add report_idle() to report process-wide idle time
  * BUG/MINOR: time: fix idle time computation for long sleeps
  * BUG/MINOR: lua: use strlcpy2() not strncpy() to copy sample keywords
  * MINOR: compiler: implement an ONLY_ONCE() macro
  * BUG/MINOR: base64: base64urldec() ignores padding in output size check
  * BUG/MEDIUM: base64: check output boundaries within base64{dec,urldec}
  * BUG/MINOR: stick-table: fix the sc-set-gpt* parser when using expressions
  * MINOR: hlua: take the global Lua lock inside a global function
  * REGTESTS: abortonclose: after retries, 503 is expected, not close
  * REGTESTS: http_upgrade: fix incorrect expectation on TCP-&gt;H1-&gt;H2
  * BUG/MEDIUM: h2: match absolute-path not path-absolute for :path</changelog>
  <changelog author="mrueckert@suse.de" date="1633089600">- Update to version 2.4.5+git0.e74a1b34b:
  * [RELEASE] Released version 2.4.5
  * MINOR: tasks: catch TICK_ETERNITY with BUG_ON() in __task_queue()
  * BUG/MINOR: tcp-rules: Stop content rules eval on read error and end-of-input
  * BUG/MINOR: tcpcheck: Don't use arg list for default proxies during parsing
  * MINOR: arg: Be able to forbid unresolved args when building an argument list
  * BUG/MAJOR: lua: use task_wakeup() to properly run a task once
  * BUG/MEDIUM: lua: fix wakeup condition from sleep()
  * MINOR: Makefile: add MEMORY_POOLS to the list of DEBUG_xxx options
  * DOC: peers: fix doc "enable" statement on "peers" sections
  * BUG/MINOR: mux-h1/mux-fcgi: Sanitize TE header to only send "trailers"
  * MINOR: stream-int: Notify mux when the buffer is not stuck when calling rcv_buf
  * BUG/MEDIUM: stream-int: Defrag HTX message in si_cs_recv() if necessary
  * MINOR: htx: Add a function to know if the free space wraps
  * MINOR: htx: Add an HTX flag to know when a message is fragmented
  * MINOR: stream-int: Set CO_RFL transient/persistent flags apart in si_cs_rcv()
  * BUG/MEDIUM: stream: Stop waiting for more data if SI is blocked on RXBLK_ROOM
  * BUG/MEDIUM: stream-int: Notify stream that the mux wants more room to xfer data
  * BUG/MEDIUM: mux-h1: Adjust conditions to ask more space in the channel buffer
  * BUG/MINOR: stats: use refcount to protect dynamic server on dump
  * MINOR: server: return the next srv instance on free_server
  * BUG/MINOR: server: do not use refcount in free_server in stopping mode
  * MINOR: global: define MODE_STOPPING
  * MINOR: server: implement a refcount for dynamic servers
  * BUG/MINOR: http-ana: increment internal_errors counter on response error
  * BUG/MINOR: h1-htx: Fix a typo when request parser is reset
  * BUG/MEDIUM: leastconn: fix rare possibility of divide by zero
  * BUG/MINOR: server: allow 'enable health' only if check configured
  * BUILD: threads: fix -Wundef for _POSIX_PRIORITY_SCHEDULING on libmusl
  * BUILD: halog: fix a -Wundef warning on non-glibc systems
  * BUILD: compiler: fixed a missing test on  defined(__GNUC__)
  * BUILD: fix dragonfly build again on __read_mostly
  * BUG/MINOR: vars: do not talk about global section in CLI errors for set-var
  * BUG/MINOR: vars: truncate the variable name in error reports about scope.
  * BUG/MINOR: vars: properly set the argument parsing context in the expression
  * MINOR: sample: add missing ARGC_ entries
  * BUG/MINOR: vars: improve accuracy of the rules used to check expression validity
  * BUILD: tools: properly guard __GLIBC__ with defined()
  * BUILD: ssl: fix two remaining occurrences of #if USE_OPENSSL
  * BUILD: ssl: next round of build warnings on LIBRESSL_VERSION_NUMBER
  * BUILD/MINOR: regex: avoid a build warning on USE_PCRE2 with -Wundef
  * IMPORT: slz: silence a build warning with -Wundef
  * BUILD/MINOR: ssl: avoid a build warning on LIBRESSL_VERSION with -Wundef
  * BUILD/MINOR: defaults: eliminate warning on MAXHOSTNAMELEN with -Wundef
  * BUILD: activity: use #ifdef not #if on USE_MEMORY_PROFILING
  * MINOR: proc: setting the process to produce a core dump on FreeBSD.
  * MINOR: tools: add FreeBSD support to get_exec_path()
  * BUILD: tools: get the absolute path of the current binary on NetBSD.
  * BUG/MINOR: flt-trace: fix an infinite loop when random-parsing is set
  * BUG/MINOR: cli/payload: do not search for args inside payload
  * BUILD: ist: prevent gcc11 maybe-uninitialized warning on istalloc
  * BUG/MINOR: connection: prevent null deref on mux cleanup task allocation
  * DOC: management: certificate files must be sanitized before injection
  * BUG/MINOR: tcpcheck: Improve LDAP response parsing to fix LDAP check
  * BUG/MAJOR: mux-h1: Don't eval input data if an error was reported
  * MINOR: pools: use mallinfo2() when available instead of mallinfo()
  * MINOR: pools: automatically disable malloc_trim() with external allocators
  * CLEANUP: pools: factor all malloc_trim() calls into trim_all_pools()
  * BUG/MINOR: compat: make sure __WORDSIZE is always defined
  * BUG/MEDIUM: stream-int: Don't block SI on a channel policy if EOI is reached
  * CLEANUP: mux-h1: Remove condition rejecting upgrade requests with payload
  * MINOR: htx: Skip headers with no value when adding a header list to a message
  * BUG/MEDIUM: mux-h1: Remove "Upgrade:" header for requests with payload
  * BUG/MINOR: systemd: ExecStartPre must use -Ws
  * BUG/MINOR: filters: Set right FLT_END analyser depending on channel
  * BUG/MINOR: filters: Always set FLT_END analyser when CF_FLT_ANALYZE flag is set
  * BUG/MEDIUM: http-ana: Reset channels analysers when returning an error
  * BUG/MINOR: stream: Don't release a stream if FLT_END is still registered
  * BUG/MINOR: lua: Don't yield in channel.append() and channel.set()
  * BUG/MINOR: lua: Yield in channel functions only if lua context can yield
  * MINOR: lua: Add a flag on lua context to know the yield capability at run time</changelog>
  <changelog author="mrueckert@suse.de" date="1633348800">- Update to version 2.4.6+git0.d83fd76a1:
  * [RELEASE] Released version 2.4.6
  * BUG/MEDIUM: filters: Fix a typo when a filter is attached blocking the release</changelog>
  <changelog author="mrueckert@suse.de" date="1633348801">- Update to version 2.4.7+git0.b5e51a5e2:
  * [RELEASE] Released version 2.4.7
  * BUG/MEDIUM: http-ana: Clear request analyzers when applying redirect rule</changelog>
  <changelog author="mrueckert@suse.de" date="1635940800">- Update to version 2.4.8+git0.d1f8d41e0:
  * [RELEASE] Released version 2.4.8
  * SCRIPTS: git-show-backports: re-enable file-based filtering
  * DOC/peers: some grammar fixes for peers 2.1 spec
  * MINOR: stream: Improve dump of bogus streams
  * BUILD/MINOR: cpuset freebsd build fix
  * DOC: config: Fix alphabetical order of fc_* samples
  * BUG/MINOR: sample: fix backend direction flags consecutive to last fix
  * BUG/MEDIUM: sample: Cumulate frontend and backend sample validity flags
  * BUG/MEDIUM: stream-int: Block reads if channel cannot receive more data
  * BUG/MINOR: http: Authorization value can have multiple spaces after the scheme
  * BUG/MEDIUM: http-ana: Drain request data waiting the tarpit timeout expiration
  * MINOR: halog: Add support for extracting captures using -hdr
  * BUG/MINOR: halog: Add missing newlines in die() messages
  * CLEANUP: halog: Use consistent indentation in help()
  * MINOR: halog: Rename -qry to -query
  * DOC: halog: Move the `-qry` parameter into the correct section in help text
  * MINOR: halog: Add -qry parameter allowing to preserve the query string in -uX
  * BUG/MEDIUM: resolvers: Track api calls with a counter to free resolutions
  * BUG/MEDIUM: resolvers: Don't recursively perform requester unlink
  * MEDIUM: resolvers: remove the last occurrences of the "safe" argument
  * MEDIUM: resolvers: use a kill list to preserve the list consistency
  * CLEANUP: resolvers: replace all LIST_DELETE with LIST_DEL_INIT
  * CLEANUP: resolvers: simplify resolv_link_resolution() regarding requesters
  * CLEANUP: always initialize the answer_list
  * CLEANUP: resolvers: do not export resolv_purge_resolution_answer_records()
  * BUG/MEDIUM: mux-h1: Perform a connection shutdown when the h1c is released
  * BUG/MINOR: mux-h1: Save shutdown mode if the shutdown is delayed
  * BUILD: atomic: fix build on mac/arm64
  * BUG/MINOR: backend: fix improper insert in avail tree for always reuse
  * BUILD: fix compilation on NetBSD
  * MINOR: memprof: add one pointer size to the size of allocations
  * MINOR: memprof: report the delta between alloc and free on realloc()
  * BUG/MEDIUM: lua: fix memory leaks with realloc() on non-glibc systems
  * BUG/MINOR: mux-h2: do not prevent from sending a final GOAWAY frame
  * BUG/MINOR: task: do not set TASK_F_USR1 for no reason
  * BUG/MAJOR: buf: fix varint API post- vs pre- increment
  * BUG/MEDIUM: resolvers: always check a valid item in query_list
  * BUILD: resolvers: avoid a possible warning on null-deref
  * BUG/MAJOR: resolvers: add other missing references during resolution removal
  * MINOR: resolvers: merge address and target into a union "data"
  * BUG/MEDIUM: resolvers: use correct storage for the target address
  * BUG/MEDIUM: resolvers: fix truncated TLD consecutive to the API fix
  * MINOR: resolvers: fix the resolv_dn_label_to_str() API about trailing zero
  * BUG/MINOR: resolvers: do not reject host names of length 255 in SRV records
  * BUG/MEDIUM: resolver: make sure to always use the correct hostname length
  * MINOR: resolvers: fix the resolv_str_to_dn_label() API about trailing zero
  * BUG/MAJOR: dns: attempt to lock globaly for msg waiter list instead of use barrier
  * BUG/MAJOR: dns: tcp session can remain attached to a list after a free
  * BUG/MEDIUM: tcpcheck: Properly catch early HTTP parsing errors
  * Revert "CLEANUP: server: always include the storage for SSL settings"
  * BUG/MEDIUM: stream: Keep FLT_END analyzers if a stream detects a channel error
  * BUG/MEDIUM: cpuset: fix cpuset size for FreeBSD
  * BUG/MINOR: sample: Fix 'fix_tag_value' sample when waiting for more data
  * BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back
  * MINOR: initcall: Rename __GLOBL and __GLOBL1.
  * DOC: configuration: add clarification on escaping in keyword arguments
  * BUG/MEDIUM: mux_h2: Handle others remaining read0 cases on partial frames
  * BUG/MEDIUM: sample: properly verify that variables cast to sample
  * MINOR: sample: provide a generic var-to-sample conversion function
  * CLEANUP: sample: uninline sample_conv_var2smp_str()
  * CLEANUP: sample: rename sample_conv_var2smp() to *_sint
  * CLEANUP: server: always include the storage for SSL settings</changelog>
  <changelog author="varkoly@suse.com" date="1646740800">- (bsc#1196408) VUL-0: CVE-2022-0711: haproxy: Denial of service via set-cookie2 header
  o Apply upstream patch:
    0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch</changelog>
  <changelog author="varkoly@suse.com" date="1674043200">- VUL-0: CVE-2023-0056: haproxy: segfault DoS (bsc#1207181)
  o Apply upstream patch:
    0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch</changelog>
  <changelog author="varkoly@suse.com" date="1676030400">- VUL-0: serious vulnerability in the HTTP/1 parser (bsc#1208132)
  o Apply upstream patch:
    2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- The output buffer is not zero-initialized. If we don't clear reserved
  bytes, fcgi requests sent to backend will leak sensitive data.
  o Apply proposed patch:
    0001-output-buffer-is-not-zero-initialized.path</changelog>
  <changelog author="varkoly@suse.com" date="1681214400">- ECO: Maint: Update haproxy to latest maintenance release for all SLE15 (jsc#PED-3821)
- rebase and rename haproxy-1.6.0-sec-options.patch -&gt; haproxy-2.4.22-sec-options.patch
- remove patches covered by new release:
  lua54.patch
  0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch
  0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch
  0001-output-buffer-is-not-zero-initialized.path
  2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- Update to version 2.4.22+git0.f8e3218e2:
  * [RELEASE] Released version 2.4.22
  * BUG/CRITICAL: http: properly reject empty http header field names
  * CI: github: don't warn on deprecated openssl functions on windows
  * BUG/MEDIUM: stconn: Schedule a shutw on shutr if data must be sent first
  * DOC: proxy-protocol: fix wrong byte in provided example
  * DOC: config: 'http-send-name-header' option may be used in default section
  * DOC: config: fix option spop-check proxy compatibility
  * BUG/MEDIUM: cache: use the correct time reference when comparing dates
  * BUG/MEDIUM: stick-table: do not leave entries in end of window during purge
  * BUG/MINOR: ssl/crt-list: warn when a line is malformated
  * BUG/MEDIUM: ssl: wrong eviction from the session cache tree
  * BUG/MINOR: fcgi-app: prevent 'use-fcgi-app' in default section
  * [RELEASE] Released version 2.4.21
  * BUG/MINOR: sink: free the forwarding task on exit
  * BUILD: hpack: include global.h for the trash that is needed in debug mode
  * BUG/MINOR: mux-h2: add missing traces on failed headers decoding
  * BUG/MINOR: listener: close tiny race between resume_listener() and stopping
  * DOC: config: fix "Address formats" chapter syntax
  * BUG/MINOR: mux-fcgi: Correctly set pathinfo
  * DOC: config: fix aliases for protocol prefixes "udp4@" and "udp6@"
  * DOC: config: fix wrong section number for "protocol prefixes"
  * BUG/MINOR: listeners: fix suspend/resume of inherited FDs
  * BUG/MINOR: http-ana: make set-status also update txn-&gt;status
  * BUG/MINOR: http-fetch: Don't block HTTP sample fetch eval in HTTP_MSG_ERROR state
  * BUG/MINOR: http-ana: Report SF_FINST_R flag on error waiting the request body
  * BUG/MINOR: promex: Don't forget to consume the request on error
  * BUG/MINOR: resolvers: Wait the resolution execution for a do_resolv action
  * BUG/MINOR: h1-htx: Remove flags about protocol upgrade on non-101 responses
  * CLEANUP: htx: fix a typo in an error message of http_str_to_htx
  * BUG/MINOR: http: Memory leak of http redirect rules' format string
  * REGTEST: fix the race conditions in hmac.vtc
  * REGTEST: fix the race conditions in digest.vtc
  * REGTEST: fix the race conditions in json_query.vtc
  * BUG/MAJOR: buf: Fix copy of wrapping output data when a buffer is realigned
  * BUG/MINOR: http-fetch: Only fill txn status during prefetch if not already set
  * BUILD: makefile: sort the features list
  * BUILD: makefile: build the features list dynamically
  * BUG/MINOR: pool/stats: Use ullong to report total pool usage in bytes in stats
  * BUG/MEDIUM: mux-h2: Refuse interim responses with end-stream flag set
  * BUG/MINOR: ssl: Fix memory leak of find_chain in ssl_sock_load_cert_chain
  * LICENSE: wurfl: clarify the dummy library license.
  * BUG/MEDIUM: resolvers: Use tick_first() to update the resolvers task timeout
  * REGTESTS: startup: check maxconn computation
  * REGTESTS: fix the race conditions in iff.vtc
  * BUG/MAJOR: fcgi: Fix uninitialized reserved bytes
  * DOC: promex: Add missing backend metrics
  * MINOR: promex: introduce haproxy_backend_agg_check_status
  * BUG/MINOR: promex: create haproxy_backend_agg_server_status
  * BUG/MEDIUM: mworker: fix segv in early failure of mworker mode with peers
  * BUG/MINOR: ssl: Fix potential overflow
  * BUG/MEDIUM: ssl: Verify error codes can exceed 63
  * BUG/MINOR: resolvers: Don't wait periodic resolution on healthcheck failure
  * BUILD: peers: peers-t.h depends on stick-table-t.h
  * CI: github: change "ubuntu-latest" to "ubuntu-20.04"
  * BUG/MEDIIM: stconn: Flush output data before forwarding close to write side
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * [RELEASE] Released version 2.4.20
  * Revert "CI: determine actual OpenSSL version dynamically"
  * Revert "CI: switch to the "latest" LibreSSL"
  * SCRIPTS: announce-release: add a link to the data plane API
  * DOC: config: clarify the -m dir and -m dom pattern matching methods
  * DOC: config: clarify the fact that "retries" is not just for connections
  * DOC: config: explain how default matching method for ACL works
  * DOC: config: mention that a single monitor-uri rule is supported
  * DOC: config: clarify the fact that SNI should not be used in HTTP scenarios
  * DOC: config: provide some configuration hints for "http-reuse"
  * Revert "BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action"
  * BUG/MINOR: mux-h1: Fix handling of 408-Request-Time-Out
  * BUILD: http-htx: Silent build error about a possible NULL start-line
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * BUG/MINOR: log: fix parse_log_message rfc5424 size check
  * BUG/MINOR: cfgparse-listen: fix ebpt_next_dup pointer dereference on proxy "from" inheritance
  * BUILD: listener: fix build warning on global_listener_rwlock without threads
  * BUG/MINOR: server/idle: at least use atomic stores when updating max_used_conns
  * BUILD: peers: Remove unused variables
  * BUG/MEDIUM: peers: messages about unkown tables not correctly ignored
  * BUG/MINOR: ssl: don't initialize the keylog callback when not required
  * BUG/MINOR: http_ana/txn: don't re-initialize txn and req var lists
  * BUG/MEDIUM: listener: Fix race condition when updating the global mngmt task
  * BUG/MINOR: pool/cli: use ullong to report total pool usage in bytes
  * BUG/MEDIUM: ring: fix creation of server in uninitialized ring
  * DOC: config: fix alphabetical ordering of global section
  * REG-TESTS: cache: Remove T-E header for 304-Not-Modified responses
  * BUG/MINOR: mux-h1: Do not send a last null chunk on body-less answers
  * BUG/MEDIUM: mux-fcgi: Avoid value length overflow when it doesn't fit at once
  * BUG/MINOR: mux-fcgi: Be sure to send empty STDING record in case of zero-copy
  * BUG/MINOR: resolvers: Set port before IP address when processing SRV records
  * BUG/MINOR: http-htx: Fix error handling during parsing http replies
  * BUG/MEDIUM: wdt/clock: properly handle early task hangs
  * CI: emit the compiler's version in the build reports
  * CI: switch to the "latest" LibreSSL
  * BUG/MINOR: ssl: ocsp structure not freed properly in case of error
  * BUG/MINOR: ssl: Memory leak of AUTHORITY_KEYID struct when loading issuer
  * CI: add monthly gcc cross compile jobs
  * BUG/MINOR: log: fixing bug in tcp syslog_io_handler Octet-Counting
  * BUG/MEDIUM: stick-table: fix a race condition when updating the expiration task
  * BUG/MAJOR: stick-table: don't process store-response rules for applets
  * DOC: management: add forgotten "show startup-logs"
  * BUG/MINOR: stick-table: Use server_id instead of std_t_sint in process_store_rules()
  * CI: SSL: temporarily stick to LibreSSL=3.5.3
  * CI: SSL: use proper version generating when "latest" semantic is used
  * BUG/MINOR: sink: Set default connect/server timeout for implicit ring buffers
  * BUG/MINOR: sink: Only use backend capability for the sink proxies
  * BUG/MEDIUM: compression: handle rewrite errors when updating response headers
  * BUG/MINOR: ring: Properly parse connect timeout
  * BUG/MINOR: log: Preserve message facility when the log target is a ring buffer
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in workflow definition
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in matrix.py
  * BUG/MINOR: server: make sure "show servers state" hides private bits
  * BUG/MAJOR: stick-tables: do not try to index a server name for applets
  * DOC: configuration: missing 'if' in tcp-request content example
  * BUG/MINOR: backend: only enforce turn-around state when not redispatching
  * BUG/MINOR: smtpchk: SMTP Service check should gracefully close SMTP transaction
  * MINOR: smtpchk: Update expect rule to fully match replies to EHLO commands
  * BUG/MINOR: mux-h1: Account consumed output data on synchronous connection error
  * BUILD: http_fetch: silence an uninitiialized warning with gcc-4/5/6 at -Os
  * BUG/MINOR: http-fetch: Update method after a prefetch in smp_fetch_meth()
  * BUILD: h1: silence an initiialized warning with gcc-4.7 and -Os
  * BUG/MEDIUM: lua: handle stick table implicit arguments right.
  * BUG/MEDIUM: lua: Don't crash in hlua_lua2arg_check on failure
  * DOC: config: Fix pgsql-check documentation to make user param mandatory
  * BUG/MINOR: checks: update pgsql regex on auth packet
  * [RELEASE] Released version 2.4.19
  * BUG/MEDIUM: resolvers: Remove aborted resolutions from query_ids tree
  * REGTESTS: 4be_1srv_smtpchk_httpchk_layer47errors: Return valid SMTP replies
  * BUG/MINOR: log: improper behavior when escaping log data
  * SCRIPTS: announce-release: update some URLs to https
  * BUILD: fd: fix a build warning on the DWCAS
  * BUG/MEDIUM: captures: free() an error capture out of the proxy lock
  * DOC: fix TOC in starter guide for subsection 3.3.8. Statistics
  * REGTESTS: ssl/log: test the log-forward with SSL
  * BUG/MEDIUM: sink: bad init sequence on tcp sink from a ring.
  * REGTESTS: log: test the log-forward feature
  * REGTESTS: healthcheckmail: Relax matching on the healthcheck log message
  * BUG/MINOR: stats: fixing stat shows disabled frontend status as 'OPEN'
  * MINOR: listener: small API change
  * BUG/MEDIUM: proxy: ensure pause_proxy() and resume_proxy() own PROXY_LOCK
  * CI: cirrus-ci: bump FreeBSD image to 13-1
  * BUG/MINOR: signals/poller: ensure wakeup from signals
  * BUG/MINOR: signals/poller: set the poller timeout to 0 when there are signals
  * BUG/MINOR: task: always reset a new tasklet's call date
  * BUG/MINOR: h1: Support headers case adjustment for TCP proxies
  * BUILD: makefile: enable crypt(3) for NetBSD
  * BUG/MINOR: regex: Properly handle PCRE2 lib compiled without JIT support
  * BUG/MINOR: mux-fcgi: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h1: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h2: fix the "show fd" dest buffer for the subscriber
  * BUG/MEDIUM: mux-h1: always use RST to kill idle connections in pools
  * REGTESTS: http_request_buffer: Add a barrier to not mix up log messages
  * BUG/MEDIUM: mux-h1: do not refrain from signaling errors after end of input
  * BUG/MINOR: tcpcheck: Disable QUICKACK for default tcp-check (with no rule)
  * BUG/MINOR: hlua: Rely on CF_EOI to detect end of message in HTTP applets
  * BUG/MEDIUM: peers: Don't start resync on reload if local peer is not up-to-date
  * BUG/MEDIUM: peers: Don't use resync timer when local resync is in progress
  * BUG/MEDIUM: peers: Add connect and server timeut to peers proxy
  * BUG/MEDIUM: spoe: Properly update streams waiting for a ACK in async mode
  * DOC: configuration: do-resolve doesn't work with a port in the string
  * REGTESTS: Fix prometheus script to perform HTTP health-checks
  * BUG/MINOR: tcpcheck: Disable QUICKACK only if data should be sent after connect
  * BUG/MINOR: resolvers: return the correct value in resolvers_finalize_config()
  * BUG/MAJOR: mworker: fix infinite loop on master with no proxies.
  * BUG/MAJOR: log-forward: Fix log-forward proxies not fully initialized
  * BUG/MEDIUM: mux-h2: do not fiddle with -&gt;dsi to indicate demux is idle
  * BUG/MEDIUM: http-ana: fix crash or wrong header deletion by http-restrict-req-hdr-names
  * BUILD: http: silence an uninitialized warning affecting gcc-5
  * BUG/MEDIUM: ring: fix too lax 'size' parser
  * BUILD: debug: silence warning on gcc-5
  * BUG/MEDIUM: task: relax one thread consistency check in task_unlink_wq()
  * BUG/MEDIUM: poller: use fd_delete() to release the poller pipes
  * BUILD: cfgparse: always defined _GNU_SOURCE for sched.h and crypt.h
  * BUG/MINOR: sink: fix a race condition between the writer and the reader
  * BUG/MINOR: ring/cli: fix a race condition between the writer and the reader
  * BUG/MEDIUM: proxy: Perform a custom copy for default server settings
  * REORG: server: Export srv_settings_cpy() function
  * MINOR: server: Constify source server to copy its settings
  * BUG/MEDIUM: dns: Properly initialize new DNS session
  * BUG/MINOR: peers: Use right channel flag to consider the peer as connected
  * BUG/MEDIUM: peers: limit reconnect attempts of the old process on reload
  * MINOR: peers: Use a dedicated reconnect timeout when stopping the local peer
  * BUG/MEDIUM: pattern: only visit equivalent nodes when skipping versions
  * MINOR: ebtree: add ebmb_lookup_shorter() to pursue lookups
  * MINOR: http-htx: Use new HTTP functions for the scheme based normalization
  * BUG/MEDIUM: h1: Improve authority validation for CONNCET request
  * MINOR: http: Add function to detect default port
  * MINOR: http: Add function to get port part of a host
  * BUG/MEDIUM: mworker: use default maxconn in wait mode
  * [RELEASE] Released version 2.4.18
  * BUG/MINOR: sockpair: wrong return value for fd_send_uxst()
  * BUG/MINOR: backend: Fallback on RR algo if balance on source is impossible
  * BUILD: add detection for unsupported compiler models
  * BUG/MEDIUM: mworker: proc_self incorrectly set crashes upon reload
  * REGTESTS: Fix some scripts to be compatible with 2.4 and prior
  * BUG/MINOR: tools: fix statistical_prng_range()'s output range
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds (try 2)
  * BUILD: makefile: Fix install(1) handling for OpenBSD/NetBSD/Solaris/AIX
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds
  * MEDIUM: mworker: set the iocb of the socketpair without using fd_insert()
  * BUG/MEDIUM: mux-h1: Handle connection error after a synchronous send
  * BUG/MEDIUM: http-ana: Don't wait to have an empty buf to switch in TUNNEL state
  * BUG/MINOR: mux-h1: Be sure to commit htx changes in the demux buffer
  * REGTEESTS: filters: Fix CONNECT request in random-forwarding script
  * BUG/MEDIUM: http-fetch: Don't fetch the method if there is no stream
  * BUG/MINOR: http-htx: Fix scheme based normalization for URIs wih userinfo
  * BUG/MINOR: peers: fix possible NULL dereferences at config parsing
  * BUG/MINOR: http-act: Properly generate 103 responses when several rules are used
  * BUG/MINOR: http-check: Preserve headers if not redefined by an implicit rule
  * BUG/MINOR: peers/config: always fill the bind_conf's argument
  * MINOR: fd: Add BUG_ON checks on fd_insert()
  * CI: re-enable gcc asan builds
  * BUILD: Makefile: Add Lua 5.4 autodetect
  * BUG/MEDIUM: ssl/fd: unexpected fd close using async engine
  * MINOR: fd: add a new FD_DISOWN flag to prevent from closing a deleted FD
  * BUG/MINOR: http-fetch: Use integer value when possible in "method" sample fetch
  * BUG/MINOR: http-ana: Set method to HTTP_METH_OTHER when an HTTP txn is created
  * BUG/MINOR: ssl: Do not look for key in extra files if already in pem
  * MEDIUM: mux-h2: try to coalesce outgoing WINDOW_UPDATE frames
  * BUG/MEDIUM: ssl/cli: crash when crt inserted into a crt-list
  * BUG/MINOR: tcp-rules: Make action call final on read error and delay expiration
  * BUG/MINOR: cli/stats: add missing trailing LF after "show info json"
  * BUG/MINOR: server: do not enable DNS resolution on disabled proxies
  * BUG/MINOR: cli/stats: add missing trailing LF after JSON outputs
  * REGTESTS: healthcheckmail: Relax health-check failure condition
  * REGTESTS: healthcheckmail: Update the test to be functionnal again
  * BUG/MINOR: checks: Properly handle email alerts in trace messages
  * BUG/MINOR: trace: Test server existence for health-checks to get proxy
  * BUG/MEDIUM: mailers: Set the object type for check attached to an email alert
  * BUILD: compiler: implement unreachable for older compilers too
  * REGTESTS: restrict_req_hdr_names: Extend supported versions
  * REGTESTS: http_abortonclose: Extend supported versions
  * BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_cert I/O handler
  * BUG/MINOR: ssl_ckch: Dump cert transaction only once if show command yield
  * REGTESTS: http_request_buffer: Increase client timeout to wait "slow" clients
  * REGTESTS: abortonclose: Add a barrier to not mix up log messages
  * MEDIUM: http-ana: Always report rewrite failures as PRXCOND in logs
  * BUG/MEDIUM: ssl/crt-list: Rework 'add ssl crt-list' to handle full buffer cases
  * BUG/MEDIUM: ssl_ckch: Rework 'commit ssl cert' to handle full buffer cases
  * BUG/MINOR: ssl_ckch: Don't duplicate path when replacing a cert entry
  * BUG/MEDIUM: ssl_ckch: Don't delete a cert entry if it is being modified
  * BUG/MINOR: ssl_ckch: Free error msg if commit changes on a cert entry fails
  * DOC: intro: adjust the numbering of paragrams to keep the output ordered
  * DOC: peers: fix port number and addresses on new peers section format
  * DOC: peers: clarify when entry expiration date is renewed.
  * DOC: peers: indicate that some server settings are not usable
  * SCRIPTS: make publish-release try to launch make-releases-json
  * SCRIPTS: add make-releases-json to recreate a releases.json file in download dirs
  * REGTESTS: Do not use REQUIRE_VERSION for HAProxy 2.5+ (2)
  * BUG/MEDIUM: sample: Fix adjusting size in word converter
  * BUG/MEDIUM: peers: prevent unitialized multiple listeners on peers section
  * BUG/MEDIUM: peers: fix segfault using multiple bind on peers sections
  * BUG/MEDIUM: resolvers: Don't defer resolutions release in deinit function
  * BUG/MEDIUM: http: Properly reject non-HTTP/1.x protocols
  * BUG/MEDIUM: tools: Fix `inet_ntop` usage in sa2str
  * CI: determine actual OpenSSL version dynamically
  * BUILD/MINOR: cpuset fix build for FreeBSD 13.1
  * BUG/MINOR: peers: fix error reporting of "bind" lines
  * BUG/MINOR: cfgparse: abort earlier in case of allocation error
  * BUG/MINOR: check: Reinit the buffer wait list at the end of a check
  * BUG/MEDIUM: config: Reset outline buffer size on realloc error in readcfgfile()
  * REGTESTS: abortonclose: Fix some race conditions
  * BUG/MINOR: ssl: Fix crash when no private key is found in pem
  * MINOR: tools: add get_exec_path implementation for solaris based systems.
  * BUILD: fix build warning on solaris based systems with __maybe_unused.
  * MEDIUM: http-ana: Add a proxy option to restrict chars in request header names
  * CI: determine actual LibreSSL version dynamically
  * [RELEASE] Released version 2.4.17
  * CLEANUP: mux-h1: Fix comments and error messages for global options
  * BUG/MEDIUM: wdt: don't trigger the watchdog when p is unitialized
  * BUG/MINOR: conn_stream: do not confirm a connection from the frontend path
  * BUG/MINOR: server: Make SRV_STATE_LINE_MAXLEN value from 512 to 2kB (2000 bytes).
  * DOC: install: update gcc version requirements
  * BUG/MEDIUM: ssl: fix the gcc-12 broken fix :-(
  * BUILD: listener: shut report of possible null-deref in listener_accept()
  * BUILD: debug: work around gcc-12 excessive -Warray-bounds warnings
  * BUILD: ssl: work around bogus warning in gcc 12's -Wformat-truncation
  * CI: dynamically determine actual version of h2spec
  * DOC: fix typo "ant" for "and" in INSTALL
  * BUG/MINOR: map/cli: make sure patterns don't vanish under "show map"'s init
  * BUG/MINOR: map/cli: protect the backref list during "show map" errors
  * BUG/MEDIUM: cli: make "show cli sockets" really yield
  * BUG/MEDIUM: resolvers: make "show resolvers" properly yield
  * BUG/MINOR: tcp/http: release the expr of set-{src,dst}[-port]
  * DOC: config: Update doc for PR/PH session states to warn about rewrite failures
  * MINOR: mux-h2: report a trace event when failing to create a new stream
  * BUG/MINOR: mux-h2: mark the stream as open before processing it not after
  * BUG/MAJOR: dns: multi-thread concurrency issue on UDP socket
  * BUG/MEDIUM: mux-h1: Be able to handle trailers when C-L header was specified
  * BUG/MEDIUM: mux-fcgi: Be sure to never set EOM flag on an empty HTX message
  * SCRIPTS: announce-release: add URL of dev packages
  * CI: github actions: update LibreSSL to 3.5.2
  * [RELEASE] Released version 2.4.16
  * BUILD: opentracing: Fix OT build due to misuse of var_clear()
  * BUILD: proto_uxst: do not set unused flag
  * BUILD: sockpair: do not set unused flag
  * BUILD: fd: remove unused variable totlen in fd_write_frag_line()
  * CLEANUP: acl: Remove unused variable when releasing an acl expression
  * BUG/MINOR: pools: make sure to also destroy shared pools in pool_destroy_all()
  * BUG/MINOR: resolvers: Fix memory leak in resolvers_deinit()
  * BUILD: compiler: properly distinguish weak and global symbols
  * REGTESTS: fix the race conditions in be2dec.vtc ad field.vtc
  * MEDIUM: queue: use tasklet_instant_wakeup() to wake tasks
  * MINOR: task: add a new task_instant_wakeup() function
  * BUG/MINOR: rules: Fix check_capture() function to use the right rule arguments
  * DOC: remove my name from the config doc
  * BUG/MAJOR: connection: Never remove connection from idle lists outside the lock
  * BUG/MINOR: cache: Disable cache if applet creation fails
  * SCRIPTS: announce-release: add shortened links to pending issues
  * DOC: lua: update a few doc URLs
  * SCRIPTS: announce-release: update the doc's URL
  * BUG/MEDIUM: compression: Don't forget to update htx_sl and http_msg flags
  * BUG/MEDIUM: fcgi-app: Use http_msg flags to know if C-L header can be added
  * BUG/MEDIUM: stream: do not abort connection setup too early
  * BUILD: compiler: use a more portable set of asm(".weak") statements
  * BUILD: sched: workaround crazy and dangerous warning in Clang 14
  * BUG/MEDIUM: mux-h1: Don't request more room on partial trailers
  * BUG/MINOR: mux-h2: use timeout http-request as a fallback for http-keep-alive
  * BUG/MINOR: mux-h2: do not use timeout http-keep-alive on backend side
  * BUILD: debug: mark the __start_mem_stats/__stop_mem_stats symbols as weak
  * BUG/MINOR: cache: do not display expired entries in "show cache"
  * BUG/MINOR: mux-h2: do not send GOAWAY if SETTINGS were not sent
  * CI: cirrus: switch to FreeBSD-13.0
  * CI: Update to actions/cache@v3
  * CI: Update to actions/checkout@v3
  * DEBUG: opentracing: show return values of all functions in the debug output
  * CLEANUP: opentracing: added variable to store variable length
  * CLEANUP: opentracing: added flt_ot_smp_init() function
  * CLEANUP: opentracing: removed unused function flt_ot_var_get()
  * CLEANUP: opentracing: removed unused function flt_ot_var_unset()
  * DOC: opentracing: corrected comments in function descriptions
  * EXAMPLES: opentracing: refined shell scripts for testing filter performance
  * BUG/MINOR: opentracing: setting the return value in function flt_ot_var_set()
  * BUG/MEDIUM: http-act: Don't replace URI if path is not found or invalid
  * BUG/MEDIUM: http-conv: Fix url_enc() to not crush const samples
  * BUG/MEDIUM: mux-h1: Set outgoing message to DONE when payload length is reached
  * BUG/MEDIUM: promex: Be sure to never set EOM flag on an empty HTX message
  * BUG/MEDIUM: hlua: Don't set EOM flag on an empty HTX message in HTTP applet
  * BUG/MEDIUM: stats: Be sure to never set EOM flag on an empty HTX message
  * BUG/MINOR: fcgi-app: Don't add C-L header on response to HEAD requests
  * CI: github actions: update OpenSSL to 3.0.2
  * BUG/MAJOR: mux_pt: always report the connection error to the conn_stream
  * BUG/MINOR: cli/stream: fix "shutdown session" to iterate over all threads
  * BUG/MINOR: samples: add missing context names for sample fetch functions
  * DOC: reflect H2 timeout changes
  * BUG/MEDIUM: mux-h2: make use of http-request and keep-alive timeouts
  * MEDIUM: mux-h2: slightly relax timeout management rules
  * BUG/MEDIUM: stream-int: do not rely on the connection error once established
  * BUG/MEDIUM: mux-h1: Properly detect full buffer cases during message parsing
  * BUG/MEDIUM: mux-fcgi: Properly handle return value of headers/trailers parsing
  * BUG/MINOR: tools: url2sa reads too far when no port nor path
  * DOC: config: Explictly add supported MQTT versions
  * MEDIUM: mqtt: support mqtt_is_valid and mqtt_field_value converters for MQTTv3.1
  * BUG/MEDIUM: trace: avoid race condition when retrieving session from conn-&gt;owner
  * BUG/MEDIUM: mux-h1: only turn CO_FL_ERROR to CS_FL_ERROR with empty ibuf
  * CI: github actions: switch to LibreSSL-3.5.1
  * BUG/MINOR: server/ssl: free the SNI sample expression
  * BUG/MINOR: tools: fix url2sa return value with IPv4
  * [RELEASE] Released version 2.4.15
  * BUILD: tree-wide: mark a few numeric constants as explicitly long long
  * DOC: Fix usage/examples of deprecated ACLs
  * BUG/MINOR: stream: make the call_rate only count the no-progress calls
  * BUG/MINOR: session: fix theoretical risk of memleak in session_accept_fd()
  * BUG/MAJOR: mux-pt: Always destroy the backend connection on detach
  * DEBUG: stream: Fix stream trace message to print response buffer state
  * DEBUG: stream: Add the missing descriptions for stream trace events
  * BUG/MEDIUM: mcli: Properly handle errors and timeouts during reponse processing
  * DEBUG: cache: Update underlying buffer when loading HTX message in cache applet
  * BUG/MINOR: promex: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cache: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: stats: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: hlua: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cli: shows correct mode in "show sess"
  * BUG/MINOR: add missing modes in proxy_mode_str()
  * BUILD: pools: fix backport of no-memory-trimming on non-linux OS
  * MINOR: pools: add a new global option "no-memory-trimming"
  * BUG/MEDIUM: pools: fix ha_free() on area in the process of being freed
  * BUG/MINOR: pool: always align pool_heads to 64 bytes
  * REGTESTS: fix the race conditions in secure_memcmp.vtc
  * REGTESTS: fix the race conditions in normalize_uri.vtc
  * BUG/MEDIUM: htx: Fix a possible null derefs in htx_xfer_blks()
  * CI: github actions: use cache for SSL libs
  * CI: github actions: use cache for OpenTracing
  * CI: github actions: add OpenTracing builds
  * CI: github actions: add the output of $CC -dM -E-
  * [RELEASE] Released version 2.4.14
  * BUG/MEDIUM: stream: Abort processing if response buffer allocation fails
  * CI: github: enable pool debugging by default
  * REGTESTS: fix the race conditions in 40be_2srv_odd_health_checks
  * BUG/MINOR: proxy: preset the error message pointer to NULL in parse_new_proxy()
  * BUG/MAJOR: mux-h2: Be sure to always report HTX parsing error to the app layer
  * BUG/MEDIUM: mux-h1: Don't wake h1s if mux is blocked on lack of output buffer
  * BUG/MEDIUM: htx: Be sure to have a buffer to perform a raw copy of a message
  * BUG/MINOR: tools: url2sa reads ipv4 too far
  * BUG/MINOR: mailers: negotiate SMTP, not ESMTP
  * CI: github actions: update OpenSSL to 3.0.1
  * CI: github: switch to OpenSSL 3.0.0
  * CI: github actions: relax OpenSSL-3.0.0 version comparision
  * CI: github actions: -Wno-deprecated-declarations with OpenSSL 3.0.0
  * CI: github actions: add OpenSSL-3.0.0 builds
  * BUILD: adopt script/build-ssl.sh for OpenSSL-3.0.0beta2
  * BUILD: fix compilation for OpenSSL-3.0.0-alpha17
  * CI: ssl: keep the old method for ancient OpenSSL versions
  * CI: ssl: do not needlessly build the OpenSSL docs
  * CI: ssl: enable parallel builds for OpenSSL on Linux
  * BUG/MAJOR: compiler: relax alignment constraints on certain structures
  * BUG/MEDIUM: fd: always align fdtab[] to 64 bytes
  * BUG/MEDIUM: resolvers: Really ignore trailing dot in domain names
  * BUG/MINOR: sink: Use the right field in appctx context in release callback
  * BUG/MINOR: mworker: fix a FD leak of a sockpair upon a failed reload
  * BUG/MEDIUM: mworker: close unused transferred FDs on load failure
  * MINOR: sock: move the unused socket cleaning code into its own function
  * [RELEASE] Released version 2.4.13
  * BUG/MINOR: mux-h2: update the session's idle delay before creating the stream
  * BUG/MEDIUM: h2/hpack: fix emission of HPACK DTSU after settings change
  * REGTESTS: peers: leave a bit more time to peers to synchronize
  * BUG/MAJOR: spoe: properly detach all agents when releasing the applet
  * BUG/MAJOR: http/htx: prevent unbounded loop in http_manage_server_side_cookies
  * BUG/MEDIUM: listener: read-lock the listener during accept()
  * MINOR: listener: replace the listener's spinlock with an rwlock
  * BUG/MINOR: mworker: does not erase the pidfile upon reload
  * BUG/MAJOR: sched: prevent rare concurrent wakeup of multi-threaded tasks
  * DEBUG: pools: replace the link pointer with the caller's address on pool_free()
  * DEBUG: pools: let's add reverse mapping from cache heads to thread and pool
  * DEBUG: pools: add extra sanity checks when picking objects from a local cache
  * BUG/MINOR: pools: always flush pools about to be destroyed
  * BUG/MEDIUM: mworker: don't lose the stats socket on failed reload
  * DEBUG: pools: add new build option DEBUG_POOL_INTEGRITY
  * BUILD: debug/cli: condition test of O_ASYNC to its existence
  * DEBUG: cli: add a new "debug dev fd" expert command
  * MEDIUM: h2/hpack: emit a Dynamic Table Size Update after settings change
  * BUG/MEDIUM: mcli: always realign wrapping buffers before parsing them
  * BUG/MEDIUM: mcli: do not try to parse empty buffers
  * BUG/MEDIUM: cli: Never wait for more data on client shutdown
  * BUG/MINOR: cli: avoid O(bufsize) parsing cost on pipelined commands
  * MINOR: channel: add new function co_getdelim() to support multiple delimiters
  * MEDIUM: cli: yield between each pipelined command
  * BUG/MEDIUM: server: avoid changing healthcheck ctx with set server ssl
  * BUILD/MINOR: fix solaris build with clang.
  * BUG/MEDIUM: htx: Adjust length to add DATA block in an empty HTX buffer
  * BUG/MEDIUM: connection: properly leave stopping list on error
  * [RELEASE] Released version 2.4.12
  * BUG/MAJOR: mux-h1: Don't decrement .curr_len for unsent data
  * BUG/MEDIUM: mworker: don't use _getsocks in wait mode
  * [RELEASE] Released version 2.4.11
  * BUG/MEDIUM: http-ana: Preserve response's FLT_END analyser on L7 retry
  * BUG/MINOR: cli: fix _getsocks with musl libc
  * BUILD/MINOR: tools: solaris build fix on dladdr.
  * BUILD/MINOR: cpuset FreeBSD 14 build fix.
  * BUG/MEDIUM: ssl: free the ckch instance linked to a server
  * BUG/MINOR: ssl: free the fields in srv-&gt;ssl_ctx
  * MINOR: debug: add support for -dL to dump library names at boot
  * MINOR: debug: add ability to dump loaded shared libraries
  * MINOR: compat: detect support for dl_iterate_phdr()
  * BUG/MINOR: mux-h1: Fix splicing for messages with unknown length
  * BUG/MEDIUM: mux-h1: Fix splicing by properly detecting end of message
  * BUILD: makefile: add -Wno-atomic-alignment to work around clang abusive warning
  * MINOR: proxy: add option idle-close-on-response
  * REGTESTS: ssl: fix ssl_default_server.vtc
  * BUG/MEDIUM: ssl: initialize correctly ssl w/ default-server
  * DOC: fix misspelled keyword "resolve_retries" in resolvers
  * BUILD: ssl: unbreak the build with newer libressl
  * BUILD: cli: clear a maybe-unused  warning on some older compilers
  * BUG/MINOR: pools: don't mark ourselves as harmless in DEBUG_UAF mode
  * BUG/MEDIUM: backend: fix possible sockaddr leak on redispatch
  * [RELEASE] Released version 2.4.10
  * BUG/MINOR: backend: restore the SF_SRV_REUSED flag original purpose
  * BUG/MINOR: backend: do not set sni on connection reuse
  * MINOR: pools: work around possibly slow malloc_trim() during gc
  * BUG/MEDIUM: mworker/cli: crash when trying to access an old PID in prompt mode
  * DOC: config: retry-on list is space-delimited
  * DOC: config: Specify %Ta is only available in HTTP mode
  * DOC: spoe: Clarify use of the event directive in spoe-message section
  * BUG/MINOR: cli/server: Don't crash when a server is added with a custom id
  * IMPORT: slz: use the correct CRC32 instruction when running in 32-bit mode
  * BUILD: tree-wide: avoid warnings caused by redundant checks of obj_types
  * MINOR: cli: "show version" displays the current process version
  * CI: Github Actions: temporarily disable BoringSSL builds
  * BUILD: bug: Fix error when compiling with -DDEBUG_STRICT_NOCRASH
  * MINOR: mux-h1: Improve H1 traces by adding info about http parsers
  * BUG/MAJOR: segfault using multiple log forward sections.
  * BUG/MEDIUM: resolvers: Detach query item on response error
  * BUG/MINOR: server: Don't rely on last default-server to init server SSL context
  * BUG/MEDIUM: cli: Properly set stream analyzers to process one command at a time
  * BUILD/MINOR: server: fix compilation without SSL
  * [RELEASE] Released version 2.4.9
  * BUG/MINOR: cache: Fix loop on cache entries in "show cache"
  * MINOR: promex: backend aggregated server check status
  * MINOR: server: add ws keyword
  * MEDIUM: server/backend: implement websocket protocol selection
  * MINOR: connection: add alternative mux_ops param for conn_install_mux_be
  * MINOR: connection: implement function to update ALPN
  * MINOR: stream/mux: implement websocket stream flag
  * BUG/MINOR: ssl: make SSL counters atomic
  * MINOR: shctx: add a few BUG_ON() for consistency checks
  * BUG/MINOR: shctx: do not look for available blocks when the first one is enough
  * BUG/MEDIUM: shctx: leave the block allocator when enough blocks are found
  * BUG/MEDIUM: cache/cli: make "show cache" thread-safe
  * BUG/MEDIUM: mux-h2: always process a pending shut read
  * BUG/MEDIUM: ssl: abort with the correct SSL error when SNI not found
  * CLEANUP: ssl: fix wrong #else commentary
  * BUG/MINOR: ssl: free correctly the sni in the backend SSL cache
  * BUG/MEDIUM: ssl: backend TLS resumption with sni and TLSv1.3
  * BUILD: makefile: simplify detection of libatomic
  * BUG/MEDIUM: mux-h1: Handle delayed silent shut in h1_process() to release H1C
  * BUG/MINOR: stick-table/cli: Check for invalid ipv6 key
  * BUG/MEDIUM: connection: make cs_shutr/cs_shutw//cs_close() idempotent
  * BUG/MINOR: mux-h2: Fix H2_CF_DEM_SHORT_READ value
  * BUG/MINOR: mworker: doesn't launch the program postparser
  * BUG/MEDIUM: conn-stream: Don't reset CS flags on close
  * MINOR: mux-h1: Slightly Improve H1 traces
  * DOC: lua: Be explicit with the Reply object limits
  * Revert "BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back"
  * BUG/MINOR: http-ana: Apply stop to the current section for http-response rules
  * DOC: config: Fix typo in ssl_fc_unique_id description
  * BUG/MINOR: cache: properly ignore unparsable max-age in quotes
  * BUG/MINOR: resolvers: throw log message if trash not large enough for query
  * BUG/MINOR: resolvers: fix sent messages were counted twice
  * BUG/MEDIUM: mux-h2: reject upgrade if no RFC8441 support
  * MINOR: mux-h2: add trace on extended connect usage
  * MINOR: mux-h2: perform a full cycle shutdown+drain on close
  * MINOR: connection: add a new CO_FL_WANT_DRAIN flag to force drain on close</changelog>
  <changelog author="varkoly@suse.com" date="1692014400">- VUL-0: CVE-2023-40225: haproxy: reject any empty content-length header value
  (bsc#1214102) Apply upstream patch adapted for 2.4.22 (patch h2_parse_cont_len_header() instead of http_parse_cont_len_header())
  Add patch: 0001-BUG-MAJOR-http-reject-any-empty-content-length-heade.patch</changelog>
  <changelog author="varkoly@suse.com" date="1701345600">- VUL-0: CVE-2023-45539: haproxy: misinterpretation of a path_end rule with # as part of the URI component
  (bsc#1217653) Apply upstream patch.
  Add patch: 0001-BUG-MINOR-h1-do-not-accept-as-part-of-the-URI-compon.patch</changelog>
</package>
<package pkgid="523aab737741d16772293d52fa70904f07b0233954757990bfd962c11e2a758d" name="haproxy" arch="src">
  <version epoch="0" ver="2.4.22+git0.f8e3218e2" rel="150400.3.19.1"/>
  <changelog author="mrueckert@suse.de" date="1614772800">- Update to version 2.3.6+git0.7851701ed:
  * [RELEASE] Released version 2.3.6
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on read error/timeout
  * BUG/MINOR: mux-h2: Fix typo in scheme adjustment
  * DOC: spoe: Add a note about fragmentation support in HAProxy
  * BUG/MEDIUM: spoe: Kill applets if there are pending connections and nbthread &gt; 1
  * BUG/MINOR: connection: Use the client's dst family for adressless servers
  * BUG/MINOR: tcp-act: Don't forget to set the original port for IPv4 set-dst rule
  * BUG/MINOR: http-ana: Only consider dst address to process originalto option
  * BUG/MINOR: mux-h1: Immediately report H1C errors from h1_snd_buf()
  * BUG/MINOR: stats: fix compare of no-maint url suffix
  * CLEANUP: muxes: Remove useless if condition in show_fd function
  * BUG/MINOR: ssl: potential null pointer dereference in ckchs_dup()
  * BUG/MEDIUM: resolvers: Reset address for unresolved servers
  * BUG/MEDIUM: resolvers: Reset server address and port for obselete SRV records
  * BUG/MINOR: resolvers: new callback to properly handle SRV record errors
  * BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record
  * BUG/MINOR: resolvers: Fix condition to release received ARs if not assigned
  * BUG/MINOR: fd: properly wait for !running_mask in fd_set_running_excl()
  * BUG/MINOR: proxy: wake up all threads when sending the hard-stop signal
  * BUG/MEDIUM: cli/shutdown sessions: make it thread-safe
  * BUG/MEDIUM: proxy: use thread-safe stream killing on hard-stop
  * BUG/MEDIUM: vars: make functions vars_get_by_{name,desc} thread-safe
  * BUG/MINOR: sample: secure convs that accept base64 string and var name as args
  * MINOR: Configure the `cpp` userdiff driver for *.[ch] in .gitattributes
  * BUG/MINOR: ssl/cli: potential null pointer dereference in "set ssl cert"
  * BUG/MEDIUM: mux-h1: Fix handling of responses to CONNECT other than 200-ok
  * BUG/MINOR: server: Be sure to cut the last parsed field of a server-state line
  * BUG/MINOR: server: Init params before parsing a new server-state line
  * BUG/MINOR: http-rules: Always replace the response status on a return action
  * BUG/MEDIUM: spoe: Resolve the sink if a SPOE logs in a ring buffer
  * BUG/MEDIUM: lists: Avoid an infinite loop in MT_LIST_TRY_ADDQ().
  * DOC: explain the relation between pool-low-conn and tune.idle-pool.shared
  * BUILD: ssl: introduce fine guard for OpenSSL specific SCTL functions
  * BUG/MINOR: sample: Always consider zero size string samples as unsafe
  * BUG/MEDIUM: checks: don't needlessly take the server lock in health_adjust()
  * BUG/MINOR: checks: properly handle wrapping time in __health_adjust()
  * BUG/MINOR: session: atomically increment the tracked sessions counter
  * BUG/MINOR: server: Remove RMAINT from admin state when loading server state
  * CLEANUP: channel: fix comment in ci_putblk.
  * DOC: tune: explain the origin of block size for ssl.cachesize
  * BUG/MINOR: server: Don't call fopen() with server-state filepath set to NULL
  * BUG/MINOR: cfgparse: do not mention "addr:port" as supported on proxy lines
  * BUG/MINOR: stats: revert the change on ST_CONVDONE
  * BUG/MEDIUM: config: don't pick unset values from last defaults section
  * CLEANUP: deinit: release global and per-proxy server-state variables on deinit
  * BUG/MINOR: server: Fix server-state-file-name directive
  * BUG/MINOR: backend: hold correctly lock when killing idle conn
  * BUG/MINOR: tools: Fix a memory leak on error path in parse_dotted_uints()
  * BUG/MINOR: server: re-align state file fields number
  * BUG/MEDIUM: mux-h1: Always set CS_FL_EOI for response in MSG_DONE state
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on internal errors
  * BUG/MINOR: intops: fix mul32hi()'s off-by-one
  * BUILD: ssl: guard SSL_CTX_set_msg_callback with SSL_CTRL_SET_MSG_CALLBACK macro
  * BUILD: ssl: guard SSL_CTX_add_server_custom_ext with special macro
  * BUILD: ssl: fix typo in HAVE_SSL_CTX_ADD_SERVER_CUSTOM_EXT macro
  * MINOR: check: do not ignore a connection header for http-check send</changelog>
  <changelog author="mrueckert@suse.de" date="1615896000">- Update to version 2.3.7+git0.2d39ce334:
  * [RELEASE] Released version 2.3.7
  * BUG/MINOR: resolvers: Add missing case-insensitive comparisons of DNS hostnames
  * MINOR: resolvers: Don't try to match immediatly renewed ADD items
  * MINOR: resolvers: Use milliseconds for cached items in resolver responses
  * BUG/MEDIUM: resolvers: Skip DNS resolution at startup if SRV resolution is set
  * BUG/MEDIUM: resolvers: Don't release resolution from a requester callbacks
  * MINOR: resolvers: Directly call srvrq_update_srv_state() when possible
  * MINOR: resolvers: Add function to change the srv status based on SRV resolution
  * MINOR: resolvers: Purge answer items when a SRV resolution triggers an error
  * MINOR: resolvers: Use a function to remove answers attached to a resolution
  * BUG/MEDIUM: resolvers: Trigger a DNS resolution if an ADD item is obsolete
  * BUG/MINOR; resolvers: Ignore DNS resolution for expired SRV item
  * MINOR: resolvers: new function find_srvrq_answer_record()
  * BUG/MEDIUM: resolvers: Fix the loop looking for an existing ADD item
  * BUG/MEDIUM: resolvers: Don't set an address-less server as UP
  * BUG/MINOR: resolvers: Unlink DNS resolution to set RMAINT on SRV resolution
  * BUG/MINOR: resolvers: Reset server address on DNS error only on status change
  * BUG/MINOR: resolvers: Consider server to have no IP on DNS resolution error
  * Revert "BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record"
  * CLEANUP: tcp-rules: add missing actions in the tcp-request error message
  * BUG/MINOR: tcpcheck: Fix double free on error path when parsing tcp/http-check
  * BUG/MINOR: session: Add some forgotten tests on session's listener
  * BUG/MINOR: proxy/session: Be sure to have a listener to increment its counters
  * BUG/MINOR: tcpcheck: Update .health threshold of agent inside an agent-check
  * BUG/MEDIUM: filters: Set CF_FL_ANALYZE on channels when filters are attached
  * BUILD: atomic/arm64: force the register pairs to use in __ha_cas_dw()
  * BUG/MEDIUM: stick-tables: fix ref counter in table entry using multiple http tracksc.
  * OPTIM: task: automatically adjust the default runqueue-depth to the threads
  * MINOR: task: give the scheduler a bit more flexibility in the runqueue size
  * MEDIUM: task: remove the tasks_run_queue counter and have one per thread
  * MEDIUM: ssl: implement xprt_set_used and xprt_set_idle to relax context checks
  * MINOR: xprt: add new xprt_set_idle and xprt_set_used methods
  * MEDIUM: muxes: mark idle conns tasklets with TASK_F_USR1
  * MINOR: task: add an application specific flag to the state: TASK_F_USR1
  * BUG/MEDIUM: ssl: properly remove the TASK_HEAVY flag at end of handshake
  * MINOR: ssl: mark the SSL handshake tasklet as heavy
  * MINOR: task: limit the number of subsequent heavy tasks with flag TASK_HEAVY
  * MEDIUM: backend: use a trylock when trying to grab an idle connection
  * MINOR: pools: double the local pool cache size to 1 MB
  * MEDIUM: pools: add CONFIG_HAP_NO_GLOBAL_POOLS and CONFIG_HAP_GLOBAL_POOLS
  * MEDIUM: streams: do not use the streams lock anymore
  * MINOR: streams: use one list per stream instead of a global one
  * MINOR: cli/streams: make "show sess" dump all streams till the new epoch
  * MINOR: stream: add an "epoch" to figure which streams appeared when
  * MINOR: dynbuf: pass offer_buffers() the number of buffers instead of a threshold
  * MINOR: dynbuf: use regular lists instead of mt_lists for buffer_wait
  * MINOR: dynbuf: make the buffer wait queue per thread
  * OPTIM: lb-leastconn: do not unlink the server if it did not change
  * OPTIM: lb-leastconn: do not take the server lock on take_conn/drop_conn
  * OPTIM: lb-first: do not take the server lock on take_conn/drop_conn
  * MINOR: lb/api: let callers of take_conn/drop_conn tell if they have the lock
  * MINOR: server: move actconns to the per-thread structure
  * OPTIM: server: switch the actconn list to an mt-list
  * MINOR: listener: refine the default MAX_ACCEPT from 64 to 4
  * MINOR: tasks: refine the default run queue depth
  * BUG/MEDIUM: session: NULL dereference possible when accessing the listener
  * MINOR: atomic: implement a more efficient arm64 __ha_cas_dw() using pairs
  * MINOR: atomic: add armv8.1-a atomics variant for cas-dw
  * BUG/MINOR: mt-list: always perform a cpu_relax call on failure
  * REORG: atomic: reimplement pl_cpu_relax() from atomic-ops.h
  * BUG/MINOR: ssl: don't truncate the file descriptor to 16 bits in debug mode
  * BUG/MINOR: hlua: Don't strip last non-LWS char in hlua_pushstrippedstring()
  * BUG/MINOR: backend: fix condition for reuse on mode HTTP</changelog>
  <changelog author="mrueckert@suse.de" date="1616673600">- Update to version 2.3.8+git0.e572195c7:
  * [RELEASE] Released version 2.3.8
  * BUG/MINOR: http_fetch: make hdr_ip() reject trailing characters
  * MINOR: tools: make url2ipv4 return the exact number of bytes parsed
  * BUG/MEDIUM: thread: Fix a deadlock if an isolated thread is marked as harmless
  * BUG/MEDIUM: fd: Take the fd_mig_lock when closing if no DWCAS is available.
  * CLEANUP: fd: remove unused fd_set_running_excl()
  * BUG/MEDIUM: fd: do not wait on FD removal in fd_delete()
  * MINOR: fd: remove the unneeded running bit from fd_insert()
  * MINOR: fd: make fd_clr_running() return the remaining running mask
  * BUG/MEDIUM: lua: Always init the lua stack before referencing the context
  * BUG/MEDIUM: debug/lua: Use internal hlua function to dump the lua traceback
  * MINOR: lua: Slightly improve function dumping the lua traceback
  * BUILD: ssl: guard ecdh functions with SSL_CTX_set_tmp_ecdh macro
  * BUG/MINOR: ssl: Prevent disk access when using "add ssl crt-list"
  * BUG/MEDIUM: debug/lua: Don't dump the lua stack if not dumpable
  * MEDIUM: lua: Use a per-thread counter to track some non-reentrant parts of lua
  * MINOR/BUG: mworker/cli: do not use the unix_bind prefix for the master CLI socket
  * BUG/MINOR: protocol: add missing support of dgram unix socket.
  * BUG/MEDIUM: freq_ctr/threads: use the global_now_ms variable
  * MINOR: time: also provide a global, monotonic global_now_ms timer
  * BUG/MEDIUM: mux-fcgi: Fix locking of idle_conns lock in the FCGI I/O callback
  * BUG/MINOR: freq_ctr/threads: make use of the last updated global time
  * MINOR: time: export the global_now variable</changelog>
  <changelog author="mrueckert@suse.de" date="1617105600">- Update to version 2.3.9+git1.afb63bc04:
  * BUILD: backend: fix build breakage in idle conn locking fix
  * [RELEASE] Released version 2.3.9
  * BUG/MEDIUM: time: make sure to always initialize the global tick
  * BUG/MINOR: stats: Apply proper styles in HTML status page.
  * BUG/MINOR: payload: Wait for more data if buffer is empty in payload/payload_lv
  * MEDIUM: backend: use a trylock to grab a connection on high FD counts as well
  * BUG/MEDIUM: mux-h1: make h1_shutw_conn() idempotent</changelog>
  <changelog author="mrueckert@suse.de" date="1619179200">- Update to version 2.3.10+git0.4764f0e4e:
  * [RELEASE] Released version 2.3.10
  * BUG/MEDIUM: peers: re-work refcnt on table to protect against flush
  * BUG/MEDIUM: peers: re-work connection to new process during reload.
  * BUG/MINOR: peers: remove useless table check if initial resync is finished
  * BUG/MEDIUM: mux-h2: Properly handle shutdowns when received with data
  * BUG/MINOR: mworker: don't use oldpids[] anymore for reload
  * BUG/MINOR: mworker/init: don't reset nb_oldpids in non-mworker cases
  * BUG/MEDIUM: config: fix cpu-map notation with both process and threads
  * BUG/MEDIUM: mux-h2: Fix dfl calculation when merging CONTINUATION frames
  * BUG/MAJOR: mux-h2: Properly detect too large frames when decoding headers
  * BUG/MINOR: server: free srv.lb_nodes in free_server
  * BUG/MINOR: mux-h1: Release idle server H1 connection if data are received
  * BUG/MINOR: logs: Report the true number of retries if there was no connection
  * BUG/MINOR: http_htx: Remove BUG_ON() from http_get_stline() function
  * BUG/MINOR: http-fetch: Make method smp safe if headers were already forwarded
  * BUG/MINOR: ssl-samples: Fix ssl_bc_* samples when called from a health-check
  * MINOR: connection: Make bc_http_major compatible with tcp-checks
  * BUG/MINOR: connection: Fix fc_http_major and bc_http_major for TCP connections
  * MINOR: logs: Add support of checks as session origin to format lf strings
  * BUG/MINOR: checks: Set missing id to the dummy checks frontend
  * BUG/MEDIUM: threads: Ignore current thread to end its harmless period
  * DOC: ssl: Certificate hot update only works on fronted certificates
  * BUG/MEDIUM: sample: Fix adjusting size in field converter
  * MINOR: No longer rely on deprecated sample fetches for predefined ACLs
  * DOC: clarify that compression works for HTTP/2
  * BUG/MINOR: tools: fix parsing "us" unit for timers
  * CONTRIB: halog: fix issue with array of type char
  * REGTESTS: ssl: mark set_ssl_cert_bundle.vtc as broken
  * DOC: Explicitly state only IPv4 are supported by forwardfor/originalto options
  * REGTESTS: ssl: "set ssl cert" and multi-certificates bundle
  * BUG/MINOR: ssl: Add missing free on SSL_CTX in ckch_inst_free
  * BUG/MINOR: http_fetch: make hdr_ip() resistant to empty fields
  * BUG/MINOR: ssl: Prevent removal of crt-list line if the instance is a default one
  * BUG/MINOR: ssl: Fix update of default certificate
  * BUILD: tcp: use IPPROTO_IPV6 instead of SOL_IPV6 on FreeBSD/MacOS
  * BUG/MINOR: tcp: fix silent-drop workaround for IPv6</changelog>
  <changelog author="mrueckert@suse.de" date="1620993600">- Update to version 2.4.0+git0.6cbbecf09:
  https://www.haproxy.com/blog/announcing-haproxy-2-4/
  for all the details see /usr/share/doc/packages/haproxy/CHANGELOG
- refreshed patches to apply cleanly again
  haproxy-1.6.0-makefile_lib.patch
  haproxy-1.6.0-sec-options.patch
  lua54.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1623931200">- Update to version 2.4.1+git0.1ce7d4925:
  * [RELEASE] Released version 2.4.1
  * BUG/MINOR: mux-h2/traces: bring back the lost "sent H2 REQ/RES" traces
  * BUG/MINOR: mux-h2/traces: bring back the lost "rcvd H2 REQ" trace
  * MINOR: mux-h2: obey http-ignore-probes during the preface
  * BUG/MINOR: stats: make "show stat typed desc" work again
  * CLEANUP: mux-h2/traces: better align user messages
  * MINOR: mux-h2/trace: report a few connection-level info during h2_init()
  * MINOR: connection: add helper conn_append_debug_info()
  * BUG/MINOR: server: explicitly set "none" init-addr for dynamic servers
  * BUG/MINOR: mux-h1: do not skip the error response on bad requests
  * MINOR: backend: only skip LB when there are actual connections
  * BUG/MAJOR: queue: set SF_ASSIGNED when setting strm-&gt;target on dequeue
  * CLEANUP: global: remove unused definition of stopping_task[]
  * BUG/MINOR: mworker: fix typo in chroot error message
  * BUG/MINOR: ssl: use atomic ops to update global shctx stats
  * BUG/MEDIUM: shctx: use at least thread-based locking on USE_PRIVATE_CACHE
  * BUG/MEDIUM: server: do not auto insert a dynamic server in px addr_node
  * BUG/MINOR: server: do not keep an invalid dynamic server in px ids tree
  * BUG/MEDIUM: server: do not forget to generate the dynamic servers ids
  * BUG/MEDIUM: server: clear dynamic srv on delete from proxy id/name trees
  * BUG/MEDIUM: server: extend thread-isolate over much of CLI 'add server'
  * BUG/MINOR: stick-table: insert srv in used_name tree even with fixed id
  * DOC: lua: Add a warning about buffers modification in HTTP
  * BUG/MAJOR: resolvers: segfault using server template without SRV RECORDs
  * MEDIUM: resolvers: add a ref between servers and srv request or used SRV record
  * MEDIUM: resolvers: add a ref on server to the used A/AAAA answer item
  * BUG/MINOR: resolvers: answser item list was randomly purged or errors
  * CLEANUP: l7-retries: do not test the buffer before calling b_alloc()
  * BUG/MINOR: mux-fcgi: Expose SERVER_SOFTWARE parameter by default
  * BUG/MAJOR: htx: Fix htx_defrag() when an HTX block is expanded
  * CLEANUP: pools: remove now unused seq and pool_free_list
  * BUG/MAJOR: pools: fix possible race with free() in the lockless variant
  * MEDIUM: pools: use a single pool_gc() function for locked and lockless
  * MINOR: pools: call malloc_trim() under thread isolation
  * MINOR: pools: do not maintain the lock during pool_flush()
  * BUG/MINOR: pools: make DEBUG_UAF always write to the to-be-freed location
  * BUG/MINOR: pools: fix a possible memory leak in the lockless pool_flush()
  * BUG/MEDIUM: compression: Add a flag to know the filter is still processing data
  * BUG/MEDIUM: compression: Properly get the next block to iterate on payload
  * BUG/MEDIUM: compression: Fix loop skipping unused blocks to get the next block
  * BUG/MEDIUM: opentracing: initialization before establishing daemon and/or chroot mode
  * Revert "BUG/MINOR: opentracing: initialization after establishing daemon mode"
  * BUG/MINOR: ssl: OCSP stapling does not work if expire too far in the future
  * BUILD: make tune.ssl.keylog available again
  * DOC: use the req.ssl_sni in examples
  * MINOR: errors: allow empty va_args for diag variadic macro
  * BUG/MAJOR: stream-int: Release SI endpoint on server side ASAP on retry
  * DOC/MINOR: move uuid in the configuration to the right alphabetical order
  * BUG/MINOR: vars: Be sure to have a session to get checks variables
  * CLEANUP: http-ana: Remove useless if statement about L7 retries
  * BUG/MINOR: proxy: Missing calloc return value check in chash_init_server_tree
  * BUG/MINOR: http: Missing calloc return value check in make_arg_list
  * BUG/MINOR: http: Missing calloc return value check while parsing redirect rule
  * BUG/MINOR: worker: Missing calloc return value check in mworker_env_to_proc_list
  * BUG/MINOR: compression: Missing calloc return value check in comp_append_type/algo
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request rule
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request/tcp-response
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_defproxy_cpy
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_parse_declare
  * BUG/MINOR: http: Missing calloc return value check in parse_http_req_capture
  * BUG/MINOR: ssl: Missing calloc return value check in ssl_init_single_engine
  * BUG/MINOR: peers: Missing calloc return value check in peers_register_table
  * BUG/MINOR: server: Missing calloc return value check in srv_parse_source
  * DOC: intro: Fix typo in starter guide
  * MINOR: cfgparse: Fail when encountering extra arguments in macro
  * MINOR: http-ana: Perform L7 retries because of status codes in response analyser
  * BUG/MINOR: http-ana: Handle L7 retries on refused early data before K/A aborts
  * BUG/MINOR: http-ana: Send the right error if max retries is reached on L7 retry
  * Revert "MEDIUM: http-ana: Deal with L7 retries in HTTP analysers"
  * BUG/MINOR: http-comp: Preserve HTTP_MSGF_COMPRESSIONG flag on the response
  * BUG/MEDIUM: filters: Exec pre/post analysers only one time per filter
  * BUILD/MINOR: opentracing: fixed build when using clang
  * BUG/MAJOR: server: prevent deadlock when using 'set maxconn server'
  * BUG/MEDIUM: ebtree: Invalid read when looking for dup entry</changelog>
  <changelog author="mrueckert@suse.de" date="1625659200">- Update to version 2.4.2+git0.553dee326:
  * [RELEASE] Released version 2.4.2
  * REGTESTS: add http scheme-based normalization test
  * MEDIUM: h2: apply scheme-based normalization on h2 requests
  * MEDIUM: h1-htx: apply scheme-based normalization on h1 requests
  * MEDIUM: http: implement scheme-based normalization
  * MINOR: http: implement http_get_scheme
  * Revert "MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules"
  * BUG/MINOR: cli: fix server name output in "show fd"
  * BUG/MEDIUM: sock: make sure to never miss early connection failures
  * DOC: stick-table: add missing documentation about gpt0 stored type
  * BUG/MINOR: peers: fix data_type bit computation more than 32 data_types
  * BUG/MINOR: stick-table: fix several printf sign errors dumping tables
  * DOC: config: use CREATE USER for mysql-check
  * BUG/MEDIUM: resolvers: Make 1st server of a template take part to SRV resolution
  * BUG/MINOR: mqtt: Support empty client ID in CONNECT message
  * BUG/MINOR: mqtt: Fix parser for string with more than 127 characters
  * BUG/MINOR: tcpcheck: Fix numbering of implicit HTTP send/expect rules
  * BUILD: Makefile: fix linkage for Haiku.
  * BUG/MINOR: checks: return correct error code for srv_parse_agent_check
  * MINOR: resolvers: Reset server IP on error in resolv_get_ip_from_response()
  * BUG/MINOR: resolvers: Reset server IP when no ip is found in the response
  * BUG/MINOR: resolvers: Always attach server on matching record on resolution
  * CLEANUP: dns: Remove a forgotten debug message
  * DOC: config: Add missing actions in "tcp-request session" documentation
  * MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules
  * REGTESTS: fix maxconn update with agent-check
  * BUG/MAJOR: server: fix deadlock when changing maxconn via agent-check
  * BUG/MINOR: cache: Correctly handle existing-but-empty 'accept-encoding' header
  * BUG/MINOR: server/cli: Fix locking in function processing "set server" command
  * BUG/MINOR: resolvers: Use resolver's lock in resolv_srvrq_expire_task()
  * BUG/MEDIUM: resolvers: Add a task on servers to check SRV resolution status
  * MINOR: resolvers: Remove server from named_servers tree when removing a SRV item
  * MINOR: resolvers: Clean server in a dedicated function when removing a SRV item
  * BUG/MEDIUM: server/cli: Fix ABBA deadlock when fqdn is set from the CLI
  * BUG/MINOR: server: Forbid to set fqdn on the CLI if SRV resolution is enabled
  * BUG/MINOR: server-state: load SRV resolution only if params match the config</changelog>
  <changelog author="mrueckert@suse.de" date="1629201600">- Update to version 2.4.3+git0.4dd5a5a6c:
    CVE-2021-39240 CVE-2021-39241 CVE-2021-39242
    (boo#1189366 boo#1189548 boo#1189549)
  * [RELEASE] Released version 2.4.3
  * REGTESTS: add a test to prevent h2 desync attacks
  * BUG/MEDIUM: h2: give :authority precedence over Host
  * BUG/MAJOR: h2: enforce stricter syntax checks on the :method pseudo-header
  * BUG/MAJOR: h2: verify that :path starts with a '/' before concatenating it
  * BUG/MAJOR: h2: verify early that non-http/https schemes match the valid syntax
  * MINOR: http: add a new function http_validate_scheme() to validate a scheme
  * DOC/MINOR: fix typo in management document
  * CLEANUP: assorted typo fixes in the code and comments
  * BUG/MEDIUM: cfgcheck: verify existing log-forward listeners during config check
  * BUG/MEDIUM: spoe: Fix policy to close applets when SPOE connections are queued
  * DOC: config: Fix 'http-response send-spoe-group' documentation
  * DOC: Improve the lua documentation
  * BUG/MINOR: tcpcheck: Properly detect pending HTTP data in output buffer
  * BUG/MINOR: buffer: fix buffer_dump() formatting
  * BUG/MEDIUM: spoe: Create a SPOE applet if necessary when the last one is released
  * MINOR: spoe: Add a pointer on the filter config in the spoe_agent structure
  * ADMIN: dyncookie: implement a simple dynamic cookie calculator
  * MINOR: server: unmark deprecated on enable health/agent cli
  * BUG/MINOR: server: update last_change on maint-&gt;ready transitions too
  * BUG/MINOR: server: remove srv from px list on CLI 'add server' error
  * BUILD: opentracing: fixed build when using pkg-config utility
  * DOC: internals: document the FD takeover process
  * BUG/MINOR: fd: protect fd state harder against a concurrent takeover
  * BUG/MINOR: pollers: always program an update for migrated FDs
  * BUG/MINOR: poll: fix abnormally high skip_fd counter
  * BUG/MINOR: select: fix excess number of dead/skip reported
  * BUG/MEDIUM: pollers: clear the sleeping bit after waking up, not before
  * BUG/MEDIUM: connection: close a rare race between idle conn close and takeover
  * BUG/MINOR: connection: Add missing error labels to conn_err_code_str
  * BUG/MEDIUM: mux-h2: Handle remaining read0 cases on partial frames
  * BUG/MINOR: mux-h1: Be sure to swap H1C to splice mode when rcv_pipe() is called
  * BUG/MINOR: mux-h2: Obey dontlognull option during the preface
  * BUG/MINOR: mux-h1: Obey dontlognull option for empty requests
  * BUG/MINOR: systemd: must check the configuration using -Ws
  * BUG/MINOR: resolvers: Use a null-terminated string to lookup in servers tree
  * BUG/MINOR: check: fix the condition to validate a port-less server
  * BUG/MINOR: stats: Add missing agent stats on servers
  * BUG/MEDIUM: ssl_sample: fix segfault for srv samples on invalid request
  * BUILD/MINOR: memprof fix macOs build.
  * BUG/MINOR: mworker: do not export HAPROXY_MWORKER_REEXEC across programs
  * BUG/MEDIUM: mworker: do not register an exit handler if exit is expected
  * BUILD: lua: silence a build warning with TCC
  * BUILD: add detection of missing important CFLAGS
  * BUG/MINOR: ssl: Default-server configuration ignored by server
  * MINOR: mux_h2: define config to disable h2 websocket support
  * BUILD: http_htx: fix ci compilation error with isdigit for Windows</changelog>
  <changelog author="mrueckert@suse.de" date="1631016000">- Update to version 2.4.4+git0.acb1d0bea: CVE-2021-40346 (boo#1189877)
  * [RELEASE] Released version 2.4.4
  * Revert "BUG/MINOR: stream-int: Don't block reads in si_update_rx() if chn may receive"
  * BUG/MAJOR: htx: fix missing header name length check in htx_add_header/trailer
  * CLEANUP: htx: remove comments about "must be &lt; 256 MB"
  * BUG/MINOR: config: reject configs using HTTP with bufsize &gt;= 256 MB
  * DOC: configuration: remove wrong tcp-request examples in tcp-response
  * BUG/MINOR: vars: fix set-var/unset-var exclusivity in the keyword parser
  * CLEANUP: Add missing include guard to signal.h
  * BUG/MINOR: tools: Fix loop condition in dump_text()
  * BUG/MINOR threads: Use get_(local|gm)time instead of (local|gm)time
  * BUG/MINOR: ebtree: remove dependency on incorrect macro for bits per long
  * MINOR: time: add report_idle() to report process-wide idle time
  * BUG/MINOR: time: fix idle time computation for long sleeps
  * BUG/MINOR: lua: use strlcpy2() not strncpy() to copy sample keywords
  * MINOR: compiler: implement an ONLY_ONCE() macro
  * BUG/MINOR: base64: base64urldec() ignores padding in output size check
  * BUG/MEDIUM: base64: check output boundaries within base64{dec,urldec}
  * BUG/MINOR: stick-table: fix the sc-set-gpt* parser when using expressions
  * MINOR: hlua: take the global Lua lock inside a global function
  * REGTESTS: abortonclose: after retries, 503 is expected, not close
  * REGTESTS: http_upgrade: fix incorrect expectation on TCP-&gt;H1-&gt;H2
  * BUG/MEDIUM: h2: match absolute-path not path-absolute for :path</changelog>
  <changelog author="mrueckert@suse.de" date="1633089600">- Update to version 2.4.5+git0.e74a1b34b:
  * [RELEASE] Released version 2.4.5
  * MINOR: tasks: catch TICK_ETERNITY with BUG_ON() in __task_queue()
  * BUG/MINOR: tcp-rules: Stop content rules eval on read error and end-of-input
  * BUG/MINOR: tcpcheck: Don't use arg list for default proxies during parsing
  * MINOR: arg: Be able to forbid unresolved args when building an argument list
  * BUG/MAJOR: lua: use task_wakeup() to properly run a task once
  * BUG/MEDIUM: lua: fix wakeup condition from sleep()
  * MINOR: Makefile: add MEMORY_POOLS to the list of DEBUG_xxx options
  * DOC: peers: fix doc "enable" statement on "peers" sections
  * BUG/MINOR: mux-h1/mux-fcgi: Sanitize TE header to only send "trailers"
  * MINOR: stream-int: Notify mux when the buffer is not stuck when calling rcv_buf
  * BUG/MEDIUM: stream-int: Defrag HTX message in si_cs_recv() if necessary
  * MINOR: htx: Add a function to know if the free space wraps
  * MINOR: htx: Add an HTX flag to know when a message is fragmented
  * MINOR: stream-int: Set CO_RFL transient/persistent flags apart in si_cs_rcv()
  * BUG/MEDIUM: stream: Stop waiting for more data if SI is blocked on RXBLK_ROOM
  * BUG/MEDIUM: stream-int: Notify stream that the mux wants more room to xfer data
  * BUG/MEDIUM: mux-h1: Adjust conditions to ask more space in the channel buffer
  * BUG/MINOR: stats: use refcount to protect dynamic server on dump
  * MINOR: server: return the next srv instance on free_server
  * BUG/MINOR: server: do not use refcount in free_server in stopping mode
  * MINOR: global: define MODE_STOPPING
  * MINOR: server: implement a refcount for dynamic servers
  * BUG/MINOR: http-ana: increment internal_errors counter on response error
  * BUG/MINOR: h1-htx: Fix a typo when request parser is reset
  * BUG/MEDIUM: leastconn: fix rare possibility of divide by zero
  * BUG/MINOR: server: allow 'enable health' only if check configured
  * BUILD: threads: fix -Wundef for _POSIX_PRIORITY_SCHEDULING on libmusl
  * BUILD: halog: fix a -Wundef warning on non-glibc systems
  * BUILD: compiler: fixed a missing test on  defined(__GNUC__)
  * BUILD: fix dragonfly build again on __read_mostly
  * BUG/MINOR: vars: do not talk about global section in CLI errors for set-var
  * BUG/MINOR: vars: truncate the variable name in error reports about scope.
  * BUG/MINOR: vars: properly set the argument parsing context in the expression
  * MINOR: sample: add missing ARGC_ entries
  * BUG/MINOR: vars: improve accuracy of the rules used to check expression validity
  * BUILD: tools: properly guard __GLIBC__ with defined()
  * BUILD: ssl: fix two remaining occurrences of #if USE_OPENSSL
  * BUILD: ssl: next round of build warnings on LIBRESSL_VERSION_NUMBER
  * BUILD/MINOR: regex: avoid a build warning on USE_PCRE2 with -Wundef
  * IMPORT: slz: silence a build warning with -Wundef
  * BUILD/MINOR: ssl: avoid a build warning on LIBRESSL_VERSION with -Wundef
  * BUILD/MINOR: defaults: eliminate warning on MAXHOSTNAMELEN with -Wundef
  * BUILD: activity: use #ifdef not #if on USE_MEMORY_PROFILING
  * MINOR: proc: setting the process to produce a core dump on FreeBSD.
  * MINOR: tools: add FreeBSD support to get_exec_path()
  * BUILD: tools: get the absolute path of the current binary on NetBSD.
  * BUG/MINOR: flt-trace: fix an infinite loop when random-parsing is set
  * BUG/MINOR: cli/payload: do not search for args inside payload
  * BUILD: ist: prevent gcc11 maybe-uninitialized warning on istalloc
  * BUG/MINOR: connection: prevent null deref on mux cleanup task allocation
  * DOC: management: certificate files must be sanitized before injection
  * BUG/MINOR: tcpcheck: Improve LDAP response parsing to fix LDAP check
  * BUG/MAJOR: mux-h1: Don't eval input data if an error was reported
  * MINOR: pools: use mallinfo2() when available instead of mallinfo()
  * MINOR: pools: automatically disable malloc_trim() with external allocators
  * CLEANUP: pools: factor all malloc_trim() calls into trim_all_pools()
  * BUG/MINOR: compat: make sure __WORDSIZE is always defined
  * BUG/MEDIUM: stream-int: Don't block SI on a channel policy if EOI is reached
  * CLEANUP: mux-h1: Remove condition rejecting upgrade requests with payload
  * MINOR: htx: Skip headers with no value when adding a header list to a message
  * BUG/MEDIUM: mux-h1: Remove "Upgrade:" header for requests with payload
  * BUG/MINOR: systemd: ExecStartPre must use -Ws
  * BUG/MINOR: filters: Set right FLT_END analyser depending on channel
  * BUG/MINOR: filters: Always set FLT_END analyser when CF_FLT_ANALYZE flag is set
  * BUG/MEDIUM: http-ana: Reset channels analysers when returning an error
  * BUG/MINOR: stream: Don't release a stream if FLT_END is still registered
  * BUG/MINOR: lua: Don't yield in channel.append() and channel.set()
  * BUG/MINOR: lua: Yield in channel functions only if lua context can yield
  * MINOR: lua: Add a flag on lua context to know the yield capability at run time</changelog>
  <changelog author="mrueckert@suse.de" date="1633348800">- Update to version 2.4.6+git0.d83fd76a1:
  * [RELEASE] Released version 2.4.6
  * BUG/MEDIUM: filters: Fix a typo when a filter is attached blocking the release</changelog>
  <changelog author="mrueckert@suse.de" date="1633348801">- Update to version 2.4.7+git0.b5e51a5e2:
  * [RELEASE] Released version 2.4.7
  * BUG/MEDIUM: http-ana: Clear request analyzers when applying redirect rule</changelog>
  <changelog author="mrueckert@suse.de" date="1635940800">- Update to version 2.4.8+git0.d1f8d41e0:
  * [RELEASE] Released version 2.4.8
  * SCRIPTS: git-show-backports: re-enable file-based filtering
  * DOC/peers: some grammar fixes for peers 2.1 spec
  * MINOR: stream: Improve dump of bogus streams
  * BUILD/MINOR: cpuset freebsd build fix
  * DOC: config: Fix alphabetical order of fc_* samples
  * BUG/MINOR: sample: fix backend direction flags consecutive to last fix
  * BUG/MEDIUM: sample: Cumulate frontend and backend sample validity flags
  * BUG/MEDIUM: stream-int: Block reads if channel cannot receive more data
  * BUG/MINOR: http: Authorization value can have multiple spaces after the scheme
  * BUG/MEDIUM: http-ana: Drain request data waiting the tarpit timeout expiration
  * MINOR: halog: Add support for extracting captures using -hdr
  * BUG/MINOR: halog: Add missing newlines in die() messages
  * CLEANUP: halog: Use consistent indentation in help()
  * MINOR: halog: Rename -qry to -query
  * DOC: halog: Move the `-qry` parameter into the correct section in help text
  * MINOR: halog: Add -qry parameter allowing to preserve the query string in -uX
  * BUG/MEDIUM: resolvers: Track api calls with a counter to free resolutions
  * BUG/MEDIUM: resolvers: Don't recursively perform requester unlink
  * MEDIUM: resolvers: remove the last occurrences of the "safe" argument
  * MEDIUM: resolvers: use a kill list to preserve the list consistency
  * CLEANUP: resolvers: replace all LIST_DELETE with LIST_DEL_INIT
  * CLEANUP: resolvers: simplify resolv_link_resolution() regarding requesters
  * CLEANUP: always initialize the answer_list
  * CLEANUP: resolvers: do not export resolv_purge_resolution_answer_records()
  * BUG/MEDIUM: mux-h1: Perform a connection shutdown when the h1c is released
  * BUG/MINOR: mux-h1: Save shutdown mode if the shutdown is delayed
  * BUILD: atomic: fix build on mac/arm64
  * BUG/MINOR: backend: fix improper insert in avail tree for always reuse
  * BUILD: fix compilation on NetBSD
  * MINOR: memprof: add one pointer size to the size of allocations
  * MINOR: memprof: report the delta between alloc and free on realloc()
  * BUG/MEDIUM: lua: fix memory leaks with realloc() on non-glibc systems
  * BUG/MINOR: mux-h2: do not prevent from sending a final GOAWAY frame
  * BUG/MINOR: task: do not set TASK_F_USR1 for no reason
  * BUG/MAJOR: buf: fix varint API post- vs pre- increment
  * BUG/MEDIUM: resolvers: always check a valid item in query_list
  * BUILD: resolvers: avoid a possible warning on null-deref
  * BUG/MAJOR: resolvers: add other missing references during resolution removal
  * MINOR: resolvers: merge address and target into a union "data"
  * BUG/MEDIUM: resolvers: use correct storage for the target address
  * BUG/MEDIUM: resolvers: fix truncated TLD consecutive to the API fix
  * MINOR: resolvers: fix the resolv_dn_label_to_str() API about trailing zero
  * BUG/MINOR: resolvers: do not reject host names of length 255 in SRV records
  * BUG/MEDIUM: resolver: make sure to always use the correct hostname length
  * MINOR: resolvers: fix the resolv_str_to_dn_label() API about trailing zero
  * BUG/MAJOR: dns: attempt to lock globaly for msg waiter list instead of use barrier
  * BUG/MAJOR: dns: tcp session can remain attached to a list after a free
  * BUG/MEDIUM: tcpcheck: Properly catch early HTTP parsing errors
  * Revert "CLEANUP: server: always include the storage for SSL settings"
  * BUG/MEDIUM: stream: Keep FLT_END analyzers if a stream detects a channel error
  * BUG/MEDIUM: cpuset: fix cpuset size for FreeBSD
  * BUG/MINOR: sample: Fix 'fix_tag_value' sample when waiting for more data
  * BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back
  * MINOR: initcall: Rename __GLOBL and __GLOBL1.
  * DOC: configuration: add clarification on escaping in keyword arguments
  * BUG/MEDIUM: mux_h2: Handle others remaining read0 cases on partial frames
  * BUG/MEDIUM: sample: properly verify that variables cast to sample
  * MINOR: sample: provide a generic var-to-sample conversion function
  * CLEANUP: sample: uninline sample_conv_var2smp_str()
  * CLEANUP: sample: rename sample_conv_var2smp() to *_sint
  * CLEANUP: server: always include the storage for SSL settings</changelog>
  <changelog author="varkoly@suse.com" date="1646740800">- (bsc#1196408) VUL-0: CVE-2022-0711: haproxy: Denial of service via set-cookie2 header
  o Apply upstream patch:
    0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch</changelog>
  <changelog author="varkoly@suse.com" date="1674043200">- VUL-0: CVE-2023-0056: haproxy: segfault DoS (bsc#1207181)
  o Apply upstream patch:
    0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch</changelog>
  <changelog author="varkoly@suse.com" date="1676030400">- VUL-0: serious vulnerability in the HTTP/1 parser (bsc#1208132)
  o Apply upstream patch:
    2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- The output buffer is not zero-initialized. If we don't clear reserved
  bytes, fcgi requests sent to backend will leak sensitive data.
  o Apply proposed patch:
    0001-output-buffer-is-not-zero-initialized.path</changelog>
  <changelog author="varkoly@suse.com" date="1681214400">- ECO: Maint: Update haproxy to latest maintenance release for all SLE15 (jsc#PED-3821)
- rebase and rename haproxy-1.6.0-sec-options.patch -&gt; haproxy-2.4.22-sec-options.patch
- remove patches covered by new release:
  lua54.patch
  0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch
  0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch
  0001-output-buffer-is-not-zero-initialized.path
  2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- Update to version 2.4.22+git0.f8e3218e2:
  * [RELEASE] Released version 2.4.22
  * BUG/CRITICAL: http: properly reject empty http header field names
  * CI: github: don't warn on deprecated openssl functions on windows
  * BUG/MEDIUM: stconn: Schedule a shutw on shutr if data must be sent first
  * DOC: proxy-protocol: fix wrong byte in provided example
  * DOC: config: 'http-send-name-header' option may be used in default section
  * DOC: config: fix option spop-check proxy compatibility
  * BUG/MEDIUM: cache: use the correct time reference when comparing dates
  * BUG/MEDIUM: stick-table: do not leave entries in end of window during purge
  * BUG/MINOR: ssl/crt-list: warn when a line is malformated
  * BUG/MEDIUM: ssl: wrong eviction from the session cache tree
  * BUG/MINOR: fcgi-app: prevent 'use-fcgi-app' in default section
  * [RELEASE] Released version 2.4.21
  * BUG/MINOR: sink: free the forwarding task on exit
  * BUILD: hpack: include global.h for the trash that is needed in debug mode
  * BUG/MINOR: mux-h2: add missing traces on failed headers decoding
  * BUG/MINOR: listener: close tiny race between resume_listener() and stopping
  * DOC: config: fix "Address formats" chapter syntax
  * BUG/MINOR: mux-fcgi: Correctly set pathinfo
  * DOC: config: fix aliases for protocol prefixes "udp4@" and "udp6@"
  * DOC: config: fix wrong section number for "protocol prefixes"
  * BUG/MINOR: listeners: fix suspend/resume of inherited FDs
  * BUG/MINOR: http-ana: make set-status also update txn-&gt;status
  * BUG/MINOR: http-fetch: Don't block HTTP sample fetch eval in HTTP_MSG_ERROR state
  * BUG/MINOR: http-ana: Report SF_FINST_R flag on error waiting the request body
  * BUG/MINOR: promex: Don't forget to consume the request on error
  * BUG/MINOR: resolvers: Wait the resolution execution for a do_resolv action
  * BUG/MINOR: h1-htx: Remove flags about protocol upgrade on non-101 responses
  * CLEANUP: htx: fix a typo in an error message of http_str_to_htx
  * BUG/MINOR: http: Memory leak of http redirect rules' format string
  * REGTEST: fix the race conditions in hmac.vtc
  * REGTEST: fix the race conditions in digest.vtc
  * REGTEST: fix the race conditions in json_query.vtc
  * BUG/MAJOR: buf: Fix copy of wrapping output data when a buffer is realigned
  * BUG/MINOR: http-fetch: Only fill txn status during prefetch if not already set
  * BUILD: makefile: sort the features list
  * BUILD: makefile: build the features list dynamically
  * BUG/MINOR: pool/stats: Use ullong to report total pool usage in bytes in stats
  * BUG/MEDIUM: mux-h2: Refuse interim responses with end-stream flag set
  * BUG/MINOR: ssl: Fix memory leak of find_chain in ssl_sock_load_cert_chain
  * LICENSE: wurfl: clarify the dummy library license.
  * BUG/MEDIUM: resolvers: Use tick_first() to update the resolvers task timeout
  * REGTESTS: startup: check maxconn computation
  * REGTESTS: fix the race conditions in iff.vtc
  * BUG/MAJOR: fcgi: Fix uninitialized reserved bytes
  * DOC: promex: Add missing backend metrics
  * MINOR: promex: introduce haproxy_backend_agg_check_status
  * BUG/MINOR: promex: create haproxy_backend_agg_server_status
  * BUG/MEDIUM: mworker: fix segv in early failure of mworker mode with peers
  * BUG/MINOR: ssl: Fix potential overflow
  * BUG/MEDIUM: ssl: Verify error codes can exceed 63
  * BUG/MINOR: resolvers: Don't wait periodic resolution on healthcheck failure
  * BUILD: peers: peers-t.h depends on stick-table-t.h
  * CI: github: change "ubuntu-latest" to "ubuntu-20.04"
  * BUG/MEDIIM: stconn: Flush output data before forwarding close to write side
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * [RELEASE] Released version 2.4.20
  * Revert "CI: determine actual OpenSSL version dynamically"
  * Revert "CI: switch to the "latest" LibreSSL"
  * SCRIPTS: announce-release: add a link to the data plane API
  * DOC: config: clarify the -m dir and -m dom pattern matching methods
  * DOC: config: clarify the fact that "retries" is not just for connections
  * DOC: config: explain how default matching method for ACL works
  * DOC: config: mention that a single monitor-uri rule is supported
  * DOC: config: clarify the fact that SNI should not be used in HTTP scenarios
  * DOC: config: provide some configuration hints for "http-reuse"
  * Revert "BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action"
  * BUG/MINOR: mux-h1: Fix handling of 408-Request-Time-Out
  * BUILD: http-htx: Silent build error about a possible NULL start-line
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * BUG/MINOR: log: fix parse_log_message rfc5424 size check
  * BUG/MINOR: cfgparse-listen: fix ebpt_next_dup pointer dereference on proxy "from" inheritance
  * BUILD: listener: fix build warning on global_listener_rwlock without threads
  * BUG/MINOR: server/idle: at least use atomic stores when updating max_used_conns
  * BUILD: peers: Remove unused variables
  * BUG/MEDIUM: peers: messages about unkown tables not correctly ignored
  * BUG/MINOR: ssl: don't initialize the keylog callback when not required
  * BUG/MINOR: http_ana/txn: don't re-initialize txn and req var lists
  * BUG/MEDIUM: listener: Fix race condition when updating the global mngmt task
  * BUG/MINOR: pool/cli: use ullong to report total pool usage in bytes
  * BUG/MEDIUM: ring: fix creation of server in uninitialized ring
  * DOC: config: fix alphabetical ordering of global section
  * REG-TESTS: cache: Remove T-E header for 304-Not-Modified responses
  * BUG/MINOR: mux-h1: Do not send a last null chunk on body-less answers
  * BUG/MEDIUM: mux-fcgi: Avoid value length overflow when it doesn't fit at once
  * BUG/MINOR: mux-fcgi: Be sure to send empty STDING record in case of zero-copy
  * BUG/MINOR: resolvers: Set port before IP address when processing SRV records
  * BUG/MINOR: http-htx: Fix error handling during parsing http replies
  * BUG/MEDIUM: wdt/clock: properly handle early task hangs
  * CI: emit the compiler's version in the build reports
  * CI: switch to the "latest" LibreSSL
  * BUG/MINOR: ssl: ocsp structure not freed properly in case of error
  * BUG/MINOR: ssl: Memory leak of AUTHORITY_KEYID struct when loading issuer
  * CI: add monthly gcc cross compile jobs
  * BUG/MINOR: log: fixing bug in tcp syslog_io_handler Octet-Counting
  * BUG/MEDIUM: stick-table: fix a race condition when updating the expiration task
  * BUG/MAJOR: stick-table: don't process store-response rules for applets
  * DOC: management: add forgotten "show startup-logs"
  * BUG/MINOR: stick-table: Use server_id instead of std_t_sint in process_store_rules()
  * CI: SSL: temporarily stick to LibreSSL=3.5.3
  * CI: SSL: use proper version generating when "latest" semantic is used
  * BUG/MINOR: sink: Set default connect/server timeout for implicit ring buffers
  * BUG/MINOR: sink: Only use backend capability for the sink proxies
  * BUG/MEDIUM: compression: handle rewrite errors when updating response headers
  * BUG/MINOR: ring: Properly parse connect timeout
  * BUG/MINOR: log: Preserve message facility when the log target is a ring buffer
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in workflow definition
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in matrix.py
  * BUG/MINOR: server: make sure "show servers state" hides private bits
  * BUG/MAJOR: stick-tables: do not try to index a server name for applets
  * DOC: configuration: missing 'if' in tcp-request content example
  * BUG/MINOR: backend: only enforce turn-around state when not redispatching
  * BUG/MINOR: smtpchk: SMTP Service check should gracefully close SMTP transaction
  * MINOR: smtpchk: Update expect rule to fully match replies to EHLO commands
  * BUG/MINOR: mux-h1: Account consumed output data on synchronous connection error
  * BUILD: http_fetch: silence an uninitiialized warning with gcc-4/5/6 at -Os
  * BUG/MINOR: http-fetch: Update method after a prefetch in smp_fetch_meth()
  * BUILD: h1: silence an initiialized warning with gcc-4.7 and -Os
  * BUG/MEDIUM: lua: handle stick table implicit arguments right.
  * BUG/MEDIUM: lua: Don't crash in hlua_lua2arg_check on failure
  * DOC: config: Fix pgsql-check documentation to make user param mandatory
  * BUG/MINOR: checks: update pgsql regex on auth packet
  * [RELEASE] Released version 2.4.19
  * BUG/MEDIUM: resolvers: Remove aborted resolutions from query_ids tree
  * REGTESTS: 4be_1srv_smtpchk_httpchk_layer47errors: Return valid SMTP replies
  * BUG/MINOR: log: improper behavior when escaping log data
  * SCRIPTS: announce-release: update some URLs to https
  * BUILD: fd: fix a build warning on the DWCAS
  * BUG/MEDIUM: captures: free() an error capture out of the proxy lock
  * DOC: fix TOC in starter guide for subsection 3.3.8. Statistics
  * REGTESTS: ssl/log: test the log-forward with SSL
  * BUG/MEDIUM: sink: bad init sequence on tcp sink from a ring.
  * REGTESTS: log: test the log-forward feature
  * REGTESTS: healthcheckmail: Relax matching on the healthcheck log message
  * BUG/MINOR: stats: fixing stat shows disabled frontend status as 'OPEN'
  * MINOR: listener: small API change
  * BUG/MEDIUM: proxy: ensure pause_proxy() and resume_proxy() own PROXY_LOCK
  * CI: cirrus-ci: bump FreeBSD image to 13-1
  * BUG/MINOR: signals/poller: ensure wakeup from signals
  * BUG/MINOR: signals/poller: set the poller timeout to 0 when there are signals
  * BUG/MINOR: task: always reset a new tasklet's call date
  * BUG/MINOR: h1: Support headers case adjustment for TCP proxies
  * BUILD: makefile: enable crypt(3) for NetBSD
  * BUG/MINOR: regex: Properly handle PCRE2 lib compiled without JIT support
  * BUG/MINOR: mux-fcgi: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h1: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h2: fix the "show fd" dest buffer for the subscriber
  * BUG/MEDIUM: mux-h1: always use RST to kill idle connections in pools
  * REGTESTS: http_request_buffer: Add a barrier to not mix up log messages
  * BUG/MEDIUM: mux-h1: do not refrain from signaling errors after end of input
  * BUG/MINOR: tcpcheck: Disable QUICKACK for default tcp-check (with no rule)
  * BUG/MINOR: hlua: Rely on CF_EOI to detect end of message in HTTP applets
  * BUG/MEDIUM: peers: Don't start resync on reload if local peer is not up-to-date
  * BUG/MEDIUM: peers: Don't use resync timer when local resync is in progress
  * BUG/MEDIUM: peers: Add connect and server timeut to peers proxy
  * BUG/MEDIUM: spoe: Properly update streams waiting for a ACK in async mode
  * DOC: configuration: do-resolve doesn't work with a port in the string
  * REGTESTS: Fix prometheus script to perform HTTP health-checks
  * BUG/MINOR: tcpcheck: Disable QUICKACK only if data should be sent after connect
  * BUG/MINOR: resolvers: return the correct value in resolvers_finalize_config()
  * BUG/MAJOR: mworker: fix infinite loop on master with no proxies.
  * BUG/MAJOR: log-forward: Fix log-forward proxies not fully initialized
  * BUG/MEDIUM: mux-h2: do not fiddle with -&gt;dsi to indicate demux is idle
  * BUG/MEDIUM: http-ana: fix crash or wrong header deletion by http-restrict-req-hdr-names
  * BUILD: http: silence an uninitialized warning affecting gcc-5
  * BUG/MEDIUM: ring: fix too lax 'size' parser
  * BUILD: debug: silence warning on gcc-5
  * BUG/MEDIUM: task: relax one thread consistency check in task_unlink_wq()
  * BUG/MEDIUM: poller: use fd_delete() to release the poller pipes
  * BUILD: cfgparse: always defined _GNU_SOURCE for sched.h and crypt.h
  * BUG/MINOR: sink: fix a race condition between the writer and the reader
  * BUG/MINOR: ring/cli: fix a race condition between the writer and the reader
  * BUG/MEDIUM: proxy: Perform a custom copy for default server settings
  * REORG: server: Export srv_settings_cpy() function
  * MINOR: server: Constify source server to copy its settings
  * BUG/MEDIUM: dns: Properly initialize new DNS session
  * BUG/MINOR: peers: Use right channel flag to consider the peer as connected
  * BUG/MEDIUM: peers: limit reconnect attempts of the old process on reload
  * MINOR: peers: Use a dedicated reconnect timeout when stopping the local peer
  * BUG/MEDIUM: pattern: only visit equivalent nodes when skipping versions
  * MINOR: ebtree: add ebmb_lookup_shorter() to pursue lookups
  * MINOR: http-htx: Use new HTTP functions for the scheme based normalization
  * BUG/MEDIUM: h1: Improve authority validation for CONNCET request
  * MINOR: http: Add function to detect default port
  * MINOR: http: Add function to get port part of a host
  * BUG/MEDIUM: mworker: use default maxconn in wait mode
  * [RELEASE] Released version 2.4.18
  * BUG/MINOR: sockpair: wrong return value for fd_send_uxst()
  * BUG/MINOR: backend: Fallback on RR algo if balance on source is impossible
  * BUILD: add detection for unsupported compiler models
  * BUG/MEDIUM: mworker: proc_self incorrectly set crashes upon reload
  * REGTESTS: Fix some scripts to be compatible with 2.4 and prior
  * BUG/MINOR: tools: fix statistical_prng_range()'s output range
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds (try 2)
  * BUILD: makefile: Fix install(1) handling for OpenBSD/NetBSD/Solaris/AIX
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds
  * MEDIUM: mworker: set the iocb of the socketpair without using fd_insert()
  * BUG/MEDIUM: mux-h1: Handle connection error after a synchronous send
  * BUG/MEDIUM: http-ana: Don't wait to have an empty buf to switch in TUNNEL state
  * BUG/MINOR: mux-h1: Be sure to commit htx changes in the demux buffer
  * REGTEESTS: filters: Fix CONNECT request in random-forwarding script
  * BUG/MEDIUM: http-fetch: Don't fetch the method if there is no stream
  * BUG/MINOR: http-htx: Fix scheme based normalization for URIs wih userinfo
  * BUG/MINOR: peers: fix possible NULL dereferences at config parsing
  * BUG/MINOR: http-act: Properly generate 103 responses when several rules are used
  * BUG/MINOR: http-check: Preserve headers if not redefined by an implicit rule
  * BUG/MINOR: peers/config: always fill the bind_conf's argument
  * MINOR: fd: Add BUG_ON checks on fd_insert()
  * CI: re-enable gcc asan builds
  * BUILD: Makefile: Add Lua 5.4 autodetect
  * BUG/MEDIUM: ssl/fd: unexpected fd close using async engine
  * MINOR: fd: add a new FD_DISOWN flag to prevent from closing a deleted FD
  * BUG/MINOR: http-fetch: Use integer value when possible in "method" sample fetch
  * BUG/MINOR: http-ana: Set method to HTTP_METH_OTHER when an HTTP txn is created
  * BUG/MINOR: ssl: Do not look for key in extra files if already in pem
  * MEDIUM: mux-h2: try to coalesce outgoing WINDOW_UPDATE frames
  * BUG/MEDIUM: ssl/cli: crash when crt inserted into a crt-list
  * BUG/MINOR: tcp-rules: Make action call final on read error and delay expiration
  * BUG/MINOR: cli/stats: add missing trailing LF after "show info json"
  * BUG/MINOR: server: do not enable DNS resolution on disabled proxies
  * BUG/MINOR: cli/stats: add missing trailing LF after JSON outputs
  * REGTESTS: healthcheckmail: Relax health-check failure condition
  * REGTESTS: healthcheckmail: Update the test to be functionnal again
  * BUG/MINOR: checks: Properly handle email alerts in trace messages
  * BUG/MINOR: trace: Test server existence for health-checks to get proxy
  * BUG/MEDIUM: mailers: Set the object type for check attached to an email alert
  * BUILD: compiler: implement unreachable for older compilers too
  * REGTESTS: restrict_req_hdr_names: Extend supported versions
  * REGTESTS: http_abortonclose: Extend supported versions
  * BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_cert I/O handler
  * BUG/MINOR: ssl_ckch: Dump cert transaction only once if show command yield
  * REGTESTS: http_request_buffer: Increase client timeout to wait "slow" clients
  * REGTESTS: abortonclose: Add a barrier to not mix up log messages
  * MEDIUM: http-ana: Always report rewrite failures as PRXCOND in logs
  * BUG/MEDIUM: ssl/crt-list: Rework 'add ssl crt-list' to handle full buffer cases
  * BUG/MEDIUM: ssl_ckch: Rework 'commit ssl cert' to handle full buffer cases
  * BUG/MINOR: ssl_ckch: Don't duplicate path when replacing a cert entry
  * BUG/MEDIUM: ssl_ckch: Don't delete a cert entry if it is being modified
  * BUG/MINOR: ssl_ckch: Free error msg if commit changes on a cert entry fails
  * DOC: intro: adjust the numbering of paragrams to keep the output ordered
  * DOC: peers: fix port number and addresses on new peers section format
  * DOC: peers: clarify when entry expiration date is renewed.
  * DOC: peers: indicate that some server settings are not usable
  * SCRIPTS: make publish-release try to launch make-releases-json
  * SCRIPTS: add make-releases-json to recreate a releases.json file in download dirs
  * REGTESTS: Do not use REQUIRE_VERSION for HAProxy 2.5+ (2)
  * BUG/MEDIUM: sample: Fix adjusting size in word converter
  * BUG/MEDIUM: peers: prevent unitialized multiple listeners on peers section
  * BUG/MEDIUM: peers: fix segfault using multiple bind on peers sections
  * BUG/MEDIUM: resolvers: Don't defer resolutions release in deinit function
  * BUG/MEDIUM: http: Properly reject non-HTTP/1.x protocols
  * BUG/MEDIUM: tools: Fix `inet_ntop` usage in sa2str
  * CI: determine actual OpenSSL version dynamically
  * BUILD/MINOR: cpuset fix build for FreeBSD 13.1
  * BUG/MINOR: peers: fix error reporting of "bind" lines
  * BUG/MINOR: cfgparse: abort earlier in case of allocation error
  * BUG/MINOR: check: Reinit the buffer wait list at the end of a check
  * BUG/MEDIUM: config: Reset outline buffer size on realloc error in readcfgfile()
  * REGTESTS: abortonclose: Fix some race conditions
  * BUG/MINOR: ssl: Fix crash when no private key is found in pem
  * MINOR: tools: add get_exec_path implementation for solaris based systems.
  * BUILD: fix build warning on solaris based systems with __maybe_unused.
  * MEDIUM: http-ana: Add a proxy option to restrict chars in request header names
  * CI: determine actual LibreSSL version dynamically
  * [RELEASE] Released version 2.4.17
  * CLEANUP: mux-h1: Fix comments and error messages for global options
  * BUG/MEDIUM: wdt: don't trigger the watchdog when p is unitialized
  * BUG/MINOR: conn_stream: do not confirm a connection from the frontend path
  * BUG/MINOR: server: Make SRV_STATE_LINE_MAXLEN value from 512 to 2kB (2000 bytes).
  * DOC: install: update gcc version requirements
  * BUG/MEDIUM: ssl: fix the gcc-12 broken fix :-(
  * BUILD: listener: shut report of possible null-deref in listener_accept()
  * BUILD: debug: work around gcc-12 excessive -Warray-bounds warnings
  * BUILD: ssl: work around bogus warning in gcc 12's -Wformat-truncation
  * CI: dynamically determine actual version of h2spec
  * DOC: fix typo "ant" for "and" in INSTALL
  * BUG/MINOR: map/cli: make sure patterns don't vanish under "show map"'s init
  * BUG/MINOR: map/cli: protect the backref list during "show map" errors
  * BUG/MEDIUM: cli: make "show cli sockets" really yield
  * BUG/MEDIUM: resolvers: make "show resolvers" properly yield
  * BUG/MINOR: tcp/http: release the expr of set-{src,dst}[-port]
  * DOC: config: Update doc for PR/PH session states to warn about rewrite failures
  * MINOR: mux-h2: report a trace event when failing to create a new stream
  * BUG/MINOR: mux-h2: mark the stream as open before processing it not after
  * BUG/MAJOR: dns: multi-thread concurrency issue on UDP socket
  * BUG/MEDIUM: mux-h1: Be able to handle trailers when C-L header was specified
  * BUG/MEDIUM: mux-fcgi: Be sure to never set EOM flag on an empty HTX message
  * SCRIPTS: announce-release: add URL of dev packages
  * CI: github actions: update LibreSSL to 3.5.2
  * [RELEASE] Released version 2.4.16
  * BUILD: opentracing: Fix OT build due to misuse of var_clear()
  * BUILD: proto_uxst: do not set unused flag
  * BUILD: sockpair: do not set unused flag
  * BUILD: fd: remove unused variable totlen in fd_write_frag_line()
  * CLEANUP: acl: Remove unused variable when releasing an acl expression
  * BUG/MINOR: pools: make sure to also destroy shared pools in pool_destroy_all()
  * BUG/MINOR: resolvers: Fix memory leak in resolvers_deinit()
  * BUILD: compiler: properly distinguish weak and global symbols
  * REGTESTS: fix the race conditions in be2dec.vtc ad field.vtc
  * MEDIUM: queue: use tasklet_instant_wakeup() to wake tasks
  * MINOR: task: add a new task_instant_wakeup() function
  * BUG/MINOR: rules: Fix check_capture() function to use the right rule arguments
  * DOC: remove my name from the config doc
  * BUG/MAJOR: connection: Never remove connection from idle lists outside the lock
  * BUG/MINOR: cache: Disable cache if applet creation fails
  * SCRIPTS: announce-release: add shortened links to pending issues
  * DOC: lua: update a few doc URLs
  * SCRIPTS: announce-release: update the doc's URL
  * BUG/MEDIUM: compression: Don't forget to update htx_sl and http_msg flags
  * BUG/MEDIUM: fcgi-app: Use http_msg flags to know if C-L header can be added
  * BUG/MEDIUM: stream: do not abort connection setup too early
  * BUILD: compiler: use a more portable set of asm(".weak") statements
  * BUILD: sched: workaround crazy and dangerous warning in Clang 14
  * BUG/MEDIUM: mux-h1: Don't request more room on partial trailers
  * BUG/MINOR: mux-h2: use timeout http-request as a fallback for http-keep-alive
  * BUG/MINOR: mux-h2: do not use timeout http-keep-alive on backend side
  * BUILD: debug: mark the __start_mem_stats/__stop_mem_stats symbols as weak
  * BUG/MINOR: cache: do not display expired entries in "show cache"
  * BUG/MINOR: mux-h2: do not send GOAWAY if SETTINGS were not sent
  * CI: cirrus: switch to FreeBSD-13.0
  * CI: Update to actions/cache@v3
  * CI: Update to actions/checkout@v3
  * DEBUG: opentracing: show return values of all functions in the debug output
  * CLEANUP: opentracing: added variable to store variable length
  * CLEANUP: opentracing: added flt_ot_smp_init() function
  * CLEANUP: opentracing: removed unused function flt_ot_var_get()
  * CLEANUP: opentracing: removed unused function flt_ot_var_unset()
  * DOC: opentracing: corrected comments in function descriptions
  * EXAMPLES: opentracing: refined shell scripts for testing filter performance
  * BUG/MINOR: opentracing: setting the return value in function flt_ot_var_set()
  * BUG/MEDIUM: http-act: Don't replace URI if path is not found or invalid
  * BUG/MEDIUM: http-conv: Fix url_enc() to not crush const samples
  * BUG/MEDIUM: mux-h1: Set outgoing message to DONE when payload length is reached
  * BUG/MEDIUM: promex: Be sure to never set EOM flag on an empty HTX message
  * BUG/MEDIUM: hlua: Don't set EOM flag on an empty HTX message in HTTP applet
  * BUG/MEDIUM: stats: Be sure to never set EOM flag on an empty HTX message
  * BUG/MINOR: fcgi-app: Don't add C-L header on response to HEAD requests
  * CI: github actions: update OpenSSL to 3.0.2
  * BUG/MAJOR: mux_pt: always report the connection error to the conn_stream
  * BUG/MINOR: cli/stream: fix "shutdown session" to iterate over all threads
  * BUG/MINOR: samples: add missing context names for sample fetch functions
  * DOC: reflect H2 timeout changes
  * BUG/MEDIUM: mux-h2: make use of http-request and keep-alive timeouts
  * MEDIUM: mux-h2: slightly relax timeout management rules
  * BUG/MEDIUM: stream-int: do not rely on the connection error once established
  * BUG/MEDIUM: mux-h1: Properly detect full buffer cases during message parsing
  * BUG/MEDIUM: mux-fcgi: Properly handle return value of headers/trailers parsing
  * BUG/MINOR: tools: url2sa reads too far when no port nor path
  * DOC: config: Explictly add supported MQTT versions
  * MEDIUM: mqtt: support mqtt_is_valid and mqtt_field_value converters for MQTTv3.1
  * BUG/MEDIUM: trace: avoid race condition when retrieving session from conn-&gt;owner
  * BUG/MEDIUM: mux-h1: only turn CO_FL_ERROR to CS_FL_ERROR with empty ibuf
  * CI: github actions: switch to LibreSSL-3.5.1
  * BUG/MINOR: server/ssl: free the SNI sample expression
  * BUG/MINOR: tools: fix url2sa return value with IPv4
  * [RELEASE] Released version 2.4.15
  * BUILD: tree-wide: mark a few numeric constants as explicitly long long
  * DOC: Fix usage/examples of deprecated ACLs
  * BUG/MINOR: stream: make the call_rate only count the no-progress calls
  * BUG/MINOR: session: fix theoretical risk of memleak in session_accept_fd()
  * BUG/MAJOR: mux-pt: Always destroy the backend connection on detach
  * DEBUG: stream: Fix stream trace message to print response buffer state
  * DEBUG: stream: Add the missing descriptions for stream trace events
  * BUG/MEDIUM: mcli: Properly handle errors and timeouts during reponse processing
  * DEBUG: cache: Update underlying buffer when loading HTX message in cache applet
  * BUG/MINOR: promex: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cache: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: stats: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: hlua: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cli: shows correct mode in "show sess"
  * BUG/MINOR: add missing modes in proxy_mode_str()
  * BUILD: pools: fix backport of no-memory-trimming on non-linux OS
  * MINOR: pools: add a new global option "no-memory-trimming"
  * BUG/MEDIUM: pools: fix ha_free() on area in the process of being freed
  * BUG/MINOR: pool: always align pool_heads to 64 bytes
  * REGTESTS: fix the race conditions in secure_memcmp.vtc
  * REGTESTS: fix the race conditions in normalize_uri.vtc
  * BUG/MEDIUM: htx: Fix a possible null derefs in htx_xfer_blks()
  * CI: github actions: use cache for SSL libs
  * CI: github actions: use cache for OpenTracing
  * CI: github actions: add OpenTracing builds
  * CI: github actions: add the output of $CC -dM -E-
  * [RELEASE] Released version 2.4.14
  * BUG/MEDIUM: stream: Abort processing if response buffer allocation fails
  * CI: github: enable pool debugging by default
  * REGTESTS: fix the race conditions in 40be_2srv_odd_health_checks
  * BUG/MINOR: proxy: preset the error message pointer to NULL in parse_new_proxy()
  * BUG/MAJOR: mux-h2: Be sure to always report HTX parsing error to the app layer
  * BUG/MEDIUM: mux-h1: Don't wake h1s if mux is blocked on lack of output buffer
  * BUG/MEDIUM: htx: Be sure to have a buffer to perform a raw copy of a message
  * BUG/MINOR: tools: url2sa reads ipv4 too far
  * BUG/MINOR: mailers: negotiate SMTP, not ESMTP
  * CI: github actions: update OpenSSL to 3.0.1
  * CI: github: switch to OpenSSL 3.0.0
  * CI: github actions: relax OpenSSL-3.0.0 version comparision
  * CI: github actions: -Wno-deprecated-declarations with OpenSSL 3.0.0
  * CI: github actions: add OpenSSL-3.0.0 builds
  * BUILD: adopt script/build-ssl.sh for OpenSSL-3.0.0beta2
  * BUILD: fix compilation for OpenSSL-3.0.0-alpha17
  * CI: ssl: keep the old method for ancient OpenSSL versions
  * CI: ssl: do not needlessly build the OpenSSL docs
  * CI: ssl: enable parallel builds for OpenSSL on Linux
  * BUG/MAJOR: compiler: relax alignment constraints on certain structures
  * BUG/MEDIUM: fd: always align fdtab[] to 64 bytes
  * BUG/MEDIUM: resolvers: Really ignore trailing dot in domain names
  * BUG/MINOR: sink: Use the right field in appctx context in release callback
  * BUG/MINOR: mworker: fix a FD leak of a sockpair upon a failed reload
  * BUG/MEDIUM: mworker: close unused transferred FDs on load failure
  * MINOR: sock: move the unused socket cleaning code into its own function
  * [RELEASE] Released version 2.4.13
  * BUG/MINOR: mux-h2: update the session's idle delay before creating the stream
  * BUG/MEDIUM: h2/hpack: fix emission of HPACK DTSU after settings change
  * REGTESTS: peers: leave a bit more time to peers to synchronize
  * BUG/MAJOR: spoe: properly detach all agents when releasing the applet
  * BUG/MAJOR: http/htx: prevent unbounded loop in http_manage_server_side_cookies
  * BUG/MEDIUM: listener: read-lock the listener during accept()
  * MINOR: listener: replace the listener's spinlock with an rwlock
  * BUG/MINOR: mworker: does not erase the pidfile upon reload
  * BUG/MAJOR: sched: prevent rare concurrent wakeup of multi-threaded tasks
  * DEBUG: pools: replace the link pointer with the caller's address on pool_free()
  * DEBUG: pools: let's add reverse mapping from cache heads to thread and pool
  * DEBUG: pools: add extra sanity checks when picking objects from a local cache
  * BUG/MINOR: pools: always flush pools about to be destroyed
  * BUG/MEDIUM: mworker: don't lose the stats socket on failed reload
  * DEBUG: pools: add new build option DEBUG_POOL_INTEGRITY
  * BUILD: debug/cli: condition test of O_ASYNC to its existence
  * DEBUG: cli: add a new "debug dev fd" expert command
  * MEDIUM: h2/hpack: emit a Dynamic Table Size Update after settings change
  * BUG/MEDIUM: mcli: always realign wrapping buffers before parsing them
  * BUG/MEDIUM: mcli: do not try to parse empty buffers
  * BUG/MEDIUM: cli: Never wait for more data on client shutdown
  * BUG/MINOR: cli: avoid O(bufsize) parsing cost on pipelined commands
  * MINOR: channel: add new function co_getdelim() to support multiple delimiters
  * MEDIUM: cli: yield between each pipelined command
  * BUG/MEDIUM: server: avoid changing healthcheck ctx with set server ssl
  * BUILD/MINOR: fix solaris build with clang.
  * BUG/MEDIUM: htx: Adjust length to add DATA block in an empty HTX buffer
  * BUG/MEDIUM: connection: properly leave stopping list on error
  * [RELEASE] Released version 2.4.12
  * BUG/MAJOR: mux-h1: Don't decrement .curr_len for unsent data
  * BUG/MEDIUM: mworker: don't use _getsocks in wait mode
  * [RELEASE] Released version 2.4.11
  * BUG/MEDIUM: http-ana: Preserve response's FLT_END analyser on L7 retry
  * BUG/MINOR: cli: fix _getsocks with musl libc
  * BUILD/MINOR: tools: solaris build fix on dladdr.
  * BUILD/MINOR: cpuset FreeBSD 14 build fix.
  * BUG/MEDIUM: ssl: free the ckch instance linked to a server
  * BUG/MINOR: ssl: free the fields in srv-&gt;ssl_ctx
  * MINOR: debug: add support for -dL to dump library names at boot
  * MINOR: debug: add ability to dump loaded shared libraries
  * MINOR: compat: detect support for dl_iterate_phdr()
  * BUG/MINOR: mux-h1: Fix splicing for messages with unknown length
  * BUG/MEDIUM: mux-h1: Fix splicing by properly detecting end of message
  * BUILD: makefile: add -Wno-atomic-alignment to work around clang abusive warning
  * MINOR: proxy: add option idle-close-on-response
  * REGTESTS: ssl: fix ssl_default_server.vtc
  * BUG/MEDIUM: ssl: initialize correctly ssl w/ default-server
  * DOC: fix misspelled keyword "resolve_retries" in resolvers
  * BUILD: ssl: unbreak the build with newer libressl
  * BUILD: cli: clear a maybe-unused  warning on some older compilers
  * BUG/MINOR: pools: don't mark ourselves as harmless in DEBUG_UAF mode
  * BUG/MEDIUM: backend: fix possible sockaddr leak on redispatch
  * [RELEASE] Released version 2.4.10
  * BUG/MINOR: backend: restore the SF_SRV_REUSED flag original purpose
  * BUG/MINOR: backend: do not set sni on connection reuse
  * MINOR: pools: work around possibly slow malloc_trim() during gc
  * BUG/MEDIUM: mworker/cli: crash when trying to access an old PID in prompt mode
  * DOC: config: retry-on list is space-delimited
  * DOC: config: Specify %Ta is only available in HTTP mode
  * DOC: spoe: Clarify use of the event directive in spoe-message section
  * BUG/MINOR: cli/server: Don't crash when a server is added with a custom id
  * IMPORT: slz: use the correct CRC32 instruction when running in 32-bit mode
  * BUILD: tree-wide: avoid warnings caused by redundant checks of obj_types
  * MINOR: cli: "show version" displays the current process version
  * CI: Github Actions: temporarily disable BoringSSL builds
  * BUILD: bug: Fix error when compiling with -DDEBUG_STRICT_NOCRASH
  * MINOR: mux-h1: Improve H1 traces by adding info about http parsers
  * BUG/MAJOR: segfault using multiple log forward sections.
  * BUG/MEDIUM: resolvers: Detach query item on response error
  * BUG/MINOR: server: Don't rely on last default-server to init server SSL context
  * BUG/MEDIUM: cli: Properly set stream analyzers to process one command at a time
  * BUILD/MINOR: server: fix compilation without SSL
  * [RELEASE] Released version 2.4.9
  * BUG/MINOR: cache: Fix loop on cache entries in "show cache"
  * MINOR: promex: backend aggregated server check status
  * MINOR: server: add ws keyword
  * MEDIUM: server/backend: implement websocket protocol selection
  * MINOR: connection: add alternative mux_ops param for conn_install_mux_be
  * MINOR: connection: implement function to update ALPN
  * MINOR: stream/mux: implement websocket stream flag
  * BUG/MINOR: ssl: make SSL counters atomic
  * MINOR: shctx: add a few BUG_ON() for consistency checks
  * BUG/MINOR: shctx: do not look for available blocks when the first one is enough
  * BUG/MEDIUM: shctx: leave the block allocator when enough blocks are found
  * BUG/MEDIUM: cache/cli: make "show cache" thread-safe
  * BUG/MEDIUM: mux-h2: always process a pending shut read
  * BUG/MEDIUM: ssl: abort with the correct SSL error when SNI not found
  * CLEANUP: ssl: fix wrong #else commentary
  * BUG/MINOR: ssl: free correctly the sni in the backend SSL cache
  * BUG/MEDIUM: ssl: backend TLS resumption with sni and TLSv1.3
  * BUILD: makefile: simplify detection of libatomic
  * BUG/MEDIUM: mux-h1: Handle delayed silent shut in h1_process() to release H1C
  * BUG/MINOR: stick-table/cli: Check for invalid ipv6 key
  * BUG/MEDIUM: connection: make cs_shutr/cs_shutw//cs_close() idempotent
  * BUG/MINOR: mux-h2: Fix H2_CF_DEM_SHORT_READ value
  * BUG/MINOR: mworker: doesn't launch the program postparser
  * BUG/MEDIUM: conn-stream: Don't reset CS flags on close
  * MINOR: mux-h1: Slightly Improve H1 traces
  * DOC: lua: Be explicit with the Reply object limits
  * Revert "BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back"
  * BUG/MINOR: http-ana: Apply stop to the current section for http-response rules
  * DOC: config: Fix typo in ssl_fc_unique_id description
  * BUG/MINOR: cache: properly ignore unparsable max-age in quotes
  * BUG/MINOR: resolvers: throw log message if trash not large enough for query
  * BUG/MINOR: resolvers: fix sent messages were counted twice
  * BUG/MEDIUM: mux-h2: reject upgrade if no RFC8441 support
  * MINOR: mux-h2: add trace on extended connect usage
  * MINOR: mux-h2: perform a full cycle shutdown+drain on close
  * MINOR: connection: add a new CO_FL_WANT_DRAIN flag to force drain on close</changelog>
  <changelog author="varkoly@suse.com" date="1692014400">- VUL-0: CVE-2023-40225: haproxy: reject any empty content-length header value
  (bsc#1214102) Apply upstream patch adapted for 2.4.22 (patch h2_parse_cont_len_header() instead of http_parse_cont_len_header())
  Add patch: 0001-BUG-MAJOR-http-reject-any-empty-content-length-heade.patch</changelog>
  <changelog author="varkoly@suse.com" date="1701345600">- VUL-0: CVE-2023-45539: haproxy: misinterpretation of a path_end rule with # as part of the URI component
  (bsc#1217653) Apply upstream patch.
  Add patch: 0001-BUG-MINOR-h1-do-not-accept-as-part-of-the-URI-compon.patch</changelog>
</package>
<package pkgid="7c0630c171ef55ed6aa8ce2687db001f8a4b7247868b5097fcda32e4358b1a06" name="haproxy" arch="x86_64">
  <version epoch="0" ver="2.4.22+git0.f8e3218e2" rel="150400.3.19.1"/>
  <changelog author="mrueckert@suse.de" date="1614772800">- Update to version 2.3.6+git0.7851701ed:
  * [RELEASE] Released version 2.3.6
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on read error/timeout
  * BUG/MINOR: mux-h2: Fix typo in scheme adjustment
  * DOC: spoe: Add a note about fragmentation support in HAProxy
  * BUG/MEDIUM: spoe: Kill applets if there are pending connections and nbthread &gt; 1
  * BUG/MINOR: connection: Use the client's dst family for adressless servers
  * BUG/MINOR: tcp-act: Don't forget to set the original port for IPv4 set-dst rule
  * BUG/MINOR: http-ana: Only consider dst address to process originalto option
  * BUG/MINOR: mux-h1: Immediately report H1C errors from h1_snd_buf()
  * BUG/MINOR: stats: fix compare of no-maint url suffix
  * CLEANUP: muxes: Remove useless if condition in show_fd function
  * BUG/MINOR: ssl: potential null pointer dereference in ckchs_dup()
  * BUG/MEDIUM: resolvers: Reset address for unresolved servers
  * BUG/MEDIUM: resolvers: Reset server address and port for obselete SRV records
  * BUG/MINOR: resolvers: new callback to properly handle SRV record errors
  * BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record
  * BUG/MINOR: resolvers: Fix condition to release received ARs if not assigned
  * BUG/MINOR: fd: properly wait for !running_mask in fd_set_running_excl()
  * BUG/MINOR: proxy: wake up all threads when sending the hard-stop signal
  * BUG/MEDIUM: cli/shutdown sessions: make it thread-safe
  * BUG/MEDIUM: proxy: use thread-safe stream killing on hard-stop
  * BUG/MEDIUM: vars: make functions vars_get_by_{name,desc} thread-safe
  * BUG/MINOR: sample: secure convs that accept base64 string and var name as args
  * MINOR: Configure the `cpp` userdiff driver for *.[ch] in .gitattributes
  * BUG/MINOR: ssl/cli: potential null pointer dereference in "set ssl cert"
  * BUG/MEDIUM: mux-h1: Fix handling of responses to CONNECT other than 200-ok
  * BUG/MINOR: server: Be sure to cut the last parsed field of a server-state line
  * BUG/MINOR: server: Init params before parsing a new server-state line
  * BUG/MINOR: http-rules: Always replace the response status on a return action
  * BUG/MEDIUM: spoe: Resolve the sink if a SPOE logs in a ring buffer
  * BUG/MEDIUM: lists: Avoid an infinite loop in MT_LIST_TRY_ADDQ().
  * DOC: explain the relation between pool-low-conn and tune.idle-pool.shared
  * BUILD: ssl: introduce fine guard for OpenSSL specific SCTL functions
  * BUG/MINOR: sample: Always consider zero size string samples as unsafe
  * BUG/MEDIUM: checks: don't needlessly take the server lock in health_adjust()
  * BUG/MINOR: checks: properly handle wrapping time in __health_adjust()
  * BUG/MINOR: session: atomically increment the tracked sessions counter
  * BUG/MINOR: server: Remove RMAINT from admin state when loading server state
  * CLEANUP: channel: fix comment in ci_putblk.
  * DOC: tune: explain the origin of block size for ssl.cachesize
  * BUG/MINOR: server: Don't call fopen() with server-state filepath set to NULL
  * BUG/MINOR: cfgparse: do not mention "addr:port" as supported on proxy lines
  * BUG/MINOR: stats: revert the change on ST_CONVDONE
  * BUG/MEDIUM: config: don't pick unset values from last defaults section
  * CLEANUP: deinit: release global and per-proxy server-state variables on deinit
  * BUG/MINOR: server: Fix server-state-file-name directive
  * BUG/MINOR: backend: hold correctly lock when killing idle conn
  * BUG/MINOR: tools: Fix a memory leak on error path in parse_dotted_uints()
  * BUG/MINOR: server: re-align state file fields number
  * BUG/MEDIUM: mux-h1: Always set CS_FL_EOI for response in MSG_DONE state
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on internal errors
  * BUG/MINOR: intops: fix mul32hi()'s off-by-one
  * BUILD: ssl: guard SSL_CTX_set_msg_callback with SSL_CTRL_SET_MSG_CALLBACK macro
  * BUILD: ssl: guard SSL_CTX_add_server_custom_ext with special macro
  * BUILD: ssl: fix typo in HAVE_SSL_CTX_ADD_SERVER_CUSTOM_EXT macro
  * MINOR: check: do not ignore a connection header for http-check send</changelog>
  <changelog author="mrueckert@suse.de" date="1615896000">- Update to version 2.3.7+git0.2d39ce334:
  * [RELEASE] Released version 2.3.7
  * BUG/MINOR: resolvers: Add missing case-insensitive comparisons of DNS hostnames
  * MINOR: resolvers: Don't try to match immediatly renewed ADD items
  * MINOR: resolvers: Use milliseconds for cached items in resolver responses
  * BUG/MEDIUM: resolvers: Skip DNS resolution at startup if SRV resolution is set
  * BUG/MEDIUM: resolvers: Don't release resolution from a requester callbacks
  * MINOR: resolvers: Directly call srvrq_update_srv_state() when possible
  * MINOR: resolvers: Add function to change the srv status based on SRV resolution
  * MINOR: resolvers: Purge answer items when a SRV resolution triggers an error
  * MINOR: resolvers: Use a function to remove answers attached to a resolution
  * BUG/MEDIUM: resolvers: Trigger a DNS resolution if an ADD item is obsolete
  * BUG/MINOR; resolvers: Ignore DNS resolution for expired SRV item
  * MINOR: resolvers: new function find_srvrq_answer_record()
  * BUG/MEDIUM: resolvers: Fix the loop looking for an existing ADD item
  * BUG/MEDIUM: resolvers: Don't set an address-less server as UP
  * BUG/MINOR: resolvers: Unlink DNS resolution to set RMAINT on SRV resolution
  * BUG/MINOR: resolvers: Reset server address on DNS error only on status change
  * BUG/MINOR: resolvers: Consider server to have no IP on DNS resolution error
  * Revert "BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record"
  * CLEANUP: tcp-rules: add missing actions in the tcp-request error message
  * BUG/MINOR: tcpcheck: Fix double free on error path when parsing tcp/http-check
  * BUG/MINOR: session: Add some forgotten tests on session's listener
  * BUG/MINOR: proxy/session: Be sure to have a listener to increment its counters
  * BUG/MINOR: tcpcheck: Update .health threshold of agent inside an agent-check
  * BUG/MEDIUM: filters: Set CF_FL_ANALYZE on channels when filters are attached
  * BUILD: atomic/arm64: force the register pairs to use in __ha_cas_dw()
  * BUG/MEDIUM: stick-tables: fix ref counter in table entry using multiple http tracksc.
  * OPTIM: task: automatically adjust the default runqueue-depth to the threads
  * MINOR: task: give the scheduler a bit more flexibility in the runqueue size
  * MEDIUM: task: remove the tasks_run_queue counter and have one per thread
  * MEDIUM: ssl: implement xprt_set_used and xprt_set_idle to relax context checks
  * MINOR: xprt: add new xprt_set_idle and xprt_set_used methods
  * MEDIUM: muxes: mark idle conns tasklets with TASK_F_USR1
  * MINOR: task: add an application specific flag to the state: TASK_F_USR1
  * BUG/MEDIUM: ssl: properly remove the TASK_HEAVY flag at end of handshake
  * MINOR: ssl: mark the SSL handshake tasklet as heavy
  * MINOR: task: limit the number of subsequent heavy tasks with flag TASK_HEAVY
  * MEDIUM: backend: use a trylock when trying to grab an idle connection
  * MINOR: pools: double the local pool cache size to 1 MB
  * MEDIUM: pools: add CONFIG_HAP_NO_GLOBAL_POOLS and CONFIG_HAP_GLOBAL_POOLS
  * MEDIUM: streams: do not use the streams lock anymore
  * MINOR: streams: use one list per stream instead of a global one
  * MINOR: cli/streams: make "show sess" dump all streams till the new epoch
  * MINOR: stream: add an "epoch" to figure which streams appeared when
  * MINOR: dynbuf: pass offer_buffers() the number of buffers instead of a threshold
  * MINOR: dynbuf: use regular lists instead of mt_lists for buffer_wait
  * MINOR: dynbuf: make the buffer wait queue per thread
  * OPTIM: lb-leastconn: do not unlink the server if it did not change
  * OPTIM: lb-leastconn: do not take the server lock on take_conn/drop_conn
  * OPTIM: lb-first: do not take the server lock on take_conn/drop_conn
  * MINOR: lb/api: let callers of take_conn/drop_conn tell if they have the lock
  * MINOR: server: move actconns to the per-thread structure
  * OPTIM: server: switch the actconn list to an mt-list
  * MINOR: listener: refine the default MAX_ACCEPT from 64 to 4
  * MINOR: tasks: refine the default run queue depth
  * BUG/MEDIUM: session: NULL dereference possible when accessing the listener
  * MINOR: atomic: implement a more efficient arm64 __ha_cas_dw() using pairs
  * MINOR: atomic: add armv8.1-a atomics variant for cas-dw
  * BUG/MINOR: mt-list: always perform a cpu_relax call on failure
  * REORG: atomic: reimplement pl_cpu_relax() from atomic-ops.h
  * BUG/MINOR: ssl: don't truncate the file descriptor to 16 bits in debug mode
  * BUG/MINOR: hlua: Don't strip last non-LWS char in hlua_pushstrippedstring()
  * BUG/MINOR: backend: fix condition for reuse on mode HTTP</changelog>
  <changelog author="mrueckert@suse.de" date="1616673600">- Update to version 2.3.8+git0.e572195c7:
  * [RELEASE] Released version 2.3.8
  * BUG/MINOR: http_fetch: make hdr_ip() reject trailing characters
  * MINOR: tools: make url2ipv4 return the exact number of bytes parsed
  * BUG/MEDIUM: thread: Fix a deadlock if an isolated thread is marked as harmless
  * BUG/MEDIUM: fd: Take the fd_mig_lock when closing if no DWCAS is available.
  * CLEANUP: fd: remove unused fd_set_running_excl()
  * BUG/MEDIUM: fd: do not wait on FD removal in fd_delete()
  * MINOR: fd: remove the unneeded running bit from fd_insert()
  * MINOR: fd: make fd_clr_running() return the remaining running mask
  * BUG/MEDIUM: lua: Always init the lua stack before referencing the context
  * BUG/MEDIUM: debug/lua: Use internal hlua function to dump the lua traceback
  * MINOR: lua: Slightly improve function dumping the lua traceback
  * BUILD: ssl: guard ecdh functions with SSL_CTX_set_tmp_ecdh macro
  * BUG/MINOR: ssl: Prevent disk access when using "add ssl crt-list"
  * BUG/MEDIUM: debug/lua: Don't dump the lua stack if not dumpable
  * MEDIUM: lua: Use a per-thread counter to track some non-reentrant parts of lua
  * MINOR/BUG: mworker/cli: do not use the unix_bind prefix for the master CLI socket
  * BUG/MINOR: protocol: add missing support of dgram unix socket.
  * BUG/MEDIUM: freq_ctr/threads: use the global_now_ms variable
  * MINOR: time: also provide a global, monotonic global_now_ms timer
  * BUG/MEDIUM: mux-fcgi: Fix locking of idle_conns lock in the FCGI I/O callback
  * BUG/MINOR: freq_ctr/threads: make use of the last updated global time
  * MINOR: time: export the global_now variable</changelog>
  <changelog author="mrueckert@suse.de" date="1617105600">- Update to version 2.3.9+git1.afb63bc04:
  * BUILD: backend: fix build breakage in idle conn locking fix
  * [RELEASE] Released version 2.3.9
  * BUG/MEDIUM: time: make sure to always initialize the global tick
  * BUG/MINOR: stats: Apply proper styles in HTML status page.
  * BUG/MINOR: payload: Wait for more data if buffer is empty in payload/payload_lv
  * MEDIUM: backend: use a trylock to grab a connection on high FD counts as well
  * BUG/MEDIUM: mux-h1: make h1_shutw_conn() idempotent</changelog>
  <changelog author="mrueckert@suse.de" date="1619179200">- Update to version 2.3.10+git0.4764f0e4e:
  * [RELEASE] Released version 2.3.10
  * BUG/MEDIUM: peers: re-work refcnt on table to protect against flush
  * BUG/MEDIUM: peers: re-work connection to new process during reload.
  * BUG/MINOR: peers: remove useless table check if initial resync is finished
  * BUG/MEDIUM: mux-h2: Properly handle shutdowns when received with data
  * BUG/MINOR: mworker: don't use oldpids[] anymore for reload
  * BUG/MINOR: mworker/init: don't reset nb_oldpids in non-mworker cases
  * BUG/MEDIUM: config: fix cpu-map notation with both process and threads
  * BUG/MEDIUM: mux-h2: Fix dfl calculation when merging CONTINUATION frames
  * BUG/MAJOR: mux-h2: Properly detect too large frames when decoding headers
  * BUG/MINOR: server: free srv.lb_nodes in free_server
  * BUG/MINOR: mux-h1: Release idle server H1 connection if data are received
  * BUG/MINOR: logs: Report the true number of retries if there was no connection
  * BUG/MINOR: http_htx: Remove BUG_ON() from http_get_stline() function
  * BUG/MINOR: http-fetch: Make method smp safe if headers were already forwarded
  * BUG/MINOR: ssl-samples: Fix ssl_bc_* samples when called from a health-check
  * MINOR: connection: Make bc_http_major compatible with tcp-checks
  * BUG/MINOR: connection: Fix fc_http_major and bc_http_major for TCP connections
  * MINOR: logs: Add support of checks as session origin to format lf strings
  * BUG/MINOR: checks: Set missing id to the dummy checks frontend
  * BUG/MEDIUM: threads: Ignore current thread to end its harmless period
  * DOC: ssl: Certificate hot update only works on fronted certificates
  * BUG/MEDIUM: sample: Fix adjusting size in field converter
  * MINOR: No longer rely on deprecated sample fetches for predefined ACLs
  * DOC: clarify that compression works for HTTP/2
  * BUG/MINOR: tools: fix parsing "us" unit for timers
  * CONTRIB: halog: fix issue with array of type char
  * REGTESTS: ssl: mark set_ssl_cert_bundle.vtc as broken
  * DOC: Explicitly state only IPv4 are supported by forwardfor/originalto options
  * REGTESTS: ssl: "set ssl cert" and multi-certificates bundle
  * BUG/MINOR: ssl: Add missing free on SSL_CTX in ckch_inst_free
  * BUG/MINOR: http_fetch: make hdr_ip() resistant to empty fields
  * BUG/MINOR: ssl: Prevent removal of crt-list line if the instance is a default one
  * BUG/MINOR: ssl: Fix update of default certificate
  * BUILD: tcp: use IPPROTO_IPV6 instead of SOL_IPV6 on FreeBSD/MacOS
  * BUG/MINOR: tcp: fix silent-drop workaround for IPv6</changelog>
  <changelog author="mrueckert@suse.de" date="1620993600">- Update to version 2.4.0+git0.6cbbecf09:
  https://www.haproxy.com/blog/announcing-haproxy-2-4/
  for all the details see /usr/share/doc/packages/haproxy/CHANGELOG
- refreshed patches to apply cleanly again
  haproxy-1.6.0-makefile_lib.patch
  haproxy-1.6.0-sec-options.patch
  lua54.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1623931200">- Update to version 2.4.1+git0.1ce7d4925:
  * [RELEASE] Released version 2.4.1
  * BUG/MINOR: mux-h2/traces: bring back the lost "sent H2 REQ/RES" traces
  * BUG/MINOR: mux-h2/traces: bring back the lost "rcvd H2 REQ" trace
  * MINOR: mux-h2: obey http-ignore-probes during the preface
  * BUG/MINOR: stats: make "show stat typed desc" work again
  * CLEANUP: mux-h2/traces: better align user messages
  * MINOR: mux-h2/trace: report a few connection-level info during h2_init()
  * MINOR: connection: add helper conn_append_debug_info()
  * BUG/MINOR: server: explicitly set "none" init-addr for dynamic servers
  * BUG/MINOR: mux-h1: do not skip the error response on bad requests
  * MINOR: backend: only skip LB when there are actual connections
  * BUG/MAJOR: queue: set SF_ASSIGNED when setting strm-&gt;target on dequeue
  * CLEANUP: global: remove unused definition of stopping_task[]
  * BUG/MINOR: mworker: fix typo in chroot error message
  * BUG/MINOR: ssl: use atomic ops to update global shctx stats
  * BUG/MEDIUM: shctx: use at least thread-based locking on USE_PRIVATE_CACHE
  * BUG/MEDIUM: server: do not auto insert a dynamic server in px addr_node
  * BUG/MINOR: server: do not keep an invalid dynamic server in px ids tree
  * BUG/MEDIUM: server: do not forget to generate the dynamic servers ids
  * BUG/MEDIUM: server: clear dynamic srv on delete from proxy id/name trees
  * BUG/MEDIUM: server: extend thread-isolate over much of CLI 'add server'
  * BUG/MINOR: stick-table: insert srv in used_name tree even with fixed id
  * DOC: lua: Add a warning about buffers modification in HTTP
  * BUG/MAJOR: resolvers: segfault using server template without SRV RECORDs
  * MEDIUM: resolvers: add a ref between servers and srv request or used SRV record
  * MEDIUM: resolvers: add a ref on server to the used A/AAAA answer item
  * BUG/MINOR: resolvers: answser item list was randomly purged or errors
  * CLEANUP: l7-retries: do not test the buffer before calling b_alloc()
  * BUG/MINOR: mux-fcgi: Expose SERVER_SOFTWARE parameter by default
  * BUG/MAJOR: htx: Fix htx_defrag() when an HTX block is expanded
  * CLEANUP: pools: remove now unused seq and pool_free_list
  * BUG/MAJOR: pools: fix possible race with free() in the lockless variant
  * MEDIUM: pools: use a single pool_gc() function for locked and lockless
  * MINOR: pools: call malloc_trim() under thread isolation
  * MINOR: pools: do not maintain the lock during pool_flush()
  * BUG/MINOR: pools: make DEBUG_UAF always write to the to-be-freed location
  * BUG/MINOR: pools: fix a possible memory leak in the lockless pool_flush()
  * BUG/MEDIUM: compression: Add a flag to know the filter is still processing data
  * BUG/MEDIUM: compression: Properly get the next block to iterate on payload
  * BUG/MEDIUM: compression: Fix loop skipping unused blocks to get the next block
  * BUG/MEDIUM: opentracing: initialization before establishing daemon and/or chroot mode
  * Revert "BUG/MINOR: opentracing: initialization after establishing daemon mode"
  * BUG/MINOR: ssl: OCSP stapling does not work if expire too far in the future
  * BUILD: make tune.ssl.keylog available again
  * DOC: use the req.ssl_sni in examples
  * MINOR: errors: allow empty va_args for diag variadic macro
  * BUG/MAJOR: stream-int: Release SI endpoint on server side ASAP on retry
  * DOC/MINOR: move uuid in the configuration to the right alphabetical order
  * BUG/MINOR: vars: Be sure to have a session to get checks variables
  * CLEANUP: http-ana: Remove useless if statement about L7 retries
  * BUG/MINOR: proxy: Missing calloc return value check in chash_init_server_tree
  * BUG/MINOR: http: Missing calloc return value check in make_arg_list
  * BUG/MINOR: http: Missing calloc return value check while parsing redirect rule
  * BUG/MINOR: worker: Missing calloc return value check in mworker_env_to_proc_list
  * BUG/MINOR: compression: Missing calloc return value check in comp_append_type/algo
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request rule
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request/tcp-response
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_defproxy_cpy
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_parse_declare
  * BUG/MINOR: http: Missing calloc return value check in parse_http_req_capture
  * BUG/MINOR: ssl: Missing calloc return value check in ssl_init_single_engine
  * BUG/MINOR: peers: Missing calloc return value check in peers_register_table
  * BUG/MINOR: server: Missing calloc return value check in srv_parse_source
  * DOC: intro: Fix typo in starter guide
  * MINOR: cfgparse: Fail when encountering extra arguments in macro
  * MINOR: http-ana: Perform L7 retries because of status codes in response analyser
  * BUG/MINOR: http-ana: Handle L7 retries on refused early data before K/A aborts
  * BUG/MINOR: http-ana: Send the right error if max retries is reached on L7 retry
  * Revert "MEDIUM: http-ana: Deal with L7 retries in HTTP analysers"
  * BUG/MINOR: http-comp: Preserve HTTP_MSGF_COMPRESSIONG flag on the response
  * BUG/MEDIUM: filters: Exec pre/post analysers only one time per filter
  * BUILD/MINOR: opentracing: fixed build when using clang
  * BUG/MAJOR: server: prevent deadlock when using 'set maxconn server'
  * BUG/MEDIUM: ebtree: Invalid read when looking for dup entry</changelog>
  <changelog author="mrueckert@suse.de" date="1625659200">- Update to version 2.4.2+git0.553dee326:
  * [RELEASE] Released version 2.4.2
  * REGTESTS: add http scheme-based normalization test
  * MEDIUM: h2: apply scheme-based normalization on h2 requests
  * MEDIUM: h1-htx: apply scheme-based normalization on h1 requests
  * MEDIUM: http: implement scheme-based normalization
  * MINOR: http: implement http_get_scheme
  * Revert "MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules"
  * BUG/MINOR: cli: fix server name output in "show fd"
  * BUG/MEDIUM: sock: make sure to never miss early connection failures
  * DOC: stick-table: add missing documentation about gpt0 stored type
  * BUG/MINOR: peers: fix data_type bit computation more than 32 data_types
  * BUG/MINOR: stick-table: fix several printf sign errors dumping tables
  * DOC: config: use CREATE USER for mysql-check
  * BUG/MEDIUM: resolvers: Make 1st server of a template take part to SRV resolution
  * BUG/MINOR: mqtt: Support empty client ID in CONNECT message
  * BUG/MINOR: mqtt: Fix parser for string with more than 127 characters
  * BUG/MINOR: tcpcheck: Fix numbering of implicit HTTP send/expect rules
  * BUILD: Makefile: fix linkage for Haiku.
  * BUG/MINOR: checks: return correct error code for srv_parse_agent_check
  * MINOR: resolvers: Reset server IP on error in resolv_get_ip_from_response()
  * BUG/MINOR: resolvers: Reset server IP when no ip is found in the response
  * BUG/MINOR: resolvers: Always attach server on matching record on resolution
  * CLEANUP: dns: Remove a forgotten debug message
  * DOC: config: Add missing actions in "tcp-request session" documentation
  * MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules
  * REGTESTS: fix maxconn update with agent-check
  * BUG/MAJOR: server: fix deadlock when changing maxconn via agent-check
  * BUG/MINOR: cache: Correctly handle existing-but-empty 'accept-encoding' header
  * BUG/MINOR: server/cli: Fix locking in function processing "set server" command
  * BUG/MINOR: resolvers: Use resolver's lock in resolv_srvrq_expire_task()
  * BUG/MEDIUM: resolvers: Add a task on servers to check SRV resolution status
  * MINOR: resolvers: Remove server from named_servers tree when removing a SRV item
  * MINOR: resolvers: Clean server in a dedicated function when removing a SRV item
  * BUG/MEDIUM: server/cli: Fix ABBA deadlock when fqdn is set from the CLI
  * BUG/MINOR: server: Forbid to set fqdn on the CLI if SRV resolution is enabled
  * BUG/MINOR: server-state: load SRV resolution only if params match the config</changelog>
  <changelog author="mrueckert@suse.de" date="1629201600">- Update to version 2.4.3+git0.4dd5a5a6c:
    CVE-2021-39240 CVE-2021-39241 CVE-2021-39242
    (boo#1189366 boo#1189548 boo#1189549)
  * [RELEASE] Released version 2.4.3
  * REGTESTS: add a test to prevent h2 desync attacks
  * BUG/MEDIUM: h2: give :authority precedence over Host
  * BUG/MAJOR: h2: enforce stricter syntax checks on the :method pseudo-header
  * BUG/MAJOR: h2: verify that :path starts with a '/' before concatenating it
  * BUG/MAJOR: h2: verify early that non-http/https schemes match the valid syntax
  * MINOR: http: add a new function http_validate_scheme() to validate a scheme
  * DOC/MINOR: fix typo in management document
  * CLEANUP: assorted typo fixes in the code and comments
  * BUG/MEDIUM: cfgcheck: verify existing log-forward listeners during config check
  * BUG/MEDIUM: spoe: Fix policy to close applets when SPOE connections are queued
  * DOC: config: Fix 'http-response send-spoe-group' documentation
  * DOC: Improve the lua documentation
  * BUG/MINOR: tcpcheck: Properly detect pending HTTP data in output buffer
  * BUG/MINOR: buffer: fix buffer_dump() formatting
  * BUG/MEDIUM: spoe: Create a SPOE applet if necessary when the last one is released
  * MINOR: spoe: Add a pointer on the filter config in the spoe_agent structure
  * ADMIN: dyncookie: implement a simple dynamic cookie calculator
  * MINOR: server: unmark deprecated on enable health/agent cli
  * BUG/MINOR: server: update last_change on maint-&gt;ready transitions too
  * BUG/MINOR: server: remove srv from px list on CLI 'add server' error
  * BUILD: opentracing: fixed build when using pkg-config utility
  * DOC: internals: document the FD takeover process
  * BUG/MINOR: fd: protect fd state harder against a concurrent takeover
  * BUG/MINOR: pollers: always program an update for migrated FDs
  * BUG/MINOR: poll: fix abnormally high skip_fd counter
  * BUG/MINOR: select: fix excess number of dead/skip reported
  * BUG/MEDIUM: pollers: clear the sleeping bit after waking up, not before
  * BUG/MEDIUM: connection: close a rare race between idle conn close and takeover
  * BUG/MINOR: connection: Add missing error labels to conn_err_code_str
  * BUG/MEDIUM: mux-h2: Handle remaining read0 cases on partial frames
  * BUG/MINOR: mux-h1: Be sure to swap H1C to splice mode when rcv_pipe() is called
  * BUG/MINOR: mux-h2: Obey dontlognull option during the preface
  * BUG/MINOR: mux-h1: Obey dontlognull option for empty requests
  * BUG/MINOR: systemd: must check the configuration using -Ws
  * BUG/MINOR: resolvers: Use a null-terminated string to lookup in servers tree
  * BUG/MINOR: check: fix the condition to validate a port-less server
  * BUG/MINOR: stats: Add missing agent stats on servers
  * BUG/MEDIUM: ssl_sample: fix segfault for srv samples on invalid request
  * BUILD/MINOR: memprof fix macOs build.
  * BUG/MINOR: mworker: do not export HAPROXY_MWORKER_REEXEC across programs
  * BUG/MEDIUM: mworker: do not register an exit handler if exit is expected
  * BUILD: lua: silence a build warning with TCC
  * BUILD: add detection of missing important CFLAGS
  * BUG/MINOR: ssl: Default-server configuration ignored by server
  * MINOR: mux_h2: define config to disable h2 websocket support
  * BUILD: http_htx: fix ci compilation error with isdigit for Windows</changelog>
  <changelog author="mrueckert@suse.de" date="1631016000">- Update to version 2.4.4+git0.acb1d0bea: CVE-2021-40346 (boo#1189877)
  * [RELEASE] Released version 2.4.4
  * Revert "BUG/MINOR: stream-int: Don't block reads in si_update_rx() if chn may receive"
  * BUG/MAJOR: htx: fix missing header name length check in htx_add_header/trailer
  * CLEANUP: htx: remove comments about "must be &lt; 256 MB"
  * BUG/MINOR: config: reject configs using HTTP with bufsize &gt;= 256 MB
  * DOC: configuration: remove wrong tcp-request examples in tcp-response
  * BUG/MINOR: vars: fix set-var/unset-var exclusivity in the keyword parser
  * CLEANUP: Add missing include guard to signal.h
  * BUG/MINOR: tools: Fix loop condition in dump_text()
  * BUG/MINOR threads: Use get_(local|gm)time instead of (local|gm)time
  * BUG/MINOR: ebtree: remove dependency on incorrect macro for bits per long
  * MINOR: time: add report_idle() to report process-wide idle time
  * BUG/MINOR: time: fix idle time computation for long sleeps
  * BUG/MINOR: lua: use strlcpy2() not strncpy() to copy sample keywords
  * MINOR: compiler: implement an ONLY_ONCE() macro
  * BUG/MINOR: base64: base64urldec() ignores padding in output size check
  * BUG/MEDIUM: base64: check output boundaries within base64{dec,urldec}
  * BUG/MINOR: stick-table: fix the sc-set-gpt* parser when using expressions
  * MINOR: hlua: take the global Lua lock inside a global function
  * REGTESTS: abortonclose: after retries, 503 is expected, not close
  * REGTESTS: http_upgrade: fix incorrect expectation on TCP-&gt;H1-&gt;H2
  * BUG/MEDIUM: h2: match absolute-path not path-absolute for :path</changelog>
  <changelog author="mrueckert@suse.de" date="1633089600">- Update to version 2.4.5+git0.e74a1b34b:
  * [RELEASE] Released version 2.4.5
  * MINOR: tasks: catch TICK_ETERNITY with BUG_ON() in __task_queue()
  * BUG/MINOR: tcp-rules: Stop content rules eval on read error and end-of-input
  * BUG/MINOR: tcpcheck: Don't use arg list for default proxies during parsing
  * MINOR: arg: Be able to forbid unresolved args when building an argument list
  * BUG/MAJOR: lua: use task_wakeup() to properly run a task once
  * BUG/MEDIUM: lua: fix wakeup condition from sleep()
  * MINOR: Makefile: add MEMORY_POOLS to the list of DEBUG_xxx options
  * DOC: peers: fix doc "enable" statement on "peers" sections
  * BUG/MINOR: mux-h1/mux-fcgi: Sanitize TE header to only send "trailers"
  * MINOR: stream-int: Notify mux when the buffer is not stuck when calling rcv_buf
  * BUG/MEDIUM: stream-int: Defrag HTX message in si_cs_recv() if necessary
  * MINOR: htx: Add a function to know if the free space wraps
  * MINOR: htx: Add an HTX flag to know when a message is fragmented
  * MINOR: stream-int: Set CO_RFL transient/persistent flags apart in si_cs_rcv()
  * BUG/MEDIUM: stream: Stop waiting for more data if SI is blocked on RXBLK_ROOM
  * BUG/MEDIUM: stream-int: Notify stream that the mux wants more room to xfer data
  * BUG/MEDIUM: mux-h1: Adjust conditions to ask more space in the channel buffer
  * BUG/MINOR: stats: use refcount to protect dynamic server on dump
  * MINOR: server: return the next srv instance on free_server
  * BUG/MINOR: server: do not use refcount in free_server in stopping mode
  * MINOR: global: define MODE_STOPPING
  * MINOR: server: implement a refcount for dynamic servers
  * BUG/MINOR: http-ana: increment internal_errors counter on response error
  * BUG/MINOR: h1-htx: Fix a typo when request parser is reset
  * BUG/MEDIUM: leastconn: fix rare possibility of divide by zero
  * BUG/MINOR: server: allow 'enable health' only if check configured
  * BUILD: threads: fix -Wundef for _POSIX_PRIORITY_SCHEDULING on libmusl
  * BUILD: halog: fix a -Wundef warning on non-glibc systems
  * BUILD: compiler: fixed a missing test on  defined(__GNUC__)
  * BUILD: fix dragonfly build again on __read_mostly
  * BUG/MINOR: vars: do not talk about global section in CLI errors for set-var
  * BUG/MINOR: vars: truncate the variable name in error reports about scope.
  * BUG/MINOR: vars: properly set the argument parsing context in the expression
  * MINOR: sample: add missing ARGC_ entries
  * BUG/MINOR: vars: improve accuracy of the rules used to check expression validity
  * BUILD: tools: properly guard __GLIBC__ with defined()
  * BUILD: ssl: fix two remaining occurrences of #if USE_OPENSSL
  * BUILD: ssl: next round of build warnings on LIBRESSL_VERSION_NUMBER
  * BUILD/MINOR: regex: avoid a build warning on USE_PCRE2 with -Wundef
  * IMPORT: slz: silence a build warning with -Wundef
  * BUILD/MINOR: ssl: avoid a build warning on LIBRESSL_VERSION with -Wundef
  * BUILD/MINOR: defaults: eliminate warning on MAXHOSTNAMELEN with -Wundef
  * BUILD: activity: use #ifdef not #if on USE_MEMORY_PROFILING
  * MINOR: proc: setting the process to produce a core dump on FreeBSD.
  * MINOR: tools: add FreeBSD support to get_exec_path()
  * BUILD: tools: get the absolute path of the current binary on NetBSD.
  * BUG/MINOR: flt-trace: fix an infinite loop when random-parsing is set
  * BUG/MINOR: cli/payload: do not search for args inside payload
  * BUILD: ist: prevent gcc11 maybe-uninitialized warning on istalloc
  * BUG/MINOR: connection: prevent null deref on mux cleanup task allocation
  * DOC: management: certificate files must be sanitized before injection
  * BUG/MINOR: tcpcheck: Improve LDAP response parsing to fix LDAP check
  * BUG/MAJOR: mux-h1: Don't eval input data if an error was reported
  * MINOR: pools: use mallinfo2() when available instead of mallinfo()
  * MINOR: pools: automatically disable malloc_trim() with external allocators
  * CLEANUP: pools: factor all malloc_trim() calls into trim_all_pools()
  * BUG/MINOR: compat: make sure __WORDSIZE is always defined
  * BUG/MEDIUM: stream-int: Don't block SI on a channel policy if EOI is reached
  * CLEANUP: mux-h1: Remove condition rejecting upgrade requests with payload
  * MINOR: htx: Skip headers with no value when adding a header list to a message
  * BUG/MEDIUM: mux-h1: Remove "Upgrade:" header for requests with payload
  * BUG/MINOR: systemd: ExecStartPre must use -Ws
  * BUG/MINOR: filters: Set right FLT_END analyser depending on channel
  * BUG/MINOR: filters: Always set FLT_END analyser when CF_FLT_ANALYZE flag is set
  * BUG/MEDIUM: http-ana: Reset channels analysers when returning an error
  * BUG/MINOR: stream: Don't release a stream if FLT_END is still registered
  * BUG/MINOR: lua: Don't yield in channel.append() and channel.set()
  * BUG/MINOR: lua: Yield in channel functions only if lua context can yield
  * MINOR: lua: Add a flag on lua context to know the yield capability at run time</changelog>
  <changelog author="mrueckert@suse.de" date="1633348800">- Update to version 2.4.6+git0.d83fd76a1:
  * [RELEASE] Released version 2.4.6
  * BUG/MEDIUM: filters: Fix a typo when a filter is attached blocking the release</changelog>
  <changelog author="mrueckert@suse.de" date="1633348801">- Update to version 2.4.7+git0.b5e51a5e2:
  * [RELEASE] Released version 2.4.7
  * BUG/MEDIUM: http-ana: Clear request analyzers when applying redirect rule</changelog>
  <changelog author="mrueckert@suse.de" date="1635940800">- Update to version 2.4.8+git0.d1f8d41e0:
  * [RELEASE] Released version 2.4.8
  * SCRIPTS: git-show-backports: re-enable file-based filtering
  * DOC/peers: some grammar fixes for peers 2.1 spec
  * MINOR: stream: Improve dump of bogus streams
  * BUILD/MINOR: cpuset freebsd build fix
  * DOC: config: Fix alphabetical order of fc_* samples
  * BUG/MINOR: sample: fix backend direction flags consecutive to last fix
  * BUG/MEDIUM: sample: Cumulate frontend and backend sample validity flags
  * BUG/MEDIUM: stream-int: Block reads if channel cannot receive more data
  * BUG/MINOR: http: Authorization value can have multiple spaces after the scheme
  * BUG/MEDIUM: http-ana: Drain request data waiting the tarpit timeout expiration
  * MINOR: halog: Add support for extracting captures using -hdr
  * BUG/MINOR: halog: Add missing newlines in die() messages
  * CLEANUP: halog: Use consistent indentation in help()
  * MINOR: halog: Rename -qry to -query
  * DOC: halog: Move the `-qry` parameter into the correct section in help text
  * MINOR: halog: Add -qry parameter allowing to preserve the query string in -uX
  * BUG/MEDIUM: resolvers: Track api calls with a counter to free resolutions
  * BUG/MEDIUM: resolvers: Don't recursively perform requester unlink
  * MEDIUM: resolvers: remove the last occurrences of the "safe" argument
  * MEDIUM: resolvers: use a kill list to preserve the list consistency
  * CLEANUP: resolvers: replace all LIST_DELETE with LIST_DEL_INIT
  * CLEANUP: resolvers: simplify resolv_link_resolution() regarding requesters
  * CLEANUP: always initialize the answer_list
  * CLEANUP: resolvers: do not export resolv_purge_resolution_answer_records()
  * BUG/MEDIUM: mux-h1: Perform a connection shutdown when the h1c is released
  * BUG/MINOR: mux-h1: Save shutdown mode if the shutdown is delayed
  * BUILD: atomic: fix build on mac/arm64
  * BUG/MINOR: backend: fix improper insert in avail tree for always reuse
  * BUILD: fix compilation on NetBSD
  * MINOR: memprof: add one pointer size to the size of allocations
  * MINOR: memprof: report the delta between alloc and free on realloc()
  * BUG/MEDIUM: lua: fix memory leaks with realloc() on non-glibc systems
  * BUG/MINOR: mux-h2: do not prevent from sending a final GOAWAY frame
  * BUG/MINOR: task: do not set TASK_F_USR1 for no reason
  * BUG/MAJOR: buf: fix varint API post- vs pre- increment
  * BUG/MEDIUM: resolvers: always check a valid item in query_list
  * BUILD: resolvers: avoid a possible warning on null-deref
  * BUG/MAJOR: resolvers: add other missing references during resolution removal
  * MINOR: resolvers: merge address and target into a union "data"
  * BUG/MEDIUM: resolvers: use correct storage for the target address
  * BUG/MEDIUM: resolvers: fix truncated TLD consecutive to the API fix
  * MINOR: resolvers: fix the resolv_dn_label_to_str() API about trailing zero
  * BUG/MINOR: resolvers: do not reject host names of length 255 in SRV records
  * BUG/MEDIUM: resolver: make sure to always use the correct hostname length
  * MINOR: resolvers: fix the resolv_str_to_dn_label() API about trailing zero
  * BUG/MAJOR: dns: attempt to lock globaly for msg waiter list instead of use barrier
  * BUG/MAJOR: dns: tcp session can remain attached to a list after a free
  * BUG/MEDIUM: tcpcheck: Properly catch early HTTP parsing errors
  * Revert "CLEANUP: server: always include the storage for SSL settings"
  * BUG/MEDIUM: stream: Keep FLT_END analyzers if a stream detects a channel error
  * BUG/MEDIUM: cpuset: fix cpuset size for FreeBSD
  * BUG/MINOR: sample: Fix 'fix_tag_value' sample when waiting for more data
  * BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back
  * MINOR: initcall: Rename __GLOBL and __GLOBL1.
  * DOC: configuration: add clarification on escaping in keyword arguments
  * BUG/MEDIUM: mux_h2: Handle others remaining read0 cases on partial frames
  * BUG/MEDIUM: sample: properly verify that variables cast to sample
  * MINOR: sample: provide a generic var-to-sample conversion function
  * CLEANUP: sample: uninline sample_conv_var2smp_str()
  * CLEANUP: sample: rename sample_conv_var2smp() to *_sint
  * CLEANUP: server: always include the storage for SSL settings</changelog>
  <changelog author="varkoly@suse.com" date="1646740800">- (bsc#1196408) VUL-0: CVE-2022-0711: haproxy: Denial of service via set-cookie2 header
  o Apply upstream patch:
    0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch</changelog>
  <changelog author="varkoly@suse.com" date="1674043200">- VUL-0: CVE-2023-0056: haproxy: segfault DoS (bsc#1207181)
  o Apply upstream patch:
    0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch</changelog>
  <changelog author="varkoly@suse.com" date="1676030400">- VUL-0: serious vulnerability in the HTTP/1 parser (bsc#1208132)
  o Apply upstream patch:
    2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- The output buffer is not zero-initialized. If we don't clear reserved
  bytes, fcgi requests sent to backend will leak sensitive data.
  o Apply proposed patch:
    0001-output-buffer-is-not-zero-initialized.path</changelog>
  <changelog author="varkoly@suse.com" date="1681214400">- ECO: Maint: Update haproxy to latest maintenance release for all SLE15 (jsc#PED-3821)
- rebase and rename haproxy-1.6.0-sec-options.patch -&gt; haproxy-2.4.22-sec-options.patch
- remove patches covered by new release:
  lua54.patch
  0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch
  0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch
  0001-output-buffer-is-not-zero-initialized.path
  2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- Update to version 2.4.22+git0.f8e3218e2:
  * [RELEASE] Released version 2.4.22
  * BUG/CRITICAL: http: properly reject empty http header field names
  * CI: github: don't warn on deprecated openssl functions on windows
  * BUG/MEDIUM: stconn: Schedule a shutw on shutr if data must be sent first
  * DOC: proxy-protocol: fix wrong byte in provided example
  * DOC: config: 'http-send-name-header' option may be used in default section
  * DOC: config: fix option spop-check proxy compatibility
  * BUG/MEDIUM: cache: use the correct time reference when comparing dates
  * BUG/MEDIUM: stick-table: do not leave entries in end of window during purge
  * BUG/MINOR: ssl/crt-list: warn when a line is malformated
  * BUG/MEDIUM: ssl: wrong eviction from the session cache tree
  * BUG/MINOR: fcgi-app: prevent 'use-fcgi-app' in default section
  * [RELEASE] Released version 2.4.21
  * BUG/MINOR: sink: free the forwarding task on exit
  * BUILD: hpack: include global.h for the trash that is needed in debug mode
  * BUG/MINOR: mux-h2: add missing traces on failed headers decoding
  * BUG/MINOR: listener: close tiny race between resume_listener() and stopping
  * DOC: config: fix "Address formats" chapter syntax
  * BUG/MINOR: mux-fcgi: Correctly set pathinfo
  * DOC: config: fix aliases for protocol prefixes "udp4@" and "udp6@"
  * DOC: config: fix wrong section number for "protocol prefixes"
  * BUG/MINOR: listeners: fix suspend/resume of inherited FDs
  * BUG/MINOR: http-ana: make set-status also update txn-&gt;status
  * BUG/MINOR: http-fetch: Don't block HTTP sample fetch eval in HTTP_MSG_ERROR state
  * BUG/MINOR: http-ana: Report SF_FINST_R flag on error waiting the request body
  * BUG/MINOR: promex: Don't forget to consume the request on error
  * BUG/MINOR: resolvers: Wait the resolution execution for a do_resolv action
  * BUG/MINOR: h1-htx: Remove flags about protocol upgrade on non-101 responses
  * CLEANUP: htx: fix a typo in an error message of http_str_to_htx
  * BUG/MINOR: http: Memory leak of http redirect rules' format string
  * REGTEST: fix the race conditions in hmac.vtc
  * REGTEST: fix the race conditions in digest.vtc
  * REGTEST: fix the race conditions in json_query.vtc
  * BUG/MAJOR: buf: Fix copy of wrapping output data when a buffer is realigned
  * BUG/MINOR: http-fetch: Only fill txn status during prefetch if not already set
  * BUILD: makefile: sort the features list
  * BUILD: makefile: build the features list dynamically
  * BUG/MINOR: pool/stats: Use ullong to report total pool usage in bytes in stats
  * BUG/MEDIUM: mux-h2: Refuse interim responses with end-stream flag set
  * BUG/MINOR: ssl: Fix memory leak of find_chain in ssl_sock_load_cert_chain
  * LICENSE: wurfl: clarify the dummy library license.
  * BUG/MEDIUM: resolvers: Use tick_first() to update the resolvers task timeout
  * REGTESTS: startup: check maxconn computation
  * REGTESTS: fix the race conditions in iff.vtc
  * BUG/MAJOR: fcgi: Fix uninitialized reserved bytes
  * DOC: promex: Add missing backend metrics
  * MINOR: promex: introduce haproxy_backend_agg_check_status
  * BUG/MINOR: promex: create haproxy_backend_agg_server_status
  * BUG/MEDIUM: mworker: fix segv in early failure of mworker mode with peers
  * BUG/MINOR: ssl: Fix potential overflow
  * BUG/MEDIUM: ssl: Verify error codes can exceed 63
  * BUG/MINOR: resolvers: Don't wait periodic resolution on healthcheck failure
  * BUILD: peers: peers-t.h depends on stick-table-t.h
  * CI: github: change "ubuntu-latest" to "ubuntu-20.04"
  * BUG/MEDIIM: stconn: Flush output data before forwarding close to write side
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * [RELEASE] Released version 2.4.20
  * Revert "CI: determine actual OpenSSL version dynamically"
  * Revert "CI: switch to the "latest" LibreSSL"
  * SCRIPTS: announce-release: add a link to the data plane API
  * DOC: config: clarify the -m dir and -m dom pattern matching methods
  * DOC: config: clarify the fact that "retries" is not just for connections
  * DOC: config: explain how default matching method for ACL works
  * DOC: config: mention that a single monitor-uri rule is supported
  * DOC: config: clarify the fact that SNI should not be used in HTTP scenarios
  * DOC: config: provide some configuration hints for "http-reuse"
  * Revert "BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action"
  * BUG/MINOR: mux-h1: Fix handling of 408-Request-Time-Out
  * BUILD: http-htx: Silent build error about a possible NULL start-line
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * BUG/MINOR: log: fix parse_log_message rfc5424 size check
  * BUG/MINOR: cfgparse-listen: fix ebpt_next_dup pointer dereference on proxy "from" inheritance
  * BUILD: listener: fix build warning on global_listener_rwlock without threads
  * BUG/MINOR: server/idle: at least use atomic stores when updating max_used_conns
  * BUILD: peers: Remove unused variables
  * BUG/MEDIUM: peers: messages about unkown tables not correctly ignored
  * BUG/MINOR: ssl: don't initialize the keylog callback when not required
  * BUG/MINOR: http_ana/txn: don't re-initialize txn and req var lists
  * BUG/MEDIUM: listener: Fix race condition when updating the global mngmt task
  * BUG/MINOR: pool/cli: use ullong to report total pool usage in bytes
  * BUG/MEDIUM: ring: fix creation of server in uninitialized ring
  * DOC: config: fix alphabetical ordering of global section
  * REG-TESTS: cache: Remove T-E header for 304-Not-Modified responses
  * BUG/MINOR: mux-h1: Do not send a last null chunk on body-less answers
  * BUG/MEDIUM: mux-fcgi: Avoid value length overflow when it doesn't fit at once
  * BUG/MINOR: mux-fcgi: Be sure to send empty STDING record in case of zero-copy
  * BUG/MINOR: resolvers: Set port before IP address when processing SRV records
  * BUG/MINOR: http-htx: Fix error handling during parsing http replies
  * BUG/MEDIUM: wdt/clock: properly handle early task hangs
  * CI: emit the compiler's version in the build reports
  * CI: switch to the "latest" LibreSSL
  * BUG/MINOR: ssl: ocsp structure not freed properly in case of error
  * BUG/MINOR: ssl: Memory leak of AUTHORITY_KEYID struct when loading issuer
  * CI: add monthly gcc cross compile jobs
  * BUG/MINOR: log: fixing bug in tcp syslog_io_handler Octet-Counting
  * BUG/MEDIUM: stick-table: fix a race condition when updating the expiration task
  * BUG/MAJOR: stick-table: don't process store-response rules for applets
  * DOC: management: add forgotten "show startup-logs"
  * BUG/MINOR: stick-table: Use server_id instead of std_t_sint in process_store_rules()
  * CI: SSL: temporarily stick to LibreSSL=3.5.3
  * CI: SSL: use proper version generating when "latest" semantic is used
  * BUG/MINOR: sink: Set default connect/server timeout for implicit ring buffers
  * BUG/MINOR: sink: Only use backend capability for the sink proxies
  * BUG/MEDIUM: compression: handle rewrite errors when updating response headers
  * BUG/MINOR: ring: Properly parse connect timeout
  * BUG/MINOR: log: Preserve message facility when the log target is a ring buffer
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in workflow definition
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in matrix.py
  * BUG/MINOR: server: make sure "show servers state" hides private bits
  * BUG/MAJOR: stick-tables: do not try to index a server name for applets
  * DOC: configuration: missing 'if' in tcp-request content example
  * BUG/MINOR: backend: only enforce turn-around state when not redispatching
  * BUG/MINOR: smtpchk: SMTP Service check should gracefully close SMTP transaction
  * MINOR: smtpchk: Update expect rule to fully match replies to EHLO commands
  * BUG/MINOR: mux-h1: Account consumed output data on synchronous connection error
  * BUILD: http_fetch: silence an uninitiialized warning with gcc-4/5/6 at -Os
  * BUG/MINOR: http-fetch: Update method after a prefetch in smp_fetch_meth()
  * BUILD: h1: silence an initiialized warning with gcc-4.7 and -Os
  * BUG/MEDIUM: lua: handle stick table implicit arguments right.
  * BUG/MEDIUM: lua: Don't crash in hlua_lua2arg_check on failure
  * DOC: config: Fix pgsql-check documentation to make user param mandatory
  * BUG/MINOR: checks: update pgsql regex on auth packet
  * [RELEASE] Released version 2.4.19
  * BUG/MEDIUM: resolvers: Remove aborted resolutions from query_ids tree
  * REGTESTS: 4be_1srv_smtpchk_httpchk_layer47errors: Return valid SMTP replies
  * BUG/MINOR: log: improper behavior when escaping log data
  * SCRIPTS: announce-release: update some URLs to https
  * BUILD: fd: fix a build warning on the DWCAS
  * BUG/MEDIUM: captures: free() an error capture out of the proxy lock
  * DOC: fix TOC in starter guide for subsection 3.3.8. Statistics
  * REGTESTS: ssl/log: test the log-forward with SSL
  * BUG/MEDIUM: sink: bad init sequence on tcp sink from a ring.
  * REGTESTS: log: test the log-forward feature
  * REGTESTS: healthcheckmail: Relax matching on the healthcheck log message
  * BUG/MINOR: stats: fixing stat shows disabled frontend status as 'OPEN'
  * MINOR: listener: small API change
  * BUG/MEDIUM: proxy: ensure pause_proxy() and resume_proxy() own PROXY_LOCK
  * CI: cirrus-ci: bump FreeBSD image to 13-1
  * BUG/MINOR: signals/poller: ensure wakeup from signals
  * BUG/MINOR: signals/poller: set the poller timeout to 0 when there are signals
  * BUG/MINOR: task: always reset a new tasklet's call date
  * BUG/MINOR: h1: Support headers case adjustment for TCP proxies
  * BUILD: makefile: enable crypt(3) for NetBSD
  * BUG/MINOR: regex: Properly handle PCRE2 lib compiled without JIT support
  * BUG/MINOR: mux-fcgi: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h1: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h2: fix the "show fd" dest buffer for the subscriber
  * BUG/MEDIUM: mux-h1: always use RST to kill idle connections in pools
  * REGTESTS: http_request_buffer: Add a barrier to not mix up log messages
  * BUG/MEDIUM: mux-h1: do not refrain from signaling errors after end of input
  * BUG/MINOR: tcpcheck: Disable QUICKACK for default tcp-check (with no rule)
  * BUG/MINOR: hlua: Rely on CF_EOI to detect end of message in HTTP applets
  * BUG/MEDIUM: peers: Don't start resync on reload if local peer is not up-to-date
  * BUG/MEDIUM: peers: Don't use resync timer when local resync is in progress
  * BUG/MEDIUM: peers: Add connect and server timeut to peers proxy
  * BUG/MEDIUM: spoe: Properly update streams waiting for a ACK in async mode
  * DOC: configuration: do-resolve doesn't work with a port in the string
  * REGTESTS: Fix prometheus script to perform HTTP health-checks
  * BUG/MINOR: tcpcheck: Disable QUICKACK only if data should be sent after connect
  * BUG/MINOR: resolvers: return the correct value in resolvers_finalize_config()
  * BUG/MAJOR: mworker: fix infinite loop on master with no proxies.
  * BUG/MAJOR: log-forward: Fix log-forward proxies not fully initialized
  * BUG/MEDIUM: mux-h2: do not fiddle with -&gt;dsi to indicate demux is idle
  * BUG/MEDIUM: http-ana: fix crash or wrong header deletion by http-restrict-req-hdr-names
  * BUILD: http: silence an uninitialized warning affecting gcc-5
  * BUG/MEDIUM: ring: fix too lax 'size' parser
  * BUILD: debug: silence warning on gcc-5
  * BUG/MEDIUM: task: relax one thread consistency check in task_unlink_wq()
  * BUG/MEDIUM: poller: use fd_delete() to release the poller pipes
  * BUILD: cfgparse: always defined _GNU_SOURCE for sched.h and crypt.h
  * BUG/MINOR: sink: fix a race condition between the writer and the reader
  * BUG/MINOR: ring/cli: fix a race condition between the writer and the reader
  * BUG/MEDIUM: proxy: Perform a custom copy for default server settings
  * REORG: server: Export srv_settings_cpy() function
  * MINOR: server: Constify source server to copy its settings
  * BUG/MEDIUM: dns: Properly initialize new DNS session
  * BUG/MINOR: peers: Use right channel flag to consider the peer as connected
  * BUG/MEDIUM: peers: limit reconnect attempts of the old process on reload
  * MINOR: peers: Use a dedicated reconnect timeout when stopping the local peer
  * BUG/MEDIUM: pattern: only visit equivalent nodes when skipping versions
  * MINOR: ebtree: add ebmb_lookup_shorter() to pursue lookups
  * MINOR: http-htx: Use new HTTP functions for the scheme based normalization
  * BUG/MEDIUM: h1: Improve authority validation for CONNCET request
  * MINOR: http: Add function to detect default port
  * MINOR: http: Add function to get port part of a host
  * BUG/MEDIUM: mworker: use default maxconn in wait mode
  * [RELEASE] Released version 2.4.18
  * BUG/MINOR: sockpair: wrong return value for fd_send_uxst()
  * BUG/MINOR: backend: Fallback on RR algo if balance on source is impossible
  * BUILD: add detection for unsupported compiler models
  * BUG/MEDIUM: mworker: proc_self incorrectly set crashes upon reload
  * REGTESTS: Fix some scripts to be compatible with 2.4 and prior
  * BUG/MINOR: tools: fix statistical_prng_range()'s output range
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds (try 2)
  * BUILD: makefile: Fix install(1) handling for OpenBSD/NetBSD/Solaris/AIX
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds
  * MEDIUM: mworker: set the iocb of the socketpair without using fd_insert()
  * BUG/MEDIUM: mux-h1: Handle connection error after a synchronous send
  * BUG/MEDIUM: http-ana: Don't wait to have an empty buf to switch in TUNNEL state
  * BUG/MINOR: mux-h1: Be sure to commit htx changes in the demux buffer
  * REGTEESTS: filters: Fix CONNECT request in random-forwarding script
  * BUG/MEDIUM: http-fetch: Don't fetch the method if there is no stream
  * BUG/MINOR: http-htx: Fix scheme based normalization for URIs wih userinfo
  * BUG/MINOR: peers: fix possible NULL dereferences at config parsing
  * BUG/MINOR: http-act: Properly generate 103 responses when several rules are used
  * BUG/MINOR: http-check: Preserve headers if not redefined by an implicit rule
  * BUG/MINOR: peers/config: always fill the bind_conf's argument
  * MINOR: fd: Add BUG_ON checks on fd_insert()
  * CI: re-enable gcc asan builds
  * BUILD: Makefile: Add Lua 5.4 autodetect
  * BUG/MEDIUM: ssl/fd: unexpected fd close using async engine
  * MINOR: fd: add a new FD_DISOWN flag to prevent from closing a deleted FD
  * BUG/MINOR: http-fetch: Use integer value when possible in "method" sample fetch
  * BUG/MINOR: http-ana: Set method to HTTP_METH_OTHER when an HTTP txn is created
  * BUG/MINOR: ssl: Do not look for key in extra files if already in pem
  * MEDIUM: mux-h2: try to coalesce outgoing WINDOW_UPDATE frames
  * BUG/MEDIUM: ssl/cli: crash when crt inserted into a crt-list
  * BUG/MINOR: tcp-rules: Make action call final on read error and delay expiration
  * BUG/MINOR: cli/stats: add missing trailing LF after "show info json"
  * BUG/MINOR: server: do not enable DNS resolution on disabled proxies
  * BUG/MINOR: cli/stats: add missing trailing LF after JSON outputs
  * REGTESTS: healthcheckmail: Relax health-check failure condition
  * REGTESTS: healthcheckmail: Update the test to be functionnal again
  * BUG/MINOR: checks: Properly handle email alerts in trace messages
  * BUG/MINOR: trace: Test server existence for health-checks to get proxy
  * BUG/MEDIUM: mailers: Set the object type for check attached to an email alert
  * BUILD: compiler: implement unreachable for older compilers too
  * REGTESTS: restrict_req_hdr_names: Extend supported versions
  * REGTESTS: http_abortonclose: Extend supported versions
  * BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_cert I/O handler
  * BUG/MINOR: ssl_ckch: Dump cert transaction only once if show command yield
  * REGTESTS: http_request_buffer: Increase client timeout to wait "slow" clients
  * REGTESTS: abortonclose: Add a barrier to not mix up log messages
  * MEDIUM: http-ana: Always report rewrite failures as PRXCOND in logs
  * BUG/MEDIUM: ssl/crt-list: Rework 'add ssl crt-list' to handle full buffer cases
  * BUG/MEDIUM: ssl_ckch: Rework 'commit ssl cert' to handle full buffer cases
  * BUG/MINOR: ssl_ckch: Don't duplicate path when replacing a cert entry
  * BUG/MEDIUM: ssl_ckch: Don't delete a cert entry if it is being modified
  * BUG/MINOR: ssl_ckch: Free error msg if commit changes on a cert entry fails
  * DOC: intro: adjust the numbering of paragrams to keep the output ordered
  * DOC: peers: fix port number and addresses on new peers section format
  * DOC: peers: clarify when entry expiration date is renewed.
  * DOC: peers: indicate that some server settings are not usable
  * SCRIPTS: make publish-release try to launch make-releases-json
  * SCRIPTS: add make-releases-json to recreate a releases.json file in download dirs
  * REGTESTS: Do not use REQUIRE_VERSION for HAProxy 2.5+ (2)
  * BUG/MEDIUM: sample: Fix adjusting size in word converter
  * BUG/MEDIUM: peers: prevent unitialized multiple listeners on peers section
  * BUG/MEDIUM: peers: fix segfault using multiple bind on peers sections
  * BUG/MEDIUM: resolvers: Don't defer resolutions release in deinit function
  * BUG/MEDIUM: http: Properly reject non-HTTP/1.x protocols
  * BUG/MEDIUM: tools: Fix `inet_ntop` usage in sa2str
  * CI: determine actual OpenSSL version dynamically
  * BUILD/MINOR: cpuset fix build for FreeBSD 13.1
  * BUG/MINOR: peers: fix error reporting of "bind" lines
  * BUG/MINOR: cfgparse: abort earlier in case of allocation error
  * BUG/MINOR: check: Reinit the buffer wait list at the end of a check
  * BUG/MEDIUM: config: Reset outline buffer size on realloc error in readcfgfile()
  * REGTESTS: abortonclose: Fix some race conditions
  * BUG/MINOR: ssl: Fix crash when no private key is found in pem
  * MINOR: tools: add get_exec_path implementation for solaris based systems.
  * BUILD: fix build warning on solaris based systems with __maybe_unused.
  * MEDIUM: http-ana: Add a proxy option to restrict chars in request header names
  * CI: determine actual LibreSSL version dynamically
  * [RELEASE] Released version 2.4.17
  * CLEANUP: mux-h1: Fix comments and error messages for global options
  * BUG/MEDIUM: wdt: don't trigger the watchdog when p is unitialized
  * BUG/MINOR: conn_stream: do not confirm a connection from the frontend path
  * BUG/MINOR: server: Make SRV_STATE_LINE_MAXLEN value from 512 to 2kB (2000 bytes).
  * DOC: install: update gcc version requirements
  * BUG/MEDIUM: ssl: fix the gcc-12 broken fix :-(
  * BUILD: listener: shut report of possible null-deref in listener_accept()
  * BUILD: debug: work around gcc-12 excessive -Warray-bounds warnings
  * BUILD: ssl: work around bogus warning in gcc 12's -Wformat-truncation
  * CI: dynamically determine actual version of h2spec
  * DOC: fix typo "ant" for "and" in INSTALL
  * BUG/MINOR: map/cli: make sure patterns don't vanish under "show map"'s init
  * BUG/MINOR: map/cli: protect the backref list during "show map" errors
  * BUG/MEDIUM: cli: make "show cli sockets" really yield
  * BUG/MEDIUM: resolvers: make "show resolvers" properly yield
  * BUG/MINOR: tcp/http: release the expr of set-{src,dst}[-port]
  * DOC: config: Update doc for PR/PH session states to warn about rewrite failures
  * MINOR: mux-h2: report a trace event when failing to create a new stream
  * BUG/MINOR: mux-h2: mark the stream as open before processing it not after
  * BUG/MAJOR: dns: multi-thread concurrency issue on UDP socket
  * BUG/MEDIUM: mux-h1: Be able to handle trailers when C-L header was specified
  * BUG/MEDIUM: mux-fcgi: Be sure to never set EOM flag on an empty HTX message
  * SCRIPTS: announce-release: add URL of dev packages
  * CI: github actions: update LibreSSL to 3.5.2
  * [RELEASE] Released version 2.4.16
  * BUILD: opentracing: Fix OT build due to misuse of var_clear()
  * BUILD: proto_uxst: do not set unused flag
  * BUILD: sockpair: do not set unused flag
  * BUILD: fd: remove unused variable totlen in fd_write_frag_line()
  * CLEANUP: acl: Remove unused variable when releasing an acl expression
  * BUG/MINOR: pools: make sure to also destroy shared pools in pool_destroy_all()
  * BUG/MINOR: resolvers: Fix memory leak in resolvers_deinit()
  * BUILD: compiler: properly distinguish weak and global symbols
  * REGTESTS: fix the race conditions in be2dec.vtc ad field.vtc
  * MEDIUM: queue: use tasklet_instant_wakeup() to wake tasks
  * MINOR: task: add a new task_instant_wakeup() function
  * BUG/MINOR: rules: Fix check_capture() function to use the right rule arguments
  * DOC: remove my name from the config doc
  * BUG/MAJOR: connection: Never remove connection from idle lists outside the lock
  * BUG/MINOR: cache: Disable cache if applet creation fails
  * SCRIPTS: announce-release: add shortened links to pending issues
  * DOC: lua: update a few doc URLs
  * SCRIPTS: announce-release: update the doc's URL
  * BUG/MEDIUM: compression: Don't forget to update htx_sl and http_msg flags
  * BUG/MEDIUM: fcgi-app: Use http_msg flags to know if C-L header can be added
  * BUG/MEDIUM: stream: do not abort connection setup too early
  * BUILD: compiler: use a more portable set of asm(".weak") statements
  * BUILD: sched: workaround crazy and dangerous warning in Clang 14
  * BUG/MEDIUM: mux-h1: Don't request more room on partial trailers
  * BUG/MINOR: mux-h2: use timeout http-request as a fallback for http-keep-alive
  * BUG/MINOR: mux-h2: do not use timeout http-keep-alive on backend side
  * BUILD: debug: mark the __start_mem_stats/__stop_mem_stats symbols as weak
  * BUG/MINOR: cache: do not display expired entries in "show cache"
  * BUG/MINOR: mux-h2: do not send GOAWAY if SETTINGS were not sent
  * CI: cirrus: switch to FreeBSD-13.0
  * CI: Update to actions/cache@v3
  * CI: Update to actions/checkout@v3
  * DEBUG: opentracing: show return values of all functions in the debug output
  * CLEANUP: opentracing: added variable to store variable length
  * CLEANUP: opentracing: added flt_ot_smp_init() function
  * CLEANUP: opentracing: removed unused function flt_ot_var_get()
  * CLEANUP: opentracing: removed unused function flt_ot_var_unset()
  * DOC: opentracing: corrected comments in function descriptions
  * EXAMPLES: opentracing: refined shell scripts for testing filter performance
  * BUG/MINOR: opentracing: setting the return value in function flt_ot_var_set()
  * BUG/MEDIUM: http-act: Don't replace URI if path is not found or invalid
  * BUG/MEDIUM: http-conv: Fix url_enc() to not crush const samples
  * BUG/MEDIUM: mux-h1: Set outgoing message to DONE when payload length is reached
  * BUG/MEDIUM: promex: Be sure to never set EOM flag on an empty HTX message
  * BUG/MEDIUM: hlua: Don't set EOM flag on an empty HTX message in HTTP applet
  * BUG/MEDIUM: stats: Be sure to never set EOM flag on an empty HTX message
  * BUG/MINOR: fcgi-app: Don't add C-L header on response to HEAD requests
  * CI: github actions: update OpenSSL to 3.0.2
  * BUG/MAJOR: mux_pt: always report the connection error to the conn_stream
  * BUG/MINOR: cli/stream: fix "shutdown session" to iterate over all threads
  * BUG/MINOR: samples: add missing context names for sample fetch functions
  * DOC: reflect H2 timeout changes
  * BUG/MEDIUM: mux-h2: make use of http-request and keep-alive timeouts
  * MEDIUM: mux-h2: slightly relax timeout management rules
  * BUG/MEDIUM: stream-int: do not rely on the connection error once established
  * BUG/MEDIUM: mux-h1: Properly detect full buffer cases during message parsing
  * BUG/MEDIUM: mux-fcgi: Properly handle return value of headers/trailers parsing
  * BUG/MINOR: tools: url2sa reads too far when no port nor path
  * DOC: config: Explictly add supported MQTT versions
  * MEDIUM: mqtt: support mqtt_is_valid and mqtt_field_value converters for MQTTv3.1
  * BUG/MEDIUM: trace: avoid race condition when retrieving session from conn-&gt;owner
  * BUG/MEDIUM: mux-h1: only turn CO_FL_ERROR to CS_FL_ERROR with empty ibuf
  * CI: github actions: switch to LibreSSL-3.5.1
  * BUG/MINOR: server/ssl: free the SNI sample expression
  * BUG/MINOR: tools: fix url2sa return value with IPv4
  * [RELEASE] Released version 2.4.15
  * BUILD: tree-wide: mark a few numeric constants as explicitly long long
  * DOC: Fix usage/examples of deprecated ACLs
  * BUG/MINOR: stream: make the call_rate only count the no-progress calls
  * BUG/MINOR: session: fix theoretical risk of memleak in session_accept_fd()
  * BUG/MAJOR: mux-pt: Always destroy the backend connection on detach
  * DEBUG: stream: Fix stream trace message to print response buffer state
  * DEBUG: stream: Add the missing descriptions for stream trace events
  * BUG/MEDIUM: mcli: Properly handle errors and timeouts during reponse processing
  * DEBUG: cache: Update underlying buffer when loading HTX message in cache applet
  * BUG/MINOR: promex: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cache: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: stats: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: hlua: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cli: shows correct mode in "show sess"
  * BUG/MINOR: add missing modes in proxy_mode_str()
  * BUILD: pools: fix backport of no-memory-trimming on non-linux OS
  * MINOR: pools: add a new global option "no-memory-trimming"
  * BUG/MEDIUM: pools: fix ha_free() on area in the process of being freed
  * BUG/MINOR: pool: always align pool_heads to 64 bytes
  * REGTESTS: fix the race conditions in secure_memcmp.vtc
  * REGTESTS: fix the race conditions in normalize_uri.vtc
  * BUG/MEDIUM: htx: Fix a possible null derefs in htx_xfer_blks()
  * CI: github actions: use cache for SSL libs
  * CI: github actions: use cache for OpenTracing
  * CI: github actions: add OpenTracing builds
  * CI: github actions: add the output of $CC -dM -E-
  * [RELEASE] Released version 2.4.14
  * BUG/MEDIUM: stream: Abort processing if response buffer allocation fails
  * CI: github: enable pool debugging by default
  * REGTESTS: fix the race conditions in 40be_2srv_odd_health_checks
  * BUG/MINOR: proxy: preset the error message pointer to NULL in parse_new_proxy()
  * BUG/MAJOR: mux-h2: Be sure to always report HTX parsing error to the app layer
  * BUG/MEDIUM: mux-h1: Don't wake h1s if mux is blocked on lack of output buffer
  * BUG/MEDIUM: htx: Be sure to have a buffer to perform a raw copy of a message
  * BUG/MINOR: tools: url2sa reads ipv4 too far
  * BUG/MINOR: mailers: negotiate SMTP, not ESMTP
  * CI: github actions: update OpenSSL to 3.0.1
  * CI: github: switch to OpenSSL 3.0.0
  * CI: github actions: relax OpenSSL-3.0.0 version comparision
  * CI: github actions: -Wno-deprecated-declarations with OpenSSL 3.0.0
  * CI: github actions: add OpenSSL-3.0.0 builds
  * BUILD: adopt script/build-ssl.sh for OpenSSL-3.0.0beta2
  * BUILD: fix compilation for OpenSSL-3.0.0-alpha17
  * CI: ssl: keep the old method for ancient OpenSSL versions
  * CI: ssl: do not needlessly build the OpenSSL docs
  * CI: ssl: enable parallel builds for OpenSSL on Linux
  * BUG/MAJOR: compiler: relax alignment constraints on certain structures
  * BUG/MEDIUM: fd: always align fdtab[] to 64 bytes
  * BUG/MEDIUM: resolvers: Really ignore trailing dot in domain names
  * BUG/MINOR: sink: Use the right field in appctx context in release callback
  * BUG/MINOR: mworker: fix a FD leak of a sockpair upon a failed reload
  * BUG/MEDIUM: mworker: close unused transferred FDs on load failure
  * MINOR: sock: move the unused socket cleaning code into its own function
  * [RELEASE] Released version 2.4.13
  * BUG/MINOR: mux-h2: update the session's idle delay before creating the stream
  * BUG/MEDIUM: h2/hpack: fix emission of HPACK DTSU after settings change
  * REGTESTS: peers: leave a bit more time to peers to synchronize
  * BUG/MAJOR: spoe: properly detach all agents when releasing the applet
  * BUG/MAJOR: http/htx: prevent unbounded loop in http_manage_server_side_cookies
  * BUG/MEDIUM: listener: read-lock the listener during accept()
  * MINOR: listener: replace the listener's spinlock with an rwlock
  * BUG/MINOR: mworker: does not erase the pidfile upon reload
  * BUG/MAJOR: sched: prevent rare concurrent wakeup of multi-threaded tasks
  * DEBUG: pools: replace the link pointer with the caller's address on pool_free()
  * DEBUG: pools: let's add reverse mapping from cache heads to thread and pool
  * DEBUG: pools: add extra sanity checks when picking objects from a local cache
  * BUG/MINOR: pools: always flush pools about to be destroyed
  * BUG/MEDIUM: mworker: don't lose the stats socket on failed reload
  * DEBUG: pools: add new build option DEBUG_POOL_INTEGRITY
  * BUILD: debug/cli: condition test of O_ASYNC to its existence
  * DEBUG: cli: add a new "debug dev fd" expert command
  * MEDIUM: h2/hpack: emit a Dynamic Table Size Update after settings change
  * BUG/MEDIUM: mcli: always realign wrapping buffers before parsing them
  * BUG/MEDIUM: mcli: do not try to parse empty buffers
  * BUG/MEDIUM: cli: Never wait for more data on client shutdown
  * BUG/MINOR: cli: avoid O(bufsize) parsing cost on pipelined commands
  * MINOR: channel: add new function co_getdelim() to support multiple delimiters
  * MEDIUM: cli: yield between each pipelined command
  * BUG/MEDIUM: server: avoid changing healthcheck ctx with set server ssl
  * BUILD/MINOR: fix solaris build with clang.
  * BUG/MEDIUM: htx: Adjust length to add DATA block in an empty HTX buffer
  * BUG/MEDIUM: connection: properly leave stopping list on error
  * [RELEASE] Released version 2.4.12
  * BUG/MAJOR: mux-h1: Don't decrement .curr_len for unsent data
  * BUG/MEDIUM: mworker: don't use _getsocks in wait mode
  * [RELEASE] Released version 2.4.11
  * BUG/MEDIUM: http-ana: Preserve response's FLT_END analyser on L7 retry
  * BUG/MINOR: cli: fix _getsocks with musl libc
  * BUILD/MINOR: tools: solaris build fix on dladdr.
  * BUILD/MINOR: cpuset FreeBSD 14 build fix.
  * BUG/MEDIUM: ssl: free the ckch instance linked to a server
  * BUG/MINOR: ssl: free the fields in srv-&gt;ssl_ctx
  * MINOR: debug: add support for -dL to dump library names at boot
  * MINOR: debug: add ability to dump loaded shared libraries
  * MINOR: compat: detect support for dl_iterate_phdr()
  * BUG/MINOR: mux-h1: Fix splicing for messages with unknown length
  * BUG/MEDIUM: mux-h1: Fix splicing by properly detecting end of message
  * BUILD: makefile: add -Wno-atomic-alignment to work around clang abusive warning
  * MINOR: proxy: add option idle-close-on-response
  * REGTESTS: ssl: fix ssl_default_server.vtc
  * BUG/MEDIUM: ssl: initialize correctly ssl w/ default-server
  * DOC: fix misspelled keyword "resolve_retries" in resolvers
  * BUILD: ssl: unbreak the build with newer libressl
  * BUILD: cli: clear a maybe-unused  warning on some older compilers
  * BUG/MINOR: pools: don't mark ourselves as harmless in DEBUG_UAF mode
  * BUG/MEDIUM: backend: fix possible sockaddr leak on redispatch
  * [RELEASE] Released version 2.4.10
  * BUG/MINOR: backend: restore the SF_SRV_REUSED flag original purpose
  * BUG/MINOR: backend: do not set sni on connection reuse
  * MINOR: pools: work around possibly slow malloc_trim() during gc
  * BUG/MEDIUM: mworker/cli: crash when trying to access an old PID in prompt mode
  * DOC: config: retry-on list is space-delimited
  * DOC: config: Specify %Ta is only available in HTTP mode
  * DOC: spoe: Clarify use of the event directive in spoe-message section
  * BUG/MINOR: cli/server: Don't crash when a server is added with a custom id
  * IMPORT: slz: use the correct CRC32 instruction when running in 32-bit mode
  * BUILD: tree-wide: avoid warnings caused by redundant checks of obj_types
  * MINOR: cli: "show version" displays the current process version
  * CI: Github Actions: temporarily disable BoringSSL builds
  * BUILD: bug: Fix error when compiling with -DDEBUG_STRICT_NOCRASH
  * MINOR: mux-h1: Improve H1 traces by adding info about http parsers
  * BUG/MAJOR: segfault using multiple log forward sections.
  * BUG/MEDIUM: resolvers: Detach query item on response error
  * BUG/MINOR: server: Don't rely on last default-server to init server SSL context
  * BUG/MEDIUM: cli: Properly set stream analyzers to process one command at a time
  * BUILD/MINOR: server: fix compilation without SSL
  * [RELEASE] Released version 2.4.9
  * BUG/MINOR: cache: Fix loop on cache entries in "show cache"
  * MINOR: promex: backend aggregated server check status
  * MINOR: server: add ws keyword
  * MEDIUM: server/backend: implement websocket protocol selection
  * MINOR: connection: add alternative mux_ops param for conn_install_mux_be
  * MINOR: connection: implement function to update ALPN
  * MINOR: stream/mux: implement websocket stream flag
  * BUG/MINOR: ssl: make SSL counters atomic
  * MINOR: shctx: add a few BUG_ON() for consistency checks
  * BUG/MINOR: shctx: do not look for available blocks when the first one is enough
  * BUG/MEDIUM: shctx: leave the block allocator when enough blocks are found
  * BUG/MEDIUM: cache/cli: make "show cache" thread-safe
  * BUG/MEDIUM: mux-h2: always process a pending shut read
  * BUG/MEDIUM: ssl: abort with the correct SSL error when SNI not found
  * CLEANUP: ssl: fix wrong #else commentary
  * BUG/MINOR: ssl: free correctly the sni in the backend SSL cache
  * BUG/MEDIUM: ssl: backend TLS resumption with sni and TLSv1.3
  * BUILD: makefile: simplify detection of libatomic
  * BUG/MEDIUM: mux-h1: Handle delayed silent shut in h1_process() to release H1C
  * BUG/MINOR: stick-table/cli: Check for invalid ipv6 key
  * BUG/MEDIUM: connection: make cs_shutr/cs_shutw//cs_close() idempotent
  * BUG/MINOR: mux-h2: Fix H2_CF_DEM_SHORT_READ value
  * BUG/MINOR: mworker: doesn't launch the program postparser
  * BUG/MEDIUM: conn-stream: Don't reset CS flags on close
  * MINOR: mux-h1: Slightly Improve H1 traces
  * DOC: lua: Be explicit with the Reply object limits
  * Revert "BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back"
  * BUG/MINOR: http-ana: Apply stop to the current section for http-response rules
  * DOC: config: Fix typo in ssl_fc_unique_id description
  * BUG/MINOR: cache: properly ignore unparsable max-age in quotes
  * BUG/MINOR: resolvers: throw log message if trash not large enough for query
  * BUG/MINOR: resolvers: fix sent messages were counted twice
  * BUG/MEDIUM: mux-h2: reject upgrade if no RFC8441 support
  * MINOR: mux-h2: add trace on extended connect usage
  * MINOR: mux-h2: perform a full cycle shutdown+drain on close
  * MINOR: connection: add a new CO_FL_WANT_DRAIN flag to force drain on close</changelog>
  <changelog author="varkoly@suse.com" date="1692014400">- VUL-0: CVE-2023-40225: haproxy: reject any empty content-length header value
  (bsc#1214102) Apply upstream patch adapted for 2.4.22 (patch h2_parse_cont_len_header() instead of http_parse_cont_len_header())
  Add patch: 0001-BUG-MAJOR-http-reject-any-empty-content-length-heade.patch</changelog>
  <changelog author="varkoly@suse.com" date="1701345600">- VUL-0: CVE-2023-45539: haproxy: misinterpretation of a path_end rule with # as part of the URI component
  (bsc#1217653) Apply upstream patch.
  Add patch: 0001-BUG-MINOR-h1-do-not-accept-as-part-of-the-URI-compon.patch</changelog>
</package>
<package pkgid="aa68f2cb800a71059f5545dd42bceb3925c375d4a8546418ad9e7cfafccab5c4" name="harfbuzz" arch="src">
  <version epoch="0" ver="3.4.0" rel="150400.3.8.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1591185600">- Update to version 2.6.7:
  + Update to Unicode 13.0.0
  + Fix hb_ot_layout_get_ligature_carets for fonts without lcar
    table
- includes fixes from 2.6.6:
  * A fix in AAT kerning for Geeza Pro</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1592913600">- update to 2.6.8:
  + New API to fetch glyph alternates from GSUB table
  + New API +hb_ot_layout_lookup_get_glyph_alternates()
- Drop gpg2 BuildRequires and stop verifying signature during
  build: upstream no longer signs the tarball/signature.</changelog>
  <changelog author="dmueller@suse.com" date="1600344000">- Update to version 2.7.2:
  + Fix a regression in the previous release that caused a crash
    with Kaithi.
  + More OOM fixes.
  + ot-funcs now handles variable empty glyphs better when
    hvar/vvar isn't present.
  + Reverted a GDEF processing regression.
  + A couple of fixes to handle OOM better.
  + Use an implementation for round that always rounds up, some
    minor fluctuations are expected on var font specially when
    hb-ot callback is used.
  + Fix an AAT's `kerx` issue on broken rendering of Devanagari
    Sangam MN.
  + Remove AAT's `lcar` table support from _get_ligature_carets
    API, not even much use on macOS installed fonts (only two
    files). GDEF support is the recommended one and expected to
    work properly after issues fixed two releases ago.
  - Minor memory fixes to handle OOM better specially in hb-ft.
  - Minor .so files versioning scheme change and remove
    stable/unstable scheme differences, was never used in practice
    (always default to stable scheme).
  - We are now suggesting careful packaging of the library using
    meson, https://github.com/harfbuzz/harfbuzz/wiki/Notes-on-migration-to-meson
    for more information.
  - Distribution package URL is changed, either use GitHub
    generated tarballs,
    `https://github.com/harfbuzz/harfbuzz/archive/$pkgver.tar.gz`
    or, even more preferably use commit hash of the release and git
    checkouts like,
    `git+https://github.com/harfbuzz/harfbuzz#commit=$commit`</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609070400">- Update to version 2.7.4:
  + Fix missing --enable-introspection configure option
- Changes from version 2.7.3:
  + Update USE shaper to 2020-08-13 specification, and other
    improvements
  + Don’t disable liga feature in myanmar shaper, to match
    Uniscribe
  + Improvements to language and script tags handling.
  + Update language system tag registry to OpenType 1.8.4
  + Support for serializing and deserializing Unicode buffers
  + Increase buffer work limits to handle fonts with many complex
    lookups
  + Handle more shaping operations in trace output
  + Memory access fixes
  + More OOM fixes
  + Improved documentation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610107200">- Switch to meson buildsystem:
  + Add meson BuildRequires and macros.
  + Replace gcc-c++ for generic c++_compiler BuildRequires.
  + Add meson_test macro in check section, run tests during build.
  + Drop pkgconfig(graphite2) BuildRequires: No longer build
    graphite2 support, following upstream that disables this by
    default.
  + Stop packaging gtk-docs, pass -Ddocs=disabled to meson, this
    way we might avoid a build-cycle and since we did not have a
    explicit docs subpackage, just silently drop them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610539200">- Re-enable graphite2 support: TexLive relies on this to be
  present:
  + Pass -Dgraphite=enabled to meson.
  + Add pkgconfig(graphite2) BuildRequires.</changelog>
  <changelog author="christophe@krop.fr" date="1618315200">- Update to version 2.8.0:
  + Shape joining scripts other than Arabic/Syriac using the
    Universal Shaping Engine. Previously these were shaped using
    the generalized Arabic shaper.
  + Fix regression in shaping of U+0B55 ORIYA SIGN OVERLINE.
  + Update language tags.
  + Variations: reduce error: do not round each interpolated delta.
  + Documentation improvements.
  + Subsetter improvements: subsets most, if not all, lookup types
    now.
  + Fuzzer-found fixes and other improvements when memory failures
    happen.
  + Removed most atomic implementations now that we have C++11
    atomic impl.
  + General codebase upkeep; using more C++11 features: constexpr
    constructors, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620302400">- Update to version 2.8.1:
  + Subsetter now fully supports GSUB/GPOS/GDEF tables (including
    variations); as such, layout tables are retained by subsetter
    by default
  + hb-view supports iTerm2 and kitty inline image protocols
    it can also use Chafa for terminal graphics if available
- Add  pkgconfig(chafa): new, optional depdency.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1626264000">- Update to version 2.8.2:
  + Shaping LTR digits for RTL scripts now makes the native
    direction of the digits LTR, applying shaping and positioning
    rules on the same glyph order as Uniscribe
  + Subsetting COLR v1 and CPAL tables is now supported
  + Various fixes and improvements to the subsetter
  + When applying morx table, mark glyph widths should not be zeroed
  + GPOS is preferred over kerx, if GSUB was applied
  + Regional_Indicator pairs are grouped together when clustering</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Drop pkgconfig(chafa) BuildRequires for now: causes a cycle
  between chafa and harfbuzz, and disable it in meson</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631448000">- harfbuzz 2.9.1:
  + Subsetter API close to stable
  + Various fuzzer-found bug fixes
  + hb_buffer_append() now handles the pre- and post-context which
    previously were left unchanged in the destination buffer
  + hb-view / hb-shape now accept following new arguments:
  - -unicodes: takes a list of hex numbers that represent Unicode
    codepoints.
  + Undeprecated API: hb_set_invert()
- includes changes from 2.9.0:
  + Support multiple variation axes with same tag, aka HOI
  + The coretext testing shaper now passes font variations to
    CoreText
  + hb-shape/hb-view does not break line at new lines unless text
    is read from file
  + hb-view and hb-subset has a --batch now, similar to hb-shape
  + The --batch mode now uses ; as argument separator instead of :
    used previously
  + The --batch in hb-shape does not expect 0th argument anymore.
    That is, the lines read are interpreted as argv[1:], instead
    of argv[0:].
  + The --batch option has been undocumented. We are ready to
    document it; send feedback if you find it useful
  + hb-subset got arguments revamps. Added much-requested
  - -gids-file, --glyphs, --glyphs-file, --unicodes-file,
    supporting ranges in --unicodes.
  + Various bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631966400">- harfbuzz 3.0.0:
  + Unicode 14.0 support
  + hb-subset API and harfbuzz-subset ABI now declared stable
  + hb-style API is now stable</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1636200000">- harfbuzz 3.1.0:
  * Better offset-overflow handling in the subsetter library
  * Improved Unicode 14 properties in the USE shaper, and various
    other USE shaper fixes
  * MATH and COLR v1 tables subsetting support, and various other
    subsetter fixes
  * Support for Pwo Karen / Ason Chin medial la. (Simon Cozens)
  * Apply GPOS positioning when substituting with morx table, if
    kerx is missing
  * Apply calt and clig features across syllable boundaries in
    Indic shaper
  * Meson option for enabling Graphite 2 has been renamed to
    graphite2
  * Build and documentation fixes
- add harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636459200">- Update to version 3.1.1:
  + Work around GCC cast-align error/warning on some platforms.
  + Documentation improvements.
- Drop patch fixed upstream:
  + harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742400">- Update to 3.1.2:
  + hb-shape / hb-view: revert treating text on the commandline as
    single paragraph (was introduced in 3.0.0); add new
  - -single-par to do that
  + Subsetter bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742401">- Update to 3.2.0:
  + Fixed shaping of Apple Color Emoji flags in right-to-left context
  + Fixed positioning of CFF fonts in HB_TINY profile
  + OpenType 1.9 language tags update
  + Add HB_NO_VERTICAL config option
  + Add HB_CONFIG_OVERRIDE_H for easier configuration
  + Improved packing of cmap, loca, and Ligature tables
  + Significantly improved overflow-resolution strategy in the repacker</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644235200">- update to 3.3.2:
  + Revert splitting of pair positioning values introduced in 3.3.0
    as it proved problematic
- includes changes from 3.3.1:
  + Fix heap-use-after-free in harfbuzz-subset introduced in
    previous release
- includes changes from 3.3.0:
  + Improved documentation, code cleanup
  + The low 16-bits of face index will be used by hb_face_create()
    to select a face inside a font collection file format, while the
    high 16-bits will be used by hb_font_create() to load the named
    instance
  + Glyph positions and other font metrics now apply synthetic slant
    set by hb_font_set_synthetic_slant(), for improved positioning
    for synthetically slanted fonts
  + Fixed unintentional locale dependency in hb_variation_to_string()
    for decimal point representation
  + When applying pair positioning (kerning) the positioning value
    is split between the two sides of the pair for improved cursor
    positioning between such pairs
  + Introduced new HB_GLYPH_FLAG_UNSAFE_TO_CONCAT, to be used in
    conjunction with HB_GLYPH_FLAG_UNSAFE_TO_BREAK for optimizing
    re-shaping during line breaking. Check the documentation for
    further details
  + Improved handling of macrolanguages when mapping BCP 47 codes
    to OpenType tags</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644753600">- update to 3.4.0:
  + Perform sanity checks on shaping results is now part of
    “harfbuzz” library and can be enabled by setting the buffer
    flag HB_BUFFER_FLAG_VERIFY
  + Arabic Mark Transient Reordering Algorithm have been updated
    to revision 6
  + ISO 15924 code for mathematical notation, ‘Zmth’, now maps to
    the OpenType ‘math’ tag
  + It is now possible to get at once all math kerning values for a
    given glyph at a given corner
  + Fix locale_t portability issues on systems the typedef’s it to
    a void pointer</changelog>
  <changelog author="mgorse@suse.com" date="1658836800">- Add harfbuzz-CVE-2022-33068.patch: sbix: limit glyph extents
  (boo#1200900 CVE-2022-33068).</changelog>
  <changelog author="mgorse@suse.com" date="1680696000">- Add CVE-2023-25193.patch: limit how far we skip when looking
  back (bsc#1207922 CVE-2023-25193).</changelog>
</package>
<package pkgid="9df42ff1d31cee4d9ea54904d4660fa36096dd0ae1e9d007f8d7c2c4e72d449a" name="hidapi" arch="src">
  <version epoch="0" ver="0.10.1" rel="150300.3.2.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1390824000">- Initial version</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1394798400">- Add do_not_install_docs.patch: don't let make install docs</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1395662400">- Supply LICENSE files with libraries</changelog>
  <changelog author="luca@z3ntu.xyz" date="1563796800">- Update to 0.9.0
- Switch upstream to libusb/hidapi because the original maintainer is not active anymore</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1563796801">- Use disabled services to follow Factory guidelines.</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="jgwang@suse.com" date="1610366400">- Update to version 0.10.1
  * Add FreeBSD/macOS/MinGW/Alpine/Arch Linux/Windows CI
  * Add hid_version/hid_version_str API (#192)
  * Add podspec to support releases via cocoapods
  * Add support for HID over I2C and uhid devices (#166)
  * Fix small casting issue
  * Fix race condition on device close (#189)
  * Fix API prototype for gcc flag -Wstrict-prototypes (#207)
  * Fix strict typecast (#206)
  * Fix -Wall -Wextra -pedantic -Werror compilation (#214) ￼…
  * Drop workaround for kernel &lt; 2.6.34
  * Use pkg-config to find libusb on *freebsd
  * Reattach kernel driver in hidapi-libusb
  * Move local variable declaration to the beginning of the function</changelog>
</package>
<package pkgid="4f3c86749fd5df962052ebbd45d9e795bc9909544281d0a7d2d2159e20e126aa" name="hwdata" arch="noarch">
  <version epoch="0" ver="0.378" rel="150000.3.65.1"/>
  <changelog author="mpluskal@suse.com" date="1646740800">- Update to version 0.357 (bsc#1196332):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1650369600">- Update to version 0.358 (bsc#1196332):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1652270400">- Update to version 0.359:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1654084800">- Update to version 0.360 (bsc#1200110):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 0.361:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1663156800">- update to 0.362:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1665662400">- update to 0.363:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1668513600">- update to 0.364:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1670328000">- update to 0.365:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="dmueller@suse.com" date="1672833600">- update to 0.366:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1675339200">- update to 0.367:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1678190400">- update to 0.368:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1680523200">- update to 0.369:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1684238400">- update to 0.370:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1686312000">- update to 0.371:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1689076800">- update to 0.372:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="andrea.manzini@suse.com" date="1692705600">- update to 0.373:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1700049600">- update to 0.376:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1701691200">- update to 0.377:
  * Fixed trailing spaces in pnp.ids</changelog>
  <changelog author="mpluskal@suse.com" date="1704888000">- update to 0.378:
  * Update pci, usb and vendor ids</changelog>
</package>
<package pkgid="8efda5ecfef763aded6707788644802a4ea7081d1aada3fa9a4f0343c686040d" name="hwdata" arch="src">
  <version epoch="0" ver="0.378" rel="150000.3.65.1"/>
  <changelog author="mpluskal@suse.com" date="1646740800">- Update to version 0.357 (bsc#1196332):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1650369600">- Update to version 0.358 (bsc#1196332):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1652270400">- Update to version 0.359:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1654084800">- Update to version 0.360 (bsc#1200110):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 0.361:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1663156800">- update to 0.362:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1665662400">- update to 0.363:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1668513600">- update to 0.364:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1670328000">- update to 0.365:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="dmueller@suse.com" date="1672833600">- update to 0.366:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1675339200">- update to 0.367:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1678190400">- update to 0.368:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1680523200">- update to 0.369:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1684238400">- update to 0.370:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1686312000">- update to 0.371:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1689076800">- update to 0.372:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="andrea.manzini@suse.com" date="1692705600">- update to 0.373:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1700049600">- update to 0.376:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1701691200">- update to 0.377:
  * Fixed trailing spaces in pnp.ids</changelog>
  <changelog author="mpluskal@suse.com" date="1704888000">- update to 0.378:
  * Update pci, usb and vendor ids</changelog>
</package>
<package pkgid="e1e897bbf940f220e7c09a365fb3b48de18a0ff385d4541c83e8f97a56e3d9a7" name="ignition" arch="aarch64">
  <version epoch="0" ver="2.17.0" rel="150500.3.3.1"/>
  <changelog author="iforster@suse.com" date="1625659200">- Implement missing ignition-kargs-helper script for kernel
  argument support</changelog>
  <changelog author="iforster@suse.com" date="1625659201">- Update to version 2.11.0:
  * news: add notes for 2.11.0
  * Upgraded docs
  * config/*: return report from previous parser when chaining
  * config/*: re-order testcases by version
  * tree: update for stable v3.3.0 and new v3.4.0-experimental
  * config/v3_4_experimental: adapt for experimental
  * config/v3_4_experimental: copy from config/v3_3
  * config/v3_3: adapt for stabilization
  * config/v3_3_experimental: rename to config/v3_3
  * config/v3_3_exp: pointerify ClevisCustom Config and Pin
  * config/v3_3_exp: pointerify Raid.Level
  * config/v3_3_exp: pointerify LinkEmbedded1.Target
  * stages/disks: simplify a check
  * config/v3_1/translate: don't point to field from input struct
  * config/v3_3_exp: drop devices from schema "required" field
  * config/*: validate that storage.raid.devices is non-empty
  * config/*/types: add RAID validation tests
  * config/shared/errors: fix ErrSparesUnsupportedForLevel message
  * config: fix comment
  * *: formally bump Go to 1.13
  * platform: add powervs platform
  * internal/providers/*stack: drop dead timeout code
  * stages/disks: improve error reporting for LUKS device reuse
  * ignition-setup-user.service: drop Before=multipathd.service
  * Dockerfile: build ignition-validate container using Fedora
  * workflows: test on Go 1.16
  * tests/*: verify deletion of block device w/o creating a FS
  * *: allow erasing block device without creating a filesystem
  * *: rename other projects' master branches to main
  * *: rename master branch to main
  * config/*: add export functions for parsing any config version &lt; N
  * config/*: refactor config.go's Parse() to use GetConfigVersion
  * config/* : minor cleanup
- Refreshed to match new Ignition spec
  * 0002-allow-multiple-mounts-of-same-device.patch</changelog>
  <changelog author="iforster@suse.com" date="1625745600">- If a Combustion device was mounted, then unmount it in
  ignition-kargs-helper - the replacement script will be put on
  the same location</changelog>
  <changelog author="iforster@suse.com" date="1626868800">- Ignore error return code if no virtualization environment
  detected. [bsc#1188479]
  This makes it possible to use Ignition also on bare metal (e.g.
  when dumping images directly to disk) without adding a
  ignition.platform.id parameter.</changelog>
  <changelog author="kukuk@suse.com" date="1627473600">- Include vfat and nls kernel modules into initrd so that we can
  read the ignition configuration from USB drives [bsc#1184202]</changelog>
  <changelog author="iforster@suse.com" date="1628510400">- Update to version 2.12.0:
  * news: add notes for 2.12.0
  * stages/files: add previousReport to result report
  * tests: fix linter warning
  * workflows: limit permissions to reading repo contents
  * workflows: bump linter version
  * go.mod: revendor
  * Drop EOL Go versions
  * internal/distro: drop DiskByIDDir
  * providers/azure: add support for azure gen2 VMs [bsc#1196679]
  * stages/mount: correctly relabel the root of a fresh ext4 filesystem
  * exec: fix permissions for mountpoints in home dirs
  * tests: drop os.ModeDir requirement in mode of output directories
  * examples: reboot with --force
  * exec/util: add blkid API to query block devices based on FSTYPE
  * stages/files: use IntToPtr() in createCrypttabEntries()
  * stages/files: write result report to /var/lib/ignition
  * engine: persist fetched config summaries in State
  * stages/disks: use State to persist keyfiles for files stage
  * *: add general mechanism for persisting state between stages
  * main: drop -clear-cache flag
  * engine: don't hardcode neednet path
  * fetch-offline: return ErrNeedNet if we need net
  * engine: switch Engine.logReport() to pointer receiver
  * engine: fix incorrect error in log message
  * dracut: drop ignition-setup-user.service
  * dracut: drop reference to ignition-setup-base.service
  * providers/gcp: access GCP metadata service by IP address
  * Remove ignition-firstboot-complete.service
  * OWNERS: remove
  * internal/exec/util: drop device argument from cResultToErr()
  * docs/config*: document storage.luks.clevis.threshold default
  * ci: disable spec bump external test workaround
  * docs: Add Ignition release / Spec version table
  * templates: update example releng signing ticket
  * templates: don't update %gotest lines
  * Provide ignition-firstboot-complete.service (removed by upstream
  due to correctly being considered distro spcific), based on the
  old upstream version; removed all non-SUSE specific stuff and
  integrated our own changes
  * Removed change-ignition-firstboot-path.conf (changes are
  integrated into ignition-firstboot-complete.service now).
  * Provide ignition-setup-user.service  (removed by upstream due
  to correctly being considered distro spcific), based on the old
  upstream version.
  * Renamed ignition-setup-user-suse.sh to ignition-setup-user.sh
  * Adapted ignition-generator-suse and module-setup.sh to use the
  custom ignition-setup-user.service (no overriding of parts of the
  service file necessary any more).
  * Synced ignition-kargs-helper script with upstream example
  * Raising minimum Go version to 1.15 as required by upstream</changelog>
  <changelog author="iforster@suse.com" date="1628769600">- is-live-image doesn't exist on *SUSE, and our live images don't
  use Ignition, so just add the Ignition device dependency to the
  service file directly.</changelog>
  <changelog author="iforster@suse.com" date="1629720000">- Make sure to create /boot/writable (may not be present in some
  images)</changelog>
  <changelog author="iforster@suse.com" date="1638360000">- Update to version 2.13.0:
  * news: add notes for 2.13.0
  * config/v3_4_exp: noProxy entries cannot be null
  * config/v3_4_exp: mark ignition.version as required
  * docs/supported-platforms: add some description about Nutanix
  * providers/nutanix: add Nutanix platform
  * tests: use umountPath as a thin wrapper around umountPartition
  * internal/providers: refactor handling of unmounting the mount path
  * tests: address gostatic-check warning
  * tests: Add base64 decoding test
  * Dockerfile.validate: build with Fedora 35
  * go.mod: update dataurl to 1.0.0
  * ci: give blackbox tests two hours to run
  * tests/filesystem: fix umountPartition retry loop
  * templates: skip vendoring the new version in favor of dependabot
  * go.mod: update vcontext
  * providers/virtualbox: read config from /Ignition/Config guest property
  * stages/filesystems: use mkfs.fat instead of mkfs.vfat
  * docs/supported-platforms: switch to Afterburn docs URL
  * docs/supported-platforms: drop reference to platform-specific agents
  * test: ensure all platforms are documented
  * docs/supported-platforms: add missing platforms
  * stages/files: rename `relabelDirsForFile` and add docstring
  * stages/files: make variable name follow Go convention
  * docs/supported-platforms: update platform names and URLs
  * docs/supported-platforms: sort by platform ID
  * docs/supported-platforms: add platform IDs
  * docs: Remove default layout from front matter
  * docs: Do not convert -- &amp; --- to en/em-dash
  * internal/*: change the location of Ignition report
  * internal/exec/util: rename FindFirstMissingDirForFile and tweak docs
  * providers/qemu: start reporting progress reading fw_cfg after 10 s
  * providers/qemu: optimize fw_cfg read size
  * ci: use coreos-ci-lib helper for kola testiso
  * *: gofmt 1.17
  * workflows: bump Go and golangci-lint
  * config: update versions in comments
- Removed obsolete ignition-rpmlintrc</changelog>
  <changelog author="fvogt@suse.com" date="1646395200">- Add support for NetworkManager in dracut:
  * ignition-enable-network.service, ignition-enable-network.sh</changelog>
  <changelog author="fvogt@suse.com" date="1646395201">- Remove /var/lib/YaST2/reconfig_system if a config was provided:
  * ignition-remove-reconfig_system.service</changelog>
  <changelog author="iforster@suse.com" date="1648209600">- Add ignition-touch-selinux-autorelabel.conf:
  Trigger SELinux autorelabel after Ignition runs; Ignition would
  support SELinux itself, however this is a compile time option, so
  it can't be used here.
- Filter commented lines in ignition-mount-initrd-fstab.service</changelog>
  <changelog author="iforster@suse.com" date="1649073600">- Don't include non-MarkDown files in documentation</changelog>
  <changelog author="iforster@suse.com" date="1649160000">- ignition-mount-initrd-fstab.service:
  - Don't ignore errors in loops
  - Unmount mount points recursively - a new submount may have
    appeared
  - Split umount part into own service file:
- ignition-umount-initrd-fstab.service:
  - Unmounts the additional mounts as soon as they are not
    required for Ignition any more; the ExecStop operation is
    running quite late in initrd and may unmount essential mount
    points flagged with "x-initrd.mount" (e.g. when storing /usr on
    a separate mount point). In theory this will also affect
    Ignition itself, but it hasn't been reported as a problem so
    far.</changelog>
  <changelog author="iforster@suse.com" date="1649419200">- Use /bin/sh instead of /usr/bin/sh (for backwards compatibility
  with SLE Micro 5.1) [bsc#1196679]</changelog>
  <changelog author="iforster@suse.com" date="1652875200">- Update to version 2.14.0:
  * NEWS: update v2.14.0
  * docs/operator-notes: add section on provisioning secrets
  * Dockerfile.validate: build with Fedora 36
  * internal/resource: fix gs:// fetches in GCE without a service account
  * docs/operator-notes: document supported S3 URL formats
  * internal/resource: fix S3 access point object ARNs
  * exec/util: fix infinite loop in Depth() if -root is relative
  * Add ignition-delete-config.service and ignition-rmcfg symlink
  * providers/virtualbox: support deleting Ignition configs
  * providers/virtualbox: add comment referencing VirtualBox source
  * providers/virtualbox: add define for GUEST_PROP_FN_GET_PROP
  * providers/virtualbox: add helper to set up hypervisor connection
  * providers/vmware: support deleting Ignition configs
  * main: add ignition-rmcfg multicall binary
  * go.mod: add github.com/beevik/etree
  * providers/vmware: switch to internal copy of OVF parser
  * internal/resource: fix bucket field in error message
  * internal/resource: derive AWS region hint from ARN partition field
  * internal/resource: simplify test
  * internal/resource: fix minor nits
  * provider/azure: try to fetch userdata from IMDS
  * providers/vmware: convert OVF tests to testify
  * providers/vmware: drop vmw-ovflib docs
  * providers/vmware: add verbatim copy of vmw-ovflib
  * providers/vmware: add constants for guestinfo and OVF property names
  * providers/virtualbox: fix reading properties with flags
  * internal/resource: support S3 access point URLs
- Update fixes CVE from [bsc#1199524]; this introduces a new
  service "ignition-delete-config.service"
- Add ignition-rmcfg-suse.conf dropin to adapt to SUSE environment
- Use fixed paths in spec file for hardcoded installation paths</changelog>
  <changelog author="fvogt@suse.com" date="1659441600">- ignition-enable-network.sh: Use /lib/dracut/hooks directly
  instead of the usr-merged location which isn't available everywhere
  (bsc#1201957)</changelog>
  <changelog author="iforster@suse.com" date="1677499200">- Update to version 2.15.0:
  * Features
  * Support offline Tang provisioning via pre-shared advertisement (3.4.0)
  * Allow enabling discard passthrough on LUKS devices (3.4.0)
  * Allow specifying arbitrary LUKS open options (3.4.0)
  * Ship aarch64 macOS ignition-validate binary in GitHub release artifacts
  * Changes
  * Mark the 3.4.0 config spec as stable
  * No longer accept configs with version 3.4.0-experimental
  * Create new 3.5.0-experimental config spec from 3.4.0
  * Fail if files/links/dirs conflict with systemd units or dropins
  * Warn if template for enabled systemd instance unit has no Install section
  * Warn if filesystem overwrites partitioned disk
  * Warn if wipeTable overwrites a filesystem that would otherwise be reused
  * Warn if user/group specified for hard link
  * Install ignition-apply in /usr/libexec
  * Allow distros to add Ignition command-line arguments from a unit drop-in
  * Convert NEWS to Markdown and move to docs site
  * Require Go 1.18+
  * Bug fixes
  * Don't overwrite LUKS1 volume when storage.luks.wipeVolume is false
  * Request network when custom Clevis config has needsNetwork set
  * Fix creating LUKS volume with custom Clevis config that uses TPM2
  * Avoid logging spurious error when a LUKS volume wasn't previously formatted
  * Fix version string in ignition-validate release container
  * Fix reproducibility of systemd preset file in ignition-apply output
  * Document that user/group fields aren't applied to hard links
  * Clarify spec docs for files/directories/links group fields
- Modified 0002-allow-multiple-mounts-of-same-device.patch to add
  new Ignition spec version
- Add 0001-ignore-missing-qemu-blockdev.patch [bsc#1207679] to
  support booting without configuration device on s390x.
- Move all /usr/libexec contents to %sbindir</changelog>
  <changelog author="iforster@suse.com" date="1678363200">- Add `dasd_mod.dasd=autodetect` to kernel command line parameters
  (for Ignition device support on S/390) [boo#1207903]</changelog>
  <changelog author="iforster@suse.com" date="1702900800">- Update to version 2.17.0:
  * Features
  * providers/hetzner: add support for Hetzner Cloud
  * providers/applehv: Add Apple Hypervisor
  * packit: add initial support
  * Other notable Changes
  * Add vsock modules into ramdisk
  * stages/disks: retry `sgdisk --zap-all` invocation
  * Add optionally-installed grub2 code
  * internal/exec/stages/disks: prevent races with udev
- Updates from version 2.16.x [jsc#SMO-314] [bsc#1217533]:
  * Features
  * Add support for Hyper-V platform
  * Other notable changes
  * dracut: make hv_utils module optional
  * internal/exec: don't relabel a mountpoint that already exists
  * internal/exec/util: check if unit exists before disabling
  * platform: allow provider fetch to save files to write from files stage
  * providers: rename noop to metal
  * platform: drop function pointer indirection for fetch method
  * providers: add Config wrapper structs for cmdline and system providers
- Fix segmentation fault if filesystem section of Ignition JSON
  doesn't contain path entry in
  0002-allow-multiple-mounts-of-same-device.patch
- Add 0003-Move-the-GPT-header-on-resized-disks.patch
- Increased required Go version</changelog>
</package>
<package pkgid="6629652dda66077410ae5458b802ca186e1c9b2a7f0738d9000f405a4b2e2690" name="ignition" arch="s390x">
  <version epoch="0" ver="2.17.0" rel="150500.3.3.1"/>
  <changelog author="iforster@suse.com" date="1625659200">- Implement missing ignition-kargs-helper script for kernel
  argument support</changelog>
  <changelog author="iforster@suse.com" date="1625659201">- Update to version 2.11.0:
  * news: add notes for 2.11.0
  * Upgraded docs
  * config/*: return report from previous parser when chaining
  * config/*: re-order testcases by version
  * tree: update for stable v3.3.0 and new v3.4.0-experimental
  * config/v3_4_experimental: adapt for experimental
  * config/v3_4_experimental: copy from config/v3_3
  * config/v3_3: adapt for stabilization
  * config/v3_3_experimental: rename to config/v3_3
  * config/v3_3_exp: pointerify ClevisCustom Config and Pin
  * config/v3_3_exp: pointerify Raid.Level
  * config/v3_3_exp: pointerify LinkEmbedded1.Target
  * stages/disks: simplify a check
  * config/v3_1/translate: don't point to field from input struct
  * config/v3_3_exp: drop devices from schema "required" field
  * config/*: validate that storage.raid.devices is non-empty
  * config/*/types: add RAID validation tests
  * config/shared/errors: fix ErrSparesUnsupportedForLevel message
  * config: fix comment
  * *: formally bump Go to 1.13
  * platform: add powervs platform
  * internal/providers/*stack: drop dead timeout code
  * stages/disks: improve error reporting for LUKS device reuse
  * ignition-setup-user.service: drop Before=multipathd.service
  * Dockerfile: build ignition-validate container using Fedora
  * workflows: test on Go 1.16
  * tests/*: verify deletion of block device w/o creating a FS
  * *: allow erasing block device without creating a filesystem
  * *: rename other projects' master branches to main
  * *: rename master branch to main
  * config/*: add export functions for parsing any config version &lt; N
  * config/*: refactor config.go's Parse() to use GetConfigVersion
  * config/* : minor cleanup
- Refreshed to match new Ignition spec
  * 0002-allow-multiple-mounts-of-same-device.patch</changelog>
  <changelog author="iforster@suse.com" date="1625745600">- If a Combustion device was mounted, then unmount it in
  ignition-kargs-helper - the replacement script will be put on
  the same location</changelog>
  <changelog author="iforster@suse.com" date="1626868800">- Ignore error return code if no virtualization environment
  detected. [bsc#1188479]
  This makes it possible to use Ignition also on bare metal (e.g.
  when dumping images directly to disk) without adding a
  ignition.platform.id parameter.</changelog>
  <changelog author="kukuk@suse.com" date="1627473600">- Include vfat and nls kernel modules into initrd so that we can
  read the ignition configuration from USB drives [bsc#1184202]</changelog>
  <changelog author="iforster@suse.com" date="1628510400">- Update to version 2.12.0:
  * news: add notes for 2.12.0
  * stages/files: add previousReport to result report
  * tests: fix linter warning
  * workflows: limit permissions to reading repo contents
  * workflows: bump linter version
  * go.mod: revendor
  * Drop EOL Go versions
  * internal/distro: drop DiskByIDDir
  * providers/azure: add support for azure gen2 VMs [bsc#1196679]
  * stages/mount: correctly relabel the root of a fresh ext4 filesystem
  * exec: fix permissions for mountpoints in home dirs
  * tests: drop os.ModeDir requirement in mode of output directories
  * examples: reboot with --force
  * exec/util: add blkid API to query block devices based on FSTYPE
  * stages/files: use IntToPtr() in createCrypttabEntries()
  * stages/files: write result report to /var/lib/ignition
  * engine: persist fetched config summaries in State
  * stages/disks: use State to persist keyfiles for files stage
  * *: add general mechanism for persisting state between stages
  * main: drop -clear-cache flag
  * engine: don't hardcode neednet path
  * fetch-offline: return ErrNeedNet if we need net
  * engine: switch Engine.logReport() to pointer receiver
  * engine: fix incorrect error in log message
  * dracut: drop ignition-setup-user.service
  * dracut: drop reference to ignition-setup-base.service
  * providers/gcp: access GCP metadata service by IP address
  * Remove ignition-firstboot-complete.service
  * OWNERS: remove
  * internal/exec/util: drop device argument from cResultToErr()
  * docs/config*: document storage.luks.clevis.threshold default
  * ci: disable spec bump external test workaround
  * docs: Add Ignition release / Spec version table
  * templates: update example releng signing ticket
  * templates: don't update %gotest lines
  * Provide ignition-firstboot-complete.service (removed by upstream
  due to correctly being considered distro spcific), based on the
  old upstream version; removed all non-SUSE specific stuff and
  integrated our own changes
  * Removed change-ignition-firstboot-path.conf (changes are
  integrated into ignition-firstboot-complete.service now).
  * Provide ignition-setup-user.service  (removed by upstream due
  to correctly being considered distro spcific), based on the old
  upstream version.
  * Renamed ignition-setup-user-suse.sh to ignition-setup-user.sh
  * Adapted ignition-generator-suse and module-setup.sh to use the
  custom ignition-setup-user.service (no overriding of parts of the
  service file necessary any more).
  * Synced ignition-kargs-helper script with upstream example
  * Raising minimum Go version to 1.15 as required by upstream</changelog>
  <changelog author="iforster@suse.com" date="1628769600">- is-live-image doesn't exist on *SUSE, and our live images don't
  use Ignition, so just add the Ignition device dependency to the
  service file directly.</changelog>
  <changelog author="iforster@suse.com" date="1629720000">- Make sure to create /boot/writable (may not be present in some
  images)</changelog>
  <changelog author="iforster@suse.com" date="1638360000">- Update to version 2.13.0:
  * news: add notes for 2.13.0
  * config/v3_4_exp: noProxy entries cannot be null
  * config/v3_4_exp: mark ignition.version as required
  * docs/supported-platforms: add some description about Nutanix
  * providers/nutanix: add Nutanix platform
  * tests: use umountPath as a thin wrapper around umountPartition
  * internal/providers: refactor handling of unmounting the mount path
  * tests: address gostatic-check warning
  * tests: Add base64 decoding test
  * Dockerfile.validate: build with Fedora 35
  * go.mod: update dataurl to 1.0.0
  * ci: give blackbox tests two hours to run
  * tests/filesystem: fix umountPartition retry loop
  * templates: skip vendoring the new version in favor of dependabot
  * go.mod: update vcontext
  * providers/virtualbox: read config from /Ignition/Config guest property
  * stages/filesystems: use mkfs.fat instead of mkfs.vfat
  * docs/supported-platforms: switch to Afterburn docs URL
  * docs/supported-platforms: drop reference to platform-specific agents
  * test: ensure all platforms are documented
  * docs/supported-platforms: add missing platforms
  * stages/files: rename `relabelDirsForFile` and add docstring
  * stages/files: make variable name follow Go convention
  * docs/supported-platforms: update platform names and URLs
  * docs/supported-platforms: sort by platform ID
  * docs/supported-platforms: add platform IDs
  * docs: Remove default layout from front matter
  * docs: Do not convert -- &amp; --- to en/em-dash
  * internal/*: change the location of Ignition report
  * internal/exec/util: rename FindFirstMissingDirForFile and tweak docs
  * providers/qemu: start reporting progress reading fw_cfg after 10 s
  * providers/qemu: optimize fw_cfg read size
  * ci: use coreos-ci-lib helper for kola testiso
  * *: gofmt 1.17
  * workflows: bump Go and golangci-lint
  * config: update versions in comments
- Removed obsolete ignition-rpmlintrc</changelog>
  <changelog author="fvogt@suse.com" date="1646395200">- Add support for NetworkManager in dracut:
  * ignition-enable-network.service, ignition-enable-network.sh</changelog>
  <changelog author="fvogt@suse.com" date="1646395201">- Remove /var/lib/YaST2/reconfig_system if a config was provided:
  * ignition-remove-reconfig_system.service</changelog>
  <changelog author="iforster@suse.com" date="1648209600">- Add ignition-touch-selinux-autorelabel.conf:
  Trigger SELinux autorelabel after Ignition runs; Ignition would
  support SELinux itself, however this is a compile time option, so
  it can't be used here.
- Filter commented lines in ignition-mount-initrd-fstab.service</changelog>
  <changelog author="iforster@suse.com" date="1649073600">- Don't include non-MarkDown files in documentation</changelog>
  <changelog author="iforster@suse.com" date="1649160000">- ignition-mount-initrd-fstab.service:
  - Don't ignore errors in loops
  - Unmount mount points recursively - a new submount may have
    appeared
  - Split umount part into own service file:
- ignition-umount-initrd-fstab.service:
  - Unmounts the additional mounts as soon as they are not
    required for Ignition any more; the ExecStop operation is
    running quite late in initrd and may unmount essential mount
    points flagged with "x-initrd.mount" (e.g. when storing /usr on
    a separate mount point). In theory this will also affect
    Ignition itself, but it hasn't been reported as a problem so
    far.</changelog>
  <changelog author="iforster@suse.com" date="1649419200">- Use /bin/sh instead of /usr/bin/sh (for backwards compatibility
  with SLE Micro 5.1) [bsc#1196679]</changelog>
  <changelog author="iforster@suse.com" date="1652875200">- Update to version 2.14.0:
  * NEWS: update v2.14.0
  * docs/operator-notes: add section on provisioning secrets
  * Dockerfile.validate: build with Fedora 36
  * internal/resource: fix gs:// fetches in GCE without a service account
  * docs/operator-notes: document supported S3 URL formats
  * internal/resource: fix S3 access point object ARNs
  * exec/util: fix infinite loop in Depth() if -root is relative
  * Add ignition-delete-config.service and ignition-rmcfg symlink
  * providers/virtualbox: support deleting Ignition configs
  * providers/virtualbox: add comment referencing VirtualBox source
  * providers/virtualbox: add define for GUEST_PROP_FN_GET_PROP
  * providers/virtualbox: add helper to set up hypervisor connection
  * providers/vmware: support deleting Ignition configs
  * main: add ignition-rmcfg multicall binary
  * go.mod: add github.com/beevik/etree
  * providers/vmware: switch to internal copy of OVF parser
  * internal/resource: fix bucket field in error message
  * internal/resource: derive AWS region hint from ARN partition field
  * internal/resource: simplify test
  * internal/resource: fix minor nits
  * provider/azure: try to fetch userdata from IMDS
  * providers/vmware: convert OVF tests to testify
  * providers/vmware: drop vmw-ovflib docs
  * providers/vmware: add verbatim copy of vmw-ovflib
  * providers/vmware: add constants for guestinfo and OVF property names
  * providers/virtualbox: fix reading properties with flags
  * internal/resource: support S3 access point URLs
- Update fixes CVE from [bsc#1199524]; this introduces a new
  service "ignition-delete-config.service"
- Add ignition-rmcfg-suse.conf dropin to adapt to SUSE environment
- Use fixed paths in spec file for hardcoded installation paths</changelog>
  <changelog author="fvogt@suse.com" date="1659441600">- ignition-enable-network.sh: Use /lib/dracut/hooks directly
  instead of the usr-merged location which isn't available everywhere
  (bsc#1201957)</changelog>
  <changelog author="iforster@suse.com" date="1677499200">- Update to version 2.15.0:
  * Features
  * Support offline Tang provisioning via pre-shared advertisement (3.4.0)
  * Allow enabling discard passthrough on LUKS devices (3.4.0)
  * Allow specifying arbitrary LUKS open options (3.4.0)
  * Ship aarch64 macOS ignition-validate binary in GitHub release artifacts
  * Changes
  * Mark the 3.4.0 config spec as stable
  * No longer accept configs with version 3.4.0-experimental
  * Create new 3.5.0-experimental config spec from 3.4.0
  * Fail if files/links/dirs conflict with systemd units or dropins
  * Warn if template for enabled systemd instance unit has no Install section
  * Warn if filesystem overwrites partitioned disk
  * Warn if wipeTable overwrites a filesystem that would otherwise be reused
  * Warn if user/group specified for hard link
  * Install ignition-apply in /usr/libexec
  * Allow distros to add Ignition command-line arguments from a unit drop-in
  * Convert NEWS to Markdown and move to docs site
  * Require Go 1.18+
  * Bug fixes
  * Don't overwrite LUKS1 volume when storage.luks.wipeVolume is false
  * Request network when custom Clevis config has needsNetwork set
  * Fix creating LUKS volume with custom Clevis config that uses TPM2
  * Avoid logging spurious error when a LUKS volume wasn't previously formatted
  * Fix version string in ignition-validate release container
  * Fix reproducibility of systemd preset file in ignition-apply output
  * Document that user/group fields aren't applied to hard links
  * Clarify spec docs for files/directories/links group fields
- Modified 0002-allow-multiple-mounts-of-same-device.patch to add
  new Ignition spec version
- Add 0001-ignore-missing-qemu-blockdev.patch [bsc#1207679] to
  support booting without configuration device on s390x.
- Move all /usr/libexec contents to %sbindir</changelog>
  <changelog author="iforster@suse.com" date="1678363200">- Add `dasd_mod.dasd=autodetect` to kernel command line parameters
  (for Ignition device support on S/390) [boo#1207903]</changelog>
  <changelog author="iforster@suse.com" date="1702900800">- Update to version 2.17.0:
  * Features
  * providers/hetzner: add support for Hetzner Cloud
  * providers/applehv: Add Apple Hypervisor
  * packit: add initial support
  * Other notable Changes
  * Add vsock modules into ramdisk
  * stages/disks: retry `sgdisk --zap-all` invocation
  * Add optionally-installed grub2 code
  * internal/exec/stages/disks: prevent races with udev
- Updates from version 2.16.x [jsc#SMO-314] [bsc#1217533]:
  * Features
  * Add support for Hyper-V platform
  * Other notable changes
  * dracut: make hv_utils module optional
  * internal/exec: don't relabel a mountpoint that already exists
  * internal/exec/util: check if unit exists before disabling
  * platform: allow provider fetch to save files to write from files stage
  * providers: rename noop to metal
  * platform: drop function pointer indirection for fetch method
  * providers: add Config wrapper structs for cmdline and system providers
- Fix segmentation fault if filesystem section of Ignition JSON
  doesn't contain path entry in
  0002-allow-multiple-mounts-of-same-device.patch
- Add 0003-Move-the-GPT-header-on-resized-disks.patch
- Increased required Go version</changelog>
</package>
<package pkgid="b427da3db2aceb0908e16c2c6678e8b6195c52d61eb57ea9349adfcc9db30287" name="ignition" arch="src">
  <version epoch="0" ver="2.17.0" rel="150500.3.3.1"/>
  <changelog author="iforster@suse.com" date="1625659200">- Implement missing ignition-kargs-helper script for kernel
  argument support</changelog>
  <changelog author="iforster@suse.com" date="1625659201">- Update to version 2.11.0:
  * news: add notes for 2.11.0
  * Upgraded docs
  * config/*: return report from previous parser when chaining
  * config/*: re-order testcases by version
  * tree: update for stable v3.3.0 and new v3.4.0-experimental
  * config/v3_4_experimental: adapt for experimental
  * config/v3_4_experimental: copy from config/v3_3
  * config/v3_3: adapt for stabilization
  * config/v3_3_experimental: rename to config/v3_3
  * config/v3_3_exp: pointerify ClevisCustom Config and Pin
  * config/v3_3_exp: pointerify Raid.Level
  * config/v3_3_exp: pointerify LinkEmbedded1.Target
  * stages/disks: simplify a check
  * config/v3_1/translate: don't point to field from input struct
  * config/v3_3_exp: drop devices from schema "required" field
  * config/*: validate that storage.raid.devices is non-empty
  * config/*/types: add RAID validation tests
  * config/shared/errors: fix ErrSparesUnsupportedForLevel message
  * config: fix comment
  * *: formally bump Go to 1.13
  * platform: add powervs platform
  * internal/providers/*stack: drop dead timeout code
  * stages/disks: improve error reporting for LUKS device reuse
  * ignition-setup-user.service: drop Before=multipathd.service
  * Dockerfile: build ignition-validate container using Fedora
  * workflows: test on Go 1.16
  * tests/*: verify deletion of block device w/o creating a FS
  * *: allow erasing block device without creating a filesystem
  * *: rename other projects' master branches to main
  * *: rename master branch to main
  * config/*: add export functions for parsing any config version &lt; N
  * config/*: refactor config.go's Parse() to use GetConfigVersion
  * config/* : minor cleanup
- Refreshed to match new Ignition spec
  * 0002-allow-multiple-mounts-of-same-device.patch</changelog>
  <changelog author="iforster@suse.com" date="1625745600">- If a Combustion device was mounted, then unmount it in
  ignition-kargs-helper - the replacement script will be put on
  the same location</changelog>
  <changelog author="iforster@suse.com" date="1626868800">- Ignore error return code if no virtualization environment
  detected. [bsc#1188479]
  This makes it possible to use Ignition also on bare metal (e.g.
  when dumping images directly to disk) without adding a
  ignition.platform.id parameter.</changelog>
  <changelog author="kukuk@suse.com" date="1627473600">- Include vfat and nls kernel modules into initrd so that we can
  read the ignition configuration from USB drives [bsc#1184202]</changelog>
  <changelog author="iforster@suse.com" date="1628510400">- Update to version 2.12.0:
  * news: add notes for 2.12.0
  * stages/files: add previousReport to result report
  * tests: fix linter warning
  * workflows: limit permissions to reading repo contents
  * workflows: bump linter version
  * go.mod: revendor
  * Drop EOL Go versions
  * internal/distro: drop DiskByIDDir
  * providers/azure: add support for azure gen2 VMs [bsc#1196679]
  * stages/mount: correctly relabel the root of a fresh ext4 filesystem
  * exec: fix permissions for mountpoints in home dirs
  * tests: drop os.ModeDir requirement in mode of output directories
  * examples: reboot with --force
  * exec/util: add blkid API to query block devices based on FSTYPE
  * stages/files: use IntToPtr() in createCrypttabEntries()
  * stages/files: write result report to /var/lib/ignition
  * engine: persist fetched config summaries in State
  * stages/disks: use State to persist keyfiles for files stage
  * *: add general mechanism for persisting state between stages
  * main: drop -clear-cache flag
  * engine: don't hardcode neednet path
  * fetch-offline: return ErrNeedNet if we need net
  * engine: switch Engine.logReport() to pointer receiver
  * engine: fix incorrect error in log message
  * dracut: drop ignition-setup-user.service
  * dracut: drop reference to ignition-setup-base.service
  * providers/gcp: access GCP metadata service by IP address
  * Remove ignition-firstboot-complete.service
  * OWNERS: remove
  * internal/exec/util: drop device argument from cResultToErr()
  * docs/config*: document storage.luks.clevis.threshold default
  * ci: disable spec bump external test workaround
  * docs: Add Ignition release / Spec version table
  * templates: update example releng signing ticket
  * templates: don't update %gotest lines
  * Provide ignition-firstboot-complete.service (removed by upstream
  due to correctly being considered distro spcific), based on the
  old upstream version; removed all non-SUSE specific stuff and
  integrated our own changes
  * Removed change-ignition-firstboot-path.conf (changes are
  integrated into ignition-firstboot-complete.service now).
  * Provide ignition-setup-user.service  (removed by upstream due
  to correctly being considered distro spcific), based on the old
  upstream version.
  * Renamed ignition-setup-user-suse.sh to ignition-setup-user.sh
  * Adapted ignition-generator-suse and module-setup.sh to use the
  custom ignition-setup-user.service (no overriding of parts of the
  service file necessary any more).
  * Synced ignition-kargs-helper script with upstream example
  * Raising minimum Go version to 1.15 as required by upstream</changelog>
  <changelog author="iforster@suse.com" date="1628769600">- is-live-image doesn't exist on *SUSE, and our live images don't
  use Ignition, so just add the Ignition device dependency to the
  service file directly.</changelog>
  <changelog author="iforster@suse.com" date="1629720000">- Make sure to create /boot/writable (may not be present in some
  images)</changelog>
  <changelog author="iforster@suse.com" date="1638360000">- Update to version 2.13.0:
  * news: add notes for 2.13.0
  * config/v3_4_exp: noProxy entries cannot be null
  * config/v3_4_exp: mark ignition.version as required
  * docs/supported-platforms: add some description about Nutanix
  * providers/nutanix: add Nutanix platform
  * tests: use umountPath as a thin wrapper around umountPartition
  * internal/providers: refactor handling of unmounting the mount path
  * tests: address gostatic-check warning
  * tests: Add base64 decoding test
  * Dockerfile.validate: build with Fedora 35
  * go.mod: update dataurl to 1.0.0
  * ci: give blackbox tests two hours to run
  * tests/filesystem: fix umountPartition retry loop
  * templates: skip vendoring the new version in favor of dependabot
  * go.mod: update vcontext
  * providers/virtualbox: read config from /Ignition/Config guest property
  * stages/filesystems: use mkfs.fat instead of mkfs.vfat
  * docs/supported-platforms: switch to Afterburn docs URL
  * docs/supported-platforms: drop reference to platform-specific agents
  * test: ensure all platforms are documented
  * docs/supported-platforms: add missing platforms
  * stages/files: rename `relabelDirsForFile` and add docstring
  * stages/files: make variable name follow Go convention
  * docs/supported-platforms: update platform names and URLs
  * docs/supported-platforms: sort by platform ID
  * docs/supported-platforms: add platform IDs
  * docs: Remove default layout from front matter
  * docs: Do not convert -- &amp; --- to en/em-dash
  * internal/*: change the location of Ignition report
  * internal/exec/util: rename FindFirstMissingDirForFile and tweak docs
  * providers/qemu: start reporting progress reading fw_cfg after 10 s
  * providers/qemu: optimize fw_cfg read size
  * ci: use coreos-ci-lib helper for kola testiso
  * *: gofmt 1.17
  * workflows: bump Go and golangci-lint
  * config: update versions in comments
- Removed obsolete ignition-rpmlintrc</changelog>
  <changelog author="fvogt@suse.com" date="1646395200">- Add support for NetworkManager in dracut:
  * ignition-enable-network.service, ignition-enable-network.sh</changelog>
  <changelog author="fvogt@suse.com" date="1646395201">- Remove /var/lib/YaST2/reconfig_system if a config was provided:
  * ignition-remove-reconfig_system.service</changelog>
  <changelog author="iforster@suse.com" date="1648209600">- Add ignition-touch-selinux-autorelabel.conf:
  Trigger SELinux autorelabel after Ignition runs; Ignition would
  support SELinux itself, however this is a compile time option, so
  it can't be used here.
- Filter commented lines in ignition-mount-initrd-fstab.service</changelog>
  <changelog author="iforster@suse.com" date="1649073600">- Don't include non-MarkDown files in documentation</changelog>
  <changelog author="iforster@suse.com" date="1649160000">- ignition-mount-initrd-fstab.service:
  - Don't ignore errors in loops
  - Unmount mount points recursively - a new submount may have
    appeared
  - Split umount part into own service file:
- ignition-umount-initrd-fstab.service:
  - Unmounts the additional mounts as soon as they are not
    required for Ignition any more; the ExecStop operation is
    running quite late in initrd and may unmount essential mount
    points flagged with "x-initrd.mount" (e.g. when storing /usr on
    a separate mount point). In theory this will also affect
    Ignition itself, but it hasn't been reported as a problem so
    far.</changelog>
  <changelog author="iforster@suse.com" date="1649419200">- Use /bin/sh instead of /usr/bin/sh (for backwards compatibility
  with SLE Micro 5.1) [bsc#1196679]</changelog>
  <changelog author="iforster@suse.com" date="1652875200">- Update to version 2.14.0:
  * NEWS: update v2.14.0
  * docs/operator-notes: add section on provisioning secrets
  * Dockerfile.validate: build with Fedora 36
  * internal/resource: fix gs:// fetches in GCE without a service account
  * docs/operator-notes: document supported S3 URL formats
  * internal/resource: fix S3 access point object ARNs
  * exec/util: fix infinite loop in Depth() if -root is relative
  * Add ignition-delete-config.service and ignition-rmcfg symlink
  * providers/virtualbox: support deleting Ignition configs
  * providers/virtualbox: add comment referencing VirtualBox source
  * providers/virtualbox: add define for GUEST_PROP_FN_GET_PROP
  * providers/virtualbox: add helper to set up hypervisor connection
  * providers/vmware: support deleting Ignition configs
  * main: add ignition-rmcfg multicall binary
  * go.mod: add github.com/beevik/etree
  * providers/vmware: switch to internal copy of OVF parser
  * internal/resource: fix bucket field in error message
  * internal/resource: derive AWS region hint from ARN partition field
  * internal/resource: simplify test
  * internal/resource: fix minor nits
  * provider/azure: try to fetch userdata from IMDS
  * providers/vmware: convert OVF tests to testify
  * providers/vmware: drop vmw-ovflib docs
  * providers/vmware: add verbatim copy of vmw-ovflib
  * providers/vmware: add constants for guestinfo and OVF property names
  * providers/virtualbox: fix reading properties with flags
  * internal/resource: support S3 access point URLs
- Update fixes CVE from [bsc#1199524]; this introduces a new
  service "ignition-delete-config.service"
- Add ignition-rmcfg-suse.conf dropin to adapt to SUSE environment
- Use fixed paths in spec file for hardcoded installation paths</changelog>
  <changelog author="fvogt@suse.com" date="1659441600">- ignition-enable-network.sh: Use /lib/dracut/hooks directly
  instead of the usr-merged location which isn't available everywhere
  (bsc#1201957)</changelog>
  <changelog author="iforster@suse.com" date="1677499200">- Update to version 2.15.0:
  * Features
  * Support offline Tang provisioning via pre-shared advertisement (3.4.0)
  * Allow enabling discard passthrough on LUKS devices (3.4.0)
  * Allow specifying arbitrary LUKS open options (3.4.0)
  * Ship aarch64 macOS ignition-validate binary in GitHub release artifacts
  * Changes
  * Mark the 3.4.0 config spec as stable
  * No longer accept configs with version 3.4.0-experimental
  * Create new 3.5.0-experimental config spec from 3.4.0
  * Fail if files/links/dirs conflict with systemd units or dropins
  * Warn if template for enabled systemd instance unit has no Install section
  * Warn if filesystem overwrites partitioned disk
  * Warn if wipeTable overwrites a filesystem that would otherwise be reused
  * Warn if user/group specified for hard link
  * Install ignition-apply in /usr/libexec
  * Allow distros to add Ignition command-line arguments from a unit drop-in
  * Convert NEWS to Markdown and move to docs site
  * Require Go 1.18+
  * Bug fixes
  * Don't overwrite LUKS1 volume when storage.luks.wipeVolume is false
  * Request network when custom Clevis config has needsNetwork set
  * Fix creating LUKS volume with custom Clevis config that uses TPM2
  * Avoid logging spurious error when a LUKS volume wasn't previously formatted
  * Fix version string in ignition-validate release container
  * Fix reproducibility of systemd preset file in ignition-apply output
  * Document that user/group fields aren't applied to hard links
  * Clarify spec docs for files/directories/links group fields
- Modified 0002-allow-multiple-mounts-of-same-device.patch to add
  new Ignition spec version
- Add 0001-ignore-missing-qemu-blockdev.patch [bsc#1207679] to
  support booting without configuration device on s390x.
- Move all /usr/libexec contents to %sbindir</changelog>
  <changelog author="iforster@suse.com" date="1678363200">- Add `dasd_mod.dasd=autodetect` to kernel command line parameters
  (for Ignition device support on S/390) [boo#1207903]</changelog>
  <changelog author="iforster@suse.com" date="1702900800">- Update to version 2.17.0:
  * Features
  * providers/hetzner: add support for Hetzner Cloud
  * providers/applehv: Add Apple Hypervisor
  * packit: add initial support
  * Other notable Changes
  * Add vsock modules into ramdisk
  * stages/disks: retry `sgdisk --zap-all` invocation
  * Add optionally-installed grub2 code
  * internal/exec/stages/disks: prevent races with udev
- Updates from version 2.16.x [jsc#SMO-314] [bsc#1217533]:
  * Features
  * Add support for Hyper-V platform
  * Other notable changes
  * dracut: make hv_utils module optional
  * internal/exec: don't relabel a mountpoint that already exists
  * internal/exec/util: check if unit exists before disabling
  * platform: allow provider fetch to save files to write from files stage
  * providers: rename noop to metal
  * platform: drop function pointer indirection for fetch method
  * providers: add Config wrapper structs for cmdline and system providers
- Fix segmentation fault if filesystem section of Ignition JSON
  doesn't contain path entry in
  0002-allow-multiple-mounts-of-same-device.patch
- Add 0003-Move-the-GPT-header-on-resized-disks.patch
- Increased required Go version</changelog>
</package>
<package pkgid="b64f6f7ca3988a71ee5649eafc59fa4fd63c549a3da6dfcc6b1dd52222d52353" name="ignition" arch="x86_64">
  <version epoch="0" ver="2.17.0" rel="150500.3.3.1"/>
  <changelog author="iforster@suse.com" date="1625659200">- Implement missing ignition-kargs-helper script for kernel
  argument support</changelog>
  <changelog author="iforster@suse.com" date="1625659201">- Update to version 2.11.0:
  * news: add notes for 2.11.0
  * Upgraded docs
  * config/*: return report from previous parser when chaining
  * config/*: re-order testcases by version
  * tree: update for stable v3.3.0 and new v3.4.0-experimental
  * config/v3_4_experimental: adapt for experimental
  * config/v3_4_experimental: copy from config/v3_3
  * config/v3_3: adapt for stabilization
  * config/v3_3_experimental: rename to config/v3_3
  * config/v3_3_exp: pointerify ClevisCustom Config and Pin
  * config/v3_3_exp: pointerify Raid.Level
  * config/v3_3_exp: pointerify LinkEmbedded1.Target
  * stages/disks: simplify a check
  * config/v3_1/translate: don't point to field from input struct
  * config/v3_3_exp: drop devices from schema "required" field
  * config/*: validate that storage.raid.devices is non-empty
  * config/*/types: add RAID validation tests
  * config/shared/errors: fix ErrSparesUnsupportedForLevel message
  * config: fix comment
  * *: formally bump Go to 1.13
  * platform: add powervs platform
  * internal/providers/*stack: drop dead timeout code
  * stages/disks: improve error reporting for LUKS device reuse
  * ignition-setup-user.service: drop Before=multipathd.service
  * Dockerfile: build ignition-validate container using Fedora
  * workflows: test on Go 1.16
  * tests/*: verify deletion of block device w/o creating a FS
  * *: allow erasing block device without creating a filesystem
  * *: rename other projects' master branches to main
  * *: rename master branch to main
  * config/*: add export functions for parsing any config version &lt; N
  * config/*: refactor config.go's Parse() to use GetConfigVersion
  * config/* : minor cleanup
- Refreshed to match new Ignition spec
  * 0002-allow-multiple-mounts-of-same-device.patch</changelog>
  <changelog author="iforster@suse.com" date="1625745600">- If a Combustion device was mounted, then unmount it in
  ignition-kargs-helper - the replacement script will be put on
  the same location</changelog>
  <changelog author="iforster@suse.com" date="1626868800">- Ignore error return code if no virtualization environment
  detected. [bsc#1188479]
  This makes it possible to use Ignition also on bare metal (e.g.
  when dumping images directly to disk) without adding a
  ignition.platform.id parameter.</changelog>
  <changelog author="kukuk@suse.com" date="1627473600">- Include vfat and nls kernel modules into initrd so that we can
  read the ignition configuration from USB drives [bsc#1184202]</changelog>
  <changelog author="iforster@suse.com" date="1628510400">- Update to version 2.12.0:
  * news: add notes for 2.12.0
  * stages/files: add previousReport to result report
  * tests: fix linter warning
  * workflows: limit permissions to reading repo contents
  * workflows: bump linter version
  * go.mod: revendor
  * Drop EOL Go versions
  * internal/distro: drop DiskByIDDir
  * providers/azure: add support for azure gen2 VMs [bsc#1196679]
  * stages/mount: correctly relabel the root of a fresh ext4 filesystem
  * exec: fix permissions for mountpoints in home dirs
  * tests: drop os.ModeDir requirement in mode of output directories
  * examples: reboot with --force
  * exec/util: add blkid API to query block devices based on FSTYPE
  * stages/files: use IntToPtr() in createCrypttabEntries()
  * stages/files: write result report to /var/lib/ignition
  * engine: persist fetched config summaries in State
  * stages/disks: use State to persist keyfiles for files stage
  * *: add general mechanism for persisting state between stages
  * main: drop -clear-cache flag
  * engine: don't hardcode neednet path
  * fetch-offline: return ErrNeedNet if we need net
  * engine: switch Engine.logReport() to pointer receiver
  * engine: fix incorrect error in log message
  * dracut: drop ignition-setup-user.service
  * dracut: drop reference to ignition-setup-base.service
  * providers/gcp: access GCP metadata service by IP address
  * Remove ignition-firstboot-complete.service
  * OWNERS: remove
  * internal/exec/util: drop device argument from cResultToErr()
  * docs/config*: document storage.luks.clevis.threshold default
  * ci: disable spec bump external test workaround
  * docs: Add Ignition release / Spec version table
  * templates: update example releng signing ticket
  * templates: don't update %gotest lines
  * Provide ignition-firstboot-complete.service (removed by upstream
  due to correctly being considered distro spcific), based on the
  old upstream version; removed all non-SUSE specific stuff and
  integrated our own changes
  * Removed change-ignition-firstboot-path.conf (changes are
  integrated into ignition-firstboot-complete.service now).
  * Provide ignition-setup-user.service  (removed by upstream due
  to correctly being considered distro spcific), based on the old
  upstream version.
  * Renamed ignition-setup-user-suse.sh to ignition-setup-user.sh
  * Adapted ignition-generator-suse and module-setup.sh to use the
  custom ignition-setup-user.service (no overriding of parts of the
  service file necessary any more).
  * Synced ignition-kargs-helper script with upstream example
  * Raising minimum Go version to 1.15 as required by upstream</changelog>
  <changelog author="iforster@suse.com" date="1628769600">- is-live-image doesn't exist on *SUSE, and our live images don't
  use Ignition, so just add the Ignition device dependency to the
  service file directly.</changelog>
  <changelog author="iforster@suse.com" date="1629720000">- Make sure to create /boot/writable (may not be present in some
  images)</changelog>
  <changelog author="iforster@suse.com" date="1638360000">- Update to version 2.13.0:
  * news: add notes for 2.13.0
  * config/v3_4_exp: noProxy entries cannot be null
  * config/v3_4_exp: mark ignition.version as required
  * docs/supported-platforms: add some description about Nutanix
  * providers/nutanix: add Nutanix platform
  * tests: use umountPath as a thin wrapper around umountPartition
  * internal/providers: refactor handling of unmounting the mount path
  * tests: address gostatic-check warning
  * tests: Add base64 decoding test
  * Dockerfile.validate: build with Fedora 35
  * go.mod: update dataurl to 1.0.0
  * ci: give blackbox tests two hours to run
  * tests/filesystem: fix umountPartition retry loop
  * templates: skip vendoring the new version in favor of dependabot
  * go.mod: update vcontext
  * providers/virtualbox: read config from /Ignition/Config guest property
  * stages/filesystems: use mkfs.fat instead of mkfs.vfat
  * docs/supported-platforms: switch to Afterburn docs URL
  * docs/supported-platforms: drop reference to platform-specific agents
  * test: ensure all platforms are documented
  * docs/supported-platforms: add missing platforms
  * stages/files: rename `relabelDirsForFile` and add docstring
  * stages/files: make variable name follow Go convention
  * docs/supported-platforms: update platform names and URLs
  * docs/supported-platforms: sort by platform ID
  * docs/supported-platforms: add platform IDs
  * docs: Remove default layout from front matter
  * docs: Do not convert -- &amp; --- to en/em-dash
  * internal/*: change the location of Ignition report
  * internal/exec/util: rename FindFirstMissingDirForFile and tweak docs
  * providers/qemu: start reporting progress reading fw_cfg after 10 s
  * providers/qemu: optimize fw_cfg read size
  * ci: use coreos-ci-lib helper for kola testiso
  * *: gofmt 1.17
  * workflows: bump Go and golangci-lint
  * config: update versions in comments
- Removed obsolete ignition-rpmlintrc</changelog>
  <changelog author="fvogt@suse.com" date="1646395200">- Add support for NetworkManager in dracut:
  * ignition-enable-network.service, ignition-enable-network.sh</changelog>
  <changelog author="fvogt@suse.com" date="1646395201">- Remove /var/lib/YaST2/reconfig_system if a config was provided:
  * ignition-remove-reconfig_system.service</changelog>
  <changelog author="iforster@suse.com" date="1648209600">- Add ignition-touch-selinux-autorelabel.conf:
  Trigger SELinux autorelabel after Ignition runs; Ignition would
  support SELinux itself, however this is a compile time option, so
  it can't be used here.
- Filter commented lines in ignition-mount-initrd-fstab.service</changelog>
  <changelog author="iforster@suse.com" date="1649073600">- Don't include non-MarkDown files in documentation</changelog>
  <changelog author="iforster@suse.com" date="1649160000">- ignition-mount-initrd-fstab.service:
  - Don't ignore errors in loops
  - Unmount mount points recursively - a new submount may have
    appeared
  - Split umount part into own service file:
- ignition-umount-initrd-fstab.service:
  - Unmounts the additional mounts as soon as they are not
    required for Ignition any more; the ExecStop operation is
    running quite late in initrd and may unmount essential mount
    points flagged with "x-initrd.mount" (e.g. when storing /usr on
    a separate mount point). In theory this will also affect
    Ignition itself, but it hasn't been reported as a problem so
    far.</changelog>
  <changelog author="iforster@suse.com" date="1649419200">- Use /bin/sh instead of /usr/bin/sh (for backwards compatibility
  with SLE Micro 5.1) [bsc#1196679]</changelog>
  <changelog author="iforster@suse.com" date="1652875200">- Update to version 2.14.0:
  * NEWS: update v2.14.0
  * docs/operator-notes: add section on provisioning secrets
  * Dockerfile.validate: build with Fedora 36
  * internal/resource: fix gs:// fetches in GCE without a service account
  * docs/operator-notes: document supported S3 URL formats
  * internal/resource: fix S3 access point object ARNs
  * exec/util: fix infinite loop in Depth() if -root is relative
  * Add ignition-delete-config.service and ignition-rmcfg symlink
  * providers/virtualbox: support deleting Ignition configs
  * providers/virtualbox: add comment referencing VirtualBox source
  * providers/virtualbox: add define for GUEST_PROP_FN_GET_PROP
  * providers/virtualbox: add helper to set up hypervisor connection
  * providers/vmware: support deleting Ignition configs
  * main: add ignition-rmcfg multicall binary
  * go.mod: add github.com/beevik/etree
  * providers/vmware: switch to internal copy of OVF parser
  * internal/resource: fix bucket field in error message
  * internal/resource: derive AWS region hint from ARN partition field
  * internal/resource: simplify test
  * internal/resource: fix minor nits
  * provider/azure: try to fetch userdata from IMDS
  * providers/vmware: convert OVF tests to testify
  * providers/vmware: drop vmw-ovflib docs
  * providers/vmware: add verbatim copy of vmw-ovflib
  * providers/vmware: add constants for guestinfo and OVF property names
  * providers/virtualbox: fix reading properties with flags
  * internal/resource: support S3 access point URLs
- Update fixes CVE from [bsc#1199524]; this introduces a new
  service "ignition-delete-config.service"
- Add ignition-rmcfg-suse.conf dropin to adapt to SUSE environment
- Use fixed paths in spec file for hardcoded installation paths</changelog>
  <changelog author="fvogt@suse.com" date="1659441600">- ignition-enable-network.sh: Use /lib/dracut/hooks directly
  instead of the usr-merged location which isn't available everywhere
  (bsc#1201957)</changelog>
  <changelog author="iforster@suse.com" date="1677499200">- Update to version 2.15.0:
  * Features
  * Support offline Tang provisioning via pre-shared advertisement (3.4.0)
  * Allow enabling discard passthrough on LUKS devices (3.4.0)
  * Allow specifying arbitrary LUKS open options (3.4.0)
  * Ship aarch64 macOS ignition-validate binary in GitHub release artifacts
  * Changes
  * Mark the 3.4.0 config spec as stable
  * No longer accept configs with version 3.4.0-experimental
  * Create new 3.5.0-experimental config spec from 3.4.0
  * Fail if files/links/dirs conflict with systemd units or dropins
  * Warn if template for enabled systemd instance unit has no Install section
  * Warn if filesystem overwrites partitioned disk
  * Warn if wipeTable overwrites a filesystem that would otherwise be reused
  * Warn if user/group specified for hard link
  * Install ignition-apply in /usr/libexec
  * Allow distros to add Ignition command-line arguments from a unit drop-in
  * Convert NEWS to Markdown and move to docs site
  * Require Go 1.18+
  * Bug fixes
  * Don't overwrite LUKS1 volume when storage.luks.wipeVolume is false
  * Request network when custom Clevis config has needsNetwork set
  * Fix creating LUKS volume with custom Clevis config that uses TPM2
  * Avoid logging spurious error when a LUKS volume wasn't previously formatted
  * Fix version string in ignition-validate release container
  * Fix reproducibility of systemd preset file in ignition-apply output
  * Document that user/group fields aren't applied to hard links
  * Clarify spec docs for files/directories/links group fields
- Modified 0002-allow-multiple-mounts-of-same-device.patch to add
  new Ignition spec version
- Add 0001-ignore-missing-qemu-blockdev.patch [bsc#1207679] to
  support booting without configuration device on s390x.
- Move all /usr/libexec contents to %sbindir</changelog>
  <changelog author="iforster@suse.com" date="1678363200">- Add `dasd_mod.dasd=autodetect` to kernel command line parameters
  (for Ignition device support on S/390) [boo#1207903]</changelog>
  <changelog author="iforster@suse.com" date="1702900800">- Update to version 2.17.0:
  * Features
  * providers/hetzner: add support for Hetzner Cloud
  * providers/applehv: Add Apple Hypervisor
  * packit: add initial support
  * Other notable Changes
  * Add vsock modules into ramdisk
  * stages/disks: retry `sgdisk --zap-all` invocation
  * Add optionally-installed grub2 code
  * internal/exec/stages/disks: prevent races with udev
- Updates from version 2.16.x [jsc#SMO-314] [bsc#1217533]:
  * Features
  * Add support for Hyper-V platform
  * Other notable changes
  * dracut: make hv_utils module optional
  * internal/exec: don't relabel a mountpoint that already exists
  * internal/exec/util: check if unit exists before disabling
  * platform: allow provider fetch to save files to write from files stage
  * providers: rename noop to metal
  * platform: drop function pointer indirection for fetch method
  * providers: add Config wrapper structs for cmdline and system providers
- Fix segmentation fault if filesystem section of Ignition JSON
  doesn't contain path entry in
  0002-allow-multiple-mounts-of-same-device.patch
- Add 0003-Move-the-GPT-header-on-resized-disks.patch
- Increased required Go version</changelog>
</package>
<package pkgid="3aefb91391996570d6ed18542250f7e4ffcb553cf944286646c0b57bfab8f9cb" name="ignition-dracut-grub2" arch="aarch64">
  <version epoch="0" ver="2.17.0" rel="150500.3.3.1"/>
  <changelog author="iforster@suse.com" date="1625659200">- Implement missing ignition-kargs-helper script for kernel
  argument support</changelog>
  <changelog author="iforster@suse.com" date="1625659201">- Update to version 2.11.0:
  * news: add notes for 2.11.0
  * Upgraded docs
  * config/*: return report from previous parser when chaining
  * config/*: re-order testcases by version
  * tree: update for stable v3.3.0 and new v3.4.0-experimental
  * config/v3_4_experimental: adapt for experimental
  * config/v3_4_experimental: copy from config/v3_3
  * config/v3_3: adapt for stabilization
  * config/v3_3_experimental: rename to config/v3_3
  * config/v3_3_exp: pointerify ClevisCustom Config and Pin
  * config/v3_3_exp: pointerify Raid.Level
  * config/v3_3_exp: pointerify LinkEmbedded1.Target
  * stages/disks: simplify a check
  * config/v3_1/translate: don't point to field from input struct
  * config/v3_3_exp: drop devices from schema "required" field
  * config/*: validate that storage.raid.devices is non-empty
  * config/*/types: add RAID validation tests
  * config/shared/errors: fix ErrSparesUnsupportedForLevel message
  * config: fix comment
  * *: formally bump Go to 1.13
  * platform: add powervs platform
  * internal/providers/*stack: drop dead timeout code
  * stages/disks: improve error reporting for LUKS device reuse
  * ignition-setup-user.service: drop Before=multipathd.service
  * Dockerfile: build ignition-validate container using Fedora
  * workflows: test on Go 1.16
  * tests/*: verify deletion of block device w/o creating a FS
  * *: allow erasing block device without creating a filesystem
  * *: rename other projects' master branches to main
  * *: rename master branch to main
  * config/*: add export functions for parsing any config version &lt; N
  * config/*: refactor config.go's Parse() to use GetConfigVersion
  * config/* : minor cleanup
- Refreshed to match new Ignition spec
  * 0002-allow-multiple-mounts-of-same-device.patch</changelog>
  <changelog author="iforster@suse.com" date="1625745600">- If a Combustion device was mounted, then unmount it in
  ignition-kargs-helper - the replacement script will be put on
  the same location</changelog>
  <changelog author="iforster@suse.com" date="1626868800">- Ignore error return code if no virtualization environment
  detected. [bsc#1188479]
  This makes it possible to use Ignition also on bare metal (e.g.
  when dumping images directly to disk) without adding a
  ignition.platform.id parameter.</changelog>
  <changelog author="kukuk@suse.com" date="1627473600">- Include vfat and nls kernel modules into initrd so that we can
  read the ignition configuration from USB drives [bsc#1184202]</changelog>
  <changelog author="iforster@suse.com" date="1628510400">- Update to version 2.12.0:
  * news: add notes for 2.12.0
  * stages/files: add previousReport to result report
  * tests: fix linter warning
  * workflows: limit permissions to reading repo contents
  * workflows: bump linter version
  * go.mod: revendor
  * Drop EOL Go versions
  * internal/distro: drop DiskByIDDir
  * providers/azure: add support for azure gen2 VMs [bsc#1196679]
  * stages/mount: correctly relabel the root of a fresh ext4 filesystem
  * exec: fix permissions for mountpoints in home dirs
  * tests: drop os.ModeDir requirement in mode of output directories
  * examples: reboot with --force
  * exec/util: add blkid API to query block devices based on FSTYPE
  * stages/files: use IntToPtr() in createCrypttabEntries()
  * stages/files: write result report to /var/lib/ignition
  * engine: persist fetched config summaries in State
  * stages/disks: use State to persist keyfiles for files stage
  * *: add general mechanism for persisting state between stages
  * main: drop -clear-cache flag
  * engine: don't hardcode neednet path
  * fetch-offline: return ErrNeedNet if we need net
  * engine: switch Engine.logReport() to pointer receiver
  * engine: fix incorrect error in log message
  * dracut: drop ignition-setup-user.service
  * dracut: drop reference to ignition-setup-base.service
  * providers/gcp: access GCP metadata service by IP address
  * Remove ignition-firstboot-complete.service
  * OWNERS: remove
  * internal/exec/util: drop device argument from cResultToErr()
  * docs/config*: document storage.luks.clevis.threshold default
  * ci: disable spec bump external test workaround
  * docs: Add Ignition release / Spec version table
  * templates: update example releng signing ticket
  * templates: don't update %gotest lines
  * Provide ignition-firstboot-complete.service (removed by upstream
  due to correctly being considered distro spcific), based on the
  old upstream version; removed all non-SUSE specific stuff and
  integrated our own changes
  * Removed change-ignition-firstboot-path.conf (changes are
  integrated into ignition-firstboot-complete.service now).
  * Provide ignition-setup-user.service  (removed by upstream due
  to correctly being considered distro spcific), based on the old
  upstream version.
  * Renamed ignition-setup-user-suse.sh to ignition-setup-user.sh
  * Adapted ignition-generator-suse and module-setup.sh to use the
  custom ignition-setup-user.service (no overriding of parts of the
  service file necessary any more).
  * Synced ignition-kargs-helper script with upstream example
  * Raising minimum Go version to 1.15 as required by upstream</changelog>
  <changelog author="iforster@suse.com" date="1628769600">- is-live-image doesn't exist on *SUSE, and our live images don't
  use Ignition, so just add the Ignition device dependency to the
  service file directly.</changelog>
  <changelog author="iforster@suse.com" date="1629720000">- Make sure to create /boot/writable (may not be present in some
  images)</changelog>
  <changelog author="iforster@suse.com" date="1638360000">- Update to version 2.13.0:
  * news: add notes for 2.13.0
  * config/v3_4_exp: noProxy entries cannot be null
  * config/v3_4_exp: mark ignition.version as required
  * docs/supported-platforms: add some description about Nutanix
  * providers/nutanix: add Nutanix platform
  * tests: use umountPath as a thin wrapper around umountPartition
  * internal/providers: refactor handling of unmounting the mount path
  * tests: address gostatic-check warning
  * tests: Add base64 decoding test
  * Dockerfile.validate: build with Fedora 35
  * go.mod: update dataurl to 1.0.0
  * ci: give blackbox tests two hours to run
  * tests/filesystem: fix umountPartition retry loop
  * templates: skip vendoring the new version in favor of dependabot
  * go.mod: update vcontext
  * providers/virtualbox: read config from /Ignition/Config guest property
  * stages/filesystems: use mkfs.fat instead of mkfs.vfat
  * docs/supported-platforms: switch to Afterburn docs URL
  * docs/supported-platforms: drop reference to platform-specific agents
  * test: ensure all platforms are documented
  * docs/supported-platforms: add missing platforms
  * stages/files: rename `relabelDirsForFile` and add docstring
  * stages/files: make variable name follow Go convention
  * docs/supported-platforms: update platform names and URLs
  * docs/supported-platforms: sort by platform ID
  * docs/supported-platforms: add platform IDs
  * docs: Remove default layout from front matter
  * docs: Do not convert -- &amp; --- to en/em-dash
  * internal/*: change the location of Ignition report
  * internal/exec/util: rename FindFirstMissingDirForFile and tweak docs
  * providers/qemu: start reporting progress reading fw_cfg after 10 s
  * providers/qemu: optimize fw_cfg read size
  * ci: use coreos-ci-lib helper for kola testiso
  * *: gofmt 1.17
  * workflows: bump Go and golangci-lint
  * config: update versions in comments
- Removed obsolete ignition-rpmlintrc</changelog>
  <changelog author="fvogt@suse.com" date="1646395200">- Add support for NetworkManager in dracut:
  * ignition-enable-network.service, ignition-enable-network.sh</changelog>
  <changelog author="fvogt@suse.com" date="1646395201">- Remove /var/lib/YaST2/reconfig_system if a config was provided:
  * ignition-remove-reconfig_system.service</changelog>
  <changelog author="iforster@suse.com" date="1648209600">- Add ignition-touch-selinux-autorelabel.conf:
  Trigger SELinux autorelabel after Ignition runs; Ignition would
  support SELinux itself, however this is a compile time option, so
  it can't be used here.
- Filter commented lines in ignition-mount-initrd-fstab.service</changelog>
  <changelog author="iforster@suse.com" date="1649073600">- Don't include non-MarkDown files in documentation</changelog>
  <changelog author="iforster@suse.com" date="1649160000">- ignition-mount-initrd-fstab.service:
  - Don't ignore errors in loops
  - Unmount mount points recursively - a new submount may have
    appeared
  - Split umount part into own service file:
- ignition-umount-initrd-fstab.service:
  - Unmounts the additional mounts as soon as they are not
    required for Ignition any more; the ExecStop operation is
    running quite late in initrd and may unmount essential mount
    points flagged with "x-initrd.mount" (e.g. when storing /usr on
    a separate mount point). In theory this will also affect
    Ignition itself, but it hasn't been reported as a problem so
    far.</changelog>
  <changelog author="iforster@suse.com" date="1649419200">- Use /bin/sh instead of /usr/bin/sh (for backwards compatibility
  with SLE Micro 5.1) [bsc#1196679]</changelog>
  <changelog author="iforster@suse.com" date="1652875200">- Update to version 2.14.0:
  * NEWS: update v2.14.0
  * docs/operator-notes: add section on provisioning secrets
  * Dockerfile.validate: build with Fedora 36
  * internal/resource: fix gs:// fetches in GCE without a service account
  * docs/operator-notes: document supported S3 URL formats
  * internal/resource: fix S3 access point object ARNs
  * exec/util: fix infinite loop in Depth() if -root is relative
  * Add ignition-delete-config.service and ignition-rmcfg symlink
  * providers/virtualbox: support deleting Ignition configs
  * providers/virtualbox: add comment referencing VirtualBox source
  * providers/virtualbox: add define for GUEST_PROP_FN_GET_PROP
  * providers/virtualbox: add helper to set up hypervisor connection
  * providers/vmware: support deleting Ignition configs
  * main: add ignition-rmcfg multicall binary
  * go.mod: add github.com/beevik/etree
  * providers/vmware: switch to internal copy of OVF parser
  * internal/resource: fix bucket field in error message
  * internal/resource: derive AWS region hint from ARN partition field
  * internal/resource: simplify test
  * internal/resource: fix minor nits
  * provider/azure: try to fetch userdata from IMDS
  * providers/vmware: convert OVF tests to testify
  * providers/vmware: drop vmw-ovflib docs
  * providers/vmware: add verbatim copy of vmw-ovflib
  * providers/vmware: add constants for guestinfo and OVF property names
  * providers/virtualbox: fix reading properties with flags
  * internal/resource: support S3 access point URLs
- Update fixes CVE from [bsc#1199524]; this introduces a new
  service "ignition-delete-config.service"
- Add ignition-rmcfg-suse.conf dropin to adapt to SUSE environment
- Use fixed paths in spec file for hardcoded installation paths</changelog>
  <changelog author="fvogt@suse.com" date="1659441600">- ignition-enable-network.sh: Use /lib/dracut/hooks directly
  instead of the usr-merged location which isn't available everywhere
  (bsc#1201957)</changelog>
  <changelog author="iforster@suse.com" date="1677499200">- Update to version 2.15.0:
  * Features
  * Support offline Tang provisioning via pre-shared advertisement (3.4.0)
  * Allow enabling discard passthrough on LUKS devices (3.4.0)
  * Allow specifying arbitrary LUKS open options (3.4.0)
  * Ship aarch64 macOS ignition-validate binary in GitHub release artifacts
  * Changes
  * Mark the 3.4.0 config spec as stable
  * No longer accept configs with version 3.4.0-experimental
  * Create new 3.5.0-experimental config spec from 3.4.0
  * Fail if files/links/dirs conflict with systemd units or dropins
  * Warn if template for enabled systemd instance unit has no Install section
  * Warn if filesystem overwrites partitioned disk
  * Warn if wipeTable overwrites a filesystem that would otherwise be reused
  * Warn if user/group specified for hard link
  * Install ignition-apply in /usr/libexec
  * Allow distros to add Ignition command-line arguments from a unit drop-in
  * Convert NEWS to Markdown and move to docs site
  * Require Go 1.18+
  * Bug fixes
  * Don't overwrite LUKS1 volume when storage.luks.wipeVolume is false
  * Request network when custom Clevis config has needsNetwork set
  * Fix creating LUKS volume with custom Clevis config that uses TPM2
  * Avoid logging spurious error when a LUKS volume wasn't previously formatted
  * Fix version string in ignition-validate release container
  * Fix reproducibility of systemd preset file in ignition-apply output
  * Document that user/group fields aren't applied to hard links
  * Clarify spec docs for files/directories/links group fields
- Modified 0002-allow-multiple-mounts-of-same-device.patch to add
  new Ignition spec version
- Add 0001-ignore-missing-qemu-blockdev.patch [bsc#1207679] to
  support booting without configuration device on s390x.
- Move all /usr/libexec contents to %sbindir</changelog>
  <changelog author="iforster@suse.com" date="1678363200">- Add `dasd_mod.dasd=autodetect` to kernel command line parameters
  (for Ignition device support on S/390) [boo#1207903]</changelog>
  <changelog author="iforster@suse.com" date="1702900800">- Update to version 2.17.0:
  * Features
  * providers/hetzner: add support for Hetzner Cloud
  * providers/applehv: Add Apple Hypervisor
  * packit: add initial support
  * Other notable Changes
  * Add vsock modules into ramdisk
  * stages/disks: retry `sgdisk --zap-all` invocation
  * Add optionally-installed grub2 code
  * internal/exec/stages/disks: prevent races with udev
- Updates from version 2.16.x [jsc#SMO-314] [bsc#1217533]:
  * Features
  * Add support for Hyper-V platform
  * Other notable changes
  * dracut: make hv_utils module optional
  * internal/exec: don't relabel a mountpoint that already exists
  * internal/exec/util: check if unit exists before disabling
  * platform: allow provider fetch to save files to write from files stage
  * providers: rename noop to metal
  * platform: drop function pointer indirection for fetch method
  * providers: add Config wrapper structs for cmdline and system providers
- Fix segmentation fault if filesystem section of Ignition JSON
  doesn't contain path entry in
  0002-allow-multiple-mounts-of-same-device.patch
- Add 0003-Move-the-GPT-header-on-resized-disks.patch
- Increased required Go version</changelog>
</package>
<package pkgid="656f9e8e3fb62db95bce85ac313ec54223805183bcf350a6bf2957915c46afe6" name="ignition-dracut-grub2" arch="s390x">
  <version epoch="0" ver="2.17.0" rel="150500.3.3.1"/>
  <changelog author="iforster@suse.com" date="1625659200">- Implement missing ignition-kargs-helper script for kernel
  argument support</changelog>
  <changelog author="iforster@suse.com" date="1625659201">- Update to version 2.11.0:
  * news: add notes for 2.11.0
  * Upgraded docs
  * config/*: return report from previous parser when chaining
  * config/*: re-order testcases by version
  * tree: update for stable v3.3.0 and new v3.4.0-experimental
  * config/v3_4_experimental: adapt for experimental
  * config/v3_4_experimental: copy from config/v3_3
  * config/v3_3: adapt for stabilization
  * config/v3_3_experimental: rename to config/v3_3
  * config/v3_3_exp: pointerify ClevisCustom Config and Pin
  * config/v3_3_exp: pointerify Raid.Level
  * config/v3_3_exp: pointerify LinkEmbedded1.Target
  * stages/disks: simplify a check
  * config/v3_1/translate: don't point to field from input struct
  * config/v3_3_exp: drop devices from schema "required" field
  * config/*: validate that storage.raid.devices is non-empty
  * config/*/types: add RAID validation tests
  * config/shared/errors: fix ErrSparesUnsupportedForLevel message
  * config: fix comment
  * *: formally bump Go to 1.13
  * platform: add powervs platform
  * internal/providers/*stack: drop dead timeout code
  * stages/disks: improve error reporting for LUKS device reuse
  * ignition-setup-user.service: drop Before=multipathd.service
  * Dockerfile: build ignition-validate container using Fedora
  * workflows: test on Go 1.16
  * tests/*: verify deletion of block device w/o creating a FS
  * *: allow erasing block device without creating a filesystem
  * *: rename other projects' master branches to main
  * *: rename master branch to main
  * config/*: add export functions for parsing any config version &lt; N
  * config/*: refactor config.go's Parse() to use GetConfigVersion
  * config/* : minor cleanup
- Refreshed to match new Ignition spec
  * 0002-allow-multiple-mounts-of-same-device.patch</changelog>
  <changelog author="iforster@suse.com" date="1625745600">- If a Combustion device was mounted, then unmount it in
  ignition-kargs-helper - the replacement script will be put on
  the same location</changelog>
  <changelog author="iforster@suse.com" date="1626868800">- Ignore error return code if no virtualization environment
  detected. [bsc#1188479]
  This makes it possible to use Ignition also on bare metal (e.g.
  when dumping images directly to disk) without adding a
  ignition.platform.id parameter.</changelog>
  <changelog author="kukuk@suse.com" date="1627473600">- Include vfat and nls kernel modules into initrd so that we can
  read the ignition configuration from USB drives [bsc#1184202]</changelog>
  <changelog author="iforster@suse.com" date="1628510400">- Update to version 2.12.0:
  * news: add notes for 2.12.0
  * stages/files: add previousReport to result report
  * tests: fix linter warning
  * workflows: limit permissions to reading repo contents
  * workflows: bump linter version
  * go.mod: revendor
  * Drop EOL Go versions
  * internal/distro: drop DiskByIDDir
  * providers/azure: add support for azure gen2 VMs [bsc#1196679]
  * stages/mount: correctly relabel the root of a fresh ext4 filesystem
  * exec: fix permissions for mountpoints in home dirs
  * tests: drop os.ModeDir requirement in mode of output directories
  * examples: reboot with --force
  * exec/util: add blkid API to query block devices based on FSTYPE
  * stages/files: use IntToPtr() in createCrypttabEntries()
  * stages/files: write result report to /var/lib/ignition
  * engine: persist fetched config summaries in State
  * stages/disks: use State to persist keyfiles for files stage
  * *: add general mechanism for persisting state between stages
  * main: drop -clear-cache flag
  * engine: don't hardcode neednet path
  * fetch-offline: return ErrNeedNet if we need net
  * engine: switch Engine.logReport() to pointer receiver
  * engine: fix incorrect error in log message
  * dracut: drop ignition-setup-user.service
  * dracut: drop reference to ignition-setup-base.service
  * providers/gcp: access GCP metadata service by IP address
  * Remove ignition-firstboot-complete.service
  * OWNERS: remove
  * internal/exec/util: drop device argument from cResultToErr()
  * docs/config*: document storage.luks.clevis.threshold default
  * ci: disable spec bump external test workaround
  * docs: Add Ignition release / Spec version table
  * templates: update example releng signing ticket
  * templates: don't update %gotest lines
  * Provide ignition-firstboot-complete.service (removed by upstream
  due to correctly being considered distro spcific), based on the
  old upstream version; removed all non-SUSE specific stuff and
  integrated our own changes
  * Removed change-ignition-firstboot-path.conf (changes are
  integrated into ignition-firstboot-complete.service now).
  * Provide ignition-setup-user.service  (removed by upstream due
  to correctly being considered distro spcific), based on the old
  upstream version.
  * Renamed ignition-setup-user-suse.sh to ignition-setup-user.sh
  * Adapted ignition-generator-suse and module-setup.sh to use the
  custom ignition-setup-user.service (no overriding of parts of the
  service file necessary any more).
  * Synced ignition-kargs-helper script with upstream example
  * Raising minimum Go version to 1.15 as required by upstream</changelog>
  <changelog author="iforster@suse.com" date="1628769600">- is-live-image doesn't exist on *SUSE, and our live images don't
  use Ignition, so just add the Ignition device dependency to the
  service file directly.</changelog>
  <changelog author="iforster@suse.com" date="1629720000">- Make sure to create /boot/writable (may not be present in some
  images)</changelog>
  <changelog author="iforster@suse.com" date="1638360000">- Update to version 2.13.0:
  * news: add notes for 2.13.0
  * config/v3_4_exp: noProxy entries cannot be null
  * config/v3_4_exp: mark ignition.version as required
  * docs/supported-platforms: add some description about Nutanix
  * providers/nutanix: add Nutanix platform
  * tests: use umountPath as a thin wrapper around umountPartition
  * internal/providers: refactor handling of unmounting the mount path
  * tests: address gostatic-check warning
  * tests: Add base64 decoding test
  * Dockerfile.validate: build with Fedora 35
  * go.mod: update dataurl to 1.0.0
  * ci: give blackbox tests two hours to run
  * tests/filesystem: fix umountPartition retry loop
  * templates: skip vendoring the new version in favor of dependabot
  * go.mod: update vcontext
  * providers/virtualbox: read config from /Ignition/Config guest property
  * stages/filesystems: use mkfs.fat instead of mkfs.vfat
  * docs/supported-platforms: switch to Afterburn docs URL
  * docs/supported-platforms: drop reference to platform-specific agents
  * test: ensure all platforms are documented
  * docs/supported-platforms: add missing platforms
  * stages/files: rename `relabelDirsForFile` and add docstring
  * stages/files: make variable name follow Go convention
  * docs/supported-platforms: update platform names and URLs
  * docs/supported-platforms: sort by platform ID
  * docs/supported-platforms: add platform IDs
  * docs: Remove default layout from front matter
  * docs: Do not convert -- &amp; --- to en/em-dash
  * internal/*: change the location of Ignition report
  * internal/exec/util: rename FindFirstMissingDirForFile and tweak docs
  * providers/qemu: start reporting progress reading fw_cfg after 10 s
  * providers/qemu: optimize fw_cfg read size
  * ci: use coreos-ci-lib helper for kola testiso
  * *: gofmt 1.17
  * workflows: bump Go and golangci-lint
  * config: update versions in comments
- Removed obsolete ignition-rpmlintrc</changelog>
  <changelog author="fvogt@suse.com" date="1646395200">- Add support for NetworkManager in dracut:
  * ignition-enable-network.service, ignition-enable-network.sh</changelog>
  <changelog author="fvogt@suse.com" date="1646395201">- Remove /var/lib/YaST2/reconfig_system if a config was provided:
  * ignition-remove-reconfig_system.service</changelog>
  <changelog author="iforster@suse.com" date="1648209600">- Add ignition-touch-selinux-autorelabel.conf:
  Trigger SELinux autorelabel after Ignition runs; Ignition would
  support SELinux itself, however this is a compile time option, so
  it can't be used here.
- Filter commented lines in ignition-mount-initrd-fstab.service</changelog>
  <changelog author="iforster@suse.com" date="1649073600">- Don't include non-MarkDown files in documentation</changelog>
  <changelog author="iforster@suse.com" date="1649160000">- ignition-mount-initrd-fstab.service:
  - Don't ignore errors in loops
  - Unmount mount points recursively - a new submount may have
    appeared
  - Split umount part into own service file:
- ignition-umount-initrd-fstab.service:
  - Unmounts the additional mounts as soon as they are not
    required for Ignition any more; the ExecStop operation is
    running quite late in initrd and may unmount essential mount
    points flagged with "x-initrd.mount" (e.g. when storing /usr on
    a separate mount point). In theory this will also affect
    Ignition itself, but it hasn't been reported as a problem so
    far.</changelog>
  <changelog author="iforster@suse.com" date="1649419200">- Use /bin/sh instead of /usr/bin/sh (for backwards compatibility
  with SLE Micro 5.1) [bsc#1196679]</changelog>
  <changelog author="iforster@suse.com" date="1652875200">- Update to version 2.14.0:
  * NEWS: update v2.14.0
  * docs/operator-notes: add section on provisioning secrets
  * Dockerfile.validate: build with Fedora 36
  * internal/resource: fix gs:// fetches in GCE without a service account
  * docs/operator-notes: document supported S3 URL formats
  * internal/resource: fix S3 access point object ARNs
  * exec/util: fix infinite loop in Depth() if -root is relative
  * Add ignition-delete-config.service and ignition-rmcfg symlink
  * providers/virtualbox: support deleting Ignition configs
  * providers/virtualbox: add comment referencing VirtualBox source
  * providers/virtualbox: add define for GUEST_PROP_FN_GET_PROP
  * providers/virtualbox: add helper to set up hypervisor connection
  * providers/vmware: support deleting Ignition configs
  * main: add ignition-rmcfg multicall binary
  * go.mod: add github.com/beevik/etree
  * providers/vmware: switch to internal copy of OVF parser
  * internal/resource: fix bucket field in error message
  * internal/resource: derive AWS region hint from ARN partition field
  * internal/resource: simplify test
  * internal/resource: fix minor nits
  * provider/azure: try to fetch userdata from IMDS
  * providers/vmware: convert OVF tests to testify
  * providers/vmware: drop vmw-ovflib docs
  * providers/vmware: add verbatim copy of vmw-ovflib
  * providers/vmware: add constants for guestinfo and OVF property names
  * providers/virtualbox: fix reading properties with flags
  * internal/resource: support S3 access point URLs
- Update fixes CVE from [bsc#1199524]; this introduces a new
  service "ignition-delete-config.service"
- Add ignition-rmcfg-suse.conf dropin to adapt to SUSE environment
- Use fixed paths in spec file for hardcoded installation paths</changelog>
  <changelog author="fvogt@suse.com" date="1659441600">- ignition-enable-network.sh: Use /lib/dracut/hooks directly
  instead of the usr-merged location which isn't available everywhere
  (bsc#1201957)</changelog>
  <changelog author="iforster@suse.com" date="1677499200">- Update to version 2.15.0:
  * Features
  * Support offline Tang provisioning via pre-shared advertisement (3.4.0)
  * Allow enabling discard passthrough on LUKS devices (3.4.0)
  * Allow specifying arbitrary LUKS open options (3.4.0)
  * Ship aarch64 macOS ignition-validate binary in GitHub release artifacts
  * Changes
  * Mark the 3.4.0 config spec as stable
  * No longer accept configs with version 3.4.0-experimental
  * Create new 3.5.0-experimental config spec from 3.4.0
  * Fail if files/links/dirs conflict with systemd units or dropins
  * Warn if template for enabled systemd instance unit has no Install section
  * Warn if filesystem overwrites partitioned disk
  * Warn if wipeTable overwrites a filesystem that would otherwise be reused
  * Warn if user/group specified for hard link
  * Install ignition-apply in /usr/libexec
  * Allow distros to add Ignition command-line arguments from a unit drop-in
  * Convert NEWS to Markdown and move to docs site
  * Require Go 1.18+
  * Bug fixes
  * Don't overwrite LUKS1 volume when storage.luks.wipeVolume is false
  * Request network when custom Clevis config has needsNetwork set
  * Fix creating LUKS volume with custom Clevis config that uses TPM2
  * Avoid logging spurious error when a LUKS volume wasn't previously formatted
  * Fix version string in ignition-validate release container
  * Fix reproducibility of systemd preset file in ignition-apply output
  * Document that user/group fields aren't applied to hard links
  * Clarify spec docs for files/directories/links group fields
- Modified 0002-allow-multiple-mounts-of-same-device.patch to add
  new Ignition spec version
- Add 0001-ignore-missing-qemu-blockdev.patch [bsc#1207679] to
  support booting without configuration device on s390x.
- Move all /usr/libexec contents to %sbindir</changelog>
  <changelog author="iforster@suse.com" date="1678363200">- Add `dasd_mod.dasd=autodetect` to kernel command line parameters
  (for Ignition device support on S/390) [boo#1207903]</changelog>
  <changelog author="iforster@suse.com" date="1702900800">- Update to version 2.17.0:
  * Features
  * providers/hetzner: add support for Hetzner Cloud
  * providers/applehv: Add Apple Hypervisor
  * packit: add initial support
  * Other notable Changes
  * Add vsock modules into ramdisk
  * stages/disks: retry `sgdisk --zap-all` invocation
  * Add optionally-installed grub2 code
  * internal/exec/stages/disks: prevent races with udev
- Updates from version 2.16.x [jsc#SMO-314] [bsc#1217533]:
  * Features
  * Add support for Hyper-V platform
  * Other notable changes
  * dracut: make hv_utils module optional
  * internal/exec: don't relabel a mountpoint that already exists
  * internal/exec/util: check if unit exists before disabling
  * platform: allow provider fetch to save files to write from files stage
  * providers: rename noop to metal
  * platform: drop function pointer indirection for fetch method
  * providers: add Config wrapper structs for cmdline and system providers
- Fix segmentation fault if filesystem section of Ignition JSON
  doesn't contain path entry in
  0002-allow-multiple-mounts-of-same-device.patch
- Add 0003-Move-the-GPT-header-on-resized-disks.patch
- Increased required Go version</changelog>
</package>
<package pkgid="4023deaa80aa8ae9a1e902d7d66b4444f11099ba1d59c39397a74609442a62f3" name="ignition-dracut-grub2" arch="x86_64">
  <version epoch="0" ver="2.17.0" rel="150500.3.3.1"/>
  <changelog author="iforster@suse.com" date="1625659200">- Implement missing ignition-kargs-helper script for kernel
  argument support</changelog>
  <changelog author="iforster@suse.com" date="1625659201">- Update to version 2.11.0:
  * news: add notes for 2.11.0
  * Upgraded docs
  * config/*: return report from previous parser when chaining
  * config/*: re-order testcases by version
  * tree: update for stable v3.3.0 and new v3.4.0-experimental
  * config/v3_4_experimental: adapt for experimental
  * config/v3_4_experimental: copy from config/v3_3
  * config/v3_3: adapt for stabilization
  * config/v3_3_experimental: rename to config/v3_3
  * config/v3_3_exp: pointerify ClevisCustom Config and Pin
  * config/v3_3_exp: pointerify Raid.Level
  * config/v3_3_exp: pointerify LinkEmbedded1.Target
  * stages/disks: simplify a check
  * config/v3_1/translate: don't point to field from input struct
  * config/v3_3_exp: drop devices from schema "required" field
  * config/*: validate that storage.raid.devices is non-empty
  * config/*/types: add RAID validation tests
  * config/shared/errors: fix ErrSparesUnsupportedForLevel message
  * config: fix comment
  * *: formally bump Go to 1.13
  * platform: add powervs platform
  * internal/providers/*stack: drop dead timeout code
  * stages/disks: improve error reporting for LUKS device reuse
  * ignition-setup-user.service: drop Before=multipathd.service
  * Dockerfile: build ignition-validate container using Fedora
  * workflows: test on Go 1.16
  * tests/*: verify deletion of block device w/o creating a FS
  * *: allow erasing block device without creating a filesystem
  * *: rename other projects' master branches to main
  * *: rename master branch to main
  * config/*: add export functions for parsing any config version &lt; N
  * config/*: refactor config.go's Parse() to use GetConfigVersion
  * config/* : minor cleanup
- Refreshed to match new Ignition spec
  * 0002-allow-multiple-mounts-of-same-device.patch</changelog>
  <changelog author="iforster@suse.com" date="1625745600">- If a Combustion device was mounted, then unmount it in
  ignition-kargs-helper - the replacement script will be put on
  the same location</changelog>
  <changelog author="iforster@suse.com" date="1626868800">- Ignore error return code if no virtualization environment
  detected. [bsc#1188479]
  This makes it possible to use Ignition also on bare metal (e.g.
  when dumping images directly to disk) without adding a
  ignition.platform.id parameter.</changelog>
  <changelog author="kukuk@suse.com" date="1627473600">- Include vfat and nls kernel modules into initrd so that we can
  read the ignition configuration from USB drives [bsc#1184202]</changelog>
  <changelog author="iforster@suse.com" date="1628510400">- Update to version 2.12.0:
  * news: add notes for 2.12.0
  * stages/files: add previousReport to result report
  * tests: fix linter warning
  * workflows: limit permissions to reading repo contents
  * workflows: bump linter version
  * go.mod: revendor
  * Drop EOL Go versions
  * internal/distro: drop DiskByIDDir
  * providers/azure: add support for azure gen2 VMs [bsc#1196679]
  * stages/mount: correctly relabel the root of a fresh ext4 filesystem
  * exec: fix permissions for mountpoints in home dirs
  * tests: drop os.ModeDir requirement in mode of output directories
  * examples: reboot with --force
  * exec/util: add blkid API to query block devices based on FSTYPE
  * stages/files: use IntToPtr() in createCrypttabEntries()
  * stages/files: write result report to /var/lib/ignition
  * engine: persist fetched config summaries in State
  * stages/disks: use State to persist keyfiles for files stage
  * *: add general mechanism for persisting state between stages
  * main: drop -clear-cache flag
  * engine: don't hardcode neednet path
  * fetch-offline: return ErrNeedNet if we need net
  * engine: switch Engine.logReport() to pointer receiver
  * engine: fix incorrect error in log message
  * dracut: drop ignition-setup-user.service
  * dracut: drop reference to ignition-setup-base.service
  * providers/gcp: access GCP metadata service by IP address
  * Remove ignition-firstboot-complete.service
  * OWNERS: remove
  * internal/exec/util: drop device argument from cResultToErr()
  * docs/config*: document storage.luks.clevis.threshold default
  * ci: disable spec bump external test workaround
  * docs: Add Ignition release / Spec version table
  * templates: update example releng signing ticket
  * templates: don't update %gotest lines
  * Provide ignition-firstboot-complete.service (removed by upstream
  due to correctly being considered distro spcific), based on the
  old upstream version; removed all non-SUSE specific stuff and
  integrated our own changes
  * Removed change-ignition-firstboot-path.conf (changes are
  integrated into ignition-firstboot-complete.service now).
  * Provide ignition-setup-user.service  (removed by upstream due
  to correctly being considered distro spcific), based on the old
  upstream version.
  * Renamed ignition-setup-user-suse.sh to ignition-setup-user.sh
  * Adapted ignition-generator-suse and module-setup.sh to use the
  custom ignition-setup-user.service (no overriding of parts of the
  service file necessary any more).
  * Synced ignition-kargs-helper script with upstream example
  * Raising minimum Go version to 1.15 as required by upstream</changelog>
  <changelog author="iforster@suse.com" date="1628769600">- is-live-image doesn't exist on *SUSE, and our live images don't
  use Ignition, so just add the Ignition device dependency to the
  service file directly.</changelog>
  <changelog author="iforster@suse.com" date="1629720000">- Make sure to create /boot/writable (may not be present in some
  images)</changelog>
  <changelog author="iforster@suse.com" date="1638360000">- Update to version 2.13.0:
  * news: add notes for 2.13.0
  * config/v3_4_exp: noProxy entries cannot be null
  * config/v3_4_exp: mark ignition.version as required
  * docs/supported-platforms: add some description about Nutanix
  * providers/nutanix: add Nutanix platform
  * tests: use umountPath as a thin wrapper around umountPartition
  * internal/providers: refactor handling of unmounting the mount path
  * tests: address gostatic-check warning
  * tests: Add base64 decoding test
  * Dockerfile.validate: build with Fedora 35
  * go.mod: update dataurl to 1.0.0
  * ci: give blackbox tests two hours to run
  * tests/filesystem: fix umountPartition retry loop
  * templates: skip vendoring the new version in favor of dependabot
  * go.mod: update vcontext
  * providers/virtualbox: read config from /Ignition/Config guest property
  * stages/filesystems: use mkfs.fat instead of mkfs.vfat
  * docs/supported-platforms: switch to Afterburn docs URL
  * docs/supported-platforms: drop reference to platform-specific agents
  * test: ensure all platforms are documented
  * docs/supported-platforms: add missing platforms
  * stages/files: rename `relabelDirsForFile` and add docstring
  * stages/files: make variable name follow Go convention
  * docs/supported-platforms: update platform names and URLs
  * docs/supported-platforms: sort by platform ID
  * docs/supported-platforms: add platform IDs
  * docs: Remove default layout from front matter
  * docs: Do not convert -- &amp; --- to en/em-dash
  * internal/*: change the location of Ignition report
  * internal/exec/util: rename FindFirstMissingDirForFile and tweak docs
  * providers/qemu: start reporting progress reading fw_cfg after 10 s
  * providers/qemu: optimize fw_cfg read size
  * ci: use coreos-ci-lib helper for kola testiso
  * *: gofmt 1.17
  * workflows: bump Go and golangci-lint
  * config: update versions in comments
- Removed obsolete ignition-rpmlintrc</changelog>
  <changelog author="fvogt@suse.com" date="1646395200">- Add support for NetworkManager in dracut:
  * ignition-enable-network.service, ignition-enable-network.sh</changelog>
  <changelog author="fvogt@suse.com" date="1646395201">- Remove /var/lib/YaST2/reconfig_system if a config was provided:
  * ignition-remove-reconfig_system.service</changelog>
  <changelog author="iforster@suse.com" date="1648209600">- Add ignition-touch-selinux-autorelabel.conf:
  Trigger SELinux autorelabel after Ignition runs; Ignition would
  support SELinux itself, however this is a compile time option, so
  it can't be used here.
- Filter commented lines in ignition-mount-initrd-fstab.service</changelog>
  <changelog author="iforster@suse.com" date="1649073600">- Don't include non-MarkDown files in documentation</changelog>
  <changelog author="iforster@suse.com" date="1649160000">- ignition-mount-initrd-fstab.service:
  - Don't ignore errors in loops
  - Unmount mount points recursively - a new submount may have
    appeared
  - Split umount part into own service file:
- ignition-umount-initrd-fstab.service:
  - Unmounts the additional mounts as soon as they are not
    required for Ignition any more; the ExecStop operation is
    running quite late in initrd and may unmount essential mount
    points flagged with "x-initrd.mount" (e.g. when storing /usr on
    a separate mount point). In theory this will also affect
    Ignition itself, but it hasn't been reported as a problem so
    far.</changelog>
  <changelog author="iforster@suse.com" date="1649419200">- Use /bin/sh instead of /usr/bin/sh (for backwards compatibility
  with SLE Micro 5.1) [bsc#1196679]</changelog>
  <changelog author="iforster@suse.com" date="1652875200">- Update to version 2.14.0:
  * NEWS: update v2.14.0
  * docs/operator-notes: add section on provisioning secrets
  * Dockerfile.validate: build with Fedora 36
  * internal/resource: fix gs:// fetches in GCE without a service account
  * docs/operator-notes: document supported S3 URL formats
  * internal/resource: fix S3 access point object ARNs
  * exec/util: fix infinite loop in Depth() if -root is relative
  * Add ignition-delete-config.service and ignition-rmcfg symlink
  * providers/virtualbox: support deleting Ignition configs
  * providers/virtualbox: add comment referencing VirtualBox source
  * providers/virtualbox: add define for GUEST_PROP_FN_GET_PROP
  * providers/virtualbox: add helper to set up hypervisor connection
  * providers/vmware: support deleting Ignition configs
  * main: add ignition-rmcfg multicall binary
  * go.mod: add github.com/beevik/etree
  * providers/vmware: switch to internal copy of OVF parser
  * internal/resource: fix bucket field in error message
  * internal/resource: derive AWS region hint from ARN partition field
  * internal/resource: simplify test
  * internal/resource: fix minor nits
  * provider/azure: try to fetch userdata from IMDS
  * providers/vmware: convert OVF tests to testify
  * providers/vmware: drop vmw-ovflib docs
  * providers/vmware: add verbatim copy of vmw-ovflib
  * providers/vmware: add constants for guestinfo and OVF property names
  * providers/virtualbox: fix reading properties with flags
  * internal/resource: support S3 access point URLs
- Update fixes CVE from [bsc#1199524]; this introduces a new
  service "ignition-delete-config.service"
- Add ignition-rmcfg-suse.conf dropin to adapt to SUSE environment
- Use fixed paths in spec file for hardcoded installation paths</changelog>
  <changelog author="fvogt@suse.com" date="1659441600">- ignition-enable-network.sh: Use /lib/dracut/hooks directly
  instead of the usr-merged location which isn't available everywhere
  (bsc#1201957)</changelog>
  <changelog author="iforster@suse.com" date="1677499200">- Update to version 2.15.0:
  * Features
  * Support offline Tang provisioning via pre-shared advertisement (3.4.0)
  * Allow enabling discard passthrough on LUKS devices (3.4.0)
  * Allow specifying arbitrary LUKS open options (3.4.0)
  * Ship aarch64 macOS ignition-validate binary in GitHub release artifacts
  * Changes
  * Mark the 3.4.0 config spec as stable
  * No longer accept configs with version 3.4.0-experimental
  * Create new 3.5.0-experimental config spec from 3.4.0
  * Fail if files/links/dirs conflict with systemd units or dropins
  * Warn if template for enabled systemd instance unit has no Install section
  * Warn if filesystem overwrites partitioned disk
  * Warn if wipeTable overwrites a filesystem that would otherwise be reused
  * Warn if user/group specified for hard link
  * Install ignition-apply in /usr/libexec
  * Allow distros to add Ignition command-line arguments from a unit drop-in
  * Convert NEWS to Markdown and move to docs site
  * Require Go 1.18+
  * Bug fixes
  * Don't overwrite LUKS1 volume when storage.luks.wipeVolume is false
  * Request network when custom Clevis config has needsNetwork set
  * Fix creating LUKS volume with custom Clevis config that uses TPM2
  * Avoid logging spurious error when a LUKS volume wasn't previously formatted
  * Fix version string in ignition-validate release container
  * Fix reproducibility of systemd preset file in ignition-apply output
  * Document that user/group fields aren't applied to hard links
  * Clarify spec docs for files/directories/links group fields
- Modified 0002-allow-multiple-mounts-of-same-device.patch to add
  new Ignition spec version
- Add 0001-ignore-missing-qemu-blockdev.patch [bsc#1207679] to
  support booting without configuration device on s390x.
- Move all /usr/libexec contents to %sbindir</changelog>
  <changelog author="iforster@suse.com" date="1678363200">- Add `dasd_mod.dasd=autodetect` to kernel command line parameters
  (for Ignition device support on S/390) [boo#1207903]</changelog>
  <changelog author="iforster@suse.com" date="1702900800">- Update to version 2.17.0:
  * Features
  * providers/hetzner: add support for Hetzner Cloud
  * providers/applehv: Add Apple Hypervisor
  * packit: add initial support
  * Other notable Changes
  * Add vsock modules into ramdisk
  * stages/disks: retry `sgdisk --zap-all` invocation
  * Add optionally-installed grub2 code
  * internal/exec/stages/disks: prevent races with udev
- Updates from version 2.16.x [jsc#SMO-314] [bsc#1217533]:
  * Features
  * Add support for Hyper-V platform
  * Other notable changes
  * dracut: make hv_utils module optional
  * internal/exec: don't relabel a mountpoint that already exists
  * internal/exec/util: check if unit exists before disabling
  * platform: allow provider fetch to save files to write from files stage
  * providers: rename noop to metal
  * platform: drop function pointer indirection for fetch method
  * providers: add Config wrapper structs for cmdline and system providers
- Fix segmentation fault if filesystem section of Ignition JSON
  doesn't contain path entry in
  0002-allow-multiple-mounts-of-same-device.patch
- Add 0003-Move-the-GPT-header-on-resized-disks.patch
- Increased required Go version</changelog>
</package>
<package pkgid="534c02d5bf040a6cf5bc4071ee9c592c70521ed1b23244d1648f238e6421bb35" name="iscsiuio" arch="aarch64">
  <version epoch="0" ver="0.7.8.8" rel="150500.46.3.1"/>
  <changelog author="lduncan@suse.com" date="1635163200">- Fix the usr-merge changes (bsc#1192013). This includes catching
  all the places that /sbin was still used directly, as well as
  making the SPEC file build using /usr/sbin for openSUSE but
  still use /sbin for SLE, for now.</changelog>
  <changelog author="lduncan@suse.com" date="1636632000">- Merged latest upstream. Mostly cleanup, but includes a fix for
  iscsi-init.service when trying to write to the root volume too
  early (bsc#1192568), as well as an upstream fix for possible
  deadlock when dealing with sysfs.</changelog>
  <changelog author="lduncan@suse.com" date="1644840000">- Updated to latest upstream 2.1.6 as 2.1.6-suse, which contains
  bug fixes and cleanups. See the Changelog for more details.</changelog>
  <changelog author="lduncan@suse.com" date="1646481600">- Update to latest upstream, including test cleanup, minor
  bug fixes (cosmetic), and fixing iscsi-init (bsc#1195656).</changelog>
  <changelog author="lduncan@suse.com" date="1649246400">- Updated to latest upstream, including bug fixes and cleanups.
  Changes included:
  * add handling name/value pairs for firmware login (bsc#1196113),
    including man page update for same
  * Fix bug where some package parts were installed using
    DESTDIR twice
  * general build cleanup (in prep for removing DB files from
    /etc/iscsi some day soon)
  Also, now delivering a "package config" file for libopeniscsiusr.</changelog>
  <changelog author="lduncan@suse.com" date="1651838400">- Updated to latest upstream version, tagged 2.1.7. Changes
  included:
  * updated/fixed test script
  * updated build system
  * several bug fixes, including one for bsc#1199264</changelog>
  <changelog author="lduncan@suse.com" date="1652097600">- Update to latest upstream, including:
  * Added 'distclean' to Makefile targets
  * Ensure Makefile '.PHONY' targets set up correctly
  * fix an iscsid logout bug generating a false error
    and cleanup logout error messages</changelog>
  <changelog author="lduncan@suse.com" date="1652443200">- Set initiatorname in %post (at end of install), for cases
  where root is read-only at startup time (bsc#1198457)</changelog>
  <changelog author="lduncan@suse.com" date="1655467200">- For Tumbleweed, moved logrotate files from user-specific
  directory /etc/logrotate.d to vendor-specific
  /usr/etc/logrotate.d
  (for Stefan Schubert &lt;schubi@suse.com&gt;)</changelog>
  <changelog author="lduncan@suse.com" date="1657108800">- Modify SPEC file so systemd unit files are mode 644 (not 755)
  (bsc#1200570)</changelog>
  <changelog author="lduncan@suse.com" date="1664193600">- Update to upstream version 2.1.8, which includes some bug fixes,
  and adds the ability to build using meson. The SPEC file was
  updated to use meson.
  Also, some files have moved:
  * the "lock" file has moved from /etc/iscsi to /var/lock/iscsi
  * the "database files" have moved from /etc/iscsi to
    /var/lib/iscsi</changelog>
  <changelog author="lduncan@suse.com" date="1668600000">- Updated to latest upstream. Changes:
  * iscsid/iscsiuio: fix OOM adjustment (github issue #377)</changelog>
  <changelog author="lduncan@suse.com" date="1670414400">- Moving DB files from /etc/iscsi/* to /var/lib/iscsi/* for
  SLE-15-SP5 and forward, as is done in Tumbleweed.
- Added /etc/iscsi/README.DB-files-moved, and added SPEC file
  changes to support this, including a post-install script to
  move the DB files, only installed if DB files are moved.
- Renamed shared library from libopeniscsiusr0_2_0 to
  libopeniscsiusr0, to correctly match SONAME in library.</changelog>
  <changelog author="lduncan@suse.com" date="1671451200">- Updated SPEC file dependencies for libopeniscsiusr to avoid
  conflicting package installation.</changelog>
  <changelog author="lduncan@suse.com" date="1671624000">- Update iscsid.service so it starts iscsid.socket, if needed
  (bsc#1206132).</changelog>
  <changelog author="lduncan@suse.com" date="1677326400">- Build system: meson builds were ignoring optflags, and other
  passed in compiler options.</changelog>
  <changelog author="lduncan@suse.com" date="1681732800">- Remove "--strip" in SPEC file for meson build, so that
  debuginfo is generated. (from mwilck) (bsc#1210536)</changelog>
  <changelog author="lduncan@suse.com" date="1686830400">- Upgrade to upstream version 2.1.9 with tag "2.1.9-suse"
  (bsc#1210514), replacing open-iscsi-2.1.8-suse.tar.bz2 with
  open-iscsi-2.1.9-suse.tar.bz2, and resetting
  open-iscsi-SUSE-latest.diff.bz2. A summary from the ChangeLog
  file:
  * Fix discoveryd compiler warning
  * Sync iscsi_if.h with kernel
  * Handle old DB records correctly
  * Make IQN configuration for iscsi-iname
  * remove OFFLOAD_BOOT_SUPPORTED, which is always true
  * Use UUID for IPC, not "root"
  * do not support SHA3 for libressl
  * build meson cleanups, including changing default DB home
  * Updated README about NOPs
  * Remove "BindTo" in systemd service file
  * Some iscsiuio fixes, including licensing and memory leaks
    (bsc#1210514)
  * Small netlink fixes
  * Fix OOM adjustment
  * Some error recovery fixes
  * Some spelling fixes</changelog>
  <changelog author="lduncan@suse.com" date="1687262400">- Fix iscsiuio build version by updating iscsiuio/meson.build
  and RPM SPEC file (bsc#1210514), updating
  open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1698235200">- Updated to latest upstream, which includes (bsc#1210514):
  * several fixes to harden iscsiuio, including:
  - logging now uses syslog
  - shutdown now waits for helper threads to complete
  - netlink socket cleanup
  * some minor bug fixes, some helping builds on musl
  This updates iscsiuio version to 0.7.8.8.
  This updates open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="db202f4cf93fd2f92751be3b1003ff09de998d347780cb6937ae35098f38ec8d" name="iscsiuio" arch="s390x">
  <version epoch="0" ver="0.7.8.8" rel="150500.46.3.1"/>
  <changelog author="lduncan@suse.com" date="1635163200">- Fix the usr-merge changes (bsc#1192013). This includes catching
  all the places that /sbin was still used directly, as well as
  making the SPEC file build using /usr/sbin for openSUSE but
  still use /sbin for SLE, for now.</changelog>
  <changelog author="lduncan@suse.com" date="1636632000">- Merged latest upstream. Mostly cleanup, but includes a fix for
  iscsi-init.service when trying to write to the root volume too
  early (bsc#1192568), as well as an upstream fix for possible
  deadlock when dealing with sysfs.</changelog>
  <changelog author="lduncan@suse.com" date="1644840000">- Updated to latest upstream 2.1.6 as 2.1.6-suse, which contains
  bug fixes and cleanups. See the Changelog for more details.</changelog>
  <changelog author="lduncan@suse.com" date="1646481600">- Update to latest upstream, including test cleanup, minor
  bug fixes (cosmetic), and fixing iscsi-init (bsc#1195656).</changelog>
  <changelog author="lduncan@suse.com" date="1649246400">- Updated to latest upstream, including bug fixes and cleanups.
  Changes included:
  * add handling name/value pairs for firmware login (bsc#1196113),
    including man page update for same
  * Fix bug where some package parts were installed using
    DESTDIR twice
  * general build cleanup (in prep for removing DB files from
    /etc/iscsi some day soon)
  Also, now delivering a "package config" file for libopeniscsiusr.</changelog>
  <changelog author="lduncan@suse.com" date="1651838400">- Updated to latest upstream version, tagged 2.1.7. Changes
  included:
  * updated/fixed test script
  * updated build system
  * several bug fixes, including one for bsc#1199264</changelog>
  <changelog author="lduncan@suse.com" date="1652097600">- Update to latest upstream, including:
  * Added 'distclean' to Makefile targets
  * Ensure Makefile '.PHONY' targets set up correctly
  * fix an iscsid logout bug generating a false error
    and cleanup logout error messages</changelog>
  <changelog author="lduncan@suse.com" date="1652443200">- Set initiatorname in %post (at end of install), for cases
  where root is read-only at startup time (bsc#1198457)</changelog>
  <changelog author="lduncan@suse.com" date="1655467200">- For Tumbleweed, moved logrotate files from user-specific
  directory /etc/logrotate.d to vendor-specific
  /usr/etc/logrotate.d
  (for Stefan Schubert &lt;schubi@suse.com&gt;)</changelog>
  <changelog author="lduncan@suse.com" date="1657108800">- Modify SPEC file so systemd unit files are mode 644 (not 755)
  (bsc#1200570)</changelog>
  <changelog author="lduncan@suse.com" date="1664193600">- Update to upstream version 2.1.8, which includes some bug fixes,
  and adds the ability to build using meson. The SPEC file was
  updated to use meson.
  Also, some files have moved:
  * the "lock" file has moved from /etc/iscsi to /var/lock/iscsi
  * the "database files" have moved from /etc/iscsi to
    /var/lib/iscsi</changelog>
  <changelog author="lduncan@suse.com" date="1668600000">- Updated to latest upstream. Changes:
  * iscsid/iscsiuio: fix OOM adjustment (github issue #377)</changelog>
  <changelog author="lduncan@suse.com" date="1670414400">- Moving DB files from /etc/iscsi/* to /var/lib/iscsi/* for
  SLE-15-SP5 and forward, as is done in Tumbleweed.
- Added /etc/iscsi/README.DB-files-moved, and added SPEC file
  changes to support this, including a post-install script to
  move the DB files, only installed if DB files are moved.
- Renamed shared library from libopeniscsiusr0_2_0 to
  libopeniscsiusr0, to correctly match SONAME in library.</changelog>
  <changelog author="lduncan@suse.com" date="1671451200">- Updated SPEC file dependencies for libopeniscsiusr to avoid
  conflicting package installation.</changelog>
  <changelog author="lduncan@suse.com" date="1671624000">- Update iscsid.service so it starts iscsid.socket, if needed
  (bsc#1206132).</changelog>
  <changelog author="lduncan@suse.com" date="1677326400">- Build system: meson builds were ignoring optflags, and other
  passed in compiler options.</changelog>
  <changelog author="lduncan@suse.com" date="1681732800">- Remove "--strip" in SPEC file for meson build, so that
  debuginfo is generated. (from mwilck) (bsc#1210536)</changelog>
  <changelog author="lduncan@suse.com" date="1686830400">- Upgrade to upstream version 2.1.9 with tag "2.1.9-suse"
  (bsc#1210514), replacing open-iscsi-2.1.8-suse.tar.bz2 with
  open-iscsi-2.1.9-suse.tar.bz2, and resetting
  open-iscsi-SUSE-latest.diff.bz2. A summary from the ChangeLog
  file:
  * Fix discoveryd compiler warning
  * Sync iscsi_if.h with kernel
  * Handle old DB records correctly
  * Make IQN configuration for iscsi-iname
  * remove OFFLOAD_BOOT_SUPPORTED, which is always true
  * Use UUID for IPC, not "root"
  * do not support SHA3 for libressl
  * build meson cleanups, including changing default DB home
  * Updated README about NOPs
  * Remove "BindTo" in systemd service file
  * Some iscsiuio fixes, including licensing and memory leaks
    (bsc#1210514)
  * Small netlink fixes
  * Fix OOM adjustment
  * Some error recovery fixes
  * Some spelling fixes</changelog>
  <changelog author="lduncan@suse.com" date="1687262400">- Fix iscsiuio build version by updating iscsiuio/meson.build
  and RPM SPEC file (bsc#1210514), updating
  open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1698235200">- Updated to latest upstream, which includes (bsc#1210514):
  * several fixes to harden iscsiuio, including:
  - logging now uses syslog
  - shutdown now waits for helper threads to complete
  - netlink socket cleanup
  * some minor bug fixes, some helping builds on musl
  This updates iscsiuio version to 0.7.8.8.
  This updates open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="26a2c889995bac34a4f80c6f4930553073661a9c7502ed9f83832ef721bb720e" name="iscsiuio" arch="x86_64">
  <version epoch="0" ver="0.7.8.8" rel="150500.46.3.1"/>
  <changelog author="lduncan@suse.com" date="1635163200">- Fix the usr-merge changes (bsc#1192013). This includes catching
  all the places that /sbin was still used directly, as well as
  making the SPEC file build using /usr/sbin for openSUSE but
  still use /sbin for SLE, for now.</changelog>
  <changelog author="lduncan@suse.com" date="1636632000">- Merged latest upstream. Mostly cleanup, but includes a fix for
  iscsi-init.service when trying to write to the root volume too
  early (bsc#1192568), as well as an upstream fix for possible
  deadlock when dealing with sysfs.</changelog>
  <changelog author="lduncan@suse.com" date="1644840000">- Updated to latest upstream 2.1.6 as 2.1.6-suse, which contains
  bug fixes and cleanups. See the Changelog for more details.</changelog>
  <changelog author="lduncan@suse.com" date="1646481600">- Update to latest upstream, including test cleanup, minor
  bug fixes (cosmetic), and fixing iscsi-init (bsc#1195656).</changelog>
  <changelog author="lduncan@suse.com" date="1649246400">- Updated to latest upstream, including bug fixes and cleanups.
  Changes included:
  * add handling name/value pairs for firmware login (bsc#1196113),
    including man page update for same
  * Fix bug where some package parts were installed using
    DESTDIR twice
  * general build cleanup (in prep for removing DB files from
    /etc/iscsi some day soon)
  Also, now delivering a "package config" file for libopeniscsiusr.</changelog>
  <changelog author="lduncan@suse.com" date="1651838400">- Updated to latest upstream version, tagged 2.1.7. Changes
  included:
  * updated/fixed test script
  * updated build system
  * several bug fixes, including one for bsc#1199264</changelog>
  <changelog author="lduncan@suse.com" date="1652097600">- Update to latest upstream, including:
  * Added 'distclean' to Makefile targets
  * Ensure Makefile '.PHONY' targets set up correctly
  * fix an iscsid logout bug generating a false error
    and cleanup logout error messages</changelog>
  <changelog author="lduncan@suse.com" date="1652443200">- Set initiatorname in %post (at end of install), for cases
  where root is read-only at startup time (bsc#1198457)</changelog>
  <changelog author="lduncan@suse.com" date="1655467200">- For Tumbleweed, moved logrotate files from user-specific
  directory /etc/logrotate.d to vendor-specific
  /usr/etc/logrotate.d
  (for Stefan Schubert &lt;schubi@suse.com&gt;)</changelog>
  <changelog author="lduncan@suse.com" date="1657108800">- Modify SPEC file so systemd unit files are mode 644 (not 755)
  (bsc#1200570)</changelog>
  <changelog author="lduncan@suse.com" date="1664193600">- Update to upstream version 2.1.8, which includes some bug fixes,
  and adds the ability to build using meson. The SPEC file was
  updated to use meson.
  Also, some files have moved:
  * the "lock" file has moved from /etc/iscsi to /var/lock/iscsi
  * the "database files" have moved from /etc/iscsi to
    /var/lib/iscsi</changelog>
  <changelog author="lduncan@suse.com" date="1668600000">- Updated to latest upstream. Changes:
  * iscsid/iscsiuio: fix OOM adjustment (github issue #377)</changelog>
  <changelog author="lduncan@suse.com" date="1670414400">- Moving DB files from /etc/iscsi/* to /var/lib/iscsi/* for
  SLE-15-SP5 and forward, as is done in Tumbleweed.
- Added /etc/iscsi/README.DB-files-moved, and added SPEC file
  changes to support this, including a post-install script to
  move the DB files, only installed if DB files are moved.
- Renamed shared library from libopeniscsiusr0_2_0 to
  libopeniscsiusr0, to correctly match SONAME in library.</changelog>
  <changelog author="lduncan@suse.com" date="1671451200">- Updated SPEC file dependencies for libopeniscsiusr to avoid
  conflicting package installation.</changelog>
  <changelog author="lduncan@suse.com" date="1671624000">- Update iscsid.service so it starts iscsid.socket, if needed
  (bsc#1206132).</changelog>
  <changelog author="lduncan@suse.com" date="1677326400">- Build system: meson builds were ignoring optflags, and other
  passed in compiler options.</changelog>
  <changelog author="lduncan@suse.com" date="1681732800">- Remove "--strip" in SPEC file for meson build, so that
  debuginfo is generated. (from mwilck) (bsc#1210536)</changelog>
  <changelog author="lduncan@suse.com" date="1686830400">- Upgrade to upstream version 2.1.9 with tag "2.1.9-suse"
  (bsc#1210514), replacing open-iscsi-2.1.8-suse.tar.bz2 with
  open-iscsi-2.1.9-suse.tar.bz2, and resetting
  open-iscsi-SUSE-latest.diff.bz2. A summary from the ChangeLog
  file:
  * Fix discoveryd compiler warning
  * Sync iscsi_if.h with kernel
  * Handle old DB records correctly
  * Make IQN configuration for iscsi-iname
  * remove OFFLOAD_BOOT_SUPPORTED, which is always true
  * Use UUID for IPC, not "root"
  * do not support SHA3 for libressl
  * build meson cleanups, including changing default DB home
  * Updated README about NOPs
  * Remove "BindTo" in systemd service file
  * Some iscsiuio fixes, including licensing and memory leaks
    (bsc#1210514)
  * Small netlink fixes
  * Fix OOM adjustment
  * Some error recovery fixes
  * Some spelling fixes</changelog>
  <changelog author="lduncan@suse.com" date="1687262400">- Fix iscsiuio build version by updating iscsiuio/meson.build
  and RPM SPEC file (bsc#1210514), updating
  open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1698235200">- Updated to latest upstream, which includes (bsc#1210514):
  * several fixes to harden iscsiuio, including:
  - logging now uses syslog
  - shutdown now waits for helper threads to complete
  - netlink socket cleanup
  * some minor bug fixes, some helping builds on musl
  This updates iscsiuio version to 0.7.8.8.
  This updates open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="ce31d1ef00c72ddcca23d56e7f60be9b0c4870fc5e64ab30ac1aac27093d1481" name="jbigkit" arch="src">
  <version epoch="0" ver="2.1" rel="150000.3.5.1"/>
  <changelog author="brian@aljex.com" date="1334059200">- Initial SUSE package.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1339156800">- build -32bit packages to make libtiff5-32bit installable</changelog>
  <changelog author="coolo@suse.com" date="1339588800">- fix baselibs.conf</changelog>
  <changelog author="mmeister@suse.com" date="1364472000">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="schwab@linux-m68k.org" date="1374235200">- Don't strip binaries</changelog>
  <changelog author="brian@aljex.com" date="1397563200">- v2.1
-Fixes bnc#870855
-Fixes CVE-2013-6369</changelog>
  <changelog author="pgajdos@suse.com" date="1702987200">- security update
- added patches
  fix CVE-2022-1210 [bsc#1198146], Malicious file leads to a denial of service in TIFF File Handler
  + jbigkit-CVE-2022-1210.patch</changelog>
</package>
<package pkgid="a6af4f10e4af45fee5b6526b2608437e6261aefdb16708e092ced5f52e6c4fb6" name="kdump" arch="aarch64">
  <version epoch="0" ver="1.0.2+git45.g7e4faf4" rel="150500.3.3.1"/>
  <changelog author="ptesarik@suse.com" date="1622203200">- Fix use of DNS in the panic environment (bsc#1183070):
  * kdump-avoid-endless-loop-on-EAI_AGAIN.patch: Avoid an endless
    loop when resolving a hostname fails with EAI_AGAIN.
  * kdump-install-real-resolv.conf.patch: Install /etc/resolv.conf
    using its resolved path.</changelog>
  <changelog author="ptesarik@suse.com" date="1637841600">- kdump-Store-kdump-initrd-in-kernel-image-path.patch: Fix kdumprd
  location for usrmerge kernels (boo#1190920).</changelog>
  <changelog author="ptesarik@suse.com" date="1638964800">- Update to 0.9.2
  * Isolate fadump initrd within the default one (jsc#SLE-18272)
  * Bug fixes
  * Code cleanups
- Remove patches that have been upstreamed:
  * kdump-mounts.cc-Include-sys-ioctl.h.patch
  * kdump-Add-bootdev-to-dracut-command-line.patch
  * kdump-do-not-iterate-past-end-of-string.patch
  * kdump-fix-incorrect-exit-code-checking.patch
  * kdump-avoid-endless-loop-on-EAI_AGAIN.patch
  * kdump-install-real-resolv.conf.patch
  * kdump-Store-kdump-initrd-in-kernel-image-path.patch
- Remove patches that have been solved differently:
  * kdump-on-error-option-yesno.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1639051200">- Sync with SLE15-SP4 changelog. These patches were never applied
  to Factory:
  * kdump-avoid-endless-loop-EAI_AGAIN.patch
  * kdump-calibrate-Add-LUKS2-Argon2-requirements-to-the-reser.patch
  * kdump-calibrate-Fix-kernel-command-line-parsing.patch
  * kdump-do-not-add-rd.neednet.patch
  * kdump-Do-not-list-all-block-devices-if-no-block-devices-ar.patch
  * kdump-ensure-initrd.target.wants-directory.patch
  * kdump-Enumerate-all-BTRFS-devices-for-btrfs-mount-points.patch
  * kdump-Implement-KString-isHexNumber.patch
  * kdump-install-etc-resolv.conf-using-resolved-path.patch
  * kdump-Mount-and-device-resolution-using-libmount-and-lsblk.patch
  * kdump-remove-console-hvc0-from-commandline.patch
  * kdump-set-serial-console-from-Xen-cmdline.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1641211200">- kdump-0.9.2-mkdumprd-properly-pass-compression-params.patch: Fix
  malformation in passing Dracut compression parameters in mkdumprd
  (bsc#1193765).
- Refresh existing patches.</changelog>
  <changelog author="ptesarik@suse.com" date="1642766400">- Update to 1.0
  * Estimate kdump memory requirements at build time
    (jsc#SLE-18441).
- Remove patches that have been upstreamed:
  * kdump-0.9.2-mkdumprd-properly-pass-compression-params.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1642766401">- kdump-calibrate-Ignore-malformed-VMCOREINFO.patch: calibrate:
  Ignore malformed VMCOREINFO lines (address occasional OBS build
  failures).</changelog>
  <changelog author="ptesarik@suse.com" date="1643716800">- Update to 1.0.2
  * Adjust crash kernel reservation at boot time (jsc#SLE-18441).
- All remaining patches have been upstreamed:
  * kdump-fillupdir-fixes.patch
  * kdump-use-pbl.patch
  * kdump-calibrate-Ignore-malformed-VMCOREINFO.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1643716801">- kdump-calibrate.conf-depends-on-kdumptool.patch: calibrate.conf:
  Add dependency on kdumptool.
- kdump-calibrate-fix-nic-naming.patch: calibrate: Fix network
  interface naming.
- kdump-calibrate-include-af_packet.patch: calibrate: Explicitly
  include af_packet in the test initrd.</changelog>
  <changelog author="ptesarik@suse.com" date="1644321600">- Exclude i586 from SLE builds.</changelog>
  <changelog author="jbohac@suse.com" date="1648728000">- pull sources directly from git using obs_scm
- fix bsc#1190299, bsc#1186272
- remove patches included in upstream git:
  kdump-calibrate-include-af_packet.patch,
  kdump-calibrate-fix-nic-naming.patch,
  kdump-calibrate.conf-depends-on-kdumptool.patch</changelog>
  <changelog author="jbohac@suse.com" date="1651665600">- kdumptool calibrate: add more margin to reservation calculations
  (bsc#1196728)
- remount target filesystem r/w for fadump (bsc1197125)
- stop reloading FADump on CPU hot-add event (jsc#IBM-768)
- mkdumprd: add option to run dracut in debug mode</changelog>
  <changelog author="jbohac@suse.com" date="1663934400">- pull from new upstream SLE-15-SP5 branch
- copy SLE-15-SP4 calibration data for SLE-15-SP5</changelog>
  <changelog author="jbohac@suse.com" date="1666699200">- fix broken URL in manpage (bsc#1187312)
- kdumptool calibrate: modify fadump suggestions (jsc#IBM-1027)</changelog>
  <changelog author="jbohac@suse.com" date="1669118400">- fix renaming of qeth interfaces (bsc#1204743, bsc#1144337)
- ppc64: rebuild initrd image after migration (bsc#1191410)</changelog>
  <changelog author="jbohac@suse.com" date="1669377600">- Make the kdump-save.service reboot after kdump-save is finished
  (bsc#1204000)</changelog>
  <changelog author="jbohac@suse.com" date="1672833600">- maintain the spec file in git
- print the qemu messages and trackrss log during calibrate
- fix deleting of a temporary file in dracut/module-setup.sh
- look for nsswitch.conf in /etc and /usr/etc
- never run a debugging shell when KDUMP_CONTINUE_ON_ERROR is set
- calibrate: properly kill the tail process</changelog>
  <changelog author="jbohac@suse.com" date="1673352000">- improve the generation of calibrate.conf
  * use static IP address for calibration
  * all calibrate.conf variants now stored in a single file
  * added a README and a helper script for updating calibrate.conf
  * prevent dracut from running emergency shell
  * fix s390x build dependencies</changelog>
  <changelog author="jbohac@suse.com" date="1677240000">- revert back to using rd.neednet=1 to enable network (bsc#1206015)
- kdumptool calibrate: add even more margin to reservation
  calculations (bsc#1207061)
- run kdump.service only after kdump-early.service (bsc#1196335)
- don't skip infiniband interfaces (bsc#1186745)
  (not a complete fix, requires a patch in dracut as well)</changelog>
  <changelog author="jbohac@suse.com" date="1706097600">- dracut: always create fstab, even if empty (bsc#1218494)
- fix NOSPLIT option
- Honor the KDUMP_VERBOSE setting in kdump-save</changelog>
</package>
<package pkgid="9ba989e7fbdd2d1b658268d31dfaad48567da4b524e143658ac7e76f7901aca6" name="kdump" arch="s390x">
  <version epoch="0" ver="1.0.2+git45.g7e4faf4" rel="150500.3.3.1"/>
  <changelog author="ptesarik@suse.com" date="1622203200">- Fix use of DNS in the panic environment (bsc#1183070):
  * kdump-avoid-endless-loop-on-EAI_AGAIN.patch: Avoid an endless
    loop when resolving a hostname fails with EAI_AGAIN.
  * kdump-install-real-resolv.conf.patch: Install /etc/resolv.conf
    using its resolved path.</changelog>
  <changelog author="ptesarik@suse.com" date="1637841600">- kdump-Store-kdump-initrd-in-kernel-image-path.patch: Fix kdumprd
  location for usrmerge kernels (boo#1190920).</changelog>
  <changelog author="ptesarik@suse.com" date="1638964800">- Update to 0.9.2
  * Isolate fadump initrd within the default one (jsc#SLE-18272)
  * Bug fixes
  * Code cleanups
- Remove patches that have been upstreamed:
  * kdump-mounts.cc-Include-sys-ioctl.h.patch
  * kdump-Add-bootdev-to-dracut-command-line.patch
  * kdump-do-not-iterate-past-end-of-string.patch
  * kdump-fix-incorrect-exit-code-checking.patch
  * kdump-avoid-endless-loop-on-EAI_AGAIN.patch
  * kdump-install-real-resolv.conf.patch
  * kdump-Store-kdump-initrd-in-kernel-image-path.patch
- Remove patches that have been solved differently:
  * kdump-on-error-option-yesno.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1639051200">- Sync with SLE15-SP4 changelog. These patches were never applied
  to Factory:
  * kdump-avoid-endless-loop-EAI_AGAIN.patch
  * kdump-calibrate-Add-LUKS2-Argon2-requirements-to-the-reser.patch
  * kdump-calibrate-Fix-kernel-command-line-parsing.patch
  * kdump-do-not-add-rd.neednet.patch
  * kdump-Do-not-list-all-block-devices-if-no-block-devices-ar.patch
  * kdump-ensure-initrd.target.wants-directory.patch
  * kdump-Enumerate-all-BTRFS-devices-for-btrfs-mount-points.patch
  * kdump-Implement-KString-isHexNumber.patch
  * kdump-install-etc-resolv.conf-using-resolved-path.patch
  * kdump-Mount-and-device-resolution-using-libmount-and-lsblk.patch
  * kdump-remove-console-hvc0-from-commandline.patch
  * kdump-set-serial-console-from-Xen-cmdline.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1641211200">- kdump-0.9.2-mkdumprd-properly-pass-compression-params.patch: Fix
  malformation in passing Dracut compression parameters in mkdumprd
  (bsc#1193765).
- Refresh existing patches.</changelog>
  <changelog author="ptesarik@suse.com" date="1642766400">- Update to 1.0
  * Estimate kdump memory requirements at build time
    (jsc#SLE-18441).
- Remove patches that have been upstreamed:
  * kdump-0.9.2-mkdumprd-properly-pass-compression-params.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1642766401">- kdump-calibrate-Ignore-malformed-VMCOREINFO.patch: calibrate:
  Ignore malformed VMCOREINFO lines (address occasional OBS build
  failures).</changelog>
  <changelog author="ptesarik@suse.com" date="1643716800">- Update to 1.0.2
  * Adjust crash kernel reservation at boot time (jsc#SLE-18441).
- All remaining patches have been upstreamed:
  * kdump-fillupdir-fixes.patch
  * kdump-use-pbl.patch
  * kdump-calibrate-Ignore-malformed-VMCOREINFO.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1643716801">- kdump-calibrate.conf-depends-on-kdumptool.patch: calibrate.conf:
  Add dependency on kdumptool.
- kdump-calibrate-fix-nic-naming.patch: calibrate: Fix network
  interface naming.
- kdump-calibrate-include-af_packet.patch: calibrate: Explicitly
  include af_packet in the test initrd.</changelog>
  <changelog author="ptesarik@suse.com" date="1644321600">- Exclude i586 from SLE builds.</changelog>
  <changelog author="jbohac@suse.com" date="1648728000">- pull sources directly from git using obs_scm
- fix bsc#1190299, bsc#1186272
- remove patches included in upstream git:
  kdump-calibrate-include-af_packet.patch,
  kdump-calibrate-fix-nic-naming.patch,
  kdump-calibrate.conf-depends-on-kdumptool.patch</changelog>
  <changelog author="jbohac@suse.com" date="1651665600">- kdumptool calibrate: add more margin to reservation calculations
  (bsc#1196728)
- remount target filesystem r/w for fadump (bsc1197125)
- stop reloading FADump on CPU hot-add event (jsc#IBM-768)
- mkdumprd: add option to run dracut in debug mode</changelog>
  <changelog author="jbohac@suse.com" date="1663934400">- pull from new upstream SLE-15-SP5 branch
- copy SLE-15-SP4 calibration data for SLE-15-SP5</changelog>
  <changelog author="jbohac@suse.com" date="1666699200">- fix broken URL in manpage (bsc#1187312)
- kdumptool calibrate: modify fadump suggestions (jsc#IBM-1027)</changelog>
  <changelog author="jbohac@suse.com" date="1669118400">- fix renaming of qeth interfaces (bsc#1204743, bsc#1144337)
- ppc64: rebuild initrd image after migration (bsc#1191410)</changelog>
  <changelog author="jbohac@suse.com" date="1669377600">- Make the kdump-save.service reboot after kdump-save is finished
  (bsc#1204000)</changelog>
  <changelog author="jbohac@suse.com" date="1672833600">- maintain the spec file in git
- print the qemu messages and trackrss log during calibrate
- fix deleting of a temporary file in dracut/module-setup.sh
- look for nsswitch.conf in /etc and /usr/etc
- never run a debugging shell when KDUMP_CONTINUE_ON_ERROR is set
- calibrate: properly kill the tail process</changelog>
  <changelog author="jbohac@suse.com" date="1673352000">- improve the generation of calibrate.conf
  * use static IP address for calibration
  * all calibrate.conf variants now stored in a single file
  * added a README and a helper script for updating calibrate.conf
  * prevent dracut from running emergency shell
  * fix s390x build dependencies</changelog>
  <changelog author="jbohac@suse.com" date="1677240000">- revert back to using rd.neednet=1 to enable network (bsc#1206015)
- kdumptool calibrate: add even more margin to reservation
  calculations (bsc#1207061)
- run kdump.service only after kdump-early.service (bsc#1196335)
- don't skip infiniband interfaces (bsc#1186745)
  (not a complete fix, requires a patch in dracut as well)</changelog>
  <changelog author="jbohac@suse.com" date="1706097600">- dracut: always create fstab, even if empty (bsc#1218494)
- fix NOSPLIT option
- Honor the KDUMP_VERBOSE setting in kdump-save</changelog>
</package>
<package pkgid="cdf977ef9422e3dad3ab6dc9a1e810ec5134194916b77a5758650d4e9c21ba3e" name="kdump" arch="src">
  <version epoch="0" ver="1.0.2+git45.g7e4faf4" rel="150500.3.3.1"/>
  <changelog author="ptesarik@suse.com" date="1622203200">- Fix use of DNS in the panic environment (bsc#1183070):
  * kdump-avoid-endless-loop-on-EAI_AGAIN.patch: Avoid an endless
    loop when resolving a hostname fails with EAI_AGAIN.
  * kdump-install-real-resolv.conf.patch: Install /etc/resolv.conf
    using its resolved path.</changelog>
  <changelog author="ptesarik@suse.com" date="1637841600">- kdump-Store-kdump-initrd-in-kernel-image-path.patch: Fix kdumprd
  location for usrmerge kernels (boo#1190920).</changelog>
  <changelog author="ptesarik@suse.com" date="1638964800">- Update to 0.9.2
  * Isolate fadump initrd within the default one (jsc#SLE-18272)
  * Bug fixes
  * Code cleanups
- Remove patches that have been upstreamed:
  * kdump-mounts.cc-Include-sys-ioctl.h.patch
  * kdump-Add-bootdev-to-dracut-command-line.patch
  * kdump-do-not-iterate-past-end-of-string.patch
  * kdump-fix-incorrect-exit-code-checking.patch
  * kdump-avoid-endless-loop-on-EAI_AGAIN.patch
  * kdump-install-real-resolv.conf.patch
  * kdump-Store-kdump-initrd-in-kernel-image-path.patch
- Remove patches that have been solved differently:
  * kdump-on-error-option-yesno.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1639051200">- Sync with SLE15-SP4 changelog. These patches were never applied
  to Factory:
  * kdump-avoid-endless-loop-EAI_AGAIN.patch
  * kdump-calibrate-Add-LUKS2-Argon2-requirements-to-the-reser.patch
  * kdump-calibrate-Fix-kernel-command-line-parsing.patch
  * kdump-do-not-add-rd.neednet.patch
  * kdump-Do-not-list-all-block-devices-if-no-block-devices-ar.patch
  * kdump-ensure-initrd.target.wants-directory.patch
  * kdump-Enumerate-all-BTRFS-devices-for-btrfs-mount-points.patch
  * kdump-Implement-KString-isHexNumber.patch
  * kdump-install-etc-resolv.conf-using-resolved-path.patch
  * kdump-Mount-and-device-resolution-using-libmount-and-lsblk.patch
  * kdump-remove-console-hvc0-from-commandline.patch
  * kdump-set-serial-console-from-Xen-cmdline.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1641211200">- kdump-0.9.2-mkdumprd-properly-pass-compression-params.patch: Fix
  malformation in passing Dracut compression parameters in mkdumprd
  (bsc#1193765).
- Refresh existing patches.</changelog>
  <changelog author="ptesarik@suse.com" date="1642766400">- Update to 1.0
  * Estimate kdump memory requirements at build time
    (jsc#SLE-18441).
- Remove patches that have been upstreamed:
  * kdump-0.9.2-mkdumprd-properly-pass-compression-params.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1642766401">- kdump-calibrate-Ignore-malformed-VMCOREINFO.patch: calibrate:
  Ignore malformed VMCOREINFO lines (address occasional OBS build
  failures).</changelog>
  <changelog author="ptesarik@suse.com" date="1643716800">- Update to 1.0.2
  * Adjust crash kernel reservation at boot time (jsc#SLE-18441).
- All remaining patches have been upstreamed:
  * kdump-fillupdir-fixes.patch
  * kdump-use-pbl.patch
  * kdump-calibrate-Ignore-malformed-VMCOREINFO.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1643716801">- kdump-calibrate.conf-depends-on-kdumptool.patch: calibrate.conf:
  Add dependency on kdumptool.
- kdump-calibrate-fix-nic-naming.patch: calibrate: Fix network
  interface naming.
- kdump-calibrate-include-af_packet.patch: calibrate: Explicitly
  include af_packet in the test initrd.</changelog>
  <changelog author="ptesarik@suse.com" date="1644321600">- Exclude i586 from SLE builds.</changelog>
  <changelog author="jbohac@suse.com" date="1648728000">- pull sources directly from git using obs_scm
- fix bsc#1190299, bsc#1186272
- remove patches included in upstream git:
  kdump-calibrate-include-af_packet.patch,
  kdump-calibrate-fix-nic-naming.patch,
  kdump-calibrate.conf-depends-on-kdumptool.patch</changelog>
  <changelog author="jbohac@suse.com" date="1651665600">- kdumptool calibrate: add more margin to reservation calculations
  (bsc#1196728)
- remount target filesystem r/w for fadump (bsc1197125)
- stop reloading FADump on CPU hot-add event (jsc#IBM-768)
- mkdumprd: add option to run dracut in debug mode</changelog>
  <changelog author="jbohac@suse.com" date="1663934400">- pull from new upstream SLE-15-SP5 branch
- copy SLE-15-SP4 calibration data for SLE-15-SP5</changelog>
  <changelog author="jbohac@suse.com" date="1666699200">- fix broken URL in manpage (bsc#1187312)
- kdumptool calibrate: modify fadump suggestions (jsc#IBM-1027)</changelog>
  <changelog author="jbohac@suse.com" date="1669118400">- fix renaming of qeth interfaces (bsc#1204743, bsc#1144337)
- ppc64: rebuild initrd image after migration (bsc#1191410)</changelog>
  <changelog author="jbohac@suse.com" date="1669377600">- Make the kdump-save.service reboot after kdump-save is finished
  (bsc#1204000)</changelog>
  <changelog author="jbohac@suse.com" date="1672833600">- maintain the spec file in git
- print the qemu messages and trackrss log during calibrate
- fix deleting of a temporary file in dracut/module-setup.sh
- look for nsswitch.conf in /etc and /usr/etc
- never run a debugging shell when KDUMP_CONTINUE_ON_ERROR is set
- calibrate: properly kill the tail process</changelog>
  <changelog author="jbohac@suse.com" date="1673352000">- improve the generation of calibrate.conf
  * use static IP address for calibration
  * all calibrate.conf variants now stored in a single file
  * added a README and a helper script for updating calibrate.conf
  * prevent dracut from running emergency shell
  * fix s390x build dependencies</changelog>
  <changelog author="jbohac@suse.com" date="1677240000">- revert back to using rd.neednet=1 to enable network (bsc#1206015)
- kdumptool calibrate: add even more margin to reservation
  calculations (bsc#1207061)
- run kdump.service only after kdump-early.service (bsc#1196335)
- don't skip infiniband interfaces (bsc#1186745)
  (not a complete fix, requires a patch in dracut as well)</changelog>
  <changelog author="jbohac@suse.com" date="1706097600">- dracut: always create fstab, even if empty (bsc#1218494)
- fix NOSPLIT option
- Honor the KDUMP_VERBOSE setting in kdump-save</changelog>
</package>
<package pkgid="157df236e62cdea6ae3baa317dde7622daad0e734a94626dd30633e8b57127b2" name="kdump" arch="x86_64">
  <version epoch="0" ver="1.0.2+git45.g7e4faf4" rel="150500.3.3.1"/>
  <changelog author="ptesarik@suse.com" date="1622203200">- Fix use of DNS in the panic environment (bsc#1183070):
  * kdump-avoid-endless-loop-on-EAI_AGAIN.patch: Avoid an endless
    loop when resolving a hostname fails with EAI_AGAIN.
  * kdump-install-real-resolv.conf.patch: Install /etc/resolv.conf
    using its resolved path.</changelog>
  <changelog author="ptesarik@suse.com" date="1637841600">- kdump-Store-kdump-initrd-in-kernel-image-path.patch: Fix kdumprd
  location for usrmerge kernels (boo#1190920).</changelog>
  <changelog author="ptesarik@suse.com" date="1638964800">- Update to 0.9.2
  * Isolate fadump initrd within the default one (jsc#SLE-18272)
  * Bug fixes
  * Code cleanups
- Remove patches that have been upstreamed:
  * kdump-mounts.cc-Include-sys-ioctl.h.patch
  * kdump-Add-bootdev-to-dracut-command-line.patch
  * kdump-do-not-iterate-past-end-of-string.patch
  * kdump-fix-incorrect-exit-code-checking.patch
  * kdump-avoid-endless-loop-on-EAI_AGAIN.patch
  * kdump-install-real-resolv.conf.patch
  * kdump-Store-kdump-initrd-in-kernel-image-path.patch
- Remove patches that have been solved differently:
  * kdump-on-error-option-yesno.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1639051200">- Sync with SLE15-SP4 changelog. These patches were never applied
  to Factory:
  * kdump-avoid-endless-loop-EAI_AGAIN.patch
  * kdump-calibrate-Add-LUKS2-Argon2-requirements-to-the-reser.patch
  * kdump-calibrate-Fix-kernel-command-line-parsing.patch
  * kdump-do-not-add-rd.neednet.patch
  * kdump-Do-not-list-all-block-devices-if-no-block-devices-ar.patch
  * kdump-ensure-initrd.target.wants-directory.patch
  * kdump-Enumerate-all-BTRFS-devices-for-btrfs-mount-points.patch
  * kdump-Implement-KString-isHexNumber.patch
  * kdump-install-etc-resolv.conf-using-resolved-path.patch
  * kdump-Mount-and-device-resolution-using-libmount-and-lsblk.patch
  * kdump-remove-console-hvc0-from-commandline.patch
  * kdump-set-serial-console-from-Xen-cmdline.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1641211200">- kdump-0.9.2-mkdumprd-properly-pass-compression-params.patch: Fix
  malformation in passing Dracut compression parameters in mkdumprd
  (bsc#1193765).
- Refresh existing patches.</changelog>
  <changelog author="ptesarik@suse.com" date="1642766400">- Update to 1.0
  * Estimate kdump memory requirements at build time
    (jsc#SLE-18441).
- Remove patches that have been upstreamed:
  * kdump-0.9.2-mkdumprd-properly-pass-compression-params.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1642766401">- kdump-calibrate-Ignore-malformed-VMCOREINFO.patch: calibrate:
  Ignore malformed VMCOREINFO lines (address occasional OBS build
  failures).</changelog>
  <changelog author="ptesarik@suse.com" date="1643716800">- Update to 1.0.2
  * Adjust crash kernel reservation at boot time (jsc#SLE-18441).
- All remaining patches have been upstreamed:
  * kdump-fillupdir-fixes.patch
  * kdump-use-pbl.patch
  * kdump-calibrate-Ignore-malformed-VMCOREINFO.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1643716801">- kdump-calibrate.conf-depends-on-kdumptool.patch: calibrate.conf:
  Add dependency on kdumptool.
- kdump-calibrate-fix-nic-naming.patch: calibrate: Fix network
  interface naming.
- kdump-calibrate-include-af_packet.patch: calibrate: Explicitly
  include af_packet in the test initrd.</changelog>
  <changelog author="ptesarik@suse.com" date="1644321600">- Exclude i586 from SLE builds.</changelog>
  <changelog author="jbohac@suse.com" date="1648728000">- pull sources directly from git using obs_scm
- fix bsc#1190299, bsc#1186272
- remove patches included in upstream git:
  kdump-calibrate-include-af_packet.patch,
  kdump-calibrate-fix-nic-naming.patch,
  kdump-calibrate.conf-depends-on-kdumptool.patch</changelog>
  <changelog author="jbohac@suse.com" date="1651665600">- kdumptool calibrate: add more margin to reservation calculations
  (bsc#1196728)
- remount target filesystem r/w for fadump (bsc1197125)
- stop reloading FADump on CPU hot-add event (jsc#IBM-768)
- mkdumprd: add option to run dracut in debug mode</changelog>
  <changelog author="jbohac@suse.com" date="1663934400">- pull from new upstream SLE-15-SP5 branch
- copy SLE-15-SP4 calibration data for SLE-15-SP5</changelog>
  <changelog author="jbohac@suse.com" date="1666699200">- fix broken URL in manpage (bsc#1187312)
- kdumptool calibrate: modify fadump suggestions (jsc#IBM-1027)</changelog>
  <changelog author="jbohac@suse.com" date="1669118400">- fix renaming of qeth interfaces (bsc#1204743, bsc#1144337)
- ppc64: rebuild initrd image after migration (bsc#1191410)</changelog>
  <changelog author="jbohac@suse.com" date="1669377600">- Make the kdump-save.service reboot after kdump-save is finished
  (bsc#1204000)</changelog>
  <changelog author="jbohac@suse.com" date="1672833600">- maintain the spec file in git
- print the qemu messages and trackrss log during calibrate
- fix deleting of a temporary file in dracut/module-setup.sh
- look for nsswitch.conf in /etc and /usr/etc
- never run a debugging shell when KDUMP_CONTINUE_ON_ERROR is set
- calibrate: properly kill the tail process</changelog>
  <changelog author="jbohac@suse.com" date="1673352000">- improve the generation of calibrate.conf
  * use static IP address for calibration
  * all calibrate.conf variants now stored in a single file
  * added a README and a helper script for updating calibrate.conf
  * prevent dracut from running emergency shell
  * fix s390x build dependencies</changelog>
  <changelog author="jbohac@suse.com" date="1677240000">- revert back to using rd.neednet=1 to enable network (bsc#1206015)
- kdumptool calibrate: add even more margin to reservation
  calculations (bsc#1207061)
- run kdump.service only after kdump-early.service (bsc#1196335)
- don't skip infiniband interfaces (bsc#1186745)
  (not a complete fix, requires a patch in dracut as well)</changelog>
  <changelog author="jbohac@suse.com" date="1706097600">- dracut: always create fstab, even if empty (bsc#1218494)
- fix NOSPLIT option
- Honor the KDUMP_VERBOSE setting in kdump-save</changelog>
</package>
<package pkgid="bab3e7c02fc1a4cab2318484c7845e69cdb21ab1fa3bacadcd0a0bbc3f0a2e2f" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.28.1"/>
  <changelog author="nmorey@suse.com" date="1693828800">- RDMA/siw: Correct wrong debug message (git-fixes)
- commit 3732fc1</changelog>
  <changelog author="nmorey@suse.com" date="1693828801">- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
- commit c7f667b</changelog>
  <changelog author="nmorey@suse.com" date="1693828802">- scsi: RDMA/srp: Fix residual handling (git-fixes)
- commit 429e77b</changelog>
  <changelog author="mfranc@suse.cz" date="1693828803">- Refresh
  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
- Refresh
  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
- commit 452e63f</changelog>
  <changelog author="oneukum@suse.com" date="1693828804">- USB: core: Unite old scheme and new scheme descriptor reads
  (bsc#1213123 CVE-2023-37453).
- commit 9f60ef1</changelog>
  <changelog author="oneukum@suse.com" date="1693828805">- USB: core: Fix race by not overwriting udev-&gt;descriptor in
  hub_port_init() (bsc#1213123 CVE-2023-37453).
- commit a1f446d</changelog>
  <changelog author="mgorman@suse.de" date="1693828806">- blacklist.conf: Not a fix, relatively high risk of performance regression
- commit fd04425</changelog>
  <changelog author="oneukum@suse.com" date="1693828807">- USB: core: Fix oversight in SuperSpeed initialization
  (bsc#1213123 CVE-2023-37453).
- commit 6b6c148</changelog>
  <changelog author="mgorman@suse.de" date="1693828808">- sched/fair: Use recent_used_cpu to test p-&gt;cpus_ptr (git fixes).
- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
  fixes).
- commit 4be7d48</changelog>
  <changelog author="tiwai@suse.de" date="1693915200">- cpufreq: Fix the race condition while updating the
  transition_task of policy (git-fixes).
- rpmsg: glink: Add check for kstrdup (git-fixes).
- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
- leds: trigger: tty: Do not use LED_ON/OFF constants, use
  led_blink_set_oneshot instead (git-fixes).
- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
  false (git-fixes).
- leds: multicolor: Use rounded division when calculating color
  components (git-fixes).
- leds: pwm: Fix error code in led_pwm_create_fwnode()
  (git-fixes).
- docs: printk-formats: Fix hex printing of signed values
  (git-fixes).
- commit 1c98d58</changelog>
  <changelog author="mfranc@suse.cz" date="1693915201">- s390/ipl: add missing secure/has_secure file to ipl type
  'unknown' (bsc#1214976).
- commit 33974e8</changelog>
  <changelog author="tzimmermann@suse.com" date="1693915202">- "drm/vmwgfx: Remove rcu locks from user resources" (bsc#1203329 CVE-2022-40133 bsc#1203330 CVE-2022-38457)
  This patch also fixes two CVEs. Update the References tag accordingly.
- commit 552e790</changelog>
  <changelog author="nik.borisov@suse.com" date="1693915203">- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
- commit 47ff352</changelog>
  <changelog author="mkubecek@suse.cz" date="1693915204">- netfilter: nf_tables: use correct lock to protect gc_list
  (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: GC transaction race with abort path
  (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: GC transaction race with netns dismantle
  (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: fix GC transaction races with netns and
  netlink event exit path (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: fix kdoc warnings after gc rework
  (CVE-2023-4563 bsc#1214727).
- refresh
  - patches.kabi/kabi-hide-changes-in-struct-nft_set.patch
- kabi: hide changes in struct nft_set (CVE-2023-4563
  bsc#1214727).
- netfilter: nf_tables: GC transaction API to avoid race with
  control plane (CVE-2023-4563 bsc#1214727).
- commit cfed41c</changelog>
  <changelog author="msuchanek@suse.de" date="1693915205">- Refresh sorted section
- commit a6fbcee</changelog>
  <changelog author="msuchanek@suse.de" date="1693915206">- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).
- commit ac82be8</changelog>
  <changelog author="jlee@suse.com" date="1694001600">- Update References
  patches.suse/Bluetooth-L2CAP-Fix-use-after-free-in-l2cap_sock_rea.patch
  (git-fixes bsc#1214233 CVE-2023-40283).
- commit 63a801c</changelog>
  <changelog author="jkosina@suse.cz" date="1695297600">- USB: core: Change usb_get_device_descriptor() API (bsc#1213123
  CVE-2023-37453 bsc#1215553 bsc#1215522 bsc#1215552).
  Refresh patches.suse/USB-core-Fix-race-by-not-overwriting-udev-descriptor.patch (add missing hunk)
  Refresh patches.suse/USB-core-Fix-oversight-in-SuperSpeed-initialization.patch (context)
- commit be6100d</changelog>
  <changelog author="osalvador@suse.de" date="1695297601">- Drop amdgpu patch causing spamming (bsc#1215523)
  Deleted:
  patches.suse/drm-amdgpu-install-stub-fence-into-potential-unused-.patch.
- commit 2351f50</changelog>
  <changelog author="osalvador@suse.de" date="1695384000">- x86/sev: Make enc_dec_hypercall() accept a size instead of
  npages (bsc#1214635).
- commit c11336f</changelog>
</package>
<package pkgid="b2339af15aaaaf7c8dab29ca25b7072542bf58ea4e5578f046c0b63c521bdc27" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.28.1"/>
  <changelog author="nmorey@suse.com" date="1693828800">- RDMA/siw: Correct wrong debug message (git-fixes)
- commit 3732fc1</changelog>
  <changelog author="nmorey@suse.com" date="1693828801">- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
- commit c7f667b</changelog>
  <changelog author="nmorey@suse.com" date="1693828802">- scsi: RDMA/srp: Fix residual handling (git-fixes)
- commit 429e77b</changelog>
  <changelog author="mfranc@suse.cz" date="1693828803">- Refresh
  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
- Refresh
  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
- commit 452e63f</changelog>
  <changelog author="oneukum@suse.com" date="1693828804">- USB: core: Unite old scheme and new scheme descriptor reads
  (bsc#1213123 CVE-2023-37453).
- commit 9f60ef1</changelog>
  <changelog author="oneukum@suse.com" date="1693828805">- USB: core: Fix race by not overwriting udev-&gt;descriptor in
  hub_port_init() (bsc#1213123 CVE-2023-37453).
- commit a1f446d</changelog>
  <changelog author="mgorman@suse.de" date="1693828806">- blacklist.conf: Not a fix, relatively high risk of performance regression
- commit fd04425</changelog>
  <changelog author="oneukum@suse.com" date="1693828807">- USB: core: Fix oversight in SuperSpeed initialization
  (bsc#1213123 CVE-2023-37453).
- commit 6b6c148</changelog>
  <changelog author="mgorman@suse.de" date="1693828808">- sched/fair: Use recent_used_cpu to test p-&gt;cpus_ptr (git fixes).
- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
  fixes).
- commit 4be7d48</changelog>
  <changelog author="tiwai@suse.de" date="1693915200">- cpufreq: Fix the race condition while updating the
  transition_task of policy (git-fixes).
- rpmsg: glink: Add check for kstrdup (git-fixes).
- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
- leds: trigger: tty: Do not use LED_ON/OFF constants, use
  led_blink_set_oneshot instead (git-fixes).
- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
  false (git-fixes).
- leds: multicolor: Use rounded division when calculating color
  components (git-fixes).
- leds: pwm: Fix error code in led_pwm_create_fwnode()
  (git-fixes).
- docs: printk-formats: Fix hex printing of signed values
  (git-fixes).
- commit 1c98d58</changelog>
  <changelog author="mfranc@suse.cz" date="1693915201">- s390/ipl: add missing secure/has_secure file to ipl type
  'unknown' (bsc#1214976).
- commit 33974e8</changelog>
  <changelog author="tzimmermann@suse.com" date="1693915202">- "drm/vmwgfx: Remove rcu locks from user resources" (bsc#1203329 CVE-2022-40133 bsc#1203330 CVE-2022-38457)
  This patch also fixes two CVEs. Update the References tag accordingly.
- commit 552e790</changelog>
  <changelog author="nik.borisov@suse.com" date="1693915203">- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
- commit 47ff352</changelog>
  <changelog author="mkubecek@suse.cz" date="1693915204">- netfilter: nf_tables: use correct lock to protect gc_list
  (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: GC transaction race with abort path
  (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: GC transaction race with netns dismantle
  (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: fix GC transaction races with netns and
  netlink event exit path (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: fix kdoc warnings after gc rework
  (CVE-2023-4563 bsc#1214727).
- refresh
  - patches.kabi/kabi-hide-changes-in-struct-nft_set.patch
- kabi: hide changes in struct nft_set (CVE-2023-4563
  bsc#1214727).
- netfilter: nf_tables: GC transaction API to avoid race with
  control plane (CVE-2023-4563 bsc#1214727).
- commit cfed41c</changelog>
  <changelog author="msuchanek@suse.de" date="1693915205">- Refresh sorted section
- commit a6fbcee</changelog>
  <changelog author="msuchanek@suse.de" date="1693915206">- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).
- commit ac82be8</changelog>
  <changelog author="jlee@suse.com" date="1694001600">- Update References
  patches.suse/Bluetooth-L2CAP-Fix-use-after-free-in-l2cap_sock_rea.patch
  (git-fixes bsc#1214233 CVE-2023-40283).
- commit 63a801c</changelog>
  <changelog author="jkosina@suse.cz" date="1695297600">- USB: core: Change usb_get_device_descriptor() API (bsc#1213123
  CVE-2023-37453 bsc#1215553 bsc#1215522 bsc#1215552).
  Refresh patches.suse/USB-core-Fix-race-by-not-overwriting-udev-descriptor.patch (add missing hunk)
  Refresh patches.suse/USB-core-Fix-oversight-in-SuperSpeed-initialization.patch (context)
- commit be6100d</changelog>
  <changelog author="osalvador@suse.de" date="1695297601">- Drop amdgpu patch causing spamming (bsc#1215523)
  Deleted:
  patches.suse/drm-amdgpu-install-stub-fence-into-potential-unused-.patch.
- commit 2351f50</changelog>
  <changelog author="osalvador@suse.de" date="1695384000">- x86/sev: Make enc_dec_hypercall() accept a size instead of
  npages (bsc#1214635).
- commit c11336f</changelog>
</package>
<package pkgid="78ac205ab03cecedfe7e1e3553c801dce1c91037ca403a48f4d7051c56eee00a" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150500.55.28.1"/>
  <changelog author="nmorey@suse.com" date="1693828800">- RDMA/siw: Correct wrong debug message (git-fixes)
- commit 3732fc1</changelog>
  <changelog author="nmorey@suse.com" date="1693828801">- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
- commit c7f667b</changelog>
  <changelog author="nmorey@suse.com" date="1693828802">- scsi: RDMA/srp: Fix residual handling (git-fixes)
- commit 429e77b</changelog>
  <changelog author="mfranc@suse.cz" date="1693828803">- Refresh
  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
- Refresh
  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
- commit 452e63f</changelog>
  <changelog author="oneukum@suse.com" date="1693828804">- USB: core: Unite old scheme and new scheme descriptor reads
  (bsc#1213123 CVE-2023-37453).
- commit 9f60ef1</changelog>
  <changelog author="oneukum@suse.com" date="1693828805">- USB: core: Fix race by not overwriting udev-&gt;descriptor in
  hub_port_init() (bsc#1213123 CVE-2023-37453).
- commit a1f446d</changelog>
  <changelog author="mgorman@suse.de" date="1693828806">- blacklist.conf: Not a fix, relatively high risk of performance regression
- commit fd04425</changelog>
  <changelog author="oneukum@suse.com" date="1693828807">- USB: core: Fix oversight in SuperSpeed initialization
  (bsc#1213123 CVE-2023-37453).
- commit 6b6c148</changelog>
  <changelog author="mgorman@suse.de" date="1693828808">- sched/fair: Use recent_used_cpu to test p-&gt;cpus_ptr (git fixes).
- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
  fixes).
- commit 4be7d48</changelog>
  <changelog author="tiwai@suse.de" date="1693915200">- cpufreq: Fix the race condition while updating the
  transition_task of policy (git-fixes).
- rpmsg: glink: Add check for kstrdup (git-fixes).
- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
- leds: trigger: tty: Do not use LED_ON/OFF constants, use
  led_blink_set_oneshot instead (git-fixes).
- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
  false (git-fixes).
- leds: multicolor: Use rounded division when calculating color
  components (git-fixes).
- leds: pwm: Fix error code in led_pwm_create_fwnode()
  (git-fixes).
- docs: printk-formats: Fix hex printing of signed values
  (git-fixes).
- commit 1c98d58</changelog>
  <changelog author="mfranc@suse.cz" date="1693915201">- s390/ipl: add missing secure/has_secure file to ipl type
  'unknown' (bsc#1214976).
- commit 33974e8</changelog>
  <changelog author="tzimmermann@suse.com" date="1693915202">- "drm/vmwgfx: Remove rcu locks from user resources" (bsc#1203329 CVE-2022-40133 bsc#1203330 CVE-2022-38457)
  This patch also fixes two CVEs. Update the References tag accordingly.
- commit 552e790</changelog>
  <changelog author="nik.borisov@suse.com" date="1693915203">- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
- commit 47ff352</changelog>
  <changelog author="mkubecek@suse.cz" date="1693915204">- netfilter: nf_tables: use correct lock to protect gc_list
  (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: GC transaction race with abort path
  (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: GC transaction race with netns dismantle
  (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: fix GC transaction races with netns and
  netlink event exit path (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: fix kdoc warnings after gc rework
  (CVE-2023-4563 bsc#1214727).
- refresh
  - patches.kabi/kabi-hide-changes-in-struct-nft_set.patch
- kabi: hide changes in struct nft_set (CVE-2023-4563
  bsc#1214727).
- netfilter: nf_tables: GC transaction API to avoid race with
  control plane (CVE-2023-4563 bsc#1214727).
- commit cfed41c</changelog>
  <changelog author="msuchanek@suse.de" date="1693915205">- Refresh sorted section
- commit a6fbcee</changelog>
  <changelog author="msuchanek@suse.de" date="1693915206">- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).
- commit ac82be8</changelog>
  <changelog author="jlee@suse.com" date="1694001600">- Update References
  patches.suse/Bluetooth-L2CAP-Fix-use-after-free-in-l2cap_sock_rea.patch
  (git-fixes bsc#1214233 CVE-2023-40283).
- commit 63a801c</changelog>
  <changelog author="jkosina@suse.cz" date="1695297600">- USB: core: Change usb_get_device_descriptor() API (bsc#1213123
  CVE-2023-37453 bsc#1215553 bsc#1215522 bsc#1215552).
  Refresh patches.suse/USB-core-Fix-race-by-not-overwriting-udev-descriptor.patch (add missing hunk)
  Refresh patches.suse/USB-core-Fix-oversight-in-SuperSpeed-initialization.patch (context)
- commit be6100d</changelog>
  <changelog author="osalvador@suse.de" date="1695297601">- Drop amdgpu patch causing spamming (bsc#1215523)
  Deleted:
  patches.suse/drm-amdgpu-install-stub-fence-into-potential-unused-.patch.
- commit 2351f50</changelog>
  <changelog author="osalvador@suse.de" date="1695384000">- x86/sev: Make enc_dec_hypercall() accept a size instead of
  npages (bsc#1214635).
- commit c11336f</changelog>
</package>
<package pkgid="3f709658cfdb74bc4827353ef975373b7617aed058d0c14f1bc5b8c88994220f" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.28.1"/>
  <changelog author="nmorey@suse.com" date="1693828800">- RDMA/siw: Correct wrong debug message (git-fixes)
- commit 3732fc1</changelog>
  <changelog author="nmorey@suse.com" date="1693828801">- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
- commit c7f667b</changelog>
  <changelog author="nmorey@suse.com" date="1693828802">- scsi: RDMA/srp: Fix residual handling (git-fixes)
- commit 429e77b</changelog>
  <changelog author="mfranc@suse.cz" date="1693828803">- Refresh
  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
- Refresh
  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
- commit 452e63f</changelog>
  <changelog author="oneukum@suse.com" date="1693828804">- USB: core: Unite old scheme and new scheme descriptor reads
  (bsc#1213123 CVE-2023-37453).
- commit 9f60ef1</changelog>
  <changelog author="oneukum@suse.com" date="1693828805">- USB: core: Fix race by not overwriting udev-&gt;descriptor in
  hub_port_init() (bsc#1213123 CVE-2023-37453).
- commit a1f446d</changelog>
  <changelog author="mgorman@suse.de" date="1693828806">- blacklist.conf: Not a fix, relatively high risk of performance regression
- commit fd04425</changelog>
  <changelog author="oneukum@suse.com" date="1693828807">- USB: core: Fix oversight in SuperSpeed initialization
  (bsc#1213123 CVE-2023-37453).
- commit 6b6c148</changelog>
  <changelog author="mgorman@suse.de" date="1693828808">- sched/fair: Use recent_used_cpu to test p-&gt;cpus_ptr (git fixes).
- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
  fixes).
- commit 4be7d48</changelog>
  <changelog author="tiwai@suse.de" date="1693915200">- cpufreq: Fix the race condition while updating the
  transition_task of policy (git-fixes).
- rpmsg: glink: Add check for kstrdup (git-fixes).
- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
- leds: trigger: tty: Do not use LED_ON/OFF constants, use
  led_blink_set_oneshot instead (git-fixes).
- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
  false (git-fixes).
- leds: multicolor: Use rounded division when calculating color
  components (git-fixes).
- leds: pwm: Fix error code in led_pwm_create_fwnode()
  (git-fixes).
- docs: printk-formats: Fix hex printing of signed values
  (git-fixes).
- commit 1c98d58</changelog>
  <changelog author="mfranc@suse.cz" date="1693915201">- s390/ipl: add missing secure/has_secure file to ipl type
  'unknown' (bsc#1214976).
- commit 33974e8</changelog>
  <changelog author="tzimmermann@suse.com" date="1693915202">- "drm/vmwgfx: Remove rcu locks from user resources" (bsc#1203329 CVE-2022-40133 bsc#1203330 CVE-2022-38457)
  This patch also fixes two CVEs. Update the References tag accordingly.
- commit 552e790</changelog>
  <changelog author="nik.borisov@suse.com" date="1693915203">- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
- commit 47ff352</changelog>
  <changelog author="mkubecek@suse.cz" date="1693915204">- netfilter: nf_tables: use correct lock to protect gc_list
  (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: GC transaction race with abort path
  (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: GC transaction race with netns dismantle
  (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: fix GC transaction races with netns and
  netlink event exit path (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: fix kdoc warnings after gc rework
  (CVE-2023-4563 bsc#1214727).
- refresh
  - patches.kabi/kabi-hide-changes-in-struct-nft_set.patch
- kabi: hide changes in struct nft_set (CVE-2023-4563
  bsc#1214727).
- netfilter: nf_tables: GC transaction API to avoid race with
  control plane (CVE-2023-4563 bsc#1214727).
- commit cfed41c</changelog>
  <changelog author="msuchanek@suse.de" date="1693915205">- Refresh sorted section
- commit a6fbcee</changelog>
  <changelog author="msuchanek@suse.de" date="1693915206">- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).
- commit ac82be8</changelog>
  <changelog author="jlee@suse.com" date="1694001600">- Update References
  patches.suse/Bluetooth-L2CAP-Fix-use-after-free-in-l2cap_sock_rea.patch
  (git-fixes bsc#1214233 CVE-2023-40283).
- commit 63a801c</changelog>
  <changelog author="jkosina@suse.cz" date="1695297600">- USB: core: Change usb_get_device_descriptor() API (bsc#1213123
  CVE-2023-37453 bsc#1215553 bsc#1215522 bsc#1215552).
  Refresh patches.suse/USB-core-Fix-race-by-not-overwriting-udev-descriptor.patch (add missing hunk)
  Refresh patches.suse/USB-core-Fix-oversight-in-SuperSpeed-initialization.patch (context)
- commit be6100d</changelog>
  <changelog author="osalvador@suse.de" date="1695297601">- Drop amdgpu patch causing spamming (bsc#1215523)
  Deleted:
  patches.suse/drm-amdgpu-install-stub-fence-into-potential-unused-.patch.
- commit 2351f50</changelog>
  <changelog author="osalvador@suse.de" date="1695384000">- x86/sev: Make enc_dec_hypercall() accept a size instead of
  npages (bsc#1214635).
- commit c11336f</changelog>
</package>
<package pkgid="47ac15b2c93efbf33364034ea112f4244948c36e25bfc38e6945a3901a906d5c" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.31.1"/>
  <changelog author="pmladek@suse.com" date="1696248000">- printk: ringbuffer: Fix truncating buffer size min_t cast
  (bsc#1215875).
- commit e0d3999</changelog>
  <changelog author="pmladek@suse.com" date="1696248001">- blacklist.conf: printk: the changes look good but they do not fix
  any serious problem
- commit c560ceb</changelog>
  <changelog author="pmladek@suse.com" date="1696248002">- blacklist.conf: workqueue: Code refactoring
- commit e204334</changelog>
  <changelog author="pmladek@suse.com" date="1696248003">- blacklist.conf: workqueue: compiler warning on 32-bit systems with
  Clang (bsc#1215877)
- commit b7e65aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1696334400">- tcp: Reduce chance of collisions in inet6_hashfn()
  (CVE-2023-1206 bsc#1212703).
- commit e3ebd17</changelog>
  <changelog author="mkubecek@suse.cz" date="1696334401">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro
  for ip_set_hash_netportnet.c (CVE-2023-42753 bsc#1215150).
- commit 7a6be79</changelog>
  <changelog author="mfranc@suse.cz" date="1696334402">- KVM: s390: vsie: Fix the initialization of the epoch extension
  (epdx) field (git-fixes bsc#1215894).
- commit 9c5bbd7</changelog>
  <changelog author="mfranc@suse.cz" date="1696334403">- KVM: s390: vsie: fix the length of APCB bitmap (git-fixes
  bsc#1215895).
- commit 9ff1a1e</changelog>
  <changelog author="mfranc@suse.cz" date="1696334404">- KVM: s390: interrupt: use READ_ONCE() before cmpxchg()
  (git-fixes bsc#1215896).
- commit 8726736</changelog>
  <changelog author="mfranc@suse.cz" date="1696334405">- blacklist.conf: kABi breakage (vmalloc)
- commit 10bad47</changelog>
  <changelog author="palcantara@suse.de" date="1696334406">- fs/smb/client: Reset password pointer to NULL (bsc#1215899
  CVE-2023-5345).
- commit 679511d</changelog>
  <changelog author="mfranc@suse.cz" date="1696334407">- KVM: s390/diag: fix racy access of physical cpu number in diag
  9c handler (git-fixes bsc#1215911).
- commit 6454286</changelog>
  <changelog author="mfranc@suse.cz" date="1696334408">- KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes
  (git-fixes bsc#1215915).
- commit fe7fbfc</changelog>
  <changelog author="jdelvare@suse.de" date="1696334409">- btrfs: fix root ref counts in error handling in
  btrfs_get_root_ref (bsc#1214351 CVE-2023-4389).
- commit 3731029</changelog>
  <changelog author="mfranc@suse.cz" date="1696334410">- KVM: s390: pv: fix external interruption loop not always
  detected (git-fixes bsc#1215916).
- commit f1893aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420800">- ipv4: fix null-deref in ipv4_link_failure (CVE-2023-42754
  bsc#1215467).
- commit ad87dd3</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420801">- netfilter: xt_u32: validate user space input (CVE-2023-39192
  bsc#1215858).
- commit 292c059</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420802">- netfilter: xt_sctp: validate the flag_info count (CVE-2023-39193
  bsc#1215860).
- commit 5ec24b7</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420803">- net: xfrm: Fix xfrm_address_filter OOB read (CVE-2023-39194
  bsc#1215861).
- commit 55308cb</changelog>
  <changelog author="mfranc@suse.cz" date="1696420804">- scsi: zfcp: Fix a double put in zfcp_port_enqueue() (git-fixes
  bsc#1215941).
- commit a62865f</changelog>
</package>
<package pkgid="ebdc69c212da995a28f9254bb0b60191d7aa475dd80791fbbdecbb46a419e764" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.31.1"/>
  <changelog author="pmladek@suse.com" date="1696248000">- printk: ringbuffer: Fix truncating buffer size min_t cast
  (bsc#1215875).
- commit e0d3999</changelog>
  <changelog author="pmladek@suse.com" date="1696248001">- blacklist.conf: printk: the changes look good but they do not fix
  any serious problem
- commit c560ceb</changelog>
  <changelog author="pmladek@suse.com" date="1696248002">- blacklist.conf: workqueue: Code refactoring
- commit e204334</changelog>
  <changelog author="pmladek@suse.com" date="1696248003">- blacklist.conf: workqueue: compiler warning on 32-bit systems with
  Clang (bsc#1215877)
- commit b7e65aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1696334400">- tcp: Reduce chance of collisions in inet6_hashfn()
  (CVE-2023-1206 bsc#1212703).
- commit e3ebd17</changelog>
  <changelog author="mkubecek@suse.cz" date="1696334401">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro
  for ip_set_hash_netportnet.c (CVE-2023-42753 bsc#1215150).
- commit 7a6be79</changelog>
  <changelog author="mfranc@suse.cz" date="1696334402">- KVM: s390: vsie: Fix the initialization of the epoch extension
  (epdx) field (git-fixes bsc#1215894).
- commit 9c5bbd7</changelog>
  <changelog author="mfranc@suse.cz" date="1696334403">- KVM: s390: vsie: fix the length of APCB bitmap (git-fixes
  bsc#1215895).
- commit 9ff1a1e</changelog>
  <changelog author="mfranc@suse.cz" date="1696334404">- KVM: s390: interrupt: use READ_ONCE() before cmpxchg()
  (git-fixes bsc#1215896).
- commit 8726736</changelog>
  <changelog author="mfranc@suse.cz" date="1696334405">- blacklist.conf: kABi breakage (vmalloc)
- commit 10bad47</changelog>
  <changelog author="palcantara@suse.de" date="1696334406">- fs/smb/client: Reset password pointer to NULL (bsc#1215899
  CVE-2023-5345).
- commit 679511d</changelog>
  <changelog author="mfranc@suse.cz" date="1696334407">- KVM: s390/diag: fix racy access of physical cpu number in diag
  9c handler (git-fixes bsc#1215911).
- commit 6454286</changelog>
  <changelog author="mfranc@suse.cz" date="1696334408">- KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes
  (git-fixes bsc#1215915).
- commit fe7fbfc</changelog>
  <changelog author="jdelvare@suse.de" date="1696334409">- btrfs: fix root ref counts in error handling in
  btrfs_get_root_ref (bsc#1214351 CVE-2023-4389).
- commit 3731029</changelog>
  <changelog author="mfranc@suse.cz" date="1696334410">- KVM: s390: pv: fix external interruption loop not always
  detected (git-fixes bsc#1215916).
- commit f1893aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420800">- ipv4: fix null-deref in ipv4_link_failure (CVE-2023-42754
  bsc#1215467).
- commit ad87dd3</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420801">- netfilter: xt_u32: validate user space input (CVE-2023-39192
  bsc#1215858).
- commit 292c059</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420802">- netfilter: xt_sctp: validate the flag_info count (CVE-2023-39193
  bsc#1215860).
- commit 5ec24b7</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420803">- net: xfrm: Fix xfrm_address_filter OOB read (CVE-2023-39194
  bsc#1215861).
- commit 55308cb</changelog>
  <changelog author="mfranc@suse.cz" date="1696420804">- scsi: zfcp: Fix a double put in zfcp_port_enqueue() (git-fixes
  bsc#1215941).
- commit a62865f</changelog>
</package>
<package pkgid="9d4acec134768b920ea41e5f397e8c235c68d7bb64188463cb040b9f9ff464e7" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150500.55.31.1"/>
  <changelog author="pmladek@suse.com" date="1696248000">- printk: ringbuffer: Fix truncating buffer size min_t cast
  (bsc#1215875).
- commit e0d3999</changelog>
  <changelog author="pmladek@suse.com" date="1696248001">- blacklist.conf: printk: the changes look good but they do not fix
  any serious problem
- commit c560ceb</changelog>
  <changelog author="pmladek@suse.com" date="1696248002">- blacklist.conf: workqueue: Code refactoring
- commit e204334</changelog>
  <changelog author="pmladek@suse.com" date="1696248003">- blacklist.conf: workqueue: compiler warning on 32-bit systems with
  Clang (bsc#1215877)
- commit b7e65aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1696334400">- tcp: Reduce chance of collisions in inet6_hashfn()
  (CVE-2023-1206 bsc#1212703).
- commit e3ebd17</changelog>
  <changelog author="mkubecek@suse.cz" date="1696334401">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro
  for ip_set_hash_netportnet.c (CVE-2023-42753 bsc#1215150).
- commit 7a6be79</changelog>
  <changelog author="mfranc@suse.cz" date="1696334402">- KVM: s390: vsie: Fix the initialization of the epoch extension
  (epdx) field (git-fixes bsc#1215894).
- commit 9c5bbd7</changelog>
  <changelog author="mfranc@suse.cz" date="1696334403">- KVM: s390: vsie: fix the length of APCB bitmap (git-fixes
  bsc#1215895).
- commit 9ff1a1e</changelog>
  <changelog author="mfranc@suse.cz" date="1696334404">- KVM: s390: interrupt: use READ_ONCE() before cmpxchg()
  (git-fixes bsc#1215896).
- commit 8726736</changelog>
  <changelog author="mfranc@suse.cz" date="1696334405">- blacklist.conf: kABi breakage (vmalloc)
- commit 10bad47</changelog>
  <changelog author="palcantara@suse.de" date="1696334406">- fs/smb/client: Reset password pointer to NULL (bsc#1215899
  CVE-2023-5345).
- commit 679511d</changelog>
  <changelog author="mfranc@suse.cz" date="1696334407">- KVM: s390/diag: fix racy access of physical cpu number in diag
  9c handler (git-fixes bsc#1215911).
- commit 6454286</changelog>
  <changelog author="mfranc@suse.cz" date="1696334408">- KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes
  (git-fixes bsc#1215915).
- commit fe7fbfc</changelog>
  <changelog author="jdelvare@suse.de" date="1696334409">- btrfs: fix root ref counts in error handling in
  btrfs_get_root_ref (bsc#1214351 CVE-2023-4389).
- commit 3731029</changelog>
  <changelog author="mfranc@suse.cz" date="1696334410">- KVM: s390: pv: fix external interruption loop not always
  detected (git-fixes bsc#1215916).
- commit f1893aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420800">- ipv4: fix null-deref in ipv4_link_failure (CVE-2023-42754
  bsc#1215467).
- commit ad87dd3</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420801">- netfilter: xt_u32: validate user space input (CVE-2023-39192
  bsc#1215858).
- commit 292c059</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420802">- netfilter: xt_sctp: validate the flag_info count (CVE-2023-39193
  bsc#1215860).
- commit 5ec24b7</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420803">- net: xfrm: Fix xfrm_address_filter OOB read (CVE-2023-39194
  bsc#1215861).
- commit 55308cb</changelog>
  <changelog author="mfranc@suse.cz" date="1696420804">- scsi: zfcp: Fix a double put in zfcp_port_enqueue() (git-fixes
  bsc#1215941).
- commit a62865f</changelog>
</package>
<package pkgid="ba5dd593e52ae94846d9ee8aa9051f1f69a42c7a653df83226969e01c5c8ba60" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.31.1"/>
  <changelog author="pmladek@suse.com" date="1696248000">- printk: ringbuffer: Fix truncating buffer size min_t cast
  (bsc#1215875).
- commit e0d3999</changelog>
  <changelog author="pmladek@suse.com" date="1696248001">- blacklist.conf: printk: the changes look good but they do not fix
  any serious problem
- commit c560ceb</changelog>
  <changelog author="pmladek@suse.com" date="1696248002">- blacklist.conf: workqueue: Code refactoring
- commit e204334</changelog>
  <changelog author="pmladek@suse.com" date="1696248003">- blacklist.conf: workqueue: compiler warning on 32-bit systems with
  Clang (bsc#1215877)
- commit b7e65aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1696334400">- tcp: Reduce chance of collisions in inet6_hashfn()
  (CVE-2023-1206 bsc#1212703).
- commit e3ebd17</changelog>
  <changelog author="mkubecek@suse.cz" date="1696334401">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro
  for ip_set_hash_netportnet.c (CVE-2023-42753 bsc#1215150).
- commit 7a6be79</changelog>
  <changelog author="mfranc@suse.cz" date="1696334402">- KVM: s390: vsie: Fix the initialization of the epoch extension
  (epdx) field (git-fixes bsc#1215894).
- commit 9c5bbd7</changelog>
  <changelog author="mfranc@suse.cz" date="1696334403">- KVM: s390: vsie: fix the length of APCB bitmap (git-fixes
  bsc#1215895).
- commit 9ff1a1e</changelog>
  <changelog author="mfranc@suse.cz" date="1696334404">- KVM: s390: interrupt: use READ_ONCE() before cmpxchg()
  (git-fixes bsc#1215896).
- commit 8726736</changelog>
  <changelog author="mfranc@suse.cz" date="1696334405">- blacklist.conf: kABi breakage (vmalloc)
- commit 10bad47</changelog>
  <changelog author="palcantara@suse.de" date="1696334406">- fs/smb/client: Reset password pointer to NULL (bsc#1215899
  CVE-2023-5345).
- commit 679511d</changelog>
  <changelog author="mfranc@suse.cz" date="1696334407">- KVM: s390/diag: fix racy access of physical cpu number in diag
  9c handler (git-fixes bsc#1215911).
- commit 6454286</changelog>
  <changelog author="mfranc@suse.cz" date="1696334408">- KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes
  (git-fixes bsc#1215915).
- commit fe7fbfc</changelog>
  <changelog author="jdelvare@suse.de" date="1696334409">- btrfs: fix root ref counts in error handling in
  btrfs_get_root_ref (bsc#1214351 CVE-2023-4389).
- commit 3731029</changelog>
  <changelog author="mfranc@suse.cz" date="1696334410">- KVM: s390: pv: fix external interruption loop not always
  detected (git-fixes bsc#1215916).
- commit f1893aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420800">- ipv4: fix null-deref in ipv4_link_failure (CVE-2023-42754
  bsc#1215467).
- commit ad87dd3</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420801">- netfilter: xt_u32: validate user space input (CVE-2023-39192
  bsc#1215858).
- commit 292c059</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420802">- netfilter: xt_sctp: validate the flag_info count (CVE-2023-39193
  bsc#1215860).
- commit 5ec24b7</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420803">- net: xfrm: Fix xfrm_address_filter OOB read (CVE-2023-39194
  bsc#1215861).
- commit 55308cb</changelog>
  <changelog author="mfranc@suse.cz" date="1696420804">- scsi: zfcp: Fix a double put in zfcp_port_enqueue() (git-fixes
  bsc#1215941).
- commit a62865f</changelog>
</package>
<package pkgid="ee15266a69a448e330553a24454e658e8a0f2ecbe6e1e0a6c6a1f4472ef85fca" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.36.1"/>
  <changelog author="mfranc@suse.cz" date="1698062400">- s390/pci: fix iommu bitmap allocation (git-fixes bsc#1216511).
- commit 2bb6835</changelog>
  <changelog author="mfranc@suse.cz" date="1698062401">- KVM: s390: fix gisa destroy operation might lead to cpu stalls
  (git-fixes bsc#1216512).
- commit 3976fa9</changelog>
  <changelog author="oneukum@suse.com" date="1698148800">- Update
  patches.suse/USB-ene_usb6250-Allocate-enough-memory-for-full-obje.patch
  (bsc#1216051 CVE-2023-45862).
  Retroactively recognized as a security issue
- commit 716929e</changelog>
  <changelog author="tiwai@suse.de" date="1698148801">- ubi: Refuse attaching if mtd's erasesize is 0 (CVE-2023-31085
  bsc#1210778).
- commit 86e05f1</changelog>
  <changelog author="mwilck@suse.com" date="1698148802">- nvme-fc: Prevent null pointer dereference in
  nvme_fc_io_getuuid() (bsc#1214842).
- commit 3b513db</changelog>
  <changelog author="lduncan@suse.com" date="1698148803">- blacklist.conf: added two commmits that break kabi
- commit fdf2030</changelog>
  <changelog author="lduncan@suse.com" date="1698148804">- scsi: iscsi_tcp: restrict to TCP sockets (git-fixes).
- scsi: pm8001: Setup IRQs on resume (git-fixes).
- scsi: mpt3sas: Perform additional retries if doorbell read
  returns 0 (git-fixes).
- scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock
  (git-fixes).
- scsi: qedf: Do not touch __user pointer in
  qedf_dbg_fp_int_cmd_read() directly (git-fixes).
- scsi: qedf: Do not touch __user pointer in
  qedf_dbg_debug_cmd_read() directly (git-fixes).
- scsi: qedf: Do not touch __user pointer in
  qedf_dbg_stop_io_on_error_cmd_read() directly (git-fixes).
- scsi: qla4xxx: Add length check when parsing nlattrs
  (git-fixes).
- scsi: be2iscsi: Add length check when parsing nlattrs
  (git-fixes).
- scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param()
  (git-fixes).
- scsi: iscsi: Add length check for nlattr payload (git-fixes).
- scsi: qedi: Fix potential deadlock on &amp;qedi_percpu-&gt;p_work_lock
  (git-fixes).
- scsi: mpi3mr: Propagate sense data for admin queue SCSI I/O
  (git-fixes).
- net: use sk_is_tcp() in more places (git-fixes).
- commit 24cbf21</changelog>
  <changelog author="ohering@suse.de" date="1698321600">- x86/mm: Print the encryption features correctly when a paravisor
  is present (bsc#1206453).
- commit d1a6274</changelog>
  <changelog author="tiwai@suse.de" date="1698321601">- phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins
  (git-fixes).
- phy: mapphone-mdm6600: Fix runtime PM for remove (git-fixes).
- phy: mapphone-mdm6600: Fix runtime disable on probe (git-fixes).
- gpio: vf610: set value before the direction to avoid a glitch
  (git-fixes).
- platform/surface: platform_profile: Propagate error if profile
  registration fails (git-fixes).
- platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c
  events (git-fixes).
- platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from
  0x20 to 0x2e (git-fixes).
- USB: serial: option: add Fibocom to DELL custom modem FM101R-GL
  (git-fixes).
- USB: serial: option: add entry for Sierra EM9191 with new
  firmware (git-fixes).
- USB: serial: option: add Telit LE910C4-WWX 0x1035 composition
  (git-fixes).
- mmc: core: Capture correct oemid-bits for eMMC cards
  (git-fixes).
- Bluetooth: hci_sock: Correctly bounds check and pad
  HCI_MON_NEW_INDEX name (git-fixes).
- Bluetooth: avoid memcmp() out of bounds warning (git-fixes).
- Bluetooth: hci_sock: fix slab oob read in create_monitor_event
  (git-fixes).
- Bluetooth: hci_event: Fix coding style (git-fixes).
- Bluetooth: Reject connection with the device which has same
  BD_ADDR (git-fixes).
- Bluetooth: vhci: Fix race when opening vhci device (git-fixes).
- platform/x86: touchscreen_dmi: Add info for the Positivo C4128B
  (git-fixes).
- drm: panel-orientation-quirks: Add quirk for One Mix 2S
  (git-fixes).
- HID: multitouch: Add required quirk for Synaptics 0xcd7e device
  (git-fixes).
- HID: holtek: fix slab-out-of-bounds Write in
  holtek_kbd_input_event (git-fixes).
- wifi: cfg80211: avoid leaking stack data into trace (git-fixes).
- wifi: mac80211: allow transmitting EAPOL frames with tainted
  key (git-fixes).
- wifi: cfg80211: Fix 6GHz scan configuration (git-fixes).
- wifi: iwlwifi: Ensure ack flag is properly cleared (git-fixes).
- wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len
  (git-fixes).
- Bluetooth: Avoid redundant authentication (git-fixes).
- Bluetooth: btusb: add shutdown function for QCA6174 (git-fixes).
- i2c: mux: Avoid potential false error message in
  i2c_mux_add_adapter (git-fixes).
- gpio: timberdale: Fix potential deadlock on &amp;tgpio-&gt;lock
  (git-fixes).
- commit b480af6</changelog>
  <changelog author="tiwai@suse.de" date="1698321602">- ALSA: hda/realtek - Fixed ASUS platform headset Mic issue
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GU603ZV (git-fixes).
- ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq5xxx
  (git-fixes).
- drm/mediatek: Correctly free sg_table in gem prime vmap
  (git-fixes).
- drm/amd/pm: add unique_id for gc 11.0.3 (git-fixes).
- commit ad38bcf</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321603">- x86/sev: Disable MMIO emulation from user mode (bsc#1212649).
- commit 5dae47e</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321604">- x86/sev: Check IOBM for IOIO exceptions from user-space
  (bsc#1212649).
- commit 2b69036</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321605">- x86/sev: Check for user-space IOIO pointing to kernel space
  (bsc#1212649).
- commit 816f817</changelog>
  <changelog author="jack@suse.cz" date="1698321606">- quota: Fix slow quotaoff (bsc#1216621).
- commit 988e5f4</changelog>
  <changelog author="spradhan@suse.de" date="1698321607">- btrfs: don't start transaction for scrub if the fs is mounted read-only (bsc#1214874).
- commit cc8e6f1</changelog>
  <changelog author="neilb@suse.de" date="1698408000">- remove unnecessary WARN_ON_ONCE() (bsc#1214823).
- NFSD: Never call nfsd_file_gc() in foreground paths
  (bsc#1215545).
- commit d81dfc3</changelog>
  <changelog author="vkarasulli@suse.de" date="1698408001">- Update
  patches.suse/0001-x86-sev-Disable-MMIO-emulation-from-user-mode.patch
  (bsc#1212649 CVE-2023-46813).
- Update
  patches.suse/0002-x86-sev-Check-IOBM-for-IOIO-exceptions-from-user-spa.patch
  (bsc#1212649 CVE-2023-46813).
- Update
  patches.suse/0003-x86-sev-Check-for-user-space-IOIO-pointing-to-kernel.patch
  (bsc#1212649 CVE-2023-46813).
- commit dd6a315</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1698408002">- netfilter: nf_tables: skip bound chain on rule flush
  (bsc#1215095 CVE-2023-3777).
- commit afb7c25</changelog>
  <changelog author="tiwai@suse.de" date="1698580800">- iio: exynos-adc: request second interupt only when touchscreen
  mode is used (git-fixes).
- iio: adc: xilinx-xadc: Correct temperature offset/scale for
  UltraScale (git-fixes).
- iio: adc: xilinx-xadc: Don't clobber preset voltage/temperature
  thresholds (git-fixes).
- misc: fastrpc: Clean buffers on remote invocation failures
  (git-fixes).
- i2c: stm32f7: Fix PEC handling in case of SMBUS transfers
  (git-fixes).
- i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node()
  (git-fixes).
- i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node()
  (git-fixes).
- i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node()
  (git-fixes).
- i2c: aspeed: Fix i2c bus hang in slave read (git-fixes).
- drm/i915/pmu: Check if pmu is closed before stopping event
  (git-fixes).
- firmware/imx-dsp: Fix use_after_free in imx_dsp_setup_channels()
  (git-fixes).
- r8152: Release firmware if we have an error in probe
  (git-fixes).
- r8152: Cancel hw_phy_work if we have an error in probe
  (git-fixes).
- r8152: Run the unload routine if we have errors during probe
  (git-fixes).
- r8152: Increase USB control msg timeout to 5000ms as per spec
  (git-fixes).
- net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg
  (git-fixes).
- net: ieee802154: adf7242: Fix some potential buffer overflow
  in adf7242_stats_show() (git-fixes).
- treewide: Spelling fix in comment (git-fixes).
- commit e69ab42</changelog>
  <changelog author="ohering@suse.de" date="1698667200">- fix x86/mm: print the encryption features in hyperv is disabled
- commit 37d6855</changelog>
</package>
<package pkgid="137fc54d97ad35e1716ff47e215403a0f2eab7130dca362e6e1ea462cf73bf2e" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.36.1"/>
  <changelog author="mfranc@suse.cz" date="1698062400">- s390/pci: fix iommu bitmap allocation (git-fixes bsc#1216511).
- commit 2bb6835</changelog>
  <changelog author="mfranc@suse.cz" date="1698062401">- KVM: s390: fix gisa destroy operation might lead to cpu stalls
  (git-fixes bsc#1216512).
- commit 3976fa9</changelog>
  <changelog author="oneukum@suse.com" date="1698148800">- Update
  patches.suse/USB-ene_usb6250-Allocate-enough-memory-for-full-obje.patch
  (bsc#1216051 CVE-2023-45862).
  Retroactively recognized as a security issue
- commit 716929e</changelog>
  <changelog author="tiwai@suse.de" date="1698148801">- ubi: Refuse attaching if mtd's erasesize is 0 (CVE-2023-31085
  bsc#1210778).
- commit 86e05f1</changelog>
  <changelog author="mwilck@suse.com" date="1698148802">- nvme-fc: Prevent null pointer dereference in
  nvme_fc_io_getuuid() (bsc#1214842).
- commit 3b513db</changelog>
  <changelog author="lduncan@suse.com" date="1698148803">- blacklist.conf: added two commmits that break kabi
- commit fdf2030</changelog>
  <changelog author="lduncan@suse.com" date="1698148804">- scsi: iscsi_tcp: restrict to TCP sockets (git-fixes).
- scsi: pm8001: Setup IRQs on resume (git-fixes).
- scsi: mpt3sas: Perform additional retries if doorbell read
  returns 0 (git-fixes).
- scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock
  (git-fixes).
- scsi: qedf: Do not touch __user pointer in
  qedf_dbg_fp_int_cmd_read() directly (git-fixes).
- scsi: qedf: Do not touch __user pointer in
  qedf_dbg_debug_cmd_read() directly (git-fixes).
- scsi: qedf: Do not touch __user pointer in
  qedf_dbg_stop_io_on_error_cmd_read() directly (git-fixes).
- scsi: qla4xxx: Add length check when parsing nlattrs
  (git-fixes).
- scsi: be2iscsi: Add length check when parsing nlattrs
  (git-fixes).
- scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param()
  (git-fixes).
- scsi: iscsi: Add length check for nlattr payload (git-fixes).
- scsi: qedi: Fix potential deadlock on &amp;qedi_percpu-&gt;p_work_lock
  (git-fixes).
- scsi: mpi3mr: Propagate sense data for admin queue SCSI I/O
  (git-fixes).
- net: use sk_is_tcp() in more places (git-fixes).
- commit 24cbf21</changelog>
  <changelog author="ohering@suse.de" date="1698321600">- x86/mm: Print the encryption features correctly when a paravisor
  is present (bsc#1206453).
- commit d1a6274</changelog>
  <changelog author="tiwai@suse.de" date="1698321601">- phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins
  (git-fixes).
- phy: mapphone-mdm6600: Fix runtime PM for remove (git-fixes).
- phy: mapphone-mdm6600: Fix runtime disable on probe (git-fixes).
- gpio: vf610: set value before the direction to avoid a glitch
  (git-fixes).
- platform/surface: platform_profile: Propagate error if profile
  registration fails (git-fixes).
- platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c
  events (git-fixes).
- platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from
  0x20 to 0x2e (git-fixes).
- USB: serial: option: add Fibocom to DELL custom modem FM101R-GL
  (git-fixes).
- USB: serial: option: add entry for Sierra EM9191 with new
  firmware (git-fixes).
- USB: serial: option: add Telit LE910C4-WWX 0x1035 composition
  (git-fixes).
- mmc: core: Capture correct oemid-bits for eMMC cards
  (git-fixes).
- Bluetooth: hci_sock: Correctly bounds check and pad
  HCI_MON_NEW_INDEX name (git-fixes).
- Bluetooth: avoid memcmp() out of bounds warning (git-fixes).
- Bluetooth: hci_sock: fix slab oob read in create_monitor_event
  (git-fixes).
- Bluetooth: hci_event: Fix coding style (git-fixes).
- Bluetooth: Reject connection with the device which has same
  BD_ADDR (git-fixes).
- Bluetooth: vhci: Fix race when opening vhci device (git-fixes).
- platform/x86: touchscreen_dmi: Add info for the Positivo C4128B
  (git-fixes).
- drm: panel-orientation-quirks: Add quirk for One Mix 2S
  (git-fixes).
- HID: multitouch: Add required quirk for Synaptics 0xcd7e device
  (git-fixes).
- HID: holtek: fix slab-out-of-bounds Write in
  holtek_kbd_input_event (git-fixes).
- wifi: cfg80211: avoid leaking stack data into trace (git-fixes).
- wifi: mac80211: allow transmitting EAPOL frames with tainted
  key (git-fixes).
- wifi: cfg80211: Fix 6GHz scan configuration (git-fixes).
- wifi: iwlwifi: Ensure ack flag is properly cleared (git-fixes).
- wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len
  (git-fixes).
- Bluetooth: Avoid redundant authentication (git-fixes).
- Bluetooth: btusb: add shutdown function for QCA6174 (git-fixes).
- i2c: mux: Avoid potential false error message in
  i2c_mux_add_adapter (git-fixes).
- gpio: timberdale: Fix potential deadlock on &amp;tgpio-&gt;lock
  (git-fixes).
- commit b480af6</changelog>
  <changelog author="tiwai@suse.de" date="1698321602">- ALSA: hda/realtek - Fixed ASUS platform headset Mic issue
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GU603ZV (git-fixes).
- ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq5xxx
  (git-fixes).
- drm/mediatek: Correctly free sg_table in gem prime vmap
  (git-fixes).
- drm/amd/pm: add unique_id for gc 11.0.3 (git-fixes).
- commit ad38bcf</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321603">- x86/sev: Disable MMIO emulation from user mode (bsc#1212649).
- commit 5dae47e</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321604">- x86/sev: Check IOBM for IOIO exceptions from user-space
  (bsc#1212649).
- commit 2b69036</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321605">- x86/sev: Check for user-space IOIO pointing to kernel space
  (bsc#1212649).
- commit 816f817</changelog>
  <changelog author="jack@suse.cz" date="1698321606">- quota: Fix slow quotaoff (bsc#1216621).
- commit 988e5f4</changelog>
  <changelog author="spradhan@suse.de" date="1698321607">- btrfs: don't start transaction for scrub if the fs is mounted read-only (bsc#1214874).
- commit cc8e6f1</changelog>
  <changelog author="neilb@suse.de" date="1698408000">- remove unnecessary WARN_ON_ONCE() (bsc#1214823).
- NFSD: Never call nfsd_file_gc() in foreground paths
  (bsc#1215545).
- commit d81dfc3</changelog>
  <changelog author="vkarasulli@suse.de" date="1698408001">- Update
  patches.suse/0001-x86-sev-Disable-MMIO-emulation-from-user-mode.patch
  (bsc#1212649 CVE-2023-46813).
- Update
  patches.suse/0002-x86-sev-Check-IOBM-for-IOIO-exceptions-from-user-spa.patch
  (bsc#1212649 CVE-2023-46813).
- Update
  patches.suse/0003-x86-sev-Check-for-user-space-IOIO-pointing-to-kernel.patch
  (bsc#1212649 CVE-2023-46813).
- commit dd6a315</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1698408002">- netfilter: nf_tables: skip bound chain on rule flush
  (bsc#1215095 CVE-2023-3777).
- commit afb7c25</changelog>
  <changelog author="tiwai@suse.de" date="1698580800">- iio: exynos-adc: request second interupt only when touchscreen
  mode is used (git-fixes).
- iio: adc: xilinx-xadc: Correct temperature offset/scale for
  UltraScale (git-fixes).
- iio: adc: xilinx-xadc: Don't clobber preset voltage/temperature
  thresholds (git-fixes).
- misc: fastrpc: Clean buffers on remote invocation failures
  (git-fixes).
- i2c: stm32f7: Fix PEC handling in case of SMBUS transfers
  (git-fixes).
- i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node()
  (git-fixes).
- i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node()
  (git-fixes).
- i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node()
  (git-fixes).
- i2c: aspeed: Fix i2c bus hang in slave read (git-fixes).
- drm/i915/pmu: Check if pmu is closed before stopping event
  (git-fixes).
- firmware/imx-dsp: Fix use_after_free in imx_dsp_setup_channels()
  (git-fixes).
- r8152: Release firmware if we have an error in probe
  (git-fixes).
- r8152: Cancel hw_phy_work if we have an error in probe
  (git-fixes).
- r8152: Run the unload routine if we have errors during probe
  (git-fixes).
- r8152: Increase USB control msg timeout to 5000ms as per spec
  (git-fixes).
- net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg
  (git-fixes).
- net: ieee802154: adf7242: Fix some potential buffer overflow
  in adf7242_stats_show() (git-fixes).
- treewide: Spelling fix in comment (git-fixes).
- commit e69ab42</changelog>
  <changelog author="ohering@suse.de" date="1698667200">- fix x86/mm: print the encryption features in hyperv is disabled
- commit 37d6855</changelog>
</package>
<package pkgid="e95c3fa383617a25076bce8aeac6c35bc3394ea3b969ec38b909d76760454889" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150500.55.36.1"/>
  <changelog author="mfranc@suse.cz" date="1698062400">- s390/pci: fix iommu bitmap allocation (git-fixes bsc#1216511).
- commit 2bb6835</changelog>
  <changelog author="mfranc@suse.cz" date="1698062401">- KVM: s390: fix gisa destroy operation might lead to cpu stalls
  (git-fixes bsc#1216512).
- commit 3976fa9</changelog>
  <changelog author="oneukum@suse.com" date="1698148800">- Update
  patches.suse/USB-ene_usb6250-Allocate-enough-memory-for-full-obje.patch
  (bsc#1216051 CVE-2023-45862).
  Retroactively recognized as a security issue
- commit 716929e</changelog>
  <changelog author="tiwai@suse.de" date="1698148801">- ubi: Refuse attaching if mtd's erasesize is 0 (CVE-2023-31085
  bsc#1210778).
- commit 86e05f1</changelog>
  <changelog author="mwilck@suse.com" date="1698148802">- nvme-fc: Prevent null pointer dereference in
  nvme_fc_io_getuuid() (bsc#1214842).
- commit 3b513db</changelog>
  <changelog author="lduncan@suse.com" date="1698148803">- blacklist.conf: added two commmits that break kabi
- commit fdf2030</changelog>
  <changelog author="lduncan@suse.com" date="1698148804">- scsi: iscsi_tcp: restrict to TCP sockets (git-fixes).
- scsi: pm8001: Setup IRQs on resume (git-fixes).
- scsi: mpt3sas: Perform additional retries if doorbell read
  returns 0 (git-fixes).
- scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock
  (git-fixes).
- scsi: qedf: Do not touch __user pointer in
  qedf_dbg_fp_int_cmd_read() directly (git-fixes).
- scsi: qedf: Do not touch __user pointer in
  qedf_dbg_debug_cmd_read() directly (git-fixes).
- scsi: qedf: Do not touch __user pointer in
  qedf_dbg_stop_io_on_error_cmd_read() directly (git-fixes).
- scsi: qla4xxx: Add length check when parsing nlattrs
  (git-fixes).
- scsi: be2iscsi: Add length check when parsing nlattrs
  (git-fixes).
- scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param()
  (git-fixes).
- scsi: iscsi: Add length check for nlattr payload (git-fixes).
- scsi: qedi: Fix potential deadlock on &amp;qedi_percpu-&gt;p_work_lock
  (git-fixes).
- scsi: mpi3mr: Propagate sense data for admin queue SCSI I/O
  (git-fixes).
- net: use sk_is_tcp() in more places (git-fixes).
- commit 24cbf21</changelog>
  <changelog author="ohering@suse.de" date="1698321600">- x86/mm: Print the encryption features correctly when a paravisor
  is present (bsc#1206453).
- commit d1a6274</changelog>
  <changelog author="tiwai@suse.de" date="1698321601">- phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins
  (git-fixes).
- phy: mapphone-mdm6600: Fix runtime PM for remove (git-fixes).
- phy: mapphone-mdm6600: Fix runtime disable on probe (git-fixes).
- gpio: vf610: set value before the direction to avoid a glitch
  (git-fixes).
- platform/surface: platform_profile: Propagate error if profile
  registration fails (git-fixes).
- platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c
  events (git-fixes).
- platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from
  0x20 to 0x2e (git-fixes).
- USB: serial: option: add Fibocom to DELL custom modem FM101R-GL
  (git-fixes).
- USB: serial: option: add entry for Sierra EM9191 with new
  firmware (git-fixes).
- USB: serial: option: add Telit LE910C4-WWX 0x1035 composition
  (git-fixes).
- mmc: core: Capture correct oemid-bits for eMMC cards
  (git-fixes).
- Bluetooth: hci_sock: Correctly bounds check and pad
  HCI_MON_NEW_INDEX name (git-fixes).
- Bluetooth: avoid memcmp() out of bounds warning (git-fixes).
- Bluetooth: hci_sock: fix slab oob read in create_monitor_event
  (git-fixes).
- Bluetooth: hci_event: Fix coding style (git-fixes).
- Bluetooth: Reject connection with the device which has same
  BD_ADDR (git-fixes).
- Bluetooth: vhci: Fix race when opening vhci device (git-fixes).
- platform/x86: touchscreen_dmi: Add info for the Positivo C4128B
  (git-fixes).
- drm: panel-orientation-quirks: Add quirk for One Mix 2S
  (git-fixes).
- HID: multitouch: Add required quirk for Synaptics 0xcd7e device
  (git-fixes).
- HID: holtek: fix slab-out-of-bounds Write in
  holtek_kbd_input_event (git-fixes).
- wifi: cfg80211: avoid leaking stack data into trace (git-fixes).
- wifi: mac80211: allow transmitting EAPOL frames with tainted
  key (git-fixes).
- wifi: cfg80211: Fix 6GHz scan configuration (git-fixes).
- wifi: iwlwifi: Ensure ack flag is properly cleared (git-fixes).
- wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len
  (git-fixes).
- Bluetooth: Avoid redundant authentication (git-fixes).
- Bluetooth: btusb: add shutdown function for QCA6174 (git-fixes).
- i2c: mux: Avoid potential false error message in
  i2c_mux_add_adapter (git-fixes).
- gpio: timberdale: Fix potential deadlock on &amp;tgpio-&gt;lock
  (git-fixes).
- commit b480af6</changelog>
  <changelog author="tiwai@suse.de" date="1698321602">- ALSA: hda/realtek - Fixed ASUS platform headset Mic issue
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GU603ZV (git-fixes).
- ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq5xxx
  (git-fixes).
- drm/mediatek: Correctly free sg_table in gem prime vmap
  (git-fixes).
- drm/amd/pm: add unique_id for gc 11.0.3 (git-fixes).
- commit ad38bcf</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321603">- x86/sev: Disable MMIO emulation from user mode (bsc#1212649).
- commit 5dae47e</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321604">- x86/sev: Check IOBM for IOIO exceptions from user-space
  (bsc#1212649).
- commit 2b69036</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321605">- x86/sev: Check for user-space IOIO pointing to kernel space
  (bsc#1212649).
- commit 816f817</changelog>
  <changelog author="jack@suse.cz" date="1698321606">- quota: Fix slow quotaoff (bsc#1216621).
- commit 988e5f4</changelog>
  <changelog author="spradhan@suse.de" date="1698321607">- btrfs: don't start transaction for scrub if the fs is mounted read-only (bsc#1214874).
- commit cc8e6f1</changelog>
  <changelog author="neilb@suse.de" date="1698408000">- remove unnecessary WARN_ON_ONCE() (bsc#1214823).
- NFSD: Never call nfsd_file_gc() in foreground paths
  (bsc#1215545).
- commit d81dfc3</changelog>
  <changelog author="vkarasulli@suse.de" date="1698408001">- Update
  patches.suse/0001-x86-sev-Disable-MMIO-emulation-from-user-mode.patch
  (bsc#1212649 CVE-2023-46813).
- Update
  patches.suse/0002-x86-sev-Check-IOBM-for-IOIO-exceptions-from-user-spa.patch
  (bsc#1212649 CVE-2023-46813).
- Update
  patches.suse/0003-x86-sev-Check-for-user-space-IOIO-pointing-to-kernel.patch
  (bsc#1212649 CVE-2023-46813).
- commit dd6a315</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1698408002">- netfilter: nf_tables: skip bound chain on rule flush
  (bsc#1215095 CVE-2023-3777).
- commit afb7c25</changelog>
  <changelog author="tiwai@suse.de" date="1698580800">- iio: exynos-adc: request second interupt only when touchscreen
  mode is used (git-fixes).
- iio: adc: xilinx-xadc: Correct temperature offset/scale for
  UltraScale (git-fixes).
- iio: adc: xilinx-xadc: Don't clobber preset voltage/temperature
  thresholds (git-fixes).
- misc: fastrpc: Clean buffers on remote invocation failures
  (git-fixes).
- i2c: stm32f7: Fix PEC handling in case of SMBUS transfers
  (git-fixes).
- i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node()
  (git-fixes).
- i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node()
  (git-fixes).
- i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node()
  (git-fixes).
- i2c: aspeed: Fix i2c bus hang in slave read (git-fixes).
- drm/i915/pmu: Check if pmu is closed before stopping event
  (git-fixes).
- firmware/imx-dsp: Fix use_after_free in imx_dsp_setup_channels()
  (git-fixes).
- r8152: Release firmware if we have an error in probe
  (git-fixes).
- r8152: Cancel hw_phy_work if we have an error in probe
  (git-fixes).
- r8152: Run the unload routine if we have errors during probe
  (git-fixes).
- r8152: Increase USB control msg timeout to 5000ms as per spec
  (git-fixes).
- net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg
  (git-fixes).
- net: ieee802154: adf7242: Fix some potential buffer overflow
  in adf7242_stats_show() (git-fixes).
- treewide: Spelling fix in comment (git-fixes).
- commit e69ab42</changelog>
  <changelog author="ohering@suse.de" date="1698667200">- fix x86/mm: print the encryption features in hyperv is disabled
- commit 37d6855</changelog>
</package>
<package pkgid="261a9a59bba165bb0553e320d32fc2b744a7a8a8ba41f238ef6aaf85f40f1cbd" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.36.1"/>
  <changelog author="mfranc@suse.cz" date="1698062400">- s390/pci: fix iommu bitmap allocation (git-fixes bsc#1216511).
- commit 2bb6835</changelog>
  <changelog author="mfranc@suse.cz" date="1698062401">- KVM: s390: fix gisa destroy operation might lead to cpu stalls
  (git-fixes bsc#1216512).
- commit 3976fa9</changelog>
  <changelog author="oneukum@suse.com" date="1698148800">- Update
  patches.suse/USB-ene_usb6250-Allocate-enough-memory-for-full-obje.patch
  (bsc#1216051 CVE-2023-45862).
  Retroactively recognized as a security issue
- commit 716929e</changelog>
  <changelog author="tiwai@suse.de" date="1698148801">- ubi: Refuse attaching if mtd's erasesize is 0 (CVE-2023-31085
  bsc#1210778).
- commit 86e05f1</changelog>
  <changelog author="mwilck@suse.com" date="1698148802">- nvme-fc: Prevent null pointer dereference in
  nvme_fc_io_getuuid() (bsc#1214842).
- commit 3b513db</changelog>
  <changelog author="lduncan@suse.com" date="1698148803">- blacklist.conf: added two commmits that break kabi
- commit fdf2030</changelog>
  <changelog author="lduncan@suse.com" date="1698148804">- scsi: iscsi_tcp: restrict to TCP sockets (git-fixes).
- scsi: pm8001: Setup IRQs on resume (git-fixes).
- scsi: mpt3sas: Perform additional retries if doorbell read
  returns 0 (git-fixes).
- scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock
  (git-fixes).
- scsi: qedf: Do not touch __user pointer in
  qedf_dbg_fp_int_cmd_read() directly (git-fixes).
- scsi: qedf: Do not touch __user pointer in
  qedf_dbg_debug_cmd_read() directly (git-fixes).
- scsi: qedf: Do not touch __user pointer in
  qedf_dbg_stop_io_on_error_cmd_read() directly (git-fixes).
- scsi: qla4xxx: Add length check when parsing nlattrs
  (git-fixes).
- scsi: be2iscsi: Add length check when parsing nlattrs
  (git-fixes).
- scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param()
  (git-fixes).
- scsi: iscsi: Add length check for nlattr payload (git-fixes).
- scsi: qedi: Fix potential deadlock on &amp;qedi_percpu-&gt;p_work_lock
  (git-fixes).
- scsi: mpi3mr: Propagate sense data for admin queue SCSI I/O
  (git-fixes).
- net: use sk_is_tcp() in more places (git-fixes).
- commit 24cbf21</changelog>
  <changelog author="ohering@suse.de" date="1698321600">- x86/mm: Print the encryption features correctly when a paravisor
  is present (bsc#1206453).
- commit d1a6274</changelog>
  <changelog author="tiwai@suse.de" date="1698321601">- phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins
  (git-fixes).
- phy: mapphone-mdm6600: Fix runtime PM for remove (git-fixes).
- phy: mapphone-mdm6600: Fix runtime disable on probe (git-fixes).
- gpio: vf610: set value before the direction to avoid a glitch
  (git-fixes).
- platform/surface: platform_profile: Propagate error if profile
  registration fails (git-fixes).
- platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c
  events (git-fixes).
- platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from
  0x20 to 0x2e (git-fixes).
- USB: serial: option: add Fibocom to DELL custom modem FM101R-GL
  (git-fixes).
- USB: serial: option: add entry for Sierra EM9191 with new
  firmware (git-fixes).
- USB: serial: option: add Telit LE910C4-WWX 0x1035 composition
  (git-fixes).
- mmc: core: Capture correct oemid-bits for eMMC cards
  (git-fixes).
- Bluetooth: hci_sock: Correctly bounds check and pad
  HCI_MON_NEW_INDEX name (git-fixes).
- Bluetooth: avoid memcmp() out of bounds warning (git-fixes).
- Bluetooth: hci_sock: fix slab oob read in create_monitor_event
  (git-fixes).
- Bluetooth: hci_event: Fix coding style (git-fixes).
- Bluetooth: Reject connection with the device which has same
  BD_ADDR (git-fixes).
- Bluetooth: vhci: Fix race when opening vhci device (git-fixes).
- platform/x86: touchscreen_dmi: Add info for the Positivo C4128B
  (git-fixes).
- drm: panel-orientation-quirks: Add quirk for One Mix 2S
  (git-fixes).
- HID: multitouch: Add required quirk for Synaptics 0xcd7e device
  (git-fixes).
- HID: holtek: fix slab-out-of-bounds Write in
  holtek_kbd_input_event (git-fixes).
- wifi: cfg80211: avoid leaking stack data into trace (git-fixes).
- wifi: mac80211: allow transmitting EAPOL frames with tainted
  key (git-fixes).
- wifi: cfg80211: Fix 6GHz scan configuration (git-fixes).
- wifi: iwlwifi: Ensure ack flag is properly cleared (git-fixes).
- wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len
  (git-fixes).
- Bluetooth: Avoid redundant authentication (git-fixes).
- Bluetooth: btusb: add shutdown function for QCA6174 (git-fixes).
- i2c: mux: Avoid potential false error message in
  i2c_mux_add_adapter (git-fixes).
- gpio: timberdale: Fix potential deadlock on &amp;tgpio-&gt;lock
  (git-fixes).
- commit b480af6</changelog>
  <changelog author="tiwai@suse.de" date="1698321602">- ALSA: hda/realtek - Fixed ASUS platform headset Mic issue
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GU603ZV (git-fixes).
- ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq5xxx
  (git-fixes).
- drm/mediatek: Correctly free sg_table in gem prime vmap
  (git-fixes).
- drm/amd/pm: add unique_id for gc 11.0.3 (git-fixes).
- commit ad38bcf</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321603">- x86/sev: Disable MMIO emulation from user mode (bsc#1212649).
- commit 5dae47e</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321604">- x86/sev: Check IOBM for IOIO exceptions from user-space
  (bsc#1212649).
- commit 2b69036</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321605">- x86/sev: Check for user-space IOIO pointing to kernel space
  (bsc#1212649).
- commit 816f817</changelog>
  <changelog author="jack@suse.cz" date="1698321606">- quota: Fix slow quotaoff (bsc#1216621).
- commit 988e5f4</changelog>
  <changelog author="spradhan@suse.de" date="1698321607">- btrfs: don't start transaction for scrub if the fs is mounted read-only (bsc#1214874).
- commit cc8e6f1</changelog>
  <changelog author="neilb@suse.de" date="1698408000">- remove unnecessary WARN_ON_ONCE() (bsc#1214823).
- NFSD: Never call nfsd_file_gc() in foreground paths
  (bsc#1215545).
- commit d81dfc3</changelog>
  <changelog author="vkarasulli@suse.de" date="1698408001">- Update
  patches.suse/0001-x86-sev-Disable-MMIO-emulation-from-user-mode.patch
  (bsc#1212649 CVE-2023-46813).
- Update
  patches.suse/0002-x86-sev-Check-IOBM-for-IOIO-exceptions-from-user-spa.patch
  (bsc#1212649 CVE-2023-46813).
- Update
  patches.suse/0003-x86-sev-Check-for-user-space-IOIO-pointing-to-kernel.patch
  (bsc#1212649 CVE-2023-46813).
- commit dd6a315</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1698408002">- netfilter: nf_tables: skip bound chain on rule flush
  (bsc#1215095 CVE-2023-3777).
- commit afb7c25</changelog>
  <changelog author="tiwai@suse.de" date="1698580800">- iio: exynos-adc: request second interupt only when touchscreen
  mode is used (git-fixes).
- iio: adc: xilinx-xadc: Correct temperature offset/scale for
  UltraScale (git-fixes).
- iio: adc: xilinx-xadc: Don't clobber preset voltage/temperature
  thresholds (git-fixes).
- misc: fastrpc: Clean buffers on remote invocation failures
  (git-fixes).
- i2c: stm32f7: Fix PEC handling in case of SMBUS transfers
  (git-fixes).
- i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node()
  (git-fixes).
- i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node()
  (git-fixes).
- i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node()
  (git-fixes).
- i2c: aspeed: Fix i2c bus hang in slave read (git-fixes).
- drm/i915/pmu: Check if pmu is closed before stopping event
  (git-fixes).
- firmware/imx-dsp: Fix use_after_free in imx_dsp_setup_channels()
  (git-fixes).
- r8152: Release firmware if we have an error in probe
  (git-fixes).
- r8152: Cancel hw_phy_work if we have an error in probe
  (git-fixes).
- r8152: Run the unload routine if we have errors during probe
  (git-fixes).
- r8152: Increase USB control msg timeout to 5000ms as per spec
  (git-fixes).
- net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg
  (git-fixes).
- net: ieee802154: adf7242: Fix some potential buffer overflow
  in adf7242_stats_show() (git-fixes).
- treewide: Spelling fix in comment (git-fixes).
- commit e69ab42</changelog>
  <changelog author="ohering@suse.de" date="1698667200">- fix x86/mm: print the encryption features in hyperv is disabled
- commit 37d6855</changelog>
</package>
<package pkgid="ce1ab0da33a19fc4c633906cfb6bbdc61dfdec148a6c6ea9e213542804a9ad35" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.39.1"/>
  <changelog author="ailiop@suse.com" date="1701518400">- xfs: standardize inode generation formatting in ftrace output
  (git-fixes).
- commit 81e4504</changelog>
  <changelog author="ailiop@suse.com" date="1701518401">- xfs: convert buffer flags to unsigned (git-fixes).
- commit 6147a1c</changelog>
  <changelog author="ailiop@suse.com" date="1701518402">- xfs: convert attr type flags to unsigned (git-fixes).
- commit c641f4d</changelog>
  <changelog author="ailiop@suse.com" date="1701518403">- xfs: convert scrub type flags to unsigned (git-fixes).
- commit c3c7c82</changelog>
  <changelog author="ailiop@suse.com" date="1701518404">- xfs: convert bmap extent type flags to unsigned (git-fixes).
- commit 30fead3</changelog>
  <changelog author="ailiop@suse.com" date="1701518405">- xfs: convert bmapi flags to unsigned (git-fixes).
- commit 1ec6360</changelog>
  <changelog author="ailiop@suse.com" date="1701518406">- xfs: convert AGF log flags to unsigned (git-fixes).
- commit 91cefbb</changelog>
  <changelog author="ailiop@suse.com" date="1701518407">- xfs: convert AGI log flags to unsigned (git-fixes).
- commit 66d955b</changelog>
  <changelog author="ailiop@suse.com" date="1701518408">- xfs: convert btree buffer log flags to unsigned (git-fixes).
- commit ced67a9</changelog>
  <changelog author="ailiop@suse.com" date="1701518409">- xfs: convert buffer log item flags to unsigned (git-fixes).
- commit d4d0c9c</changelog>
  <changelog author="ailiop@suse.com" date="1701518410">- xfs: convert da btree operations flags to unsigned (git-fixes).
- commit 41198d9</changelog>
  <changelog author="ailiop@suse.com" date="1701518411">- xfs: convert dquot flags to unsigned (git-fixes).
- commit 1630213</changelog>
  <changelog author="ailiop@suse.com" date="1701518412">- xfs: convert log item tracepoint flags to unsigned (git-fixes).
- commit 411032a</changelog>
  <changelog author="ailiop@suse.com" date="1701518413">- xfs: convert inode lock flags to unsigned (git-fixes).
- commit 831f7e2</changelog>
  <changelog author="ailiop@suse.com" date="1701518414">- xfs: convert quota options flags to unsigned (git-fixes).
- commit 7dfe466</changelog>
  <changelog author="ailiop@suse.com" date="1701518415">- xfs: convert log ticket and iclog flags to unsigned (git-fixes).
- commit 57245d3</changelog>
  <changelog author="tiwai@suse.de" date="1701604800">- firewire: core: fix possible memory leak in create_units()
  (git-fixes).
- commit 0ade49c</changelog>
  <changelog author="tiwai@suse.de" date="1701691200">- USB: serial: option: add Luat Air72*U series products
  (git-fixes).
- USB: serial: option: add Fibocom L7xx modules (git-fixes).
- USB: serial: option: don't claim interface 4 for ZTE MF290
  (git-fixes).
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA
  (git-fixes).
- commit 4c40fde</changelog>
  <changelog author="mfranc@suse.cz" date="1701691201">- blacklist.conf: this is true for SLE15-SP4 not SLE15-SP5
  The backport was provided in bsc#1215123 for SP5, but it has further
  dependencies not present in SP4, so unless requested by IBM, I'm going
  to skip it for git-fixes.
- commit 5219b23</changelog>
  <changelog author="msuchanek@suse.de" date="1701691202">- powerpc: Don't clobber f0/vs0 during fp|altivec register save
  (bsc#1217780).
- commit 46d31e2</changelog>
</package>
<package pkgid="2383cfd43cc43394e8e9c2c23a4c82e3b665c18357930244064b8427cee4c2ee" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.39.1"/>
  <changelog author="ailiop@suse.com" date="1701518400">- xfs: standardize inode generation formatting in ftrace output
  (git-fixes).
- commit 81e4504</changelog>
  <changelog author="ailiop@suse.com" date="1701518401">- xfs: convert buffer flags to unsigned (git-fixes).
- commit 6147a1c</changelog>
  <changelog author="ailiop@suse.com" date="1701518402">- xfs: convert attr type flags to unsigned (git-fixes).
- commit c641f4d</changelog>
  <changelog author="ailiop@suse.com" date="1701518403">- xfs: convert scrub type flags to unsigned (git-fixes).
- commit c3c7c82</changelog>
  <changelog author="ailiop@suse.com" date="1701518404">- xfs: convert bmap extent type flags to unsigned (git-fixes).
- commit 30fead3</changelog>
  <changelog author="ailiop@suse.com" date="1701518405">- xfs: convert bmapi flags to unsigned (git-fixes).
- commit 1ec6360</changelog>
  <changelog author="ailiop@suse.com" date="1701518406">- xfs: convert AGF log flags to unsigned (git-fixes).
- commit 91cefbb</changelog>
  <changelog author="ailiop@suse.com" date="1701518407">- xfs: convert AGI log flags to unsigned (git-fixes).
- commit 66d955b</changelog>
  <changelog author="ailiop@suse.com" date="1701518408">- xfs: convert btree buffer log flags to unsigned (git-fixes).
- commit ced67a9</changelog>
  <changelog author="ailiop@suse.com" date="1701518409">- xfs: convert buffer log item flags to unsigned (git-fixes).
- commit d4d0c9c</changelog>
  <changelog author="ailiop@suse.com" date="1701518410">- xfs: convert da btree operations flags to unsigned (git-fixes).
- commit 41198d9</changelog>
  <changelog author="ailiop@suse.com" date="1701518411">- xfs: convert dquot flags to unsigned (git-fixes).
- commit 1630213</changelog>
  <changelog author="ailiop@suse.com" date="1701518412">- xfs: convert log item tracepoint flags to unsigned (git-fixes).
- commit 411032a</changelog>
  <changelog author="ailiop@suse.com" date="1701518413">- xfs: convert inode lock flags to unsigned (git-fixes).
- commit 831f7e2</changelog>
  <changelog author="ailiop@suse.com" date="1701518414">- xfs: convert quota options flags to unsigned (git-fixes).
- commit 7dfe466</changelog>
  <changelog author="ailiop@suse.com" date="1701518415">- xfs: convert log ticket and iclog flags to unsigned (git-fixes).
- commit 57245d3</changelog>
  <changelog author="tiwai@suse.de" date="1701604800">- firewire: core: fix possible memory leak in create_units()
  (git-fixes).
- commit 0ade49c</changelog>
  <changelog author="tiwai@suse.de" date="1701691200">- USB: serial: option: add Luat Air72*U series products
  (git-fixes).
- USB: serial: option: add Fibocom L7xx modules (git-fixes).
- USB: serial: option: don't claim interface 4 for ZTE MF290
  (git-fixes).
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA
  (git-fixes).
- commit 4c40fde</changelog>
  <changelog author="mfranc@suse.cz" date="1701691201">- blacklist.conf: this is true for SLE15-SP4 not SLE15-SP5
  The backport was provided in bsc#1215123 for SP5, but it has further
  dependencies not present in SP4, so unless requested by IBM, I'm going
  to skip it for git-fixes.
- commit 5219b23</changelog>
  <changelog author="msuchanek@suse.de" date="1701691202">- powerpc: Don't clobber f0/vs0 during fp|altivec register save
  (bsc#1217780).
- commit 46d31e2</changelog>
</package>
<package pkgid="9b199337cd9c2ae11dde1ee139e6111e29879e1859521067d53ca0dc5588597d" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150500.55.39.1"/>
  <changelog author="ailiop@suse.com" date="1701518400">- xfs: standardize inode generation formatting in ftrace output
  (git-fixes).
- commit 81e4504</changelog>
  <changelog author="ailiop@suse.com" date="1701518401">- xfs: convert buffer flags to unsigned (git-fixes).
- commit 6147a1c</changelog>
  <changelog author="ailiop@suse.com" date="1701518402">- xfs: convert attr type flags to unsigned (git-fixes).
- commit c641f4d</changelog>
  <changelog author="ailiop@suse.com" date="1701518403">- xfs: convert scrub type flags to unsigned (git-fixes).
- commit c3c7c82</changelog>
  <changelog author="ailiop@suse.com" date="1701518404">- xfs: convert bmap extent type flags to unsigned (git-fixes).
- commit 30fead3</changelog>
  <changelog author="ailiop@suse.com" date="1701518405">- xfs: convert bmapi flags to unsigned (git-fixes).
- commit 1ec6360</changelog>
  <changelog author="ailiop@suse.com" date="1701518406">- xfs: convert AGF log flags to unsigned (git-fixes).
- commit 91cefbb</changelog>
  <changelog author="ailiop@suse.com" date="1701518407">- xfs: convert AGI log flags to unsigned (git-fixes).
- commit 66d955b</changelog>
  <changelog author="ailiop@suse.com" date="1701518408">- xfs: convert btree buffer log flags to unsigned (git-fixes).
- commit ced67a9</changelog>
  <changelog author="ailiop@suse.com" date="1701518409">- xfs: convert buffer log item flags to unsigned (git-fixes).
- commit d4d0c9c</changelog>
  <changelog author="ailiop@suse.com" date="1701518410">- xfs: convert da btree operations flags to unsigned (git-fixes).
- commit 41198d9</changelog>
  <changelog author="ailiop@suse.com" date="1701518411">- xfs: convert dquot flags to unsigned (git-fixes).
- commit 1630213</changelog>
  <changelog author="ailiop@suse.com" date="1701518412">- xfs: convert log item tracepoint flags to unsigned (git-fixes).
- commit 411032a</changelog>
  <changelog author="ailiop@suse.com" date="1701518413">- xfs: convert inode lock flags to unsigned (git-fixes).
- commit 831f7e2</changelog>
  <changelog author="ailiop@suse.com" date="1701518414">- xfs: convert quota options flags to unsigned (git-fixes).
- commit 7dfe466</changelog>
  <changelog author="ailiop@suse.com" date="1701518415">- xfs: convert log ticket and iclog flags to unsigned (git-fixes).
- commit 57245d3</changelog>
  <changelog author="tiwai@suse.de" date="1701604800">- firewire: core: fix possible memory leak in create_units()
  (git-fixes).
- commit 0ade49c</changelog>
  <changelog author="tiwai@suse.de" date="1701691200">- USB: serial: option: add Luat Air72*U series products
  (git-fixes).
- USB: serial: option: add Fibocom L7xx modules (git-fixes).
- USB: serial: option: don't claim interface 4 for ZTE MF290
  (git-fixes).
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA
  (git-fixes).
- commit 4c40fde</changelog>
  <changelog author="mfranc@suse.cz" date="1701691201">- blacklist.conf: this is true for SLE15-SP4 not SLE15-SP5
  The backport was provided in bsc#1215123 for SP5, but it has further
  dependencies not present in SP4, so unless requested by IBM, I'm going
  to skip it for git-fixes.
- commit 5219b23</changelog>
  <changelog author="msuchanek@suse.de" date="1701691202">- powerpc: Don't clobber f0/vs0 during fp|altivec register save
  (bsc#1217780).
- commit 46d31e2</changelog>
</package>
<package pkgid="6612afc4d340793a854a74ae8ac1a327a18e0d51466f9a5d9f9574c6e8c1dbac" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.39.1"/>
  <changelog author="ailiop@suse.com" date="1701518400">- xfs: standardize inode generation formatting in ftrace output
  (git-fixes).
- commit 81e4504</changelog>
  <changelog author="ailiop@suse.com" date="1701518401">- xfs: convert buffer flags to unsigned (git-fixes).
- commit 6147a1c</changelog>
  <changelog author="ailiop@suse.com" date="1701518402">- xfs: convert attr type flags to unsigned (git-fixes).
- commit c641f4d</changelog>
  <changelog author="ailiop@suse.com" date="1701518403">- xfs: convert scrub type flags to unsigned (git-fixes).
- commit c3c7c82</changelog>
  <changelog author="ailiop@suse.com" date="1701518404">- xfs: convert bmap extent type flags to unsigned (git-fixes).
- commit 30fead3</changelog>
  <changelog author="ailiop@suse.com" date="1701518405">- xfs: convert bmapi flags to unsigned (git-fixes).
- commit 1ec6360</changelog>
  <changelog author="ailiop@suse.com" date="1701518406">- xfs: convert AGF log flags to unsigned (git-fixes).
- commit 91cefbb</changelog>
  <changelog author="ailiop@suse.com" date="1701518407">- xfs: convert AGI log flags to unsigned (git-fixes).
- commit 66d955b</changelog>
  <changelog author="ailiop@suse.com" date="1701518408">- xfs: convert btree buffer log flags to unsigned (git-fixes).
- commit ced67a9</changelog>
  <changelog author="ailiop@suse.com" date="1701518409">- xfs: convert buffer log item flags to unsigned (git-fixes).
- commit d4d0c9c</changelog>
  <changelog author="ailiop@suse.com" date="1701518410">- xfs: convert da btree operations flags to unsigned (git-fixes).
- commit 41198d9</changelog>
  <changelog author="ailiop@suse.com" date="1701518411">- xfs: convert dquot flags to unsigned (git-fixes).
- commit 1630213</changelog>
  <changelog author="ailiop@suse.com" date="1701518412">- xfs: convert log item tracepoint flags to unsigned (git-fixes).
- commit 411032a</changelog>
  <changelog author="ailiop@suse.com" date="1701518413">- xfs: convert inode lock flags to unsigned (git-fixes).
- commit 831f7e2</changelog>
  <changelog author="ailiop@suse.com" date="1701518414">- xfs: convert quota options flags to unsigned (git-fixes).
- commit 7dfe466</changelog>
  <changelog author="ailiop@suse.com" date="1701518415">- xfs: convert log ticket and iclog flags to unsigned (git-fixes).
- commit 57245d3</changelog>
  <changelog author="tiwai@suse.de" date="1701604800">- firewire: core: fix possible memory leak in create_units()
  (git-fixes).
- commit 0ade49c</changelog>
  <changelog author="tiwai@suse.de" date="1701691200">- USB: serial: option: add Luat Air72*U series products
  (git-fixes).
- USB: serial: option: add Fibocom L7xx modules (git-fixes).
- USB: serial: option: don't claim interface 4 for ZTE MF290
  (git-fixes).
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA
  (git-fixes).
- commit 4c40fde</changelog>
  <changelog author="mfranc@suse.cz" date="1701691201">- blacklist.conf: this is true for SLE15-SP4 not SLE15-SP5
  The backport was provided in bsc#1215123 for SP5, but it has further
  dependencies not present in SP4, so unless requested by IBM, I'm going
  to skip it for git-fixes.
- commit 5219b23</changelog>
  <changelog author="msuchanek@suse.de" date="1701691202">- powerpc: Don't clobber f0/vs0 during fp|altivec register save
  (bsc#1217780).
- commit 46d31e2</changelog>
</package>
<package pkgid="663ce341dd742771f1ad98cba6d7cd993ac933e1a09c38d57c5b1293c837ee3f" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.44.1"/>
  <changelog author="nik.borisov@suse.com" date="1704715200">- x86/srso: Fix SBPB enablement for (possible) future fixed HW   (git-fixes).
- Refresh
  patches.suse/x86-srso-fix-vulnerability-reporting-for-missing-microcode.patch.
- commit b121d1d</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715201">- x86/srso: Add SRSO mitigation for Hygon processors (git-fixes).
- commit 7b8dfd1</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715202">- x86/smp: Use dedicated cache-line for mwait_play_dead() (git-fixes).
- commit 8087b92</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715203">- x86/alternatives: Disable KASAN in apply_alternatives() (git-fixes).
- commit 7029135</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715204">- x86/alternatives: Sync core before enabling interrupts (git-fixes).
- commit 4a0b72a</changelog>
  <changelog author="ailiop@suse.com" date="1704715205">- gfs2: Silence "suspicious RCU usage in gfs2_permission" warning
  (git-fixes).
- commit 3929c70</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715206">- x86/boot/compressed: Reserve more memory for page tables  (git-fixes).
- commit 6bf16e1</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715207">- x86/boot: Fix incorrect startup_gdt_descr.size (git-fixes).
- commit fdc98a7</changelog>
  <changelog author="pmladek@suse.com" date="1704715208">- vsprintf/kallsyms: Prevent invalid data when printing symbol
  (bsc#1217602).
- commit 8dab9cc</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715209">- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 (git-fixes).
- commit d74349c</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715210">- x86/cpu: Fix amd_check_microcode() declaration (git-fixes).
- Refresh patches.suse/x86-srso-set-cpuid-feature-bits-independently-of-bug-or-mitigation-status.patch.
- commit c22f4b4</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715211">- x86/fpu: Invalidate FPU state correctly on exec() (git-fixes).
- commit 7686df9</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715212">- x86/fpu/xstate: Prevent false-positive warning in __copy_xstate_uabi_buf() (git-fixes).
- commit 46d60b3</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715213">- x86/purgatory: Remove LTO flags (git-fixes).
- commit bbd4f84</changelog>
  <changelog author="palcantara@suse.de" date="1704715214">- smb: client: fix potential OOB in smb2_dump_detail()
  (bsc#1217946 CVE-2023-6610).
- commit cfca7f7</changelog>
  <changelog author="jroedel@suse.de" date="1704801600">- swiotlb: reduce the number of areas to match actual memory
  pool size (git-fixes).
- swiotlb: always set the number of areas before allocating the
  pool (git-fixes).
- swiotlb: fix debugfs reporting of reserved memory pools
  (git-fixes).
- swiotlb: fix a braino in the alignment check fix (bsc#1216559).
- swiotlb: fix slot alignment checks (bsc#1216559).
- swiotlb: fix the deadlock in swiotlb_do_find_slots (git-fixes).
- swiotlb: reduce the swiotlb buffer size on allocation failure
  (git-fixes).
- swiotlb: don't panic! (git-fixes).
- Revert "swiotlb: panic if nslabs is too small" (git-fixes).
- commit 1b89825</changelog>
  <changelog author="ohering@suse.de" date="1704801601">- io_uring/af_unix: disable sending io_uring over sockets
  (bsc#1218447, CVE-2023-6531).
- commit fdc256b</changelog>
  <changelog author="jroedel@suse.de" date="1704801602">- swiotlb: use the calculated number of areas (git-fixes).
- swiotlb: mark swiotlb_memblock_alloc() as __init (git-fixes).
- commit b9aedb4</changelog>
  <changelog author="mkoutny@suse.com" date="1704801603">- Update patches.kabi/kabi-fix-zone-unaccepted-memory.patch
  (jsc#PED-7167 bsc#1218643).
- commit f781e3d</changelog>
  <changelog author="aabdallah@suse.de" date="1705320000">- Update: drm/vmwgfx: Keep a gem reference to user bos in surfaces
- Fix crash in vmw_context_cotables_unref when 3d support is enabled
  (bsc#1218738)
- commit 99a9f67</changelog>
</package>
<package pkgid="7ebfc911fceca908dbb63c188bc0324770bac7f045b77111a72ac3920a5dee37" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.44.1"/>
  <changelog author="nik.borisov@suse.com" date="1704715200">- x86/srso: Fix SBPB enablement for (possible) future fixed HW   (git-fixes).
- Refresh
  patches.suse/x86-srso-fix-vulnerability-reporting-for-missing-microcode.patch.
- commit b121d1d</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715201">- x86/srso: Add SRSO mitigation for Hygon processors (git-fixes).
- commit 7b8dfd1</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715202">- x86/smp: Use dedicated cache-line for mwait_play_dead() (git-fixes).
- commit 8087b92</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715203">- x86/alternatives: Disable KASAN in apply_alternatives() (git-fixes).
- commit 7029135</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715204">- x86/alternatives: Sync core before enabling interrupts (git-fixes).
- commit 4a0b72a</changelog>
  <changelog author="ailiop@suse.com" date="1704715205">- gfs2: Silence "suspicious RCU usage in gfs2_permission" warning
  (git-fixes).
- commit 3929c70</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715206">- x86/boot/compressed: Reserve more memory for page tables  (git-fixes).
- commit 6bf16e1</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715207">- x86/boot: Fix incorrect startup_gdt_descr.size (git-fixes).
- commit fdc98a7</changelog>
  <changelog author="pmladek@suse.com" date="1704715208">- vsprintf/kallsyms: Prevent invalid data when printing symbol
  (bsc#1217602).
- commit 8dab9cc</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715209">- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 (git-fixes).
- commit d74349c</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715210">- x86/cpu: Fix amd_check_microcode() declaration (git-fixes).
- Refresh patches.suse/x86-srso-set-cpuid-feature-bits-independently-of-bug-or-mitigation-status.patch.
- commit c22f4b4</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715211">- x86/fpu: Invalidate FPU state correctly on exec() (git-fixes).
- commit 7686df9</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715212">- x86/fpu/xstate: Prevent false-positive warning in __copy_xstate_uabi_buf() (git-fixes).
- commit 46d60b3</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715213">- x86/purgatory: Remove LTO flags (git-fixes).
- commit bbd4f84</changelog>
  <changelog author="palcantara@suse.de" date="1704715214">- smb: client: fix potential OOB in smb2_dump_detail()
  (bsc#1217946 CVE-2023-6610).
- commit cfca7f7</changelog>
  <changelog author="jroedel@suse.de" date="1704801600">- swiotlb: reduce the number of areas to match actual memory
  pool size (git-fixes).
- swiotlb: always set the number of areas before allocating the
  pool (git-fixes).
- swiotlb: fix debugfs reporting of reserved memory pools
  (git-fixes).
- swiotlb: fix a braino in the alignment check fix (bsc#1216559).
- swiotlb: fix slot alignment checks (bsc#1216559).
- swiotlb: fix the deadlock in swiotlb_do_find_slots (git-fixes).
- swiotlb: reduce the swiotlb buffer size on allocation failure
  (git-fixes).
- swiotlb: don't panic! (git-fixes).
- Revert "swiotlb: panic if nslabs is too small" (git-fixes).
- commit 1b89825</changelog>
  <changelog author="ohering@suse.de" date="1704801601">- io_uring/af_unix: disable sending io_uring over sockets
  (bsc#1218447, CVE-2023-6531).
- commit fdc256b</changelog>
  <changelog author="jroedel@suse.de" date="1704801602">- swiotlb: use the calculated number of areas (git-fixes).
- swiotlb: mark swiotlb_memblock_alloc() as __init (git-fixes).
- commit b9aedb4</changelog>
  <changelog author="mkoutny@suse.com" date="1704801603">- Update patches.kabi/kabi-fix-zone-unaccepted-memory.patch
  (jsc#PED-7167 bsc#1218643).
- commit f781e3d</changelog>
  <changelog author="aabdallah@suse.de" date="1705320000">- Update: drm/vmwgfx: Keep a gem reference to user bos in surfaces
- Fix crash in vmw_context_cotables_unref when 3d support is enabled
  (bsc#1218738)
- commit 99a9f67</changelog>
</package>
<package pkgid="419f540b4a196949108ac01520e241cae0df5c73f00eeeff23dbff207c583e6e" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150500.55.44.1"/>
  <changelog author="nik.borisov@suse.com" date="1704715200">- x86/srso: Fix SBPB enablement for (possible) future fixed HW   (git-fixes).
- Refresh
  patches.suse/x86-srso-fix-vulnerability-reporting-for-missing-microcode.patch.
- commit b121d1d</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715201">- x86/srso: Add SRSO mitigation for Hygon processors (git-fixes).
- commit 7b8dfd1</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715202">- x86/smp: Use dedicated cache-line for mwait_play_dead() (git-fixes).
- commit 8087b92</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715203">- x86/alternatives: Disable KASAN in apply_alternatives() (git-fixes).
- commit 7029135</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715204">- x86/alternatives: Sync core before enabling interrupts (git-fixes).
- commit 4a0b72a</changelog>
  <changelog author="ailiop@suse.com" date="1704715205">- gfs2: Silence "suspicious RCU usage in gfs2_permission" warning
  (git-fixes).
- commit 3929c70</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715206">- x86/boot/compressed: Reserve more memory for page tables  (git-fixes).
- commit 6bf16e1</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715207">- x86/boot: Fix incorrect startup_gdt_descr.size (git-fixes).
- commit fdc98a7</changelog>
  <changelog author="pmladek@suse.com" date="1704715208">- vsprintf/kallsyms: Prevent invalid data when printing symbol
  (bsc#1217602).
- commit 8dab9cc</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715209">- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 (git-fixes).
- commit d74349c</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715210">- x86/cpu: Fix amd_check_microcode() declaration (git-fixes).
- Refresh patches.suse/x86-srso-set-cpuid-feature-bits-independently-of-bug-or-mitigation-status.patch.
- commit c22f4b4</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715211">- x86/fpu: Invalidate FPU state correctly on exec() (git-fixes).
- commit 7686df9</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715212">- x86/fpu/xstate: Prevent false-positive warning in __copy_xstate_uabi_buf() (git-fixes).
- commit 46d60b3</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715213">- x86/purgatory: Remove LTO flags (git-fixes).
- commit bbd4f84</changelog>
  <changelog author="palcantara@suse.de" date="1704715214">- smb: client: fix potential OOB in smb2_dump_detail()
  (bsc#1217946 CVE-2023-6610).
- commit cfca7f7</changelog>
  <changelog author="jroedel@suse.de" date="1704801600">- swiotlb: reduce the number of areas to match actual memory
  pool size (git-fixes).
- swiotlb: always set the number of areas before allocating the
  pool (git-fixes).
- swiotlb: fix debugfs reporting of reserved memory pools
  (git-fixes).
- swiotlb: fix a braino in the alignment check fix (bsc#1216559).
- swiotlb: fix slot alignment checks (bsc#1216559).
- swiotlb: fix the deadlock in swiotlb_do_find_slots (git-fixes).
- swiotlb: reduce the swiotlb buffer size on allocation failure
  (git-fixes).
- swiotlb: don't panic! (git-fixes).
- Revert "swiotlb: panic if nslabs is too small" (git-fixes).
- commit 1b89825</changelog>
  <changelog author="ohering@suse.de" date="1704801601">- io_uring/af_unix: disable sending io_uring over sockets
  (bsc#1218447, CVE-2023-6531).
- commit fdc256b</changelog>
  <changelog author="jroedel@suse.de" date="1704801602">- swiotlb: use the calculated number of areas (git-fixes).
- swiotlb: mark swiotlb_memblock_alloc() as __init (git-fixes).
- commit b9aedb4</changelog>
  <changelog author="mkoutny@suse.com" date="1704801603">- Update patches.kabi/kabi-fix-zone-unaccepted-memory.patch
  (jsc#PED-7167 bsc#1218643).
- commit f781e3d</changelog>
  <changelog author="aabdallah@suse.de" date="1705320000">- Update: drm/vmwgfx: Keep a gem reference to user bos in surfaces
- Fix crash in vmw_context_cotables_unref when 3d support is enabled
  (bsc#1218738)
- commit 99a9f67</changelog>
</package>
<package pkgid="bbe9f7e00baff6fcbdef1b27347b4e81714520bc7270c608cae6ac0812319a1f" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.44.1"/>
  <changelog author="nik.borisov@suse.com" date="1704715200">- x86/srso: Fix SBPB enablement for (possible) future fixed HW   (git-fixes).
- Refresh
  patches.suse/x86-srso-fix-vulnerability-reporting-for-missing-microcode.patch.
- commit b121d1d</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715201">- x86/srso: Add SRSO mitigation for Hygon processors (git-fixes).
- commit 7b8dfd1</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715202">- x86/smp: Use dedicated cache-line for mwait_play_dead() (git-fixes).
- commit 8087b92</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715203">- x86/alternatives: Disable KASAN in apply_alternatives() (git-fixes).
- commit 7029135</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715204">- x86/alternatives: Sync core before enabling interrupts (git-fixes).
- commit 4a0b72a</changelog>
  <changelog author="ailiop@suse.com" date="1704715205">- gfs2: Silence "suspicious RCU usage in gfs2_permission" warning
  (git-fixes).
- commit 3929c70</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715206">- x86/boot/compressed: Reserve more memory for page tables  (git-fixes).
- commit 6bf16e1</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715207">- x86/boot: Fix incorrect startup_gdt_descr.size (git-fixes).
- commit fdc98a7</changelog>
  <changelog author="pmladek@suse.com" date="1704715208">- vsprintf/kallsyms: Prevent invalid data when printing symbol
  (bsc#1217602).
- commit 8dab9cc</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715209">- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 (git-fixes).
- commit d74349c</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715210">- x86/cpu: Fix amd_check_microcode() declaration (git-fixes).
- Refresh patches.suse/x86-srso-set-cpuid-feature-bits-independently-of-bug-or-mitigation-status.patch.
- commit c22f4b4</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715211">- x86/fpu: Invalidate FPU state correctly on exec() (git-fixes).
- commit 7686df9</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715212">- x86/fpu/xstate: Prevent false-positive warning in __copy_xstate_uabi_buf() (git-fixes).
- commit 46d60b3</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715213">- x86/purgatory: Remove LTO flags (git-fixes).
- commit bbd4f84</changelog>
  <changelog author="palcantara@suse.de" date="1704715214">- smb: client: fix potential OOB in smb2_dump_detail()
  (bsc#1217946 CVE-2023-6610).
- commit cfca7f7</changelog>
  <changelog author="jroedel@suse.de" date="1704801600">- swiotlb: reduce the number of areas to match actual memory
  pool size (git-fixes).
- swiotlb: always set the number of areas before allocating the
  pool (git-fixes).
- swiotlb: fix debugfs reporting of reserved memory pools
  (git-fixes).
- swiotlb: fix a braino in the alignment check fix (bsc#1216559).
- swiotlb: fix slot alignment checks (bsc#1216559).
- swiotlb: fix the deadlock in swiotlb_do_find_slots (git-fixes).
- swiotlb: reduce the swiotlb buffer size on allocation failure
  (git-fixes).
- swiotlb: don't panic! (git-fixes).
- Revert "swiotlb: panic if nslabs is too small" (git-fixes).
- commit 1b89825</changelog>
  <changelog author="ohering@suse.de" date="1704801601">- io_uring/af_unix: disable sending io_uring over sockets
  (bsc#1218447, CVE-2023-6531).
- commit fdc256b</changelog>
  <changelog author="jroedel@suse.de" date="1704801602">- swiotlb: use the calculated number of areas (git-fixes).
- swiotlb: mark swiotlb_memblock_alloc() as __init (git-fixes).
- commit b9aedb4</changelog>
  <changelog author="mkoutny@suse.com" date="1704801603">- Update patches.kabi/kabi-fix-zone-unaccepted-memory.patch
  (jsc#PED-7167 bsc#1218643).
- commit f781e3d</changelog>
  <changelog author="aabdallah@suse.de" date="1705320000">- Update: drm/vmwgfx: Keep a gem reference to user bos in surfaces
- Fix crash in vmw_context_cotables_unref when 3d support is enabled
  (bsc#1218738)
- commit 99a9f67</changelog>
</package>
<package pkgid="0ae644814e38d920b28076b1afa632cc57c4e389599b840def19f3d161028e82" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.49.1"/>
  <changelog author="ailiop@suse.com" date="1707220800">- fs: Fix error checking for d_hash_and_lookup() (git-fixes).
- commit b1a5e63</changelog>
  <changelog author="ailiop@suse.com" date="1707220801">- tracefs: Add missing lockdown check to tracefs_create_dir()
  (git-fixes).
- commit 36d0f04</changelog>
  <changelog author="ailiop@suse.com" date="1707220802">- fs: indicate request originates from old mount API (git-fixes).
- commit 8ccbbb1</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1707220803">- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  (CVE-2024-1086 bsc#1219434).
- commit 5f917ff</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1707307200">- netfilter: nf_tables: check if catch-all set element is active
  in next generation (CVE-2024-1085 bsc#1219429).
- commit 7b3f4c4</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307201">- RAS: Introduce AMD Address Translation Library (jsc#PED-7618).
- commit d6ad6ba</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307202">- EDAC/amd64: Use new AMD Address Translation Library (jsc#PED-7618).
- commit f1baba4</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307203">- Documentation: RAS: Add index and address translation section (jsc#PED-7618).
- commit d6e1334</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307204">- RAS/AMD/ATL: Add MI300 support (jsc#PED-7618).
- commit 761e3c8</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307205">- RAS/AMD/ATL: Fix array overflow in get_logical_coh_st_fabric_id_mi300() (jsc#PED-7618).
- commit 83df5af</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307206">- RAS/AMD/ATL: Add MI300 DRAM to normalized address translation support (jsc#PED-7618).
- commit a26a502</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307207">- EDAC/amd64: Add MI300 row retirement support (jsc#PED-7618).
- commit fb688f3</changelog>
  <changelog author="vbabka@suse.cz" date="1707393600">- README.BRANCH: update branch name to cve/linux-5.14, update maintainers
  as requested
- commit 8e34879</changelog>
  <changelog author="vkarasulli@suse.de" date="1707393601">- Update
  patches.suse/Bluetooth-Fix-atomicity-violation-in-min-max-_key_si.patch
  (git-fixes bsc#1219608 CVE-2024-24860).
- commit dedfe8a</changelog>
  <changelog author="vkarasulli@suse.de" date="1707393602">- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
  (git-fixes bsc#1219608 CVE-2024-24860).
- commit a1186fd</changelog>
  <changelog author="neilb@suse.de" date="1707480000">- Refresh patches.suse/nfsd-fix-RELEASE_LOCKOWNER.patch.
  Accidentally removed nfs4_get_stateowner
- commit ad106c0</changelog>
  <changelog author="mkoutny@suse.com" date="1707480001">- README.BRANCH: Update cve/linux-5.14 maintainers
  Add myself to match SLE15-SP5 consumer + fix typo in branch name.
- commit da26653</changelog>
  <changelog author="jgross@suse.com" date="1707480002">- vhost: use kzalloc() instead of kmalloc() followed by memset()
  (CVE-2024-0340, bsc#1218689).
- commit 4c5a740</changelog>
  <changelog author="nik.borisov@suse.com" date="1707480003">- Refresh patches.suse/EDAC-amd64-Use-new-AMD-Address-Translation-Library.patch.
  Fix build due to incomplete line removal
- commit 720d084</changelog>
  <changelog author="ykaukab@suse.de" date="1707652800">- Refresh patches.suse/EDAC-amd64-Use-new-AMD-Address-Translation-Library.patch.
  Fix following error when building kvmsmall config by removing left over
  declaration:
  [  216s] In file included from ../arch/x86/kernel/cpu/mce/core.c:52:0:
  [  216s] ../arch/x86/include/asm/mce.h:366:1: error: duplicate 'static'
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
  [  216s]  ^~~~~~
  [  216s] ../arch/x86/include/asm/mce.h:366:15: error: two or more data types in declaration specifiers
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
  [  216s]                ^~~~
  [  216s] ../arch/x86/include/asm/mce.h: In function 'mce_hygon_feature_init':
  [  216s] ../arch/x86/include/asm/mce.h:366:75: error: void value not ignored as it ought to be
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
  [  216s]                                                                            ^~~~~~~~~~~~~~~~~~~~~~~
  [  216s] ../arch/x86/include/asm/mce.h:366:50: error: control reaches end of non-void function [-Werror=return-type]
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
- commit 7015e17</changelog>
</package>
<package pkgid="a0489b685594ca283b966ea12c0e0351fefeda392d71bfb3188d82510c8e8f90" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.49.1"/>
  <changelog author="ailiop@suse.com" date="1707220800">- fs: Fix error checking for d_hash_and_lookup() (git-fixes).
- commit b1a5e63</changelog>
  <changelog author="ailiop@suse.com" date="1707220801">- tracefs: Add missing lockdown check to tracefs_create_dir()
  (git-fixes).
- commit 36d0f04</changelog>
  <changelog author="ailiop@suse.com" date="1707220802">- fs: indicate request originates from old mount API (git-fixes).
- commit 8ccbbb1</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1707220803">- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  (CVE-2024-1086 bsc#1219434).
- commit 5f917ff</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1707307200">- netfilter: nf_tables: check if catch-all set element is active
  in next generation (CVE-2024-1085 bsc#1219429).
- commit 7b3f4c4</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307201">- RAS: Introduce AMD Address Translation Library (jsc#PED-7618).
- commit d6ad6ba</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307202">- EDAC/amd64: Use new AMD Address Translation Library (jsc#PED-7618).
- commit f1baba4</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307203">- Documentation: RAS: Add index and address translation section (jsc#PED-7618).
- commit d6e1334</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307204">- RAS/AMD/ATL: Add MI300 support (jsc#PED-7618).
- commit 761e3c8</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307205">- RAS/AMD/ATL: Fix array overflow in get_logical_coh_st_fabric_id_mi300() (jsc#PED-7618).
- commit 83df5af</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307206">- RAS/AMD/ATL: Add MI300 DRAM to normalized address translation support (jsc#PED-7618).
- commit a26a502</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307207">- EDAC/amd64: Add MI300 row retirement support (jsc#PED-7618).
- commit fb688f3</changelog>
  <changelog author="vbabka@suse.cz" date="1707393600">- README.BRANCH: update branch name to cve/linux-5.14, update maintainers
  as requested
- commit 8e34879</changelog>
  <changelog author="vkarasulli@suse.de" date="1707393601">- Update
  patches.suse/Bluetooth-Fix-atomicity-violation-in-min-max-_key_si.patch
  (git-fixes bsc#1219608 CVE-2024-24860).
- commit dedfe8a</changelog>
  <changelog author="vkarasulli@suse.de" date="1707393602">- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
  (git-fixes bsc#1219608 CVE-2024-24860).
- commit a1186fd</changelog>
  <changelog author="neilb@suse.de" date="1707480000">- Refresh patches.suse/nfsd-fix-RELEASE_LOCKOWNER.patch.
  Accidentally removed nfs4_get_stateowner
- commit ad106c0</changelog>
  <changelog author="mkoutny@suse.com" date="1707480001">- README.BRANCH: Update cve/linux-5.14 maintainers
  Add myself to match SLE15-SP5 consumer + fix typo in branch name.
- commit da26653</changelog>
  <changelog author="jgross@suse.com" date="1707480002">- vhost: use kzalloc() instead of kmalloc() followed by memset()
  (CVE-2024-0340, bsc#1218689).
- commit 4c5a740</changelog>
  <changelog author="nik.borisov@suse.com" date="1707480003">- Refresh patches.suse/EDAC-amd64-Use-new-AMD-Address-Translation-Library.patch.
  Fix build due to incomplete line removal
- commit 720d084</changelog>
  <changelog author="ykaukab@suse.de" date="1707652800">- Refresh patches.suse/EDAC-amd64-Use-new-AMD-Address-Translation-Library.patch.
  Fix following error when building kvmsmall config by removing left over
  declaration:
  [  216s] In file included from ../arch/x86/kernel/cpu/mce/core.c:52:0:
  [  216s] ../arch/x86/include/asm/mce.h:366:1: error: duplicate 'static'
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
  [  216s]  ^~~~~~
  [  216s] ../arch/x86/include/asm/mce.h:366:15: error: two or more data types in declaration specifiers
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
  [  216s]                ^~~~
  [  216s] ../arch/x86/include/asm/mce.h: In function 'mce_hygon_feature_init':
  [  216s] ../arch/x86/include/asm/mce.h:366:75: error: void value not ignored as it ought to be
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
  [  216s]                                                                            ^~~~~~~~~~~~~~~~~~~~~~~
  [  216s] ../arch/x86/include/asm/mce.h:366:50: error: control reaches end of non-void function [-Werror=return-type]
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
- commit 7015e17</changelog>
</package>
<package pkgid="248c2447c6790c348e2b1e8ac1a04e07944433513209dc01492b4d86dd9a4e91" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150500.55.49.1"/>
  <changelog author="ailiop@suse.com" date="1707220800">- fs: Fix error checking for d_hash_and_lookup() (git-fixes).
- commit b1a5e63</changelog>
  <changelog author="ailiop@suse.com" date="1707220801">- tracefs: Add missing lockdown check to tracefs_create_dir()
  (git-fixes).
- commit 36d0f04</changelog>
  <changelog author="ailiop@suse.com" date="1707220802">- fs: indicate request originates from old mount API (git-fixes).
- commit 8ccbbb1</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1707220803">- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  (CVE-2024-1086 bsc#1219434).
- commit 5f917ff</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1707307200">- netfilter: nf_tables: check if catch-all set element is active
  in next generation (CVE-2024-1085 bsc#1219429).
- commit 7b3f4c4</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307201">- RAS: Introduce AMD Address Translation Library (jsc#PED-7618).
- commit d6ad6ba</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307202">- EDAC/amd64: Use new AMD Address Translation Library (jsc#PED-7618).
- commit f1baba4</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307203">- Documentation: RAS: Add index and address translation section (jsc#PED-7618).
- commit d6e1334</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307204">- RAS/AMD/ATL: Add MI300 support (jsc#PED-7618).
- commit 761e3c8</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307205">- RAS/AMD/ATL: Fix array overflow in get_logical_coh_st_fabric_id_mi300() (jsc#PED-7618).
- commit 83df5af</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307206">- RAS/AMD/ATL: Add MI300 DRAM to normalized address translation support (jsc#PED-7618).
- commit a26a502</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307207">- EDAC/amd64: Add MI300 row retirement support (jsc#PED-7618).
- commit fb688f3</changelog>
  <changelog author="vbabka@suse.cz" date="1707393600">- README.BRANCH: update branch name to cve/linux-5.14, update maintainers
  as requested
- commit 8e34879</changelog>
  <changelog author="vkarasulli@suse.de" date="1707393601">- Update
  patches.suse/Bluetooth-Fix-atomicity-violation-in-min-max-_key_si.patch
  (git-fixes bsc#1219608 CVE-2024-24860).
- commit dedfe8a</changelog>
  <changelog author="vkarasulli@suse.de" date="1707393602">- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
  (git-fixes bsc#1219608 CVE-2024-24860).
- commit a1186fd</changelog>
  <changelog author="neilb@suse.de" date="1707480000">- Refresh patches.suse/nfsd-fix-RELEASE_LOCKOWNER.patch.
  Accidentally removed nfs4_get_stateowner
- commit ad106c0</changelog>
  <changelog author="mkoutny@suse.com" date="1707480001">- README.BRANCH: Update cve/linux-5.14 maintainers
  Add myself to match SLE15-SP5 consumer + fix typo in branch name.
- commit da26653</changelog>
  <changelog author="jgross@suse.com" date="1707480002">- vhost: use kzalloc() instead of kmalloc() followed by memset()
  (CVE-2024-0340, bsc#1218689).
- commit 4c5a740</changelog>
  <changelog author="nik.borisov@suse.com" date="1707480003">- Refresh patches.suse/EDAC-amd64-Use-new-AMD-Address-Translation-Library.patch.
  Fix build due to incomplete line removal
- commit 720d084</changelog>
  <changelog author="ykaukab@suse.de" date="1707652800">- Refresh patches.suse/EDAC-amd64-Use-new-AMD-Address-Translation-Library.patch.
  Fix following error when building kvmsmall config by removing left over
  declaration:
  [  216s] In file included from ../arch/x86/kernel/cpu/mce/core.c:52:0:
  [  216s] ../arch/x86/include/asm/mce.h:366:1: error: duplicate 'static'
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
  [  216s]  ^~~~~~
  [  216s] ../arch/x86/include/asm/mce.h:366:15: error: two or more data types in declaration specifiers
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
  [  216s]                ^~~~
  [  216s] ../arch/x86/include/asm/mce.h: In function 'mce_hygon_feature_init':
  [  216s] ../arch/x86/include/asm/mce.h:366:75: error: void value not ignored as it ought to be
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
  [  216s]                                                                            ^~~~~~~~~~~~~~~~~~~~~~~
  [  216s] ../arch/x86/include/asm/mce.h:366:50: error: control reaches end of non-void function [-Werror=return-type]
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
- commit 7015e17</changelog>
</package>
<package pkgid="9f50ecc650842cdaec446a9704f815ada538511b8ae219353026e922863343bd" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.49.1"/>
  <changelog author="ailiop@suse.com" date="1707220800">- fs: Fix error checking for d_hash_and_lookup() (git-fixes).
- commit b1a5e63</changelog>
  <changelog author="ailiop@suse.com" date="1707220801">- tracefs: Add missing lockdown check to tracefs_create_dir()
  (git-fixes).
- commit 36d0f04</changelog>
  <changelog author="ailiop@suse.com" date="1707220802">- fs: indicate request originates from old mount API (git-fixes).
- commit 8ccbbb1</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1707220803">- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  (CVE-2024-1086 bsc#1219434).
- commit 5f917ff</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1707307200">- netfilter: nf_tables: check if catch-all set element is active
  in next generation (CVE-2024-1085 bsc#1219429).
- commit 7b3f4c4</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307201">- RAS: Introduce AMD Address Translation Library (jsc#PED-7618).
- commit d6ad6ba</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307202">- EDAC/amd64: Use new AMD Address Translation Library (jsc#PED-7618).
- commit f1baba4</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307203">- Documentation: RAS: Add index and address translation section (jsc#PED-7618).
- commit d6e1334</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307204">- RAS/AMD/ATL: Add MI300 support (jsc#PED-7618).
- commit 761e3c8</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307205">- RAS/AMD/ATL: Fix array overflow in get_logical_coh_st_fabric_id_mi300() (jsc#PED-7618).
- commit 83df5af</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307206">- RAS/AMD/ATL: Add MI300 DRAM to normalized address translation support (jsc#PED-7618).
- commit a26a502</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307207">- EDAC/amd64: Add MI300 row retirement support (jsc#PED-7618).
- commit fb688f3</changelog>
  <changelog author="vbabka@suse.cz" date="1707393600">- README.BRANCH: update branch name to cve/linux-5.14, update maintainers
  as requested
- commit 8e34879</changelog>
  <changelog author="vkarasulli@suse.de" date="1707393601">- Update
  patches.suse/Bluetooth-Fix-atomicity-violation-in-min-max-_key_si.patch
  (git-fixes bsc#1219608 CVE-2024-24860).
- commit dedfe8a</changelog>
  <changelog author="vkarasulli@suse.de" date="1707393602">- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
  (git-fixes bsc#1219608 CVE-2024-24860).
- commit a1186fd</changelog>
  <changelog author="neilb@suse.de" date="1707480000">- Refresh patches.suse/nfsd-fix-RELEASE_LOCKOWNER.patch.
  Accidentally removed nfs4_get_stateowner
- commit ad106c0</changelog>
  <changelog author="mkoutny@suse.com" date="1707480001">- README.BRANCH: Update cve/linux-5.14 maintainers
  Add myself to match SLE15-SP5 consumer + fix typo in branch name.
- commit da26653</changelog>
  <changelog author="jgross@suse.com" date="1707480002">- vhost: use kzalloc() instead of kmalloc() followed by memset()
  (CVE-2024-0340, bsc#1218689).
- commit 4c5a740</changelog>
  <changelog author="nik.borisov@suse.com" date="1707480003">- Refresh patches.suse/EDAC-amd64-Use-new-AMD-Address-Translation-Library.patch.
  Fix build due to incomplete line removal
- commit 720d084</changelog>
  <changelog author="ykaukab@suse.de" date="1707652800">- Refresh patches.suse/EDAC-amd64-Use-new-AMD-Address-Translation-Library.patch.
  Fix following error when building kvmsmall config by removing left over
  declaration:
  [  216s] In file included from ../arch/x86/kernel/cpu/mce/core.c:52:0:
  [  216s] ../arch/x86/include/asm/mce.h:366:1: error: duplicate 'static'
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
  [  216s]  ^~~~~~
  [  216s] ../arch/x86/include/asm/mce.h:366:15: error: two or more data types in declaration specifiers
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
  [  216s]                ^~~~
  [  216s] ../arch/x86/include/asm/mce.h: In function 'mce_hygon_feature_init':
  [  216s] ../arch/x86/include/asm/mce.h:366:75: error: void value not ignored as it ought to be
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
  [  216s]                                                                            ^~~~~~~~~~~~~~~~~~~~~~~
  [  216s] ../arch/x86/include/asm/mce.h:366:50: error: control reaches end of non-void function [-Werror=return-type]
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
- commit 7015e17</changelog>
</package>
<package pkgid="2a952f43e98faaa18b5ebda00b2479d52ba24fd07f7141addb85493b69812a8d" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.28.1.150500.6.11.2"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="a05da3a65f0951600b6c1d3afe83127be24ca89b8a241141480e0f34abdc2b4d" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.28.1.150500.6.11.2"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="e0bd7f445336cde9e0ee73481c8e46493ff63292cebe60887f84b00657233694" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.28.1.150500.6.11.2"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="98664f478f2031e789b732672925bf9076bb95ec3fb947154fb4640c74339a9c" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.31.1.150500.6.13.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="bff278d72f0ee91c4e9c4ea5dd500c4c6cbafe1b79219ff68d9a1881f55f9e7a" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.31.1.150500.6.13.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="9c901c434a16362df00c6d85d673b39cd2bc9eaf3bc0042e0c6e8ba0c8cfd344" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.31.1.150500.6.13.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="91ad3ad595d93fe1215120db1244b8cc7f35d137ed1cb123b631b89103499b2c" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.36.1.150500.6.15.3"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="0819628c4e388191616ef6019244544d70f90d696164b78a79ba8e631407b174" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.36.1.150500.6.15.3"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="de516df1adf785b3c831ee5a5eba8225c81375f73a7454a2bb8ac1524ec8538e" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.36.1.150500.6.15.3"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="e35669ae9461f0413699a686bc4b0dd22c2033e58a0d5e979d134edc7685ba46" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.39.1.150500.6.17.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="96dfe69148031db0e010a3085432b4c6af175427b954344e4162460d7dc07769" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.39.1.150500.6.17.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="d49a3af9d220bebcc95fb0914424dbe1960c2cf300acf22a49bb21992a589baa" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.39.1.150500.6.17.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="f51244cf8da04886c0e1b1e2ec72ae3b2b7e26bb8aa00b99ca729a68a1bf9d51" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.44.1.150500.6.19.2"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="57e536b07ef63412e6dc602c514e3733debbaa74f0ad930a8211d9b26dce8b44" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.44.1.150500.6.19.2"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="13855b1dc9ffd2dedd0f5fafc4eecc656e7cb73a36033783ec573c89eabdbece" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.44.1.150500.6.19.2"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="c0fc69916569dfbb32191d076cba56ef8a74c4d7727c0cba772758427aafd8a0" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.49.1.150500.6.21.2"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="4747ffb44be45cd4fbc0309f269503435eb1738645244a84c0ef6b2fd57f187a" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.49.1.150500.6.21.2"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="a6b6bf565b23a38e84a088e2f9c9f1cb4796a91f19ef994abb070c9c7e63a180" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.49.1.150500.6.21.2"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="60d70cad429c66b9da7736fc88a6b8f419c113892fb1077423aa8b3ed087575e" name="kernel-firmware" arch="src">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="eb8a762e891360ac20d943e789a59ae5f1dd8de1b6a4da2c832e463472831635" name="kernel-firmware-all" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="f818d50f89909727a96419aabe79fcc2d534c4f371e6dcf6ceb93bf646c24da3" name="kernel-firmware-amdgpu" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="94109b93447820c17c58366403cd5ebde45bf5901a089e3fa8120e6ec5a25b02" name="kernel-firmware-ath10k" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="2a68a22aacb53dcf0975ec36af3a721898f024ff6e23e9f819a1c4919fbfc288" name="kernel-firmware-ath11k" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="ac317e3c8abcc96a9ee97a56ccd15ae1586a5c06aa370b6d7fb4f5b9bd67108d" name="kernel-firmware-atheros" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="02d1236de09a3db02f37f5a5f2869d0d3f8b9ddfd57f0b8c75f0db45e43c7ab2" name="kernel-firmware-bluetooth" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="5d647fe67460ef2f705d8f9d648d2fb92b4b4f260a8ff72842ffd489b5fa0dc5" name="kernel-firmware-bnx2" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="de5efc5d05049524d12425f33d3968c5375ab4566faf05521b8be646c2701d27" name="kernel-firmware-brcm" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="05d0d6e22d7ccd49ccaf65ad3b58f6da3d693681d6b3cec4bfb8fe560c98d808" name="kernel-firmware-chelsio" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="b122590973ed19b3cb8fcb39bb529857c8dc1e39515ab0b2577b4aca439e914c" name="kernel-firmware-dpaa2" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="f4c474707cda1481348bcd1222ac41ef905b309987f9db90c7da9987e9fa3d03" name="kernel-firmware-i915" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="2007410f503e45bbc0296cb5075a3ea979e21fd57be78276d6dfda7f37c82670" name="kernel-firmware-intel" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="326d438a5b732b3711d43025520c3b33727ffa4517656bd0a0667603754df00e" name="kernel-firmware-iwlwifi" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="bd90810d8436fa0176b635af45e5889618e83d2850ea517579bc4aee508e0a43" name="kernel-firmware-liquidio" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="7b55cbea23cee0c6b61dc469b2f646a621d6e52277c901f6881fc6f97fb3f9f0" name="kernel-firmware-marvell" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="68985c5a9d3d253754e68eed54815feaf2d475761a4d04ee4afc9f05056ef690" name="kernel-firmware-media" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="fac2b76cde09d51992b09d363a86c09325f08f11c29d42eb1b1752a3ffcf82d5" name="kernel-firmware-mediatek" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="d4d5b5a8dbb84d2562ac8f57d8998e8d7da72234f607e832fde2cc6c889888a1" name="kernel-firmware-mellanox" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="7396f061391b0a9d3e8b4354fbeb670aac51e407056863142cd6bf740eb89736" name="kernel-firmware-mwifiex" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="a15fd7e9e6fd144599bafce59eadf0343463fa68c1d579b9463208df1d4f2083" name="kernel-firmware-network" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="b1c843bd68cacf99c2cd1bcb81a87c91fdd912355e59c4244adfdc10977c3898" name="kernel-firmware-nfp" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="40bb7373f515484598de807abe6f278ef9314bc0117a7aedb72ae80f99067f4e" name="kernel-firmware-nvidia" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="34f453cfb8797f1abd0b4b71028ec7a5acae34582d1c3dbd6709cdcaecb57bfb" name="kernel-firmware-nvidia-gspx-G06" arch="aarch64">
  <version epoch="0" ver="535.129.03" rel="150500.11.9.1"/>
  <changelog author="sndirsch@suse.com" date="1674043200">- implements jsc#PED-2658</changelog>
  <changelog author="sndirsch@suse.com" date="1674043201">- renamed rpmlintrc to %{name}-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1674043202">- Remove old specfile constructs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674129600">- Use _firmwaredir</changelog>
  <changelog author="sndirsch@suse.com" date="1674129601">- update firmware to version 525.85.05</changelog>
  <changelog author="sndirsch@suse.com" date="1674129602">- removed old firmware</changelog>
  <changelog author="sndirsch@suse.com" date="1675857600">- update firmware to version 525.89.02</changelog>
  <changelog author="sndirsch@suse.com" date="1680177600">- update firmware to version 525.105.17</changelog>
  <changelog author="sndirsch@suse.com" date="1682424000">- update firmware to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- update firmware to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1685534400">- make package multiversion capable
  * no longer package libnvidia-ml and nvidia-smi
  * added "Provides: multiversion(kernel)"</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- update firmware to version 535.54.03
  * gsp_ad10x.bin has been renamed to gsp_ga10x.bin</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- update firmware to version 535.86.05</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- one-time rename to kernel-firmware-nvidia-gspx-G06 to workaround
  multiversioned package update (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1690372800">- added conflicts to kernel-firmware-nvidia-gsp-G06 package</changelog>
  <changelog author="sndirsch@suse.com" date="1690372801">- remove conflicts from previous change again, since this likely
  would break QA test for sle again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1690372802">- Obsoletes conflicting kernel-firmware-nvidia-gsp-G06 = 535.86.05
  (boo#1212724)
- minor cleanup in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- update firmware to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- update firmware to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- update firmware to version 535.129.03</changelog>
</package>
<package pkgid="6f10eecfe1b17c77eb28c2e8574b10298bf8e15333dbb12d741da2c616f80a66" name="kernel-firmware-nvidia-gspx-G06" arch="src">
  <version epoch="0" ver="535.129.03" rel="150500.11.9.1"/>
  <changelog author="sndirsch@suse.com" date="1674043200">- implements jsc#PED-2658</changelog>
  <changelog author="sndirsch@suse.com" date="1674043201">- renamed rpmlintrc to %{name}-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1674043202">- Remove old specfile constructs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674129600">- Use _firmwaredir</changelog>
  <changelog author="sndirsch@suse.com" date="1674129601">- update firmware to version 525.85.05</changelog>
  <changelog author="sndirsch@suse.com" date="1674129602">- removed old firmware</changelog>
  <changelog author="sndirsch@suse.com" date="1675857600">- update firmware to version 525.89.02</changelog>
  <changelog author="sndirsch@suse.com" date="1680177600">- update firmware to version 525.105.17</changelog>
  <changelog author="sndirsch@suse.com" date="1682424000">- update firmware to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- update firmware to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1685534400">- make package multiversion capable
  * no longer package libnvidia-ml and nvidia-smi
  * added "Provides: multiversion(kernel)"</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- update firmware to version 535.54.03
  * gsp_ad10x.bin has been renamed to gsp_ga10x.bin</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- update firmware to version 535.86.05</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- one-time rename to kernel-firmware-nvidia-gspx-G06 to workaround
  multiversioned package update (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1690372800">- added conflicts to kernel-firmware-nvidia-gsp-G06 package</changelog>
  <changelog author="sndirsch@suse.com" date="1690372801">- remove conflicts from previous change again, since this likely
  would break QA test for sle again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1690372802">- Obsoletes conflicting kernel-firmware-nvidia-gsp-G06 = 535.86.05
  (boo#1212724)
- minor cleanup in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- update firmware to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- update firmware to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- update firmware to version 535.129.03</changelog>
</package>
<package pkgid="342cabae0a708ea2ecec999127f62d25c79f99e2b6ffb7ca2da4304cf1e57cd3" name="kernel-firmware-nvidia-gspx-G06" arch="x86_64">
  <version epoch="0" ver="535.129.03" rel="150500.11.9.1"/>
  <changelog author="sndirsch@suse.com" date="1674043200">- implements jsc#PED-2658</changelog>
  <changelog author="sndirsch@suse.com" date="1674043201">- renamed rpmlintrc to %{name}-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1674043202">- Remove old specfile constructs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674129600">- Use _firmwaredir</changelog>
  <changelog author="sndirsch@suse.com" date="1674129601">- update firmware to version 525.85.05</changelog>
  <changelog author="sndirsch@suse.com" date="1674129602">- removed old firmware</changelog>
  <changelog author="sndirsch@suse.com" date="1675857600">- update firmware to version 525.89.02</changelog>
  <changelog author="sndirsch@suse.com" date="1680177600">- update firmware to version 525.105.17</changelog>
  <changelog author="sndirsch@suse.com" date="1682424000">- update firmware to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- update firmware to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1685534400">- make package multiversion capable
  * no longer package libnvidia-ml and nvidia-smi
  * added "Provides: multiversion(kernel)"</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- update firmware to version 535.54.03
  * gsp_ad10x.bin has been renamed to gsp_ga10x.bin</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- update firmware to version 535.86.05</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- one-time rename to kernel-firmware-nvidia-gspx-G06 to workaround
  multiversioned package update (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1690372800">- added conflicts to kernel-firmware-nvidia-gsp-G06 package</changelog>
  <changelog author="sndirsch@suse.com" date="1690372801">- remove conflicts from previous change again, since this likely
  would break QA test for sle again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1690372802">- Obsoletes conflicting kernel-firmware-nvidia-gsp-G06 = 535.86.05
  (boo#1212724)
- minor cleanup in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- update firmware to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- update firmware to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- update firmware to version 535.129.03</changelog>
</package>
<package pkgid="df5bb44608cf37ee2b8831a0fa30fa5763bcd9ad754fac3c0dea8c36bd03254c" name="kernel-firmware-nvidia-gspx-G06" arch="aarch64">
  <version epoch="0" ver="545.29.02" rel="150500.11.12.1"/>
  <changelog author="sndirsch@suse.com" date="1674043200">- renamed rpmlintrc to %{name}-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1674043201">- Remove old specfile constructs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674129600">- Use _firmwaredir</changelog>
  <changelog author="sndirsch@suse.com" date="1674129601">- update firmware to version 525.85.05</changelog>
  <changelog author="sndirsch@suse.com" date="1674129602">- removed old firmware</changelog>
  <changelog author="sndirsch@suse.com" date="1675857600">- update firmware to version 525.89.02</changelog>
  <changelog author="sndirsch@suse.com" date="1680177600">- update firmware to version 525.105.17</changelog>
  <changelog author="sndirsch@suse.com" date="1682424000">- update firmware to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- update firmware to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1685534400">- make package multiversion capable
  * no longer package libnvidia-ml and nvidia-smi
  * added "Provides: multiversion(kernel)"</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- update firmware to version 535.54.03
  * gsp_ad10x.bin has been renamed to gsp_ga10x.bin</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- update firmware to version 535.86.05</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- one-time rename to kernel-firmware-nvidia-gspx-G06 to workaround
  multiversioned package update (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1690372800">- added conflicts to kernel-firmware-nvidia-gsp-G06 package</changelog>
  <changelog author="sndirsch@suse.com" date="1690372801">- remove conflicts from previous change again, since this likely
  would break QA test for sle again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1690372802">- Obsoletes conflicting kernel-firmware-nvidia-gsp-G06 = 535.86.05
  (boo#1212724)
- minor cleanup in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- update firmware to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- update firmware to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- update firmware to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- update firmware to version 545.29.02</changelog>
</package>
<package pkgid="9ce10cb3c4aafc09e3b893191871520a8c1e7d713426ad05757b4752402b5501" name="kernel-firmware-nvidia-gspx-G06" arch="src">
  <version epoch="0" ver="545.29.02" rel="150500.11.12.1"/>
  <changelog author="sndirsch@suse.com" date="1674043200">- renamed rpmlintrc to %{name}-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1674043201">- Remove old specfile constructs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674129600">- Use _firmwaredir</changelog>
  <changelog author="sndirsch@suse.com" date="1674129601">- update firmware to version 525.85.05</changelog>
  <changelog author="sndirsch@suse.com" date="1674129602">- removed old firmware</changelog>
  <changelog author="sndirsch@suse.com" date="1675857600">- update firmware to version 525.89.02</changelog>
  <changelog author="sndirsch@suse.com" date="1680177600">- update firmware to version 525.105.17</changelog>
  <changelog author="sndirsch@suse.com" date="1682424000">- update firmware to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- update firmware to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1685534400">- make package multiversion capable
  * no longer package libnvidia-ml and nvidia-smi
  * added "Provides: multiversion(kernel)"</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- update firmware to version 535.54.03
  * gsp_ad10x.bin has been renamed to gsp_ga10x.bin</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- update firmware to version 535.86.05</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- one-time rename to kernel-firmware-nvidia-gspx-G06 to workaround
  multiversioned package update (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1690372800">- added conflicts to kernel-firmware-nvidia-gsp-G06 package</changelog>
  <changelog author="sndirsch@suse.com" date="1690372801">- remove conflicts from previous change again, since this likely
  would break QA test for sle again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1690372802">- Obsoletes conflicting kernel-firmware-nvidia-gsp-G06 = 535.86.05
  (boo#1212724)
- minor cleanup in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- update firmware to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- update firmware to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- update firmware to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- update firmware to version 545.29.02</changelog>
</package>
<package pkgid="3daf6e2576a0392efb0435231049faf5d92ca9beeea23c7cc599bb0911612228" name="kernel-firmware-nvidia-gspx-G06" arch="x86_64">
  <version epoch="0" ver="545.29.02" rel="150500.11.12.1"/>
  <changelog author="sndirsch@suse.com" date="1674043200">- renamed rpmlintrc to %{name}-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1674043201">- Remove old specfile constructs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674129600">- Use _firmwaredir</changelog>
  <changelog author="sndirsch@suse.com" date="1674129601">- update firmware to version 525.85.05</changelog>
  <changelog author="sndirsch@suse.com" date="1674129602">- removed old firmware</changelog>
  <changelog author="sndirsch@suse.com" date="1675857600">- update firmware to version 525.89.02</changelog>
  <changelog author="sndirsch@suse.com" date="1680177600">- update firmware to version 525.105.17</changelog>
  <changelog author="sndirsch@suse.com" date="1682424000">- update firmware to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- update firmware to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1685534400">- make package multiversion capable
  * no longer package libnvidia-ml and nvidia-smi
  * added "Provides: multiversion(kernel)"</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- update firmware to version 535.54.03
  * gsp_ad10x.bin has been renamed to gsp_ga10x.bin</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- update firmware to version 535.86.05</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- one-time rename to kernel-firmware-nvidia-gspx-G06 to workaround
  multiversioned package update (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1690372800">- added conflicts to kernel-firmware-nvidia-gsp-G06 package</changelog>
  <changelog author="sndirsch@suse.com" date="1690372801">- remove conflicts from previous change again, since this likely
  would break QA test for sle again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1690372802">- Obsoletes conflicting kernel-firmware-nvidia-gsp-G06 = 535.86.05
  (boo#1212724)
- minor cleanup in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- update firmware to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- update firmware to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- update firmware to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- update firmware to version 545.29.02</changelog>
</package>
<package pkgid="3072b5550b7844318d5e4d7dd18110b5ff3f0f9868fb73cec0bf3061ecc5893e" name="kernel-firmware-nvidia-gspx-G06" arch="aarch64">
  <version epoch="0" ver="545.29.06" rel="150500.11.15.1"/>
  <changelog author="jengelh@inai.de" date="1674043200">- Remove old specfile constructs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674129600">- Use _firmwaredir</changelog>
  <changelog author="sndirsch@suse.com" date="1674129601">- update firmware to version 525.85.05</changelog>
  <changelog author="sndirsch@suse.com" date="1674129602">- removed old firmware</changelog>
  <changelog author="sndirsch@suse.com" date="1675857600">- update firmware to version 525.89.02</changelog>
  <changelog author="sndirsch@suse.com" date="1680177600">- update firmware to version 525.105.17</changelog>
  <changelog author="sndirsch@suse.com" date="1682424000">- update firmware to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- update firmware to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1685534400">- make package multiversion capable
  * no longer package libnvidia-ml and nvidia-smi
  * added "Provides: multiversion(kernel)"</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- update firmware to version 535.54.03
  * gsp_ad10x.bin has been renamed to gsp_ga10x.bin</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- update firmware to version 535.86.05</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- one-time rename to kernel-firmware-nvidia-gspx-G06 to workaround
  multiversioned package update (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1690372800">- added conflicts to kernel-firmware-nvidia-gsp-G06 package</changelog>
  <changelog author="sndirsch@suse.com" date="1690372801">- remove conflicts from previous change again, since this likely
  would break QA test for sle again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1690372802">- Obsoletes conflicting kernel-firmware-nvidia-gsp-G06 = 535.86.05
  (boo#1212724)
- minor cleanup in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- update firmware to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- update firmware to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- update firmware to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- update firmware to version 545.29.02</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- update firmware to version 545.29.06</changelog>
</package>
<package pkgid="4ce55770d213adc2dcf4be8fa3bd8ace768a9147a425e3504a2a1ab7357115df" name="kernel-firmware-nvidia-gspx-G06" arch="src">
  <version epoch="0" ver="545.29.06" rel="150500.11.15.1"/>
  <changelog author="jengelh@inai.de" date="1674043200">- Remove old specfile constructs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674129600">- Use _firmwaredir</changelog>
  <changelog author="sndirsch@suse.com" date="1674129601">- update firmware to version 525.85.05</changelog>
  <changelog author="sndirsch@suse.com" date="1674129602">- removed old firmware</changelog>
  <changelog author="sndirsch@suse.com" date="1675857600">- update firmware to version 525.89.02</changelog>
  <changelog author="sndirsch@suse.com" date="1680177600">- update firmware to version 525.105.17</changelog>
  <changelog author="sndirsch@suse.com" date="1682424000">- update firmware to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- update firmware to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1685534400">- make package multiversion capable
  * no longer package libnvidia-ml and nvidia-smi
  * added "Provides: multiversion(kernel)"</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- update firmware to version 535.54.03
  * gsp_ad10x.bin has been renamed to gsp_ga10x.bin</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- update firmware to version 535.86.05</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- one-time rename to kernel-firmware-nvidia-gspx-G06 to workaround
  multiversioned package update (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1690372800">- added conflicts to kernel-firmware-nvidia-gsp-G06 package</changelog>
  <changelog author="sndirsch@suse.com" date="1690372801">- remove conflicts from previous change again, since this likely
  would break QA test for sle again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1690372802">- Obsoletes conflicting kernel-firmware-nvidia-gsp-G06 = 535.86.05
  (boo#1212724)
- minor cleanup in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- update firmware to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- update firmware to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- update firmware to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- update firmware to version 545.29.02</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- update firmware to version 545.29.06</changelog>
</package>
<package pkgid="d474065ef1d12079468b06679487d844a4e8063e5cfa767b5f9551c5a0030d18" name="kernel-firmware-nvidia-gspx-G06" arch="x86_64">
  <version epoch="0" ver="545.29.06" rel="150500.11.15.1"/>
  <changelog author="jengelh@inai.de" date="1674043200">- Remove old specfile constructs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674129600">- Use _firmwaredir</changelog>
  <changelog author="sndirsch@suse.com" date="1674129601">- update firmware to version 525.85.05</changelog>
  <changelog author="sndirsch@suse.com" date="1674129602">- removed old firmware</changelog>
  <changelog author="sndirsch@suse.com" date="1675857600">- update firmware to version 525.89.02</changelog>
  <changelog author="sndirsch@suse.com" date="1680177600">- update firmware to version 525.105.17</changelog>
  <changelog author="sndirsch@suse.com" date="1682424000">- update firmware to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- update firmware to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1685534400">- make package multiversion capable
  * no longer package libnvidia-ml and nvidia-smi
  * added "Provides: multiversion(kernel)"</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- update firmware to version 535.54.03
  * gsp_ad10x.bin has been renamed to gsp_ga10x.bin</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- update firmware to version 535.86.05</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- one-time rename to kernel-firmware-nvidia-gspx-G06 to workaround
  multiversioned package update (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1690372800">- added conflicts to kernel-firmware-nvidia-gsp-G06 package</changelog>
  <changelog author="sndirsch@suse.com" date="1690372801">- remove conflicts from previous change again, since this likely
  would break QA test for sle again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1690372802">- Obsoletes conflicting kernel-firmware-nvidia-gsp-G06 = 535.86.05
  (boo#1212724)
- minor cleanup in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- update firmware to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- update firmware to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- update firmware to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- update firmware to version 545.29.02</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- update firmware to version 545.29.06</changelog>
</package>
<package pkgid="963cb731e4698e25a406137eead9898c4ac8ad48a682864cd3687af4df24fb64" name="kernel-firmware-platform" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="7b5720f6b4dce3b3a023395efc85cca2528e75099ccde68740525fada22de38f" name="kernel-firmware-prestera" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="f6ab133fabf2c4cb8f1887aac45b85ef5b172aeca058b5855b0d2369f7f26c83" name="kernel-firmware-qcom" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="7cf3951e4ed7daecf31833cc39a5b00d79474be6e59510d2bfe1aa3edfc9261c" name="kernel-firmware-qlogic" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="4714c646e540920e020ca0c586d98fcd265134b0327387e9500f8b4a71a5d108" name="kernel-firmware-radeon" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="21df265bf2ea9a8a1ad6264967f969460acb0333a6880434c14a01b4db9efd27" name="kernel-firmware-realtek" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="a53de8bfaa3002a997d69ab22812a6a757f1559e959cff25baa70d1716320f47" name="kernel-firmware-serial" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="17206b7290b86b4aa35deec67a49e26224bd9ef221aaa14e9922f95dc2a63afa" name="kernel-firmware-sound" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="ccab388cd625957e35bff4b607eb86a6358ab0b4e09c5e3154551a350efbcfde" name="kernel-firmware-ti" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="22763d5e667901ee3af1189aed831b4c09049eaced217e45cea12c81b6511ee3" name="kernel-firmware-ueagle" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="8214b46c8ca3aa7b2a0c5ebd81b3ba79afe7576494ef0c571cb117c3651b0027" name="kernel-firmware-usb-network" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="deb1ce50bbeab4e503f9f6b92dcd58b109c980873b3bf3f3b24de24d0cf42d13" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.13.18.1"/>
  <changelog author="mfranc@suse.cz" date="1694606400">- s390/ipl: add eckd support (jsc#PED-2023).
- commit 21b5156</changelog>
  <changelog author="tiwai@suse.de" date="1694606401">- platform/mellanox: mlxbf-pmc: Fix reading of unprogrammed events
  (git-fixes).
- platform/mellanox: mlxbf-pmc: Fix potential buffer overflows
  (git-fixes).
- platform/mellanox: mlxbf-tmfifo: Drop jumbo frames (git-fixes).
- platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more
  descriptors (git-fixes).
- kselftest/runner.sh: Propagate SIGTERM to runner child
  (git-fixes).
- commit 495d04f</changelog>
  <changelog author="mfranc@suse.cz" date="1694606402">- s390/ipl: add eckd dump support (jsc#PED-2025).
- commit 0961d1f</changelog>
  <changelog author="mfranc@suse.cz" date="1694606403">- kabi: hide changes in enum ipl_type and struct sclp_info
  (jsc#PED-2023 jsc#PED-2025).
- commit b6fb6b6</changelog>
  <changelog author="mfranc@suse.cz" date="1694606404">- s390/ipl: use octal values instead of S_* macros (jsc#PED-2023).
- commit db2ef83</changelog>
  <changelog author="mfranc@suse.cz" date="1694606405">- s390/ipl: add DEFINE_GENERIC_LOADPARM() (jsc#PED-2023).
- commit cd6d27a</changelog>
  <changelog author="mfranc@suse.cz" date="1694606406">- s390/ipl: add loadparm parameter to eckd ipl/reipl data
  (jsc#PED-2023).
- commit 364a30d</changelog>
  <changelog author="mkubecek@suse.cz" date="1694692800">- sctp: leave the err path free in sctp_stream_init to
  sctp_stream_free (CVE-2023-2177 bsc#1210643).
- commit 337b7d8</changelog>
  <changelog author="mkubecek@suse.cz" date="1694779200">- netfilter: nftables: exthdr: fix 4-byte stack OOB write
  (CVE-2023-4881 bsc#1215221).
- commit 0de26c1</changelog>
  <changelog author="jgross@suse.com" date="1694865600">- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due
  to race condition (bsc#1215206, CVE-2023-1859).
- commit f333aa7</changelog>
  <changelog author="wqu@suse.com" date="1695038400">- btrfs: don't hold CPU for too long when defragging a file
  (bsc#1214988).
- commit 9b89645</changelog>
  <changelog author="tiwai@suse.de" date="1695038401">- ata: libata: disallow dev-initiated LPM transitions to
  unsupported states (git-fixes).
- i2c: aspeed: Reset the i2c controller when timeout occurs
  (git-fixes).
- selftests: tracing: Fix to unmount tracefs for recovering
  environment (git-fixes).
- drm/amd/display: fix the white screen issue when &gt;= 64GB DRAM
  (git-fixes).
- drm: gm12u320: Fix the timeout usage for usb_bulk_msg()
  (git-fixes).
- commit 1f4e814</changelog>
  <changelog author="tzimmermann@suse.com" date="1695038402">- blacklist.conf: Append 'parisc/agp: Annotate parisc agp init functions with __init'
- commit 9eb45cc</changelog>
  <changelog author="tzimmermann@suse.com" date="1695038403">- blacklist.conf: Append 'parisc: Flush gatt writes and adjust gatt mask in parisc_agp_mask_memory()'
- commit 30a9db6</changelog>
  <changelog author="tzimmermann@suse.com" date="1695038404">- blacklist.conf: Append 'video/aperture: Only remove sysfb on the default vga pci device'
- commit bfaaaff</changelog>
  <changelog author="tzimmermann@suse.com" date="1695038405">- blacklist.conf: Append 'Revert "fbcon: Use kzalloc() in fbcon_prepare_logo()"'
- commit 501bd2e</changelog>
  <changelog author="osalvador@suse.de" date="1695038406">- Rename colliding patches before merging SLE15-SP4
- commit 6493f7c</changelog>
  <changelog author="jkosina@suse.cz" date="1695297600">- USB: core: Change usb_get_device_descriptor() API (bsc#1213123
  CVE-2023-37453 bsc#1215553 bsc#1215522 bsc#1215552).
  Refresh patches.suse/USB-core-Fix-race-by-not-overwriting-udev-descriptor.patch (add missing hunk)
  Refresh patches.suse/USB-core-Fix-oversight-in-SuperSpeed-initialization.patch (context)
- commit 988a527</changelog>
  <changelog author="osalvador@suse.de" date="1695297601">- Drop amdgpu patch causing spamming (bsc#1215523)
  Deleted:
  patches.suse/drm-amdgpu-install-stub-fence-into-potential-unused-.patch.
- commit c753869</changelog>
  <changelog author="osalvador@suse.de" date="1695384000">- x86/sev: Make enc_dec_hypercall() accept a size instead of
  npages (bsc#1214635).
- commit 1e4ccee</changelog>
</package>
<package pkgid="76a06ecf07a6c53aa61e3ada05b4f9d6941939bae4833997de8ab22660944627" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.13.18.1"/>
  <changelog author="mfranc@suse.cz" date="1694606400">- s390/ipl: add eckd support (jsc#PED-2023).
- commit 21b5156</changelog>
  <changelog author="tiwai@suse.de" date="1694606401">- platform/mellanox: mlxbf-pmc: Fix reading of unprogrammed events
  (git-fixes).
- platform/mellanox: mlxbf-pmc: Fix potential buffer overflows
  (git-fixes).
- platform/mellanox: mlxbf-tmfifo: Drop jumbo frames (git-fixes).
- platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more
  descriptors (git-fixes).
- kselftest/runner.sh: Propagate SIGTERM to runner child
  (git-fixes).
- commit 495d04f</changelog>
  <changelog author="mfranc@suse.cz" date="1694606402">- s390/ipl: add eckd dump support (jsc#PED-2025).
- commit 0961d1f</changelog>
  <changelog author="mfranc@suse.cz" date="1694606403">- kabi: hide changes in enum ipl_type and struct sclp_info
  (jsc#PED-2023 jsc#PED-2025).
- commit b6fb6b6</changelog>
  <changelog author="mfranc@suse.cz" date="1694606404">- s390/ipl: use octal values instead of S_* macros (jsc#PED-2023).
- commit db2ef83</changelog>
  <changelog author="mfranc@suse.cz" date="1694606405">- s390/ipl: add DEFINE_GENERIC_LOADPARM() (jsc#PED-2023).
- commit cd6d27a</changelog>
  <changelog author="mfranc@suse.cz" date="1694606406">- s390/ipl: add loadparm parameter to eckd ipl/reipl data
  (jsc#PED-2023).
- commit 364a30d</changelog>
  <changelog author="mkubecek@suse.cz" date="1694692800">- sctp: leave the err path free in sctp_stream_init to
  sctp_stream_free (CVE-2023-2177 bsc#1210643).
- commit 337b7d8</changelog>
  <changelog author="mkubecek@suse.cz" date="1694779200">- netfilter: nftables: exthdr: fix 4-byte stack OOB write
  (CVE-2023-4881 bsc#1215221).
- commit 0de26c1</changelog>
  <changelog author="jgross@suse.com" date="1694865600">- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due
  to race condition (bsc#1215206, CVE-2023-1859).
- commit f333aa7</changelog>
  <changelog author="wqu@suse.com" date="1695038400">- btrfs: don't hold CPU for too long when defragging a file
  (bsc#1214988).
- commit 9b89645</changelog>
  <changelog author="tiwai@suse.de" date="1695038401">- ata: libata: disallow dev-initiated LPM transitions to
  unsupported states (git-fixes).
- i2c: aspeed: Reset the i2c controller when timeout occurs
  (git-fixes).
- selftests: tracing: Fix to unmount tracefs for recovering
  environment (git-fixes).
- drm/amd/display: fix the white screen issue when &gt;= 64GB DRAM
  (git-fixes).
- drm: gm12u320: Fix the timeout usage for usb_bulk_msg()
  (git-fixes).
- commit 1f4e814</changelog>
  <changelog author="tzimmermann@suse.com" date="1695038402">- blacklist.conf: Append 'parisc/agp: Annotate parisc agp init functions with __init'
- commit 9eb45cc</changelog>
  <changelog author="tzimmermann@suse.com" date="1695038403">- blacklist.conf: Append 'parisc: Flush gatt writes and adjust gatt mask in parisc_agp_mask_memory()'
- commit 30a9db6</changelog>
  <changelog author="tzimmermann@suse.com" date="1695038404">- blacklist.conf: Append 'video/aperture: Only remove sysfb on the default vga pci device'
- commit bfaaaff</changelog>
  <changelog author="tzimmermann@suse.com" date="1695038405">- blacklist.conf: Append 'Revert "fbcon: Use kzalloc() in fbcon_prepare_logo()"'
- commit 501bd2e</changelog>
  <changelog author="osalvador@suse.de" date="1695038406">- Rename colliding patches before merging SLE15-SP4
- commit 6493f7c</changelog>
  <changelog author="jkosina@suse.cz" date="1695297600">- USB: core: Change usb_get_device_descriptor() API (bsc#1213123
  CVE-2023-37453 bsc#1215553 bsc#1215522 bsc#1215552).
  Refresh patches.suse/USB-core-Fix-race-by-not-overwriting-udev-descriptor.patch (add missing hunk)
  Refresh patches.suse/USB-core-Fix-oversight-in-SuperSpeed-initialization.patch (context)
- commit 988a527</changelog>
  <changelog author="osalvador@suse.de" date="1695297601">- Drop amdgpu patch causing spamming (bsc#1215523)
  Deleted:
  patches.suse/drm-amdgpu-install-stub-fence-into-potential-unused-.patch.
- commit c753869</changelog>
  <changelog author="osalvador@suse.de" date="1695384000">- x86/sev: Make enc_dec_hypercall() accept a size instead of
  npages (bsc#1214635).
- commit 1e4ccee</changelog>
</package>
<package pkgid="b6a783ef44ea49fb500fb96b8dbb44f84982f5e20fb452ca5aa6863b85f8d934" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.13.21.1"/>
  <changelog author="pmladek@suse.com" date="1696248000">- printk: ringbuffer: Fix truncating buffer size min_t cast
  (bsc#1215875).
- commit e0d3999</changelog>
  <changelog author="pmladek@suse.com" date="1696248001">- blacklist.conf: printk: the changes look good but they do not fix
  any serious problem
- commit c560ceb</changelog>
  <changelog author="pmladek@suse.com" date="1696248002">- blacklist.conf: workqueue: Code refactoring
- commit e204334</changelog>
  <changelog author="pmladek@suse.com" date="1696248003">- blacklist.conf: workqueue: compiler warning on 32-bit systems with
  Clang (bsc#1215877)
- commit b7e65aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1696334400">- tcp: Reduce chance of collisions in inet6_hashfn()
  (CVE-2023-1206 bsc#1212703).
- commit e3ebd17</changelog>
  <changelog author="mkubecek@suse.cz" date="1696334401">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro
  for ip_set_hash_netportnet.c (CVE-2023-42753 bsc#1215150).
- commit 7a6be79</changelog>
  <changelog author="mfranc@suse.cz" date="1696334402">- KVM: s390: vsie: Fix the initialization of the epoch extension
  (epdx) field (git-fixes bsc#1215894).
- commit 9c5bbd7</changelog>
  <changelog author="mfranc@suse.cz" date="1696334403">- KVM: s390: vsie: fix the length of APCB bitmap (git-fixes
  bsc#1215895).
- commit 9ff1a1e</changelog>
  <changelog author="mfranc@suse.cz" date="1696334404">- KVM: s390: interrupt: use READ_ONCE() before cmpxchg()
  (git-fixes bsc#1215896).
- commit 8726736</changelog>
  <changelog author="mfranc@suse.cz" date="1696334405">- blacklist.conf: kABi breakage (vmalloc)
- commit 10bad47</changelog>
  <changelog author="palcantara@suse.de" date="1696334406">- fs/smb/client: Reset password pointer to NULL (bsc#1215899
  CVE-2023-5345).
- commit 679511d</changelog>
  <changelog author="mfranc@suse.cz" date="1696334407">- KVM: s390/diag: fix racy access of physical cpu number in diag
  9c handler (git-fixes bsc#1215911).
- commit 6454286</changelog>
  <changelog author="mfranc@suse.cz" date="1696334408">- KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes
  (git-fixes bsc#1215915).
- commit fe7fbfc</changelog>
  <changelog author="jdelvare@suse.de" date="1696334409">- btrfs: fix root ref counts in error handling in
  btrfs_get_root_ref (bsc#1214351 CVE-2023-4389).
- commit 3731029</changelog>
  <changelog author="mfranc@suse.cz" date="1696334410">- KVM: s390: pv: fix external interruption loop not always
  detected (git-fixes bsc#1215916).
- commit f1893aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420800">- ipv4: fix null-deref in ipv4_link_failure (CVE-2023-42754
  bsc#1215467).
- commit ad87dd3</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420801">- netfilter: xt_u32: validate user space input (CVE-2023-39192
  bsc#1215858).
- commit 292c059</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420802">- netfilter: xt_sctp: validate the flag_info count (CVE-2023-39193
  bsc#1215860).
- commit 5ec24b7</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420803">- net: xfrm: Fix xfrm_address_filter OOB read (CVE-2023-39194
  bsc#1215861).
- commit 55308cb</changelog>
  <changelog author="mfranc@suse.cz" date="1696420804">- scsi: zfcp: Fix a double put in zfcp_port_enqueue() (git-fixes
  bsc#1215941).
- commit a62865f</changelog>
</package>
<package pkgid="e8aec2aac1b612ad2953298e26a38b6cc3834bce4813b5ada63e5fd73fcfb67b" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.13.21.1"/>
  <changelog author="pmladek@suse.com" date="1696248000">- printk: ringbuffer: Fix truncating buffer size min_t cast
  (bsc#1215875).
- commit e0d3999</changelog>
  <changelog author="pmladek@suse.com" date="1696248001">- blacklist.conf: printk: the changes look good but they do not fix
  any serious problem
- commit c560ceb</changelog>
  <changelog author="pmladek@suse.com" date="1696248002">- blacklist.conf: workqueue: Code refactoring
- commit e204334</changelog>
  <changelog author="pmladek@suse.com" date="1696248003">- blacklist.conf: workqueue: compiler warning on 32-bit systems with
  Clang (bsc#1215877)
- commit b7e65aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1696334400">- tcp: Reduce chance of collisions in inet6_hashfn()
  (CVE-2023-1206 bsc#1212703).
- commit e3ebd17</changelog>
  <changelog author="mkubecek@suse.cz" date="1696334401">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro
  for ip_set_hash_netportnet.c (CVE-2023-42753 bsc#1215150).
- commit 7a6be79</changelog>
  <changelog author="mfranc@suse.cz" date="1696334402">- KVM: s390: vsie: Fix the initialization of the epoch extension
  (epdx) field (git-fixes bsc#1215894).
- commit 9c5bbd7</changelog>
  <changelog author="mfranc@suse.cz" date="1696334403">- KVM: s390: vsie: fix the length of APCB bitmap (git-fixes
  bsc#1215895).
- commit 9ff1a1e</changelog>
  <changelog author="mfranc@suse.cz" date="1696334404">- KVM: s390: interrupt: use READ_ONCE() before cmpxchg()
  (git-fixes bsc#1215896).
- commit 8726736</changelog>
  <changelog author="mfranc@suse.cz" date="1696334405">- blacklist.conf: kABi breakage (vmalloc)
- commit 10bad47</changelog>
  <changelog author="palcantara@suse.de" date="1696334406">- fs/smb/client: Reset password pointer to NULL (bsc#1215899
  CVE-2023-5345).
- commit 679511d</changelog>
  <changelog author="mfranc@suse.cz" date="1696334407">- KVM: s390/diag: fix racy access of physical cpu number in diag
  9c handler (git-fixes bsc#1215911).
- commit 6454286</changelog>
  <changelog author="mfranc@suse.cz" date="1696334408">- KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes
  (git-fixes bsc#1215915).
- commit fe7fbfc</changelog>
  <changelog author="jdelvare@suse.de" date="1696334409">- btrfs: fix root ref counts in error handling in
  btrfs_get_root_ref (bsc#1214351 CVE-2023-4389).
- commit 3731029</changelog>
  <changelog author="mfranc@suse.cz" date="1696334410">- KVM: s390: pv: fix external interruption loop not always
  detected (git-fixes bsc#1215916).
- commit f1893aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420800">- ipv4: fix null-deref in ipv4_link_failure (CVE-2023-42754
  bsc#1215467).
- commit ad87dd3</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420801">- netfilter: xt_u32: validate user space input (CVE-2023-39192
  bsc#1215858).
- commit 292c059</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420802">- netfilter: xt_sctp: validate the flag_info count (CVE-2023-39193
  bsc#1215860).
- commit 5ec24b7</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420803">- net: xfrm: Fix xfrm_address_filter OOB read (CVE-2023-39194
  bsc#1215861).
- commit 55308cb</changelog>
  <changelog author="mfranc@suse.cz" date="1696420804">- scsi: zfcp: Fix a double put in zfcp_port_enqueue() (git-fixes
  bsc#1215941).
- commit a62865f</changelog>
</package>
<package pkgid="f991228cdf56609520c9d8b2d843232dbcff03050270482b9645947ce19a083e" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.13.24.1"/>
  <changelog author="jwiesner@suse.de" date="1697803200">- bonding: do not assume skb mac_header is set (bsc#1214754).
- commit 88b9ad7</changelog>
  <changelog author="jwiesner@suse.de" date="1697803201">- bonding: Return pointer to data after pull on skb (bsc#1214754).
- commit fbbe7cc</changelog>
  <changelog author="tiwai@suse.de" date="1697889600">- ACPI: irq: Fix incorrect return value in acpi_register_gsi()
  (git-fixes).
- Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()"
  (git-fixes).
- mtd: rawnand: qcom: Unmap the right resource upon probe failure
  (git-fixes).
- mtd: rawnand: pl353: Ensure program page operations are
  successful (git-fixes).
- mtd: rawnand: arasan: Ensure program page operations are
  successful (git-fixes).
- mtd: spinand: micron: correct bitmask for ecc status
  (git-fixes).
- mtd: physmap-core: Restore map_rom fallback (git-fixes).
- mtd: rawnand: marvell: Ensure program page operations are
  successful (git-fixes).
- mmc: mtk-sd: Use readl_poll_timeout_atomic in msdc_reset_hw
  (git-fixes).
- mmc: core: sdio: hold retuning if sdio in 1-bit mode
  (git-fixes).
- ASoC: codecs: wcd938x-sdw: fix runtime PM imbalance on probe
  errors (git-fixes).
- ASoC: codecs: wcd938x-sdw: fix use after free on driver unbind
  (git-fixes).
- ASoC: codecs: wcd938x: fix unbind tear down order (git-fixes).
- ASoC: codecs: wcd938x: drop bogus bind error handling
  (git-fixes).
- ASoC: pxa: fix a memory leak in probe() (git-fixes).
- drm/i915: Retry gtt fault when out of fence registers
  (git-fixes).
- commit 766bf5d</changelog>
  <changelog author="mfranc@suse.cz" date="1698062400">- s390/cio: fix a memleak in css_alloc_subchannel (git-fixes
  bsc#1216510).
- commit d475feb</changelog>
  <changelog author="mfranc@suse.cz" date="1698062401">- s390/pci: fix iommu bitmap allocation (git-fixes bsc#1216511).
- commit 2bb6835</changelog>
  <changelog author="mfranc@suse.cz" date="1698062402">- KVM: s390: fix gisa destroy operation might lead to cpu stalls
  (git-fixes bsc#1216512).
- commit 3976fa9</changelog>
  <changelog author="oneukum@suse.com" date="1698148800">- Update
  patches.suse/USB-ene_usb6250-Allocate-enough-memory-for-full-obje.patch
  (bsc#1216051 CVE-2023-45862).
  Retroactively recognized as a security issue
- commit 716929e</changelog>
  <changelog author="mgorman@suse.de" date="1698148801">- Refresh arm64 -rt test config files.
- commit 7274c6e</changelog>
  <changelog author="tiwai@suse.de" date="1698148802">- ubi: Refuse attaching if mtd's erasesize is 0 (CVE-2023-31085
  bsc#1210778).
- commit 86e05f1</changelog>
  <changelog author="mwilck@suse.com" date="1698148803">- nvme-fc: Prevent null pointer dereference in
  nvme_fc_io_getuuid() (bsc#1214842).
- commit 3b513db</changelog>
  <changelog author="lduncan@suse.com" date="1698148804">- blacklist.conf: added two commmits that break kabi
- commit fdf2030</changelog>
  <changelog author="lduncan@suse.com" date="1698148805">- scsi: iscsi_tcp: restrict to TCP sockets (git-fixes).
- scsi: pm8001: Setup IRQs on resume (git-fixes).
- scsi: mpt3sas: Perform additional retries if doorbell read
  returns 0 (git-fixes).
- scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock
  (git-fixes).
- scsi: qedf: Do not touch __user pointer in
  qedf_dbg_fp_int_cmd_read() directly (git-fixes).
- scsi: qedf: Do not touch __user pointer in
  qedf_dbg_debug_cmd_read() directly (git-fixes).
- scsi: qedf: Do not touch __user pointer in
  qedf_dbg_stop_io_on_error_cmd_read() directly (git-fixes).
- scsi: qla4xxx: Add length check when parsing nlattrs
  (git-fixes).
- scsi: be2iscsi: Add length check when parsing nlattrs
  (git-fixes).
- scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param()
  (git-fixes).
- scsi: iscsi: Add length check for nlattr payload (git-fixes).
- scsi: qedi: Fix potential deadlock on &amp;qedi_percpu-&gt;p_work_lock
  (git-fixes).
- scsi: mpi3mr: Propagate sense data for admin queue SCSI I/O
  (git-fixes).
- net: use sk_is_tcp() in more places (git-fixes).
- commit 24cbf21</changelog>
  <changelog author="ohering@suse.de" date="1698321600">- x86/mm: Print the encryption features correctly when a paravisor
  is present (bsc#1206453).
- commit d1a6274</changelog>
  <changelog author="tiwai@suse.de" date="1698321601">- phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins
  (git-fixes).
- phy: mapphone-mdm6600: Fix runtime PM for remove (git-fixes).
- phy: mapphone-mdm6600: Fix runtime disable on probe (git-fixes).
- gpio: vf610: set value before the direction to avoid a glitch
  (git-fixes).
- platform/surface: platform_profile: Propagate error if profile
  registration fails (git-fixes).
- platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c
  events (git-fixes).
- platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from
  0x20 to 0x2e (git-fixes).
- USB: serial: option: add Fibocom to DELL custom modem FM101R-GL
  (git-fixes).
- USB: serial: option: add entry for Sierra EM9191 with new
  firmware (git-fixes).
- USB: serial: option: add Telit LE910C4-WWX 0x1035 composition
  (git-fixes).
- mmc: core: Capture correct oemid-bits for eMMC cards
  (git-fixes).
- Bluetooth: hci_sock: Correctly bounds check and pad
  HCI_MON_NEW_INDEX name (git-fixes).
- Bluetooth: avoid memcmp() out of bounds warning (git-fixes).
- Bluetooth: hci_sock: fix slab oob read in create_monitor_event
  (git-fixes).
- Bluetooth: hci_event: Fix coding style (git-fixes).
- Bluetooth: Reject connection with the device which has same
  BD_ADDR (git-fixes).
- Bluetooth: vhci: Fix race when opening vhci device (git-fixes).
- platform/x86: touchscreen_dmi: Add info for the Positivo C4128B
  (git-fixes).
- drm: panel-orientation-quirks: Add quirk for One Mix 2S
  (git-fixes).
- HID: multitouch: Add required quirk for Synaptics 0xcd7e device
  (git-fixes).
- HID: holtek: fix slab-out-of-bounds Write in
  holtek_kbd_input_event (git-fixes).
- wifi: cfg80211: avoid leaking stack data into trace (git-fixes).
- wifi: mac80211: allow transmitting EAPOL frames with tainted
  key (git-fixes).
- wifi: cfg80211: Fix 6GHz scan configuration (git-fixes).
- wifi: iwlwifi: Ensure ack flag is properly cleared (git-fixes).
- wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len
  (git-fixes).
- Bluetooth: Avoid redundant authentication (git-fixes).
- Bluetooth: btusb: add shutdown function for QCA6174 (git-fixes).
- i2c: mux: Avoid potential false error message in
  i2c_mux_add_adapter (git-fixes).
- gpio: timberdale: Fix potential deadlock on &amp;tgpio-&gt;lock
  (git-fixes).
- commit b480af6</changelog>
  <changelog author="tiwai@suse.de" date="1698321602">- ALSA: hda/realtek - Fixed ASUS platform headset Mic issue
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GU603ZV (git-fixes).
- ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq5xxx
  (git-fixes).
- drm/mediatek: Correctly free sg_table in gem prime vmap
  (git-fixes).
- drm/amd/pm: add unique_id for gc 11.0.3 (git-fixes).
- commit ad38bcf</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321603">- x86/sev: Disable MMIO emulation from user mode (bsc#1212649).
- commit 5dae47e</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321604">- x86/sev: Check IOBM for IOIO exceptions from user-space
  (bsc#1212649).
- commit 2b69036</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321605">- x86/sev: Check for user-space IOIO pointing to kernel space
  (bsc#1212649).
- commit 816f817</changelog>
  <changelog author="spradhan@suse.de" date="1698321606">- btrfs: don't start transaction for scrub if the fs is mounted read-only (bsc#1214874).
- commit cc8e6f1</changelog>
  <changelog author="neilb@suse.de" date="1698408000">- remove unnecessary WARN_ON_ONCE() (bsc#1214823).
- NFSD: Never call nfsd_file_gc() in foreground paths
  (bsc#1215545).
- commit d81dfc3</changelog>
</package>
<package pkgid="76832cb83b2964a0ed8c0606b651b569b8c18c9d396cda072f20f2b1493ca6b0" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.13.24.1"/>
  <changelog author="jwiesner@suse.de" date="1697803200">- bonding: do not assume skb mac_header is set (bsc#1214754).
- commit 88b9ad7</changelog>
  <changelog author="jwiesner@suse.de" date="1697803201">- bonding: Return pointer to data after pull on skb (bsc#1214754).
- commit fbbe7cc</changelog>
  <changelog author="tiwai@suse.de" date="1697889600">- ACPI: irq: Fix incorrect return value in acpi_register_gsi()
  (git-fixes).
- Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()"
  (git-fixes).
- mtd: rawnand: qcom: Unmap the right resource upon probe failure
  (git-fixes).
- mtd: rawnand: pl353: Ensure program page operations are
  successful (git-fixes).
- mtd: rawnand: arasan: Ensure program page operations are
  successful (git-fixes).
- mtd: spinand: micron: correct bitmask for ecc status
  (git-fixes).
- mtd: physmap-core: Restore map_rom fallback (git-fixes).
- mtd: rawnand: marvell: Ensure program page operations are
  successful (git-fixes).
- mmc: mtk-sd: Use readl_poll_timeout_atomic in msdc_reset_hw
  (git-fixes).
- mmc: core: sdio: hold retuning if sdio in 1-bit mode
  (git-fixes).
- ASoC: codecs: wcd938x-sdw: fix runtime PM imbalance on probe
  errors (git-fixes).
- ASoC: codecs: wcd938x-sdw: fix use after free on driver unbind
  (git-fixes).
- ASoC: codecs: wcd938x: fix unbind tear down order (git-fixes).
- ASoC: codecs: wcd938x: drop bogus bind error handling
  (git-fixes).
- ASoC: pxa: fix a memory leak in probe() (git-fixes).
- drm/i915: Retry gtt fault when out of fence registers
  (git-fixes).
- commit 766bf5d</changelog>
  <changelog author="mfranc@suse.cz" date="1698062400">- s390/cio: fix a memleak in css_alloc_subchannel (git-fixes
  bsc#1216510).
- commit d475feb</changelog>
  <changelog author="mfranc@suse.cz" date="1698062401">- s390/pci: fix iommu bitmap allocation (git-fixes bsc#1216511).
- commit 2bb6835</changelog>
  <changelog author="mfranc@suse.cz" date="1698062402">- KVM: s390: fix gisa destroy operation might lead to cpu stalls
  (git-fixes bsc#1216512).
- commit 3976fa9</changelog>
  <changelog author="oneukum@suse.com" date="1698148800">- Update
  patches.suse/USB-ene_usb6250-Allocate-enough-memory-for-full-obje.patch
  (bsc#1216051 CVE-2023-45862).
  Retroactively recognized as a security issue
- commit 716929e</changelog>
  <changelog author="mgorman@suse.de" date="1698148801">- Refresh arm64 -rt test config files.
- commit 7274c6e</changelog>
  <changelog author="tiwai@suse.de" date="1698148802">- ubi: Refuse attaching if mtd's erasesize is 0 (CVE-2023-31085
  bsc#1210778).
- commit 86e05f1</changelog>
  <changelog author="mwilck@suse.com" date="1698148803">- nvme-fc: Prevent null pointer dereference in
  nvme_fc_io_getuuid() (bsc#1214842).
- commit 3b513db</changelog>
  <changelog author="lduncan@suse.com" date="1698148804">- blacklist.conf: added two commmits that break kabi
- commit fdf2030</changelog>
  <changelog author="lduncan@suse.com" date="1698148805">- scsi: iscsi_tcp: restrict to TCP sockets (git-fixes).
- scsi: pm8001: Setup IRQs on resume (git-fixes).
- scsi: mpt3sas: Perform additional retries if doorbell read
  returns 0 (git-fixes).
- scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock
  (git-fixes).
- scsi: qedf: Do not touch __user pointer in
  qedf_dbg_fp_int_cmd_read() directly (git-fixes).
- scsi: qedf: Do not touch __user pointer in
  qedf_dbg_debug_cmd_read() directly (git-fixes).
- scsi: qedf: Do not touch __user pointer in
  qedf_dbg_stop_io_on_error_cmd_read() directly (git-fixes).
- scsi: qla4xxx: Add length check when parsing nlattrs
  (git-fixes).
- scsi: be2iscsi: Add length check when parsing nlattrs
  (git-fixes).
- scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param()
  (git-fixes).
- scsi: iscsi: Add length check for nlattr payload (git-fixes).
- scsi: qedi: Fix potential deadlock on &amp;qedi_percpu-&gt;p_work_lock
  (git-fixes).
- scsi: mpi3mr: Propagate sense data for admin queue SCSI I/O
  (git-fixes).
- net: use sk_is_tcp() in more places (git-fixes).
- commit 24cbf21</changelog>
  <changelog author="ohering@suse.de" date="1698321600">- x86/mm: Print the encryption features correctly when a paravisor
  is present (bsc#1206453).
- commit d1a6274</changelog>
  <changelog author="tiwai@suse.de" date="1698321601">- phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins
  (git-fixes).
- phy: mapphone-mdm6600: Fix runtime PM for remove (git-fixes).
- phy: mapphone-mdm6600: Fix runtime disable on probe (git-fixes).
- gpio: vf610: set value before the direction to avoid a glitch
  (git-fixes).
- platform/surface: platform_profile: Propagate error if profile
  registration fails (git-fixes).
- platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c
  events (git-fixes).
- platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from
  0x20 to 0x2e (git-fixes).
- USB: serial: option: add Fibocom to DELL custom modem FM101R-GL
  (git-fixes).
- USB: serial: option: add entry for Sierra EM9191 with new
  firmware (git-fixes).
- USB: serial: option: add Telit LE910C4-WWX 0x1035 composition
  (git-fixes).
- mmc: core: Capture correct oemid-bits for eMMC cards
  (git-fixes).
- Bluetooth: hci_sock: Correctly bounds check and pad
  HCI_MON_NEW_INDEX name (git-fixes).
- Bluetooth: avoid memcmp() out of bounds warning (git-fixes).
- Bluetooth: hci_sock: fix slab oob read in create_monitor_event
  (git-fixes).
- Bluetooth: hci_event: Fix coding style (git-fixes).
- Bluetooth: Reject connection with the device which has same
  BD_ADDR (git-fixes).
- Bluetooth: vhci: Fix race when opening vhci device (git-fixes).
- platform/x86: touchscreen_dmi: Add info for the Positivo C4128B
  (git-fixes).
- drm: panel-orientation-quirks: Add quirk for One Mix 2S
  (git-fixes).
- HID: multitouch: Add required quirk for Synaptics 0xcd7e device
  (git-fixes).
- HID: holtek: fix slab-out-of-bounds Write in
  holtek_kbd_input_event (git-fixes).
- wifi: cfg80211: avoid leaking stack data into trace (git-fixes).
- wifi: mac80211: allow transmitting EAPOL frames with tainted
  key (git-fixes).
- wifi: cfg80211: Fix 6GHz scan configuration (git-fixes).
- wifi: iwlwifi: Ensure ack flag is properly cleared (git-fixes).
- wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len
  (git-fixes).
- Bluetooth: Avoid redundant authentication (git-fixes).
- Bluetooth: btusb: add shutdown function for QCA6174 (git-fixes).
- i2c: mux: Avoid potential false error message in
  i2c_mux_add_adapter (git-fixes).
- gpio: timberdale: Fix potential deadlock on &amp;tgpio-&gt;lock
  (git-fixes).
- commit b480af6</changelog>
  <changelog author="tiwai@suse.de" date="1698321602">- ALSA: hda/realtek - Fixed ASUS platform headset Mic issue
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GU603ZV (git-fixes).
- ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq5xxx
  (git-fixes).
- drm/mediatek: Correctly free sg_table in gem prime vmap
  (git-fixes).
- drm/amd/pm: add unique_id for gc 11.0.3 (git-fixes).
- commit ad38bcf</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321603">- x86/sev: Disable MMIO emulation from user mode (bsc#1212649).
- commit 5dae47e</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321604">- x86/sev: Check IOBM for IOIO exceptions from user-space
  (bsc#1212649).
- commit 2b69036</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321605">- x86/sev: Check for user-space IOIO pointing to kernel space
  (bsc#1212649).
- commit 816f817</changelog>
  <changelog author="spradhan@suse.de" date="1698321606">- btrfs: don't start transaction for scrub if the fs is mounted read-only (bsc#1214874).
- commit cc8e6f1</changelog>
  <changelog author="neilb@suse.de" date="1698408000">- remove unnecessary WARN_ON_ONCE() (bsc#1214823).
- NFSD: Never call nfsd_file_gc() in foreground paths
  (bsc#1215545).
- commit d81dfc3</changelog>
</package>
<package pkgid="8d9d04c5ebd2a5887877fcd8ba08e392e452ecaa928b010746676047f407ee76" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.13.27.2"/>
  <changelog author="ailiop@suse.com" date="1701518400">- xfs: convert buffer flags to unsigned (git-fixes).
- commit 6147a1c</changelog>
  <changelog author="ailiop@suse.com" date="1701518401">- xfs: convert attr type flags to unsigned (git-fixes).
- commit c641f4d</changelog>
  <changelog author="ailiop@suse.com" date="1701518402">- xfs: convert scrub type flags to unsigned (git-fixes).
- commit c3c7c82</changelog>
  <changelog author="ailiop@suse.com" date="1701518403">- xfs: convert bmap extent type flags to unsigned (git-fixes).
- commit 30fead3</changelog>
  <changelog author="ailiop@suse.com" date="1701518404">- xfs: convert bmapi flags to unsigned (git-fixes).
- commit 1ec6360</changelog>
  <changelog author="ailiop@suse.com" date="1701518405">- xfs: convert AGF log flags to unsigned (git-fixes).
- commit 91cefbb</changelog>
  <changelog author="ailiop@suse.com" date="1701518406">- xfs: convert AGI log flags to unsigned (git-fixes).
- commit 66d955b</changelog>
  <changelog author="ailiop@suse.com" date="1701518407">- xfs: convert btree buffer log flags to unsigned (git-fixes).
- commit ced67a9</changelog>
  <changelog author="ailiop@suse.com" date="1701518408">- xfs: convert buffer log item flags to unsigned (git-fixes).
- commit d4d0c9c</changelog>
  <changelog author="ailiop@suse.com" date="1701518409">- xfs: convert da btree operations flags to unsigned (git-fixes).
- commit 41198d9</changelog>
  <changelog author="ailiop@suse.com" date="1701518410">- xfs: convert dquot flags to unsigned (git-fixes).
- commit 1630213</changelog>
  <changelog author="ailiop@suse.com" date="1701518411">- xfs: convert log item tracepoint flags to unsigned (git-fixes).
- commit 411032a</changelog>
  <changelog author="ailiop@suse.com" date="1701518412">- xfs: convert inode lock flags to unsigned (git-fixes).
- commit 831f7e2</changelog>
  <changelog author="ailiop@suse.com" date="1701518413">- xfs: convert quota options flags to unsigned (git-fixes).
- commit 7dfe466</changelog>
  <changelog author="ailiop@suse.com" date="1701518414">- xfs: convert log ticket and iclog flags to unsigned (git-fixes).
- commit 57245d3</changelog>
  <changelog author="tiwai@suse.de" date="1701604800">- firewire: core: fix possible memory leak in create_units()
  (git-fixes).
- commit 0ade49c</changelog>
  <changelog author="tiwai@suse.de" date="1701691200">- USB: serial: option: add Luat Air72*U series products
  (git-fixes).
- USB: serial: option: add Fibocom L7xx modules (git-fixes).
- USB: serial: option: don't claim interface 4 for ZTE MF290
  (git-fixes).
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA
  (git-fixes).
- commit 4c40fde</changelog>
  <changelog author="mfranc@suse.cz" date="1701691201">- blacklist.conf: this is true for SLE15-SP4 not SLE15-SP5
  The backport was provided in bsc#1215123 for SP5, but it has further
  dependencies not present in SP4, so unless requested by IBM, I'm going
  to skip it for git-fixes.
- commit 5219b23</changelog>
  <changelog author="msuchanek@suse.de" date="1701691202">- powerpc: Don't clobber f0/vs0 during fp|altivec register save
  (bsc#1217780).
- commit 46d31e2</changelog>
  <changelog author="mgorman@suse.de" date="1701777600">- Refresh -rt config files.
- commit d71b92e</changelog>
</package>
<package pkgid="fedc2bc20fe025e61b9f55fc43f64f1e2a88ea0016bc14914342c1b56cb7b834" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.13.27.2"/>
  <changelog author="ailiop@suse.com" date="1701518400">- xfs: convert buffer flags to unsigned (git-fixes).
- commit 6147a1c</changelog>
  <changelog author="ailiop@suse.com" date="1701518401">- xfs: convert attr type flags to unsigned (git-fixes).
- commit c641f4d</changelog>
  <changelog author="ailiop@suse.com" date="1701518402">- xfs: convert scrub type flags to unsigned (git-fixes).
- commit c3c7c82</changelog>
  <changelog author="ailiop@suse.com" date="1701518403">- xfs: convert bmap extent type flags to unsigned (git-fixes).
- commit 30fead3</changelog>
  <changelog author="ailiop@suse.com" date="1701518404">- xfs: convert bmapi flags to unsigned (git-fixes).
- commit 1ec6360</changelog>
  <changelog author="ailiop@suse.com" date="1701518405">- xfs: convert AGF log flags to unsigned (git-fixes).
- commit 91cefbb</changelog>
  <changelog author="ailiop@suse.com" date="1701518406">- xfs: convert AGI log flags to unsigned (git-fixes).
- commit 66d955b</changelog>
  <changelog author="ailiop@suse.com" date="1701518407">- xfs: convert btree buffer log flags to unsigned (git-fixes).
- commit ced67a9</changelog>
  <changelog author="ailiop@suse.com" date="1701518408">- xfs: convert buffer log item flags to unsigned (git-fixes).
- commit d4d0c9c</changelog>
  <changelog author="ailiop@suse.com" date="1701518409">- xfs: convert da btree operations flags to unsigned (git-fixes).
- commit 41198d9</changelog>
  <changelog author="ailiop@suse.com" date="1701518410">- xfs: convert dquot flags to unsigned (git-fixes).
- commit 1630213</changelog>
  <changelog author="ailiop@suse.com" date="1701518411">- xfs: convert log item tracepoint flags to unsigned (git-fixes).
- commit 411032a</changelog>
  <changelog author="ailiop@suse.com" date="1701518412">- xfs: convert inode lock flags to unsigned (git-fixes).
- commit 831f7e2</changelog>
  <changelog author="ailiop@suse.com" date="1701518413">- xfs: convert quota options flags to unsigned (git-fixes).
- commit 7dfe466</changelog>
  <changelog author="ailiop@suse.com" date="1701518414">- xfs: convert log ticket and iclog flags to unsigned (git-fixes).
- commit 57245d3</changelog>
  <changelog author="tiwai@suse.de" date="1701604800">- firewire: core: fix possible memory leak in create_units()
  (git-fixes).
- commit 0ade49c</changelog>
  <changelog author="tiwai@suse.de" date="1701691200">- USB: serial: option: add Luat Air72*U series products
  (git-fixes).
- USB: serial: option: add Fibocom L7xx modules (git-fixes).
- USB: serial: option: don't claim interface 4 for ZTE MF290
  (git-fixes).
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA
  (git-fixes).
- commit 4c40fde</changelog>
  <changelog author="mfranc@suse.cz" date="1701691201">- blacklist.conf: this is true for SLE15-SP4 not SLE15-SP5
  The backport was provided in bsc#1215123 for SP5, but it has further
  dependencies not present in SP4, so unless requested by IBM, I'm going
  to skip it for git-fixes.
- commit 5219b23</changelog>
  <changelog author="msuchanek@suse.de" date="1701691202">- powerpc: Don't clobber f0/vs0 during fp|altivec register save
  (bsc#1217780).
- commit 46d31e2</changelog>
  <changelog author="mgorman@suse.de" date="1701777600">- Refresh -rt config files.
- commit d71b92e</changelog>
</package>
<package pkgid="4f8e75001f33d9adb6a74bf8e470f67dfb7c6af548191b576e5d88ec4e6cdca4" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.13.30.1"/>
  <changelog author="nik.borisov@suse.com" date="1704715200">- x86/CPU/AMD: Check vendor in the AMD microcode callback (git-fixes).
- commit 43e31d9</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715201">- x86/srso: Fix SBPB enablement for (possible) future fixed HW   (git-fixes).
- Refresh
  patches.suse/x86-srso-fix-vulnerability-reporting-for-missing-microcode.patch.
- commit b121d1d</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715202">- x86/srso: Add SRSO mitigation for Hygon processors (git-fixes).
- commit 7b8dfd1</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715203">- x86/smp: Use dedicated cache-line for mwait_play_dead() (git-fixes).
- commit 8087b92</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715204">- x86/alternatives: Disable KASAN in apply_alternatives() (git-fixes).
- commit 7029135</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715205">- x86/alternatives: Sync core before enabling interrupts (git-fixes).
- commit 4a0b72a</changelog>
  <changelog author="ailiop@suse.com" date="1704715206">- gfs2: Silence "suspicious RCU usage in gfs2_permission" warning
  (git-fixes).
- commit 3929c70</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715207">- x86/boot/compressed: Reserve more memory for page tables  (git-fixes).
- commit 6bf16e1</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715208">- x86/boot: Fix incorrect startup_gdt_descr.size (git-fixes).
- commit fdc98a7</changelog>
  <changelog author="pmladek@suse.com" date="1704715209">- vsprintf/kallsyms: Prevent invalid data when printing symbol
  (bsc#1217602).
- commit 8dab9cc</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715210">- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 (git-fixes).
- commit d74349c</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715211">- x86/cpu: Fix amd_check_microcode() declaration (git-fixes).
- Refresh patches.suse/x86-srso-set-cpuid-feature-bits-independently-of-bug-or-mitigation-status.patch.
- commit c22f4b4</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715212">- x86/fpu: Invalidate FPU state correctly on exec() (git-fixes).
- commit 7686df9</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715213">- x86/fpu/xstate: Prevent false-positive warning in __copy_xstate_uabi_buf() (git-fixes).
- commit 46d60b3</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715214">- x86/purgatory: Remove LTO flags (git-fixes).
- commit bbd4f84</changelog>
  <changelog author="palcantara@suse.de" date="1704715215">- smb: client: fix potential OOB in smb2_dump_detail()
  (bsc#1217946 CVE-2023-6610).
- commit cfca7f7</changelog>
  <changelog author="jroedel@suse.de" date="1704801600">- swiotlb: reduce the number of areas to match actual memory
  pool size (git-fixes).
- swiotlb: always set the number of areas before allocating the
  pool (git-fixes).
- swiotlb: fix debugfs reporting of reserved memory pools
  (git-fixes).
- swiotlb: fix a braino in the alignment check fix (bsc#1216559).
- swiotlb: fix slot alignment checks (bsc#1216559).
- swiotlb: fix the deadlock in swiotlb_do_find_slots (git-fixes).
- swiotlb: reduce the swiotlb buffer size on allocation failure
  (git-fixes).
- swiotlb: don't panic! (git-fixes).
- Revert "swiotlb: panic if nslabs is too small" (git-fixes).
- commit 1b89825</changelog>
  <changelog author="ohering@suse.de" date="1704801601">- io_uring/af_unix: disable sending io_uring over sockets
  (bsc#1218447, CVE-2023-6531).
- commit fdc256b</changelog>
  <changelog author="jroedel@suse.de" date="1704801602">- swiotlb: use the calculated number of areas (git-fixes).
- swiotlb: mark swiotlb_memblock_alloc() as __init (git-fixes).
- commit b9aedb4</changelog>
  <changelog author="mkoutny@suse.com" date="1704801603">- Update patches.kabi/kabi-fix-zone-unaccepted-memory.patch
  (jsc#PED-7167 bsc#1218643).
- commit f781e3d</changelog>
</package>
<package pkgid="bae0392ed3dc18bb9928d33b573ad19a598789302aca63bc0e5c169a561fd544" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.13.30.1"/>
  <changelog author="nik.borisov@suse.com" date="1704715200">- x86/CPU/AMD: Check vendor in the AMD microcode callback (git-fixes).
- commit 43e31d9</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715201">- x86/srso: Fix SBPB enablement for (possible) future fixed HW   (git-fixes).
- Refresh
  patches.suse/x86-srso-fix-vulnerability-reporting-for-missing-microcode.patch.
- commit b121d1d</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715202">- x86/srso: Add SRSO mitigation for Hygon processors (git-fixes).
- commit 7b8dfd1</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715203">- x86/smp: Use dedicated cache-line for mwait_play_dead() (git-fixes).
- commit 8087b92</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715204">- x86/alternatives: Disable KASAN in apply_alternatives() (git-fixes).
- commit 7029135</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715205">- x86/alternatives: Sync core before enabling interrupts (git-fixes).
- commit 4a0b72a</changelog>
  <changelog author="ailiop@suse.com" date="1704715206">- gfs2: Silence "suspicious RCU usage in gfs2_permission" warning
  (git-fixes).
- commit 3929c70</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715207">- x86/boot/compressed: Reserve more memory for page tables  (git-fixes).
- commit 6bf16e1</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715208">- x86/boot: Fix incorrect startup_gdt_descr.size (git-fixes).
- commit fdc98a7</changelog>
  <changelog author="pmladek@suse.com" date="1704715209">- vsprintf/kallsyms: Prevent invalid data when printing symbol
  (bsc#1217602).
- commit 8dab9cc</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715210">- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 (git-fixes).
- commit d74349c</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715211">- x86/cpu: Fix amd_check_microcode() declaration (git-fixes).
- Refresh patches.suse/x86-srso-set-cpuid-feature-bits-independently-of-bug-or-mitigation-status.patch.
- commit c22f4b4</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715212">- x86/fpu: Invalidate FPU state correctly on exec() (git-fixes).
- commit 7686df9</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715213">- x86/fpu/xstate: Prevent false-positive warning in __copy_xstate_uabi_buf() (git-fixes).
- commit 46d60b3</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715214">- x86/purgatory: Remove LTO flags (git-fixes).
- commit bbd4f84</changelog>
  <changelog author="palcantara@suse.de" date="1704715215">- smb: client: fix potential OOB in smb2_dump_detail()
  (bsc#1217946 CVE-2023-6610).
- commit cfca7f7</changelog>
  <changelog author="jroedel@suse.de" date="1704801600">- swiotlb: reduce the number of areas to match actual memory
  pool size (git-fixes).
- swiotlb: always set the number of areas before allocating the
  pool (git-fixes).
- swiotlb: fix debugfs reporting of reserved memory pools
  (git-fixes).
- swiotlb: fix a braino in the alignment check fix (bsc#1216559).
- swiotlb: fix slot alignment checks (bsc#1216559).
- swiotlb: fix the deadlock in swiotlb_do_find_slots (git-fixes).
- swiotlb: reduce the swiotlb buffer size on allocation failure
  (git-fixes).
- swiotlb: don't panic! (git-fixes).
- Revert "swiotlb: panic if nslabs is too small" (git-fixes).
- commit 1b89825</changelog>
  <changelog author="ohering@suse.de" date="1704801601">- io_uring/af_unix: disable sending io_uring over sockets
  (bsc#1218447, CVE-2023-6531).
- commit fdc256b</changelog>
  <changelog author="jroedel@suse.de" date="1704801602">- swiotlb: use the calculated number of areas (git-fixes).
- swiotlb: mark swiotlb_memblock_alloc() as __init (git-fixes).
- commit b9aedb4</changelog>
  <changelog author="mkoutny@suse.com" date="1704801603">- Update patches.kabi/kabi-fix-zone-unaccepted-memory.patch
  (jsc#PED-7167 bsc#1218643).
- commit f781e3d</changelog>
</package>
<package pkgid="9daf36c2ec19eb1295acb094f3f3ce2c070aacca868f73146cbfe89841669642" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.13.35.1"/>
  <changelog author="ailiop@suse.com" date="1707220800">- fs: Fix error checking for d_hash_and_lookup() (git-fixes).
- commit b1a5e63</changelog>
  <changelog author="ailiop@suse.com" date="1707220801">- tracefs: Add missing lockdown check to tracefs_create_dir()
  (git-fixes).
- commit 36d0f04</changelog>
  <changelog author="ailiop@suse.com" date="1707220802">- fs: indicate request originates from old mount API (git-fixes).
- commit 8ccbbb1</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1707220803">- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  (CVE-2024-1086 bsc#1219434).
- commit 5f917ff</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1707307200">- netfilter: nf_tables: check if catch-all set element is active
  in next generation (CVE-2024-1085 bsc#1219429).
- commit 7b3f4c4</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307201">- RAS: Introduce AMD Address Translation Library (jsc#PED-7618).
- commit d6ad6ba</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307202">- EDAC/amd64: Use new AMD Address Translation Library (jsc#PED-7618).
- commit f1baba4</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307203">- Documentation: RAS: Add index and address translation section (jsc#PED-7618).
- commit d6e1334</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307204">- RAS/AMD/ATL: Add MI300 support (jsc#PED-7618).
- commit 761e3c8</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307205">- RAS/AMD/ATL: Fix array overflow in get_logical_coh_st_fabric_id_mi300() (jsc#PED-7618).
- commit 83df5af</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307206">- RAS/AMD/ATL: Add MI300 DRAM to normalized address translation support (jsc#PED-7618).
- commit a26a502</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307207">- EDAC/amd64: Add MI300 row retirement support (jsc#PED-7618).
- commit fb688f3</changelog>
  <changelog author="vbabka@suse.cz" date="1707393600">- README.BRANCH: update branch name to cve/linux-5.14, update maintainers
  as requested
- commit 8e34879</changelog>
  <changelog author="vkarasulli@suse.de" date="1707393601">- Update
  patches.suse/Bluetooth-Fix-atomicity-violation-in-min-max-_key_si.patch
  (git-fixes bsc#1219608 CVE-2024-24860).
- commit dedfe8a</changelog>
  <changelog author="vkarasulli@suse.de" date="1707393602">- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
  (git-fixes bsc#1219608 CVE-2024-24860).
- commit a1186fd</changelog>
  <changelog author="neilb@suse.de" date="1707480000">- Refresh patches.suse/nfsd-fix-RELEASE_LOCKOWNER.patch.
  Accidentally removed nfs4_get_stateowner
- commit ad106c0</changelog>
  <changelog author="mkoutny@suse.com" date="1707480001">- README.BRANCH: Update cve/linux-5.14 maintainers
  Add myself to match SLE15-SP5 consumer + fix typo in branch name.
- commit da26653</changelog>
  <changelog author="jgross@suse.com" date="1707480002">- vhost: use kzalloc() instead of kmalloc() followed by memset()
  (CVE-2024-0340, bsc#1218689).
- commit 4c5a740</changelog>
  <changelog author="nik.borisov@suse.com" date="1707480003">- Refresh patches.suse/EDAC-amd64-Use-new-AMD-Address-Translation-Library.patch.
  Fix build due to incomplete line removal
- commit 720d084</changelog>
  <changelog author="ykaukab@suse.de" date="1707652800">- Refresh patches.suse/EDAC-amd64-Use-new-AMD-Address-Translation-Library.patch.
  Fix following error when building kvmsmall config by removing left over
  declaration:
  [  216s] In file included from ../arch/x86/kernel/cpu/mce/core.c:52:0:
  [  216s] ../arch/x86/include/asm/mce.h:366:1: error: duplicate 'static'
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
  [  216s]  ^~~~~~
  [  216s] ../arch/x86/include/asm/mce.h:366:15: error: two or more data types in declaration specifiers
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
  [  216s]                ^~~~
  [  216s] ../arch/x86/include/asm/mce.h: In function 'mce_hygon_feature_init':
  [  216s] ../arch/x86/include/asm/mce.h:366:75: error: void value not ignored as it ought to be
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
  [  216s]                                                                            ^~~~~~~~~~~~~~~~~~~~~~~
  [  216s] ../arch/x86/include/asm/mce.h:366:50: error: control reaches end of non-void function [-Werror=return-type]
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
- commit 7015e17</changelog>
</package>
<package pkgid="9793f49555a27cbed25b5531fa830c3b618363b668c7b2f7f4b58a703eb5e81e" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.13.35.1"/>
  <changelog author="ailiop@suse.com" date="1707220800">- fs: Fix error checking for d_hash_and_lookup() (git-fixes).
- commit b1a5e63</changelog>
  <changelog author="ailiop@suse.com" date="1707220801">- tracefs: Add missing lockdown check to tracefs_create_dir()
  (git-fixes).
- commit 36d0f04</changelog>
  <changelog author="ailiop@suse.com" date="1707220802">- fs: indicate request originates from old mount API (git-fixes).
- commit 8ccbbb1</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1707220803">- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  (CVE-2024-1086 bsc#1219434).
- commit 5f917ff</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1707307200">- netfilter: nf_tables: check if catch-all set element is active
  in next generation (CVE-2024-1085 bsc#1219429).
- commit 7b3f4c4</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307201">- RAS: Introduce AMD Address Translation Library (jsc#PED-7618).
- commit d6ad6ba</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307202">- EDAC/amd64: Use new AMD Address Translation Library (jsc#PED-7618).
- commit f1baba4</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307203">- Documentation: RAS: Add index and address translation section (jsc#PED-7618).
- commit d6e1334</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307204">- RAS/AMD/ATL: Add MI300 support (jsc#PED-7618).
- commit 761e3c8</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307205">- RAS/AMD/ATL: Fix array overflow in get_logical_coh_st_fabric_id_mi300() (jsc#PED-7618).
- commit 83df5af</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307206">- RAS/AMD/ATL: Add MI300 DRAM to normalized address translation support (jsc#PED-7618).
- commit a26a502</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307207">- EDAC/amd64: Add MI300 row retirement support (jsc#PED-7618).
- commit fb688f3</changelog>
  <changelog author="vbabka@suse.cz" date="1707393600">- README.BRANCH: update branch name to cve/linux-5.14, update maintainers
  as requested
- commit 8e34879</changelog>
  <changelog author="vkarasulli@suse.de" date="1707393601">- Update
  patches.suse/Bluetooth-Fix-atomicity-violation-in-min-max-_key_si.patch
  (git-fixes bsc#1219608 CVE-2024-24860).
- commit dedfe8a</changelog>
  <changelog author="vkarasulli@suse.de" date="1707393602">- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
  (git-fixes bsc#1219608 CVE-2024-24860).
- commit a1186fd</changelog>
  <changelog author="neilb@suse.de" date="1707480000">- Refresh patches.suse/nfsd-fix-RELEASE_LOCKOWNER.patch.
  Accidentally removed nfs4_get_stateowner
- commit ad106c0</changelog>
  <changelog author="mkoutny@suse.com" date="1707480001">- README.BRANCH: Update cve/linux-5.14 maintainers
  Add myself to match SLE15-SP5 consumer + fix typo in branch name.
- commit da26653</changelog>
  <changelog author="jgross@suse.com" date="1707480002">- vhost: use kzalloc() instead of kmalloc() followed by memset()
  (CVE-2024-0340, bsc#1218689).
- commit 4c5a740</changelog>
  <changelog author="nik.borisov@suse.com" date="1707480003">- Refresh patches.suse/EDAC-amd64-Use-new-AMD-Address-Translation-Library.patch.
  Fix build due to incomplete line removal
- commit 720d084</changelog>
  <changelog author="ykaukab@suse.de" date="1707652800">- Refresh patches.suse/EDAC-amd64-Use-new-AMD-Address-Translation-Library.patch.
  Fix following error when building kvmsmall config by removing left over
  declaration:
  [  216s] In file included from ../arch/x86/kernel/cpu/mce/core.c:52:0:
  [  216s] ../arch/x86/include/asm/mce.h:366:1: error: duplicate 'static'
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
  [  216s]  ^~~~~~
  [  216s] ../arch/x86/include/asm/mce.h:366:15: error: two or more data types in declaration specifiers
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
  [  216s]                ^~~~
  [  216s] ../arch/x86/include/asm/mce.h: In function 'mce_hygon_feature_init':
  [  216s] ../arch/x86/include/asm/mce.h:366:75: error: void value not ignored as it ought to be
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
  [  216s]                                                                            ^~~~~~~~~~~~~~~~~~~~~~~
  [  216s] ../arch/x86/include/asm/mce.h:366:50: error: control reaches end of non-void function [-Werror=return-type]
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
- commit 7015e17</changelog>
</package>
<package pkgid="4073f28ceebed1195f22224fc676bf9f90982e18d4532e86d0e34d55b353fb75" name="kpartx" arch="aarch64">
  <version epoch="0" ver="0.9.4+77+suse.1f7a63b" rel="150500.3.6.1"/>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1662206400">- Update to version 0.9.0+134+suse.dbf2e2d:
  * Add multipathc command under GPL3.0, and split off libmpathutil
    (bsc#1202616)
  * Fix command completion in interactive mode (bsc#1201483)
  * multipathd: fix use-after-free in handle_path_wwid_change()
    (bsc#1201483)
  * Improve startup time for very large multipath.conf (bsc#1200523)
  * Avoid checker blocking event handling for huge number of devices
    (boo#1203085)
  * Cleanup sysfs accessors in libmultipath
  * Minor upstream bug fixes
  * Spelling fixes
  * Documentation: add ALUA info to README.md, delete README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1662552000">- Update to version 0.9.1+48+suse.9c6c435:
  * Upstream version update
  * kpartx_id: remove bashism
  * Doc: add multipathc.8 manual page</changelog>
  <changelog author="mwilck@suse.com" date="1662724800">- Update to version 0.9.1+52+suse.be8809e:
  * Code-identical to 0.9.1+48+suse.9c6c435 (merge in git repo
    to preserve history; fix revision in _service file).</changelog>
  <changelog author="mwilck@suse.com" date="1666612800">- Update to version 0.9.2+57+suse.cf3c1e9:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * Upstream bug fixes and hwtable updates
- Drop recompress.service, it just slows down build</changelog>
  <changelog author="mwilck@suse.com" date="1666785600">- Update to version 0.9.2+59+suse.ac8942d:
  * Fix segfault in "multipath -t" command (boo#1204731)</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 0.9.4+68+suse.98559ea:
  * libmultipath: bump ABI version to 18.0.0
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * libmultipath: don't leak memory on invalid strings  (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * minor bugfixes
  * hwtable fixes
  * Build system rework
  * spec file: adapt make command line to changes in build system
  * spec file: use make -Orecurse (better readable output)
  * spec file: use verbose build</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.4+71+suse.c648a77:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.4+73+suse.a5414a6:
  * libmultipath: ignore nvme devices if nvme native multipath is enabled
    (bsc#1212854)
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)
    Note: this changes user-visible behavior. multipathd will not
    grab any nvme devices for dm-multipath if nvme native multipathing
    is on (which is the default on SLE and openSUSE).</changelog>
  <changelog author="mwilck@suse.com" date="1704456000">- Update to version 0.9.4+77+suse.1f7a63b:
  * fix ANA prioritizer enablement logic (bsc#1218326)</changelog>
</package>
<package pkgid="b1a2ac8afe0d52a04eb2eca95c82060b29c3f9befb1f470f8efa238a11b73ac5" name="kpartx" arch="s390x">
  <version epoch="0" ver="0.9.4+77+suse.1f7a63b" rel="150500.3.6.1"/>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1662206400">- Update to version 0.9.0+134+suse.dbf2e2d:
  * Add multipathc command under GPL3.0, and split off libmpathutil
    (bsc#1202616)
  * Fix command completion in interactive mode (bsc#1201483)
  * multipathd: fix use-after-free in handle_path_wwid_change()
    (bsc#1201483)
  * Improve startup time for very large multipath.conf (bsc#1200523)
  * Avoid checker blocking event handling for huge number of devices
    (boo#1203085)
  * Cleanup sysfs accessors in libmultipath
  * Minor upstream bug fixes
  * Spelling fixes
  * Documentation: add ALUA info to README.md, delete README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1662552000">- Update to version 0.9.1+48+suse.9c6c435:
  * Upstream version update
  * kpartx_id: remove bashism
  * Doc: add multipathc.8 manual page</changelog>
  <changelog author="mwilck@suse.com" date="1662724800">- Update to version 0.9.1+52+suse.be8809e:
  * Code-identical to 0.9.1+48+suse.9c6c435 (merge in git repo
    to preserve history; fix revision in _service file).</changelog>
  <changelog author="mwilck@suse.com" date="1666612800">- Update to version 0.9.2+57+suse.cf3c1e9:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * Upstream bug fixes and hwtable updates
- Drop recompress.service, it just slows down build</changelog>
  <changelog author="mwilck@suse.com" date="1666785600">- Update to version 0.9.2+59+suse.ac8942d:
  * Fix segfault in "multipath -t" command (boo#1204731)</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 0.9.4+68+suse.98559ea:
  * libmultipath: bump ABI version to 18.0.0
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * libmultipath: don't leak memory on invalid strings  (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * minor bugfixes
  * hwtable fixes
  * Build system rework
  * spec file: adapt make command line to changes in build system
  * spec file: use make -Orecurse (better readable output)
  * spec file: use verbose build</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.4+71+suse.c648a77:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.4+73+suse.a5414a6:
  * libmultipath: ignore nvme devices if nvme native multipath is enabled
    (bsc#1212854)
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)
    Note: this changes user-visible behavior. multipathd will not
    grab any nvme devices for dm-multipath if nvme native multipathing
    is on (which is the default on SLE and openSUSE).</changelog>
  <changelog author="mwilck@suse.com" date="1704456000">- Update to version 0.9.4+77+suse.1f7a63b:
  * fix ANA prioritizer enablement logic (bsc#1218326)</changelog>
</package>
<package pkgid="54b5bb1c3891985a83c1bba0583ee0190a652bd78edfcf5f426f915245ddffb9" name="kpartx" arch="x86_64">
  <version epoch="0" ver="0.9.4+77+suse.1f7a63b" rel="150500.3.6.1"/>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1662206400">- Update to version 0.9.0+134+suse.dbf2e2d:
  * Add multipathc command under GPL3.0, and split off libmpathutil
    (bsc#1202616)
  * Fix command completion in interactive mode (bsc#1201483)
  * multipathd: fix use-after-free in handle_path_wwid_change()
    (bsc#1201483)
  * Improve startup time for very large multipath.conf (bsc#1200523)
  * Avoid checker blocking event handling for huge number of devices
    (boo#1203085)
  * Cleanup sysfs accessors in libmultipath
  * Minor upstream bug fixes
  * Spelling fixes
  * Documentation: add ALUA info to README.md, delete README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1662552000">- Update to version 0.9.1+48+suse.9c6c435:
  * Upstream version update
  * kpartx_id: remove bashism
  * Doc: add multipathc.8 manual page</changelog>
  <changelog author="mwilck@suse.com" date="1662724800">- Update to version 0.9.1+52+suse.be8809e:
  * Code-identical to 0.9.1+48+suse.9c6c435 (merge in git repo
    to preserve history; fix revision in _service file).</changelog>
  <changelog author="mwilck@suse.com" date="1666612800">- Update to version 0.9.2+57+suse.cf3c1e9:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * Upstream bug fixes and hwtable updates
- Drop recompress.service, it just slows down build</changelog>
  <changelog author="mwilck@suse.com" date="1666785600">- Update to version 0.9.2+59+suse.ac8942d:
  * Fix segfault in "multipath -t" command (boo#1204731)</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 0.9.4+68+suse.98559ea:
  * libmultipath: bump ABI version to 18.0.0
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * libmultipath: don't leak memory on invalid strings  (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * minor bugfixes
  * hwtable fixes
  * Build system rework
  * spec file: adapt make command line to changes in build system
  * spec file: use make -Orecurse (better readable output)
  * spec file: use verbose build</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.4+71+suse.c648a77:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.4+73+suse.a5414a6:
  * libmultipath: ignore nvme devices if nvme native multipath is enabled
    (bsc#1212854)
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)
    Note: this changes user-visible behavior. multipathd will not
    grab any nvme devices for dm-multipath if nvme native multipathing
    is on (which is the default on SLE and openSUSE).</changelog>
  <changelog author="mwilck@suse.com" date="1704456000">- Update to version 0.9.4+77+suse.1f7a63b:
  * fix ANA prioritizer enablement logic (bsc#1218326)</changelog>
</package>
<package pkgid="757c67318addcf8c2e78fe63674fb44ac003d32fdd86d08d4377ef8cb44c129c" name="kubevirt" arch="src">
  <version epoch="0" ver="1.0.0" rel="150500.8.3.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1645444800">- Allow to configure utility containers for update test
  0001-improve-kubevirt-update-test.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645531200">- Drop kubevirt-psp-caasp.yaml</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Use semantic equality comparison
  0002-use-semantic-equality-comparison.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393601">- Avoid to return nil failure message
  0003-Avoid-to-return-nil-failure-message.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393602">- Increase storage requirements in _constraints
- Pack nft rules and nsswitch.conf for virt-handler
- Only create 1MiB-aligned disk images (bsc#1199603)
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 0.57.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.57.0
- Drop upstreamed patches:
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch
  0004-Update-libvirt-go-to-fix-memory-leak.patch
  0005-Improve-non-root-path-handling
  0006-topology-spread-constraints.patch
  0007-Fix-containerdisk-unmount-logic.patch
- Build new packages: virt-exportproxy and virt-exportserver
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665748800">- Update to version 0.58.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1670500800">- Fix libguestfs pod startup error
  0001-guestfs-flag-to-set-uid-and-gid.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1671537600">- Use JSON syntax for slirp device
  0002-network-Use-JSON-syntax-for-slirp-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0004-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1689940800">- Update to version 1.0.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.0
- Drop patches
  0001-guestfs-flag-to-set-uid-and-gid.patch
  0002-network-Use-JSON-syntax-for-slirp-device.patch
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch
  0004-TSC-frequencies-add-250PPM-tolerance.patch
- Add patches
  0001-Fix-qemu-system-lookup.patch
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1690286400">- Use compat cmdline options for virtiofsd
  0005-Use-compat-cmdline-options-for-virtiofsd.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1693224000">- Fix leaking file descriptor
  0006-isolation-close-file-when-exits.patch
- Fix volume detach on hotplug attachment pod delete
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
- Fix leaking tickers
  0008-fix-ticker-leak.patch
- Run helper pod as qemu user
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
- SCSI reservation: fix leftover mount and resource permissions
  0010-Fix-PR-leftover-mount-and-perms.patch
- Bump client-go (fix possible panic in discovery)
  0011-Fix-Aggregated-Discovery.patch
- Wait for new hotplug attachment pod to be ready
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
- Adapt the storage tests to the new populators flow
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
- Create export VM datavolumes compatible with populators
  0014-Export-create-populator-compatible-datavolumes-from-.patch
- Delete VMI prior to NFS server pod in tests
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch</changelog>
</package>
<package pkgid="628ab6dbe53c1aeb1ea1adf517727ae7642e1034aa5b3d35ea7e67779f838491" name="kubevirt" arch="src">
  <version epoch="0" ver="1.1.0" rel="150500.8.6.1"/>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Use semantic equality comparison
  0002-use-semantic-equality-comparison.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393601">- Avoid to return nil failure message
  0003-Avoid-to-return-nil-failure-message.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393602">- Increase storage requirements in _constraints
- Pack nft rules and nsswitch.conf for virt-handler
- Only create 1MiB-aligned disk images (bsc#1199603)
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 0.57.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.57.0
- Drop upstreamed patches:
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch
  0004-Update-libvirt-go-to-fix-memory-leak.patch
  0005-Improve-non-root-path-handling
  0006-topology-spread-constraints.patch
  0007-Fix-containerdisk-unmount-logic.patch
- Build new packages: virt-exportproxy and virt-exportserver
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665748800">- Update to version 0.58.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1670500800">- Fix libguestfs pod startup error
  0001-guestfs-flag-to-set-uid-and-gid.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1671537600">- Use JSON syntax for slirp device
  0002-network-Use-JSON-syntax-for-slirp-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0004-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1689940800">- Update to version 1.0.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.0
- Drop patches
  0001-guestfs-flag-to-set-uid-and-gid.patch
  0002-network-Use-JSON-syntax-for-slirp-device.patch
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch
  0004-TSC-frequencies-add-250PPM-tolerance.patch
- Add patches
  0001-Fix-qemu-system-lookup.patch
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1690286400">- Use compat cmdline options for virtiofsd
  0005-Use-compat-cmdline-options-for-virtiofsd.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1693224000">- Fix leaking file descriptor
  0006-isolation-close-file-when-exits.patch
- Fix volume detach on hotplug attachment pod delete
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
- Fix leaking tickers
  0008-fix-ticker-leak.patch
- Run helper pod as qemu user
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
- SCSI reservation: fix leftover mount and resource permissions
  0010-Fix-PR-leftover-mount-and-perms.patch
- Bump client-go (fix possible panic in discovery)
  0011-Fix-Aggregated-Discovery.patch
- Wait for new hotplug attachment pod to be ready
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
- Adapt the storage tests to the new populators flow
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
- Create export VM datavolumes compatible with populators
  0014-Export-create-populator-compatible-datavolumes-from-.patch
- Delete VMI prior to NFS server pod in tests
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697630400">- Update to version 1.0.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.1
- Drop patches:
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
  0006-isolation-close-file-when-exits.patch
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
  0008-fix-ticker-leak.patch
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
  0010-Fix-PR-leftover-mount-and-perms.patch
  0011-Fix-Aggregated-Discovery.patch
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
  0014-Export-create-populator-compatible-datavolumes-from-.patch
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1699963200">- Update to version 1.1.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.0
- Drop upstreamed patches
  0001-Fix-qemu-system-lookup.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
- Add patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch (CVE-2023-44487)
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch</changelog>
</package>
<package pkgid="c5f2790efadf1eaba04fa2f75a6548a9c4157046f76de814997c7cc655a2cae6" name="kubevirt" arch="src">
  <version epoch="0" ver="1.1.1" rel="150500.8.9.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 0.57.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.57.0
- Drop upstreamed patches:
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch
  0004-Update-libvirt-go-to-fix-memory-leak.patch
  0005-Improve-non-root-path-handling
  0006-topology-spread-constraints.patch
  0007-Fix-containerdisk-unmount-logic.patch
- Build new packages: virt-exportproxy and virt-exportserver
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665748800">- Update to version 0.58.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1670500800">- Fix libguestfs pod startup error
  0001-guestfs-flag-to-set-uid-and-gid.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1671537600">- Use JSON syntax for slirp device
  0002-network-Use-JSON-syntax-for-slirp-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0004-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1689940800">- Update to version 1.0.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.0
- Drop patches
  0001-guestfs-flag-to-set-uid-and-gid.patch
  0002-network-Use-JSON-syntax-for-slirp-device.patch
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch
  0004-TSC-frequencies-add-250PPM-tolerance.patch
- Add patches
  0001-Fix-qemu-system-lookup.patch
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1690286400">- Use compat cmdline options for virtiofsd
  0005-Use-compat-cmdline-options-for-virtiofsd.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1693224000">- Fix leaking file descriptor
  0006-isolation-close-file-when-exits.patch
- Fix volume detach on hotplug attachment pod delete
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
- Fix leaking tickers
  0008-fix-ticker-leak.patch
- Run helper pod as qemu user
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
- SCSI reservation: fix leftover mount and resource permissions
  0010-Fix-PR-leftover-mount-and-perms.patch
- Bump client-go (fix possible panic in discovery)
  0011-Fix-Aggregated-Discovery.patch
- Wait for new hotplug attachment pod to be ready
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
- Adapt the storage tests to the new populators flow
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
- Create export VM datavolumes compatible with populators
  0014-Export-create-populator-compatible-datavolumes-from-.patch
- Delete VMI prior to NFS server pod in tests
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697630400">- Update to version 1.0.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.1
- Drop patches:
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
  0006-isolation-close-file-when-exits.patch
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
  0008-fix-ticker-leak.patch
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
  0010-Fix-PR-leftover-mount-and-perms.patch
  0011-Fix-Aggregated-Discovery.patch
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
  0014-Export-create-populator-compatible-datavolumes-from-.patch
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1699963200">- Update to version 1.1.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.0
- Drop upstreamed patches
  0001-Fix-qemu-system-lookup.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
- Add patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch (CVE-2023-44487)
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Fix seccomp profile for post-copy migration
  0004-seccomp-Use-Names-field-to-define-the-syscall.patch
- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704369600">- Update to version 1.1.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.1
- Drop upstreamed patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch
  0004-seccomp-Use-Names-field-to-define-the-syscall.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1705060800">- Fix test with initially invalid DataVolume (bsc#1218174)
  0001-tests-Adapt-VM-phase-expectation.patch</changelog>
</package>
<package pkgid="14f76f3c1eedb6d1d0db32372db92a2293a781d7da82d43fde2912e91dccb9e8" name="kubevirt-manifests" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="150500.8.3.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1645444800">- Allow to configure utility containers for update test
  0001-improve-kubevirt-update-test.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645531200">- Drop kubevirt-psp-caasp.yaml</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Use semantic equality comparison
  0002-use-semantic-equality-comparison.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393601">- Avoid to return nil failure message
  0003-Avoid-to-return-nil-failure-message.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393602">- Increase storage requirements in _constraints
- Pack nft rules and nsswitch.conf for virt-handler
- Only create 1MiB-aligned disk images (bsc#1199603)
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 0.57.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.57.0
- Drop upstreamed patches:
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch
  0004-Update-libvirt-go-to-fix-memory-leak.patch
  0005-Improve-non-root-path-handling
  0006-topology-spread-constraints.patch
  0007-Fix-containerdisk-unmount-logic.patch
- Build new packages: virt-exportproxy and virt-exportserver
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665748800">- Update to version 0.58.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1670500800">- Fix libguestfs pod startup error
  0001-guestfs-flag-to-set-uid-and-gid.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1671537600">- Use JSON syntax for slirp device
  0002-network-Use-JSON-syntax-for-slirp-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0004-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1689940800">- Update to version 1.0.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.0
- Drop patches
  0001-guestfs-flag-to-set-uid-and-gid.patch
  0002-network-Use-JSON-syntax-for-slirp-device.patch
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch
  0004-TSC-frequencies-add-250PPM-tolerance.patch
- Add patches
  0001-Fix-qemu-system-lookup.patch
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1690286400">- Use compat cmdline options for virtiofsd
  0005-Use-compat-cmdline-options-for-virtiofsd.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1693224000">- Fix leaking file descriptor
  0006-isolation-close-file-when-exits.patch
- Fix volume detach on hotplug attachment pod delete
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
- Fix leaking tickers
  0008-fix-ticker-leak.patch
- Run helper pod as qemu user
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
- SCSI reservation: fix leftover mount and resource permissions
  0010-Fix-PR-leftover-mount-and-perms.patch
- Bump client-go (fix possible panic in discovery)
  0011-Fix-Aggregated-Discovery.patch
- Wait for new hotplug attachment pod to be ready
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
- Adapt the storage tests to the new populators flow
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
- Create export VM datavolumes compatible with populators
  0014-Export-create-populator-compatible-datavolumes-from-.patch
- Delete VMI prior to NFS server pod in tests
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch</changelog>
</package>
<package pkgid="0237cf36689304ec618e88d147feed55bbb8d2c0b6d5098da5a9aa7d1b9a8050" name="kubevirt-manifests" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="150500.8.6.1"/>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Use semantic equality comparison
  0002-use-semantic-equality-comparison.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393601">- Avoid to return nil failure message
  0003-Avoid-to-return-nil-failure-message.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393602">- Increase storage requirements in _constraints
- Pack nft rules and nsswitch.conf for virt-handler
- Only create 1MiB-aligned disk images (bsc#1199603)
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 0.57.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.57.0
- Drop upstreamed patches:
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch
  0004-Update-libvirt-go-to-fix-memory-leak.patch
  0005-Improve-non-root-path-handling
  0006-topology-spread-constraints.patch
  0007-Fix-containerdisk-unmount-logic.patch
- Build new packages: virt-exportproxy and virt-exportserver
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665748800">- Update to version 0.58.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1670500800">- Fix libguestfs pod startup error
  0001-guestfs-flag-to-set-uid-and-gid.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1671537600">- Use JSON syntax for slirp device
  0002-network-Use-JSON-syntax-for-slirp-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0004-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1689940800">- Update to version 1.0.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.0
- Drop patches
  0001-guestfs-flag-to-set-uid-and-gid.patch
  0002-network-Use-JSON-syntax-for-slirp-device.patch
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch
  0004-TSC-frequencies-add-250PPM-tolerance.patch
- Add patches
  0001-Fix-qemu-system-lookup.patch
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1690286400">- Use compat cmdline options for virtiofsd
  0005-Use-compat-cmdline-options-for-virtiofsd.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1693224000">- Fix leaking file descriptor
  0006-isolation-close-file-when-exits.patch
- Fix volume detach on hotplug attachment pod delete
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
- Fix leaking tickers
  0008-fix-ticker-leak.patch
- Run helper pod as qemu user
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
- SCSI reservation: fix leftover mount and resource permissions
  0010-Fix-PR-leftover-mount-and-perms.patch
- Bump client-go (fix possible panic in discovery)
  0011-Fix-Aggregated-Discovery.patch
- Wait for new hotplug attachment pod to be ready
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
- Adapt the storage tests to the new populators flow
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
- Create export VM datavolumes compatible with populators
  0014-Export-create-populator-compatible-datavolumes-from-.patch
- Delete VMI prior to NFS server pod in tests
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697630400">- Update to version 1.0.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.1
- Drop patches:
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
  0006-isolation-close-file-when-exits.patch
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
  0008-fix-ticker-leak.patch
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
  0010-Fix-PR-leftover-mount-and-perms.patch
  0011-Fix-Aggregated-Discovery.patch
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
  0014-Export-create-populator-compatible-datavolumes-from-.patch
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1699963200">- Update to version 1.1.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.0
- Drop upstreamed patches
  0001-Fix-qemu-system-lookup.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
- Add patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch (CVE-2023-44487)
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch</changelog>
</package>
<package pkgid="b1c47530339f46082a9fa722fc2fe1b2073ed162a13e010b88166fdc52b72321" name="kubevirt-manifests" arch="x86_64">
  <version epoch="0" ver="1.1.1" rel="150500.8.9.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 0.57.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.57.0
- Drop upstreamed patches:
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch
  0004-Update-libvirt-go-to-fix-memory-leak.patch
  0005-Improve-non-root-path-handling
  0006-topology-spread-constraints.patch
  0007-Fix-containerdisk-unmount-logic.patch
- Build new packages: virt-exportproxy and virt-exportserver
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665748800">- Update to version 0.58.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1670500800">- Fix libguestfs pod startup error
  0001-guestfs-flag-to-set-uid-and-gid.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1671537600">- Use JSON syntax for slirp device
  0002-network-Use-JSON-syntax-for-slirp-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0004-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1689940800">- Update to version 1.0.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.0
- Drop patches
  0001-guestfs-flag-to-set-uid-and-gid.patch
  0002-network-Use-JSON-syntax-for-slirp-device.patch
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch
  0004-TSC-frequencies-add-250PPM-tolerance.patch
- Add patches
  0001-Fix-qemu-system-lookup.patch
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1690286400">- Use compat cmdline options for virtiofsd
  0005-Use-compat-cmdline-options-for-virtiofsd.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1693224000">- Fix leaking file descriptor
  0006-isolation-close-file-when-exits.patch
- Fix volume detach on hotplug attachment pod delete
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
- Fix leaking tickers
  0008-fix-ticker-leak.patch
- Run helper pod as qemu user
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
- SCSI reservation: fix leftover mount and resource permissions
  0010-Fix-PR-leftover-mount-and-perms.patch
- Bump client-go (fix possible panic in discovery)
  0011-Fix-Aggregated-Discovery.patch
- Wait for new hotplug attachment pod to be ready
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
- Adapt the storage tests to the new populators flow
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
- Create export VM datavolumes compatible with populators
  0014-Export-create-populator-compatible-datavolumes-from-.patch
- Delete VMI prior to NFS server pod in tests
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697630400">- Update to version 1.0.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.1
- Drop patches:
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
  0006-isolation-close-file-when-exits.patch
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
  0008-fix-ticker-leak.patch
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
  0010-Fix-PR-leftover-mount-and-perms.patch
  0011-Fix-Aggregated-Discovery.patch
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
  0014-Export-create-populator-compatible-datavolumes-from-.patch
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1699963200">- Update to version 1.1.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.0
- Drop upstreamed patches
  0001-Fix-qemu-system-lookup.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
- Add patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch (CVE-2023-44487)
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Fix seccomp profile for post-copy migration
  0004-seccomp-Use-Names-field-to-define-the-syscall.patch
- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704369600">- Update to version 1.1.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.1
- Drop upstreamed patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch
  0004-seccomp-Use-Names-field-to-define-the-syscall.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1705060800">- Fix test with initially invalid DataVolume (bsc#1218174)
  0001-tests-Adapt-VM-phase-expectation.patch</changelog>
</package>
<package pkgid="ac30890a4499cf326783f22b3ae18151f206ce550fa171e3f9eb4d7fc512395e" name="kubevirt-virtctl" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="150500.8.3.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1645444800">- Allow to configure utility containers for update test
  0001-improve-kubevirt-update-test.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645531200">- Drop kubevirt-psp-caasp.yaml</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Use semantic equality comparison
  0002-use-semantic-equality-comparison.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393601">- Avoid to return nil failure message
  0003-Avoid-to-return-nil-failure-message.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393602">- Increase storage requirements in _constraints
- Pack nft rules and nsswitch.conf for virt-handler
- Only create 1MiB-aligned disk images (bsc#1199603)
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 0.57.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.57.0
- Drop upstreamed patches:
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch
  0004-Update-libvirt-go-to-fix-memory-leak.patch
  0005-Improve-non-root-path-handling
  0006-topology-spread-constraints.patch
  0007-Fix-containerdisk-unmount-logic.patch
- Build new packages: virt-exportproxy and virt-exportserver
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665748800">- Update to version 0.58.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1670500800">- Fix libguestfs pod startup error
  0001-guestfs-flag-to-set-uid-and-gid.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1671537600">- Use JSON syntax for slirp device
  0002-network-Use-JSON-syntax-for-slirp-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0004-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1689940800">- Update to version 1.0.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.0
- Drop patches
  0001-guestfs-flag-to-set-uid-and-gid.patch
  0002-network-Use-JSON-syntax-for-slirp-device.patch
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch
  0004-TSC-frequencies-add-250PPM-tolerance.patch
- Add patches
  0001-Fix-qemu-system-lookup.patch
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1690286400">- Use compat cmdline options for virtiofsd
  0005-Use-compat-cmdline-options-for-virtiofsd.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1693224000">- Fix leaking file descriptor
  0006-isolation-close-file-when-exits.patch
- Fix volume detach on hotplug attachment pod delete
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
- Fix leaking tickers
  0008-fix-ticker-leak.patch
- Run helper pod as qemu user
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
- SCSI reservation: fix leftover mount and resource permissions
  0010-Fix-PR-leftover-mount-and-perms.patch
- Bump client-go (fix possible panic in discovery)
  0011-Fix-Aggregated-Discovery.patch
- Wait for new hotplug attachment pod to be ready
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
- Adapt the storage tests to the new populators flow
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
- Create export VM datavolumes compatible with populators
  0014-Export-create-populator-compatible-datavolumes-from-.patch
- Delete VMI prior to NFS server pod in tests
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch</changelog>
</package>
<package pkgid="7042c44375860cf9683300cb2f5f01dfc7dfda8a211553ceb4cc2f36e5e4101a" name="kubevirt-virtctl" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="150500.8.6.1"/>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Use semantic equality comparison
  0002-use-semantic-equality-comparison.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393601">- Avoid to return nil failure message
  0003-Avoid-to-return-nil-failure-message.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393602">- Increase storage requirements in _constraints
- Pack nft rules and nsswitch.conf for virt-handler
- Only create 1MiB-aligned disk images (bsc#1199603)
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 0.57.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.57.0
- Drop upstreamed patches:
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch
  0004-Update-libvirt-go-to-fix-memory-leak.patch
  0005-Improve-non-root-path-handling
  0006-topology-spread-constraints.patch
  0007-Fix-containerdisk-unmount-logic.patch
- Build new packages: virt-exportproxy and virt-exportserver
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665748800">- Update to version 0.58.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1670500800">- Fix libguestfs pod startup error
  0001-guestfs-flag-to-set-uid-and-gid.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1671537600">- Use JSON syntax for slirp device
  0002-network-Use-JSON-syntax-for-slirp-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0004-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1689940800">- Update to version 1.0.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.0
- Drop patches
  0001-guestfs-flag-to-set-uid-and-gid.patch
  0002-network-Use-JSON-syntax-for-slirp-device.patch
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch
  0004-TSC-frequencies-add-250PPM-tolerance.patch
- Add patches
  0001-Fix-qemu-system-lookup.patch
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1690286400">- Use compat cmdline options for virtiofsd
  0005-Use-compat-cmdline-options-for-virtiofsd.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1693224000">- Fix leaking file descriptor
  0006-isolation-close-file-when-exits.patch
- Fix volume detach on hotplug attachment pod delete
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
- Fix leaking tickers
  0008-fix-ticker-leak.patch
- Run helper pod as qemu user
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
- SCSI reservation: fix leftover mount and resource permissions
  0010-Fix-PR-leftover-mount-and-perms.patch
- Bump client-go (fix possible panic in discovery)
  0011-Fix-Aggregated-Discovery.patch
- Wait for new hotplug attachment pod to be ready
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
- Adapt the storage tests to the new populators flow
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
- Create export VM datavolumes compatible with populators
  0014-Export-create-populator-compatible-datavolumes-from-.patch
- Delete VMI prior to NFS server pod in tests
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697630400">- Update to version 1.0.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.1
- Drop patches:
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
  0006-isolation-close-file-when-exits.patch
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
  0008-fix-ticker-leak.patch
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
  0010-Fix-PR-leftover-mount-and-perms.patch
  0011-Fix-Aggregated-Discovery.patch
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
  0014-Export-create-populator-compatible-datavolumes-from-.patch
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1699963200">- Update to version 1.1.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.0
- Drop upstreamed patches
  0001-Fix-qemu-system-lookup.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
- Add patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch (CVE-2023-44487)
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch</changelog>
</package>
<package pkgid="519c062ecfc3be8c91e289634d406429329f1b5a0b0458c947aec4353337cb13" name="kubevirt-virtctl" arch="x86_64">
  <version epoch="0" ver="1.1.1" rel="150500.8.9.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 0.57.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.57.0
- Drop upstreamed patches:
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch
  0004-Update-libvirt-go-to-fix-memory-leak.patch
  0005-Improve-non-root-path-handling
  0006-topology-spread-constraints.patch
  0007-Fix-containerdisk-unmount-logic.patch
- Build new packages: virt-exportproxy and virt-exportserver
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665748800">- Update to version 0.58.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1670500800">- Fix libguestfs pod startup error
  0001-guestfs-flag-to-set-uid-and-gid.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1671537600">- Use JSON syntax for slirp device
  0002-network-Use-JSON-syntax-for-slirp-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0004-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1689940800">- Update to version 1.0.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.0
- Drop patches
  0001-guestfs-flag-to-set-uid-and-gid.patch
  0002-network-Use-JSON-syntax-for-slirp-device.patch
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch
  0004-TSC-frequencies-add-250PPM-tolerance.patch
- Add patches
  0001-Fix-qemu-system-lookup.patch
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1690286400">- Use compat cmdline options for virtiofsd
  0005-Use-compat-cmdline-options-for-virtiofsd.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1693224000">- Fix leaking file descriptor
  0006-isolation-close-file-when-exits.patch
- Fix volume detach on hotplug attachment pod delete
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
- Fix leaking tickers
  0008-fix-ticker-leak.patch
- Run helper pod as qemu user
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
- SCSI reservation: fix leftover mount and resource permissions
  0010-Fix-PR-leftover-mount-and-perms.patch
- Bump client-go (fix possible panic in discovery)
  0011-Fix-Aggregated-Discovery.patch
- Wait for new hotplug attachment pod to be ready
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
- Adapt the storage tests to the new populators flow
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
- Create export VM datavolumes compatible with populators
  0014-Export-create-populator-compatible-datavolumes-from-.patch
- Delete VMI prior to NFS server pod in tests
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697630400">- Update to version 1.0.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.1
- Drop patches:
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
  0006-isolation-close-file-when-exits.patch
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
  0008-fix-ticker-leak.patch
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
  0010-Fix-PR-leftover-mount-and-perms.patch
  0011-Fix-Aggregated-Discovery.patch
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
  0014-Export-create-populator-compatible-datavolumes-from-.patch
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1699963200">- Update to version 1.1.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.0
- Drop upstreamed patches
  0001-Fix-qemu-system-lookup.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
- Add patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch (CVE-2023-44487)
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Fix seccomp profile for post-copy migration
  0004-seccomp-Use-Names-field-to-define-the-syscall.patch
- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704369600">- Update to version 1.1.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.1
- Drop upstreamed patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch
  0004-seccomp-Use-Names-field-to-define-the-syscall.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1705060800">- Fix test with initially invalid DataVolume (bsc#1218174)
  0001-tests-Adapt-VM-phase-expectation.patch</changelog>
</package>
<package pkgid="58e253a0c38f944e53c102e614fb92ef042fe20e9bc553d91825b15db0f83cbe" name="libLLVM15" arch="aarch64">
  <version epoch="0" ver="15.0.7" rel="150500.4.4.1"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1653739200">- Update to version 14.0.4.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Don't use gold for linking anymore: on s390x we use ld.bfd with
  LLVMgold.so, on ppc64 we disable ThinLTO for now.
- Using ld.bfd on s390x exposed an issue with the existing
  llvm_build_tablegen_component_as_shared_library.patch: linking
  llvm-tblgen with libLLVM.so means we also have to link libraries
  used for that (like LLVMTableGenGlobalISel) with libLLVM.so.
- Rewrite summary and description for llvm-gold to point out that
  it can also be used with ld.bfd, recommend with binutils.
- Prefer RPM macros over shell scripting, so that we can better
  inspect the build script with substitutions in place.
- More memory for stage 1 build jobs due to recent OOMs.
- Add %_libclang_sonum RPM macro to llvm-devel, since that might
  now diverge from %_llvm_sonum.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1655380800">- Update to version 14.0.5.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1656936000">- Update to version 14.0.6.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1660046400">- Add llvm-glibc-2-36.patch in order to address boo#1202215.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660132800">- Add WebAssembly support for all architectures.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660392000">- Use black RPM macro magic to deduplicate binary lists. This
  should have no effect on the generated RPM but shaves ~400 lines
  off the specfile and hopefully makes future maintenance easier.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661256000">- Don't declare python3-clang as noarch: Python packages are
  installed into %{_libdir}.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661515200">- Add llvm-lifetime-for-rust.patch to have Rust memory management
  functions considered as lifetime markers. This should aid dead
  store elimination to dynamically allocated memory in Rust code.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662206400">- Make sure we keep -DNDEBUG. At some point %{optflags} must have
  lost it, perhaps because CMake usually adds it on top. So when
  overriding CMAKE_{C,CXX}_FLAGS_RELWITHDEBINFO, we make sure to
  take over the other flags. We drop LLVM_ENABLE_ASSERTIONS=OFF,
  because that's the default anyway and hasn't helped here.
- Add llvm-scev-fix-isImpliedViaMerge.patch: fixes a miscompilation
  caused by mixing up values of the current and previous iteration.
  (See gh#llvm/llvm-project#56242.)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662465600">- Update to version 15.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/15.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools:
  - llvm-debuginfod: Provides debug info to remote hosts.
  - llvm-dwarfutil: Can copy and manipulate debug info.
  - llvm-remark-size-diff: Compute diff between remark files.
  * New Clang tools:
  - clang-offload-packager: Bundle multiple objects into single
    fat binaries including offload code.
  - clang-pseudo: Approximate heuristic parser for C++.
- Rebase patches:
  * check-no-llvm-exegesis.patch
  * link-clang-tools-extra-shared.patch
  * lld-default-sha1.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Drop patches that have landed upstream:
  * clang-repl-private-deps.patch
  * llvm-glibc-2-36.patch
  * llvm-scev-fix-isImpliedViaMerge.patch
- Drop llvm-lifetime-for-rust.patch: this is now solved via
  attributes and LLVM doesn't need a hardcoded list of allocation
  functions anymore.
- Add llvm-link-atomic.patch to fix build on ppc.
- Add libcxx-test-library-path.patch to fix libc++ tests failing
  without RUNPATH on libc++.so.
- Add libcxxabi-fix-armv7-test.patch to fix tests on armv7l.
- Thanks to Andreas Schwab for most of the rebasing!</changelog>
  <changelog author="schwab@suse.de" date="1662984000">- Use correct LLVM_HOST_TRIPLE for riscv64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663761600">- Always drop -gnu from triple for consistency. Patch a test that
  was looking for -linux- in clang-test-xfail-gnuless-triple.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Update to version 15.0.1.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1664884800">- Update to version 15.0.2.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1666872000">- Update to version 15.0.3.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Add llvm-armv7-fix-vector-compare-with-zero-lowering.patch: Fix
  lowering of non-canonical vector comparison with zero on armv7,
  preventing a crash (boo#1204267, gh#llvm/llvm-project#58514).
- Add lldb-swig-4.1.0-build-fix.patch: Fix build with Swig 4.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1667736000">- Update to version 15.0.4.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1668600000">- Update to version 15.0.5.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Remove obsolete lldb-swig-4.1.0-build-fix.patch.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1670155200">- Update to version 15.0.6.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1673697600">- Update to version 15.0.7.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Build stage 2 with -fno-plt on x86_64: since building with
  - Wl,-z,now the PLT stubs are basically dead code, so eliminating
  the indirection reduces the number of branches and improves code
  locality for the quite frequent cross-DSO calls.
- Add llvm-workaround-superfluous-branches.patch: hints LLVM to
  eliminate branches until gh#llvm/llvm-project#28804 is solved.</changelog>
  <changelog author="dmueller@suse.com" date="1678363200">- update constraints to exclude workers with very slow CPU</changelog>
</package>
<package pkgid="10c8eb63618dd1c14b6eae3253d1790de1b8a87fb817641b4f587a7c5d3aa449" name="libLLVM15" arch="s390x">
  <version epoch="0" ver="15.0.7" rel="150500.4.4.1"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1653739200">- Update to version 14.0.4.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Don't use gold for linking anymore: on s390x we use ld.bfd with
  LLVMgold.so, on ppc64 we disable ThinLTO for now.
- Using ld.bfd on s390x exposed an issue with the existing
  llvm_build_tablegen_component_as_shared_library.patch: linking
  llvm-tblgen with libLLVM.so means we also have to link libraries
  used for that (like LLVMTableGenGlobalISel) with libLLVM.so.
- Rewrite summary and description for llvm-gold to point out that
  it can also be used with ld.bfd, recommend with binutils.
- Prefer RPM macros over shell scripting, so that we can better
  inspect the build script with substitutions in place.
- More memory for stage 1 build jobs due to recent OOMs.
- Add %_libclang_sonum RPM macro to llvm-devel, since that might
  now diverge from %_llvm_sonum.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1655380800">- Update to version 14.0.5.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1656936000">- Update to version 14.0.6.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1660046400">- Add llvm-glibc-2-36.patch in order to address boo#1202215.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660132800">- Add WebAssembly support for all architectures.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660392000">- Use black RPM macro magic to deduplicate binary lists. This
  should have no effect on the generated RPM but shaves ~400 lines
  off the specfile and hopefully makes future maintenance easier.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661256000">- Don't declare python3-clang as noarch: Python packages are
  installed into %{_libdir}.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661515200">- Add llvm-lifetime-for-rust.patch to have Rust memory management
  functions considered as lifetime markers. This should aid dead
  store elimination to dynamically allocated memory in Rust code.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662206400">- Make sure we keep -DNDEBUG. At some point %{optflags} must have
  lost it, perhaps because CMake usually adds it on top. So when
  overriding CMAKE_{C,CXX}_FLAGS_RELWITHDEBINFO, we make sure to
  take over the other flags. We drop LLVM_ENABLE_ASSERTIONS=OFF,
  because that's the default anyway and hasn't helped here.
- Add llvm-scev-fix-isImpliedViaMerge.patch: fixes a miscompilation
  caused by mixing up values of the current and previous iteration.
  (See gh#llvm/llvm-project#56242.)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662465600">- Update to version 15.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/15.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools:
  - llvm-debuginfod: Provides debug info to remote hosts.
  - llvm-dwarfutil: Can copy and manipulate debug info.
  - llvm-remark-size-diff: Compute diff between remark files.
  * New Clang tools:
  - clang-offload-packager: Bundle multiple objects into single
    fat binaries including offload code.
  - clang-pseudo: Approximate heuristic parser for C++.
- Rebase patches:
  * check-no-llvm-exegesis.patch
  * link-clang-tools-extra-shared.patch
  * lld-default-sha1.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Drop patches that have landed upstream:
  * clang-repl-private-deps.patch
  * llvm-glibc-2-36.patch
  * llvm-scev-fix-isImpliedViaMerge.patch
- Drop llvm-lifetime-for-rust.patch: this is now solved via
  attributes and LLVM doesn't need a hardcoded list of allocation
  functions anymore.
- Add llvm-link-atomic.patch to fix build on ppc.
- Add libcxx-test-library-path.patch to fix libc++ tests failing
  without RUNPATH on libc++.so.
- Add libcxxabi-fix-armv7-test.patch to fix tests on armv7l.
- Thanks to Andreas Schwab for most of the rebasing!</changelog>
  <changelog author="schwab@suse.de" date="1662984000">- Use correct LLVM_HOST_TRIPLE for riscv64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663761600">- Always drop -gnu from triple for consistency. Patch a test that
  was looking for -linux- in clang-test-xfail-gnuless-triple.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Update to version 15.0.1.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1664884800">- Update to version 15.0.2.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1666872000">- Update to version 15.0.3.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Add llvm-armv7-fix-vector-compare-with-zero-lowering.patch: Fix
  lowering of non-canonical vector comparison with zero on armv7,
  preventing a crash (boo#1204267, gh#llvm/llvm-project#58514).
- Add lldb-swig-4.1.0-build-fix.patch: Fix build with Swig 4.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1667736000">- Update to version 15.0.4.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1668600000">- Update to version 15.0.5.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Remove obsolete lldb-swig-4.1.0-build-fix.patch.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1670155200">- Update to version 15.0.6.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1673697600">- Update to version 15.0.7.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Build stage 2 with -fno-plt on x86_64: since building with
  - Wl,-z,now the PLT stubs are basically dead code, so eliminating
  the indirection reduces the number of branches and improves code
  locality for the quite frequent cross-DSO calls.
- Add llvm-workaround-superfluous-branches.patch: hints LLVM to
  eliminate branches until gh#llvm/llvm-project#28804 is solved.</changelog>
  <changelog author="dmueller@suse.com" date="1678363200">- update constraints to exclude workers with very slow CPU</changelog>
</package>
<package pkgid="0970cb0715998a2bd4837d9615e2202dfb2fc95c76243cebce7bc64d456ddf37" name="libLLVM15" arch="x86_64">
  <version epoch="0" ver="15.0.7" rel="150500.4.4.1"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1653739200">- Update to version 14.0.4.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Don't use gold for linking anymore: on s390x we use ld.bfd with
  LLVMgold.so, on ppc64 we disable ThinLTO for now.
- Using ld.bfd on s390x exposed an issue with the existing
  llvm_build_tablegen_component_as_shared_library.patch: linking
  llvm-tblgen with libLLVM.so means we also have to link libraries
  used for that (like LLVMTableGenGlobalISel) with libLLVM.so.
- Rewrite summary and description for llvm-gold to point out that
  it can also be used with ld.bfd, recommend with binutils.
- Prefer RPM macros over shell scripting, so that we can better
  inspect the build script with substitutions in place.
- More memory for stage 1 build jobs due to recent OOMs.
- Add %_libclang_sonum RPM macro to llvm-devel, since that might
  now diverge from %_llvm_sonum.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1655380800">- Update to version 14.0.5.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1656936000">- Update to version 14.0.6.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1660046400">- Add llvm-glibc-2-36.patch in order to address boo#1202215.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660132800">- Add WebAssembly support for all architectures.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660392000">- Use black RPM macro magic to deduplicate binary lists. This
  should have no effect on the generated RPM but shaves ~400 lines
  off the specfile and hopefully makes future maintenance easier.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661256000">- Don't declare python3-clang as noarch: Python packages are
  installed into %{_libdir}.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661515200">- Add llvm-lifetime-for-rust.patch to have Rust memory management
  functions considered as lifetime markers. This should aid dead
  store elimination to dynamically allocated memory in Rust code.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662206400">- Make sure we keep -DNDEBUG. At some point %{optflags} must have
  lost it, perhaps because CMake usually adds it on top. So when
  overriding CMAKE_{C,CXX}_FLAGS_RELWITHDEBINFO, we make sure to
  take over the other flags. We drop LLVM_ENABLE_ASSERTIONS=OFF,
  because that's the default anyway and hasn't helped here.
- Add llvm-scev-fix-isImpliedViaMerge.patch: fixes a miscompilation
  caused by mixing up values of the current and previous iteration.
  (See gh#llvm/llvm-project#56242.)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662465600">- Update to version 15.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/15.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools:
  - llvm-debuginfod: Provides debug info to remote hosts.
  - llvm-dwarfutil: Can copy and manipulate debug info.
  - llvm-remark-size-diff: Compute diff between remark files.
  * New Clang tools:
  - clang-offload-packager: Bundle multiple objects into single
    fat binaries including offload code.
  - clang-pseudo: Approximate heuristic parser for C++.
- Rebase patches:
  * check-no-llvm-exegesis.patch
  * link-clang-tools-extra-shared.patch
  * lld-default-sha1.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Drop patches that have landed upstream:
  * clang-repl-private-deps.patch
  * llvm-glibc-2-36.patch
  * llvm-scev-fix-isImpliedViaMerge.patch
- Drop llvm-lifetime-for-rust.patch: this is now solved via
  attributes and LLVM doesn't need a hardcoded list of allocation
  functions anymore.
- Add llvm-link-atomic.patch to fix build on ppc.
- Add libcxx-test-library-path.patch to fix libc++ tests failing
  without RUNPATH on libc++.so.
- Add libcxxabi-fix-armv7-test.patch to fix tests on armv7l.
- Thanks to Andreas Schwab for most of the rebasing!</changelog>
  <changelog author="schwab@suse.de" date="1662984000">- Use correct LLVM_HOST_TRIPLE for riscv64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663761600">- Always drop -gnu from triple for consistency. Patch a test that
  was looking for -linux- in clang-test-xfail-gnuless-triple.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Update to version 15.0.1.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1664884800">- Update to version 15.0.2.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1666872000">- Update to version 15.0.3.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Add llvm-armv7-fix-vector-compare-with-zero-lowering.patch: Fix
  lowering of non-canonical vector comparison with zero on armv7,
  preventing a crash (boo#1204267, gh#llvm/llvm-project#58514).
- Add lldb-swig-4.1.0-build-fix.patch: Fix build with Swig 4.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1667736000">- Update to version 15.0.4.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1668600000">- Update to version 15.0.5.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Remove obsolete lldb-swig-4.1.0-build-fix.patch.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1670155200">- Update to version 15.0.6.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1673697600">- Update to version 15.0.7.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Build stage 2 with -fno-plt on x86_64: since building with
  - Wl,-z,now the PLT stubs are basically dead code, so eliminating
  the indirection reduces the number of branches and improves code
  locality for the quite frequent cross-DSO calls.
- Add llvm-workaround-superfluous-branches.patch: hints LLVM to
  eliminate branches until gh#llvm/llvm-project#28804 is solved.</changelog>
  <changelog author="dmueller@suse.com" date="1678363200">- update constraints to exclude workers with very slow CPU</changelog>
</package>
<package pkgid="f5f6ce7f85e83103dd76c8b1cfca2799c0ce699ac89da885f70706cac6b52159" name="libX11" arch="src">
  <version epoch="0" ver="1.6.5" rel="150000.3.33.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378728000">- Update to version 1.6.2:
  This release of libX11 includes a number of fixes to handle realloc() failure
  better, resolves a number of compiler &amp; static analyzer warnings, fixes several
  bugs in the X Input Method framework, and cleans up the XKB code to be a little
  more maintainable.
- Drop upstreamed patches:
  + Patch10: bug-239698_libx11.diff
  + Patch13: bug-221326-xim-sync.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1395662400">- U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch
  * fix typo in en_US Compose file (s/dead_actute/dead_acute/)
    (bnc#869333)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="sndirsch@suse.com" date="1695816000">- U_0001-CVE-2023-43785-out-of-bounds-memory-access-in-_XkbRe.patch
  U_0002-CVE-2023-43786-stack-exhaustion-from-infinite-recurs.patch
  U_0003-XPutImage-clip-images-to-maximum-height-width-allowe.patch
  U_0004-XCreatePixmap-trigger-BadValue-error-for-out-of-rang.patch
  U_0005-CVE-2023-43787-Integer-overflow-in-XCreateImage-lead.patch
  * CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)</changelog>
</package>
<package pkgid="de9f9fe22fb4268565a310a62316ba8737096c3b5466ba49ae206e402ecfd65b" name="libX11-6" arch="aarch64">
  <version epoch="0" ver="1.6.5" rel="150000.3.33.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="sndirsch@suse.com" date="1695816000">- U_0001-CVE-2023-43785-out-of-bounds-memory-access-in-_XkbRe.patch
  U_0002-CVE-2023-43786-stack-exhaustion-from-infinite-recurs.patch
  U_0003-XPutImage-clip-images-to-maximum-height-width-allowe.patch
  U_0004-XCreatePixmap-trigger-BadValue-error-for-out-of-rang.patch
  U_0005-CVE-2023-43787-Integer-overflow-in-XCreateImage-lead.patch
  * CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)</changelog>
</package>
<package pkgid="9975584c06db530ee59e809c369d62416d273bc36c289b15375184632901e060" name="libX11-6" arch="s390x">
  <version epoch="0" ver="1.6.5" rel="150000.3.33.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="sndirsch@suse.com" date="1695816000">- U_0001-CVE-2023-43785-out-of-bounds-memory-access-in-_XkbRe.patch
  U_0002-CVE-2023-43786-stack-exhaustion-from-infinite-recurs.patch
  U_0003-XPutImage-clip-images-to-maximum-height-width-allowe.patch
  U_0004-XCreatePixmap-trigger-BadValue-error-for-out-of-rang.patch
  U_0005-CVE-2023-43787-Integer-overflow-in-XCreateImage-lead.patch
  * CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)</changelog>
</package>
<package pkgid="091b7a4e7b57eaf46901b5fadf94cf159136f38a8a37c358924a01948766614a" name="libX11-6" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="150000.3.33.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="sndirsch@suse.com" date="1695816000">- U_0001-CVE-2023-43785-out-of-bounds-memory-access-in-_XkbRe.patch
  U_0002-CVE-2023-43786-stack-exhaustion-from-infinite-recurs.patch
  U_0003-XPutImage-clip-images-to-maximum-height-width-allowe.patch
  U_0004-XCreatePixmap-trigger-BadValue-error-for-out-of-rang.patch
  U_0005-CVE-2023-43787-Integer-overflow-in-XCreateImage-lead.patch
  * CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)</changelog>
</package>
<package pkgid="40043ca918cf34ad6a925de041020b875f95b1fb4eba167a73e65652b32a5551" name="libX11-data" arch="noarch">
  <version epoch="0" ver="1.6.5" rel="150000.3.33.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="sndirsch@suse.com" date="1695816000">- U_0001-CVE-2023-43785-out-of-bounds-memory-access-in-_XkbRe.patch
  U_0002-CVE-2023-43786-stack-exhaustion-from-infinite-recurs.patch
  U_0003-XPutImage-clip-images-to-maximum-height-width-allowe.patch
  U_0004-XCreatePixmap-trigger-BadValue-error-for-out-of-rang.patch
  U_0005-CVE-2023-43787-Integer-overflow-in-XCreateImage-lead.patch
  * CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)</changelog>
</package>
<package pkgid="79753d4ab87d404262c9ec674289d0912b06e31744a5d63b5899d60e5ac2de42" name="libX11-xcb1" arch="aarch64">
  <version epoch="0" ver="1.6.5" rel="150000.3.33.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="sndirsch@suse.com" date="1695816000">- U_0001-CVE-2023-43785-out-of-bounds-memory-access-in-_XkbRe.patch
  U_0002-CVE-2023-43786-stack-exhaustion-from-infinite-recurs.patch
  U_0003-XPutImage-clip-images-to-maximum-height-width-allowe.patch
  U_0004-XCreatePixmap-trigger-BadValue-error-for-out-of-rang.patch
  U_0005-CVE-2023-43787-Integer-overflow-in-XCreateImage-lead.patch
  * CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)</changelog>
</package>
<package pkgid="8d1ff75268b669793bc0850b9dbbd6497d64260b8cee1c95e2ecf839ac6c94e5" name="libX11-xcb1" arch="s390x">
  <version epoch="0" ver="1.6.5" rel="150000.3.33.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="sndirsch@suse.com" date="1695816000">- U_0001-CVE-2023-43785-out-of-bounds-memory-access-in-_XkbRe.patch
  U_0002-CVE-2023-43786-stack-exhaustion-from-infinite-recurs.patch
  U_0003-XPutImage-clip-images-to-maximum-height-width-allowe.patch
  U_0004-XCreatePixmap-trigger-BadValue-error-for-out-of-rang.patch
  U_0005-CVE-2023-43787-Integer-overflow-in-XCreateImage-lead.patch
  * CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)</changelog>
</package>
<package pkgid="9b2034ab43589e1c33401f316c299753c84ee4f07b843e406e5b4eab365b240d" name="libX11-xcb1" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="150000.3.33.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="sndirsch@suse.com" date="1695816000">- U_0001-CVE-2023-43785-out-of-bounds-memory-access-in-_XkbRe.patch
  U_0002-CVE-2023-43786-stack-exhaustion-from-infinite-recurs.patch
  U_0003-XPutImage-clip-images-to-maximum-height-width-allowe.patch
  U_0004-XCreatePixmap-trigger-BadValue-error-for-out-of-rang.patch
  U_0005-CVE-2023-43787-Integer-overflow-in-XCreateImage-lead.patch
  * CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)</changelog>
</package>
<package pkgid="ca83b27fa24c2c90d9d9f8a9a7e1054cdcb4b9c844e604e307d9cb35d0e8f664" name="libabsl2308_0_0" arch="aarch64">
  <version epoch="0" ver="20230802.1" rel="150400.10.4.1"/>
  <changelog author="fvogt@suse.com" date="1604664000">- Drop source package, was only used by grpc which was switched
  over to use the shared library</changelog>
  <changelog author="elimat@opensuse.org" date="1609243200">- Update to version 20200923.2
  What's New:
  * absl::StatusOr&lt;T&gt; has been released. See our blog
    post for more information.
  * Abseil Flags reflection interfaces have been released.
  * Abseil Flags memory usage has been significantly optimized.
  * Abseil now supports a "hardened" build mode. This build mode enables
    runtime checks that guard against programming errors that may lead
    to security vulnerabilities.
  Notable Fixes:
  * Sanitizer dynamic annotations like AnnotateRWLockCreate that are
    also defined by the compiler sanitizer implementation are no longer
    also defined by Abseil.
  * Sanitizer macros are now prefixed with ABSL_ to avoid naming collisions.
  * Sanitizer usage is now automatically detected and no longer requires
    macros like ADDRESS_SANITIZER to be defined on the command line.
  Breaking Changes:
  * Abseil no longer contains a dynamic_annotations library. Users
    using a supported build system (Bazel or CMake) are unaffected by
    this, but users manually specifying link libraries may get an error
    about a missing linker input.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
  <changelog author="jengelh@inai.de" date="1649073600">- Implement shlib packaging policy</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1656504000">- Add options-old.patch, options-cxx17.patch (boo#1203378)
  * Ensure ABI stability regardless of compiler settings per instruction in the header.</changelog>
  <changelog author="fvogt@suse.com" date="1656504001">- Remove obsolete 0%{suse_version} &lt; 1500 conditions</changelog>
  <changelog author="elimat@opensuse.org" date="1656849600">- Update to version 20220623.0
  What's New:
  * Added absl::AnyInvocable, a move-only function type.
  * Added absl::CordBuffer, a type for buffering data for eventual inclusion an
    absl::Cord, which is useful for writing zero-copy code.
  * Added support for command-line flags of type absl::optional&lt;T&gt;.
  Breaking Changes:
  * CMake builds now use the flag ABSL_BUILD_TESTING (default: OFF) to control
    whether or not unit tests are built.
  * The ABSL_DEPRECATED macro now works with the GCC compiler. GCC users that
    are experiencing new warnings can use -Wno-deprecated-declatations silence
  the warnings or use -Wno-error=deprecated-declarations to see warnings but
  not fail the build.
  * ABSL_CONST_INIT uses the C++20 keyword constinit when available. Some
    compilers are more strict about where this keyword must appear compared to
  the pre-C++20 implementation.
  * Bazel builds now depend on the bazelbuild/bazel-skylib repository.
    See Abseil's WORKSPACE file for an example of how to add this dependency.
  Other:
  * This will be the last release to support C++11. Future releases will require at least C++14.
- run spec-cleaner</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1657540800">- Add Fix-maes-msse41-leaking-into-pkgconfig.patch
  * Do not make programs compiled with abseil require new-ish CPUs (boo#1203379)</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 20220623.1:
  * minor warning fix</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to 20230125.2
  What's New:
    The Abseil logging library has been released. This library
    provides facilities for writing short text messages about the
    status of a program to stderr, disk files, or other sinks
    (via an extension API). See the logging library documentation
    for more information.
    An extension point, AbslStringify(), allows user-defined types
    to seamlessly work with Abseil's string formatting functions
    like absl::StrCat() and absl::StrFormat().
    A library for computing CRC32C checksums has been added.
    Floating-point parsing now uses the Eisel-Lemire algorithm,
    which provides a significant speed improvement.
    The flags library now provides suggestions for the closest
    flag(s) in the case of misspelled flags.
    Using CMake to install Abseil now makes the installed artifacts
    (in particular absl/base/options.h) reflect the compiled ABI.
  Breaking Changes:
    Abseil now requires at least C++14 and follows Google's Foundational
    C++ Support Policy. See this table for a list of currently supported
    versions compilers, platforms, and build tools.
    The legacy spellings of the thread annotation macros/functions
    (e.g. GUARDED_BY()) have been removed by default in favor of the
    ABSL_ prefixed versions (e.g. ABSL_GUARDED_BY()) due to clashes with
    other libraries. The compatibility macro ABSL_LEGACY_THREAD_ANNOTATIONS
    can be defined on the compile command-line to temporarily restore these
    spellings, but this compatibility macro will be removed in the future.
  Known Issues
    The Abseil logging library in this release is not a feature-complete
    replacement for glog yet. VLOG and DFATAL are examples of features
    that have not yet been released.
- obsolete Fix-maes-msse41-leaking-into-pkgconfig.patch</changelog>
  <changelog author="adrian@suse.de" date="1685016000">- update to 20230125.3
  Details can be found on:
    https://github.com/abseil/abseil-cpp/releases/tag/20230125.3</changelog>
  <changelog author="fvogt@suse.com" date="1688040000">- Add baselibs.conf to make protobuf happy. Hopefully temporary.</changelog>
  <changelog author="fstrba@suse.com" date="1691582400">- Fix build on older systems by requiring C++17 compliant compiler
- Added patch:
  * cmake.patch
    + lower the cmake requirement to 3.5 in order to be able to
    build on SLE12SP5</changelog>
  <changelog author="adrian@suse.de" date="1694088000">- update to 20230802.0
  What's New:
  * Added the nullability library for designating the expected
    nullability of pointers. Currently these serve as annotations
    only, but it is expected that compilers will one day be able
    to use these annotations for diagnostic purposes.
  * Added the prefetch library as a portable layer for moving data
    into caches before it is read.
  * Abseil's hash tables now detect many more programming errors
    in debug and sanitizer builds.
  * Abseil's synchronization objects now differentiate absolute
    waits (when passed an absl::Time) from relative waits (when
    passed an absl::Duration) when the underlying platform supports
    differentiating these cases. This only makes a difference when
    system clocks are adjusted.
  * Abseil's flag parsing library includes additional methods that
    make it easier to use when another library also expects to be
    able to parse flags.
  * absl::string_view is now available as a smaller target,
    @com_google_absl//absl/strings:string_view, so that users may
    use this library without depending on the much larger
    @com_google_absl//absl/strings target.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1696593600">- update to 20230802.1:
  * Add StdcppWaiter to the end of the list of waiter
    implementations</changelog>
  <changelog author="dmueller@suse.com" date="1705665600">- fix build for non-SUSE distributions</changelog>
</package>
<package pkgid="65fd36e91f7e166c51b13c48cef25e6654bbc1f0b88bbc1d08a4f2000fb80b5b" name="libabsl2308_0_0" arch="ppc64le">
  <version epoch="0" ver="20230802.1" rel="150400.10.4.1"/>
  <changelog author="fvogt@suse.com" date="1604664000">- Drop source package, was only used by grpc which was switched
  over to use the shared library</changelog>
  <changelog author="elimat@opensuse.org" date="1609243200">- Update to version 20200923.2
  What's New:
  * absl::StatusOr&lt;T&gt; has been released. See our blog
    post for more information.
  * Abseil Flags reflection interfaces have been released.
  * Abseil Flags memory usage has been significantly optimized.
  * Abseil now supports a "hardened" build mode. This build mode enables
    runtime checks that guard against programming errors that may lead
    to security vulnerabilities.
  Notable Fixes:
  * Sanitizer dynamic annotations like AnnotateRWLockCreate that are
    also defined by the compiler sanitizer implementation are no longer
    also defined by Abseil.
  * Sanitizer macros are now prefixed with ABSL_ to avoid naming collisions.
  * Sanitizer usage is now automatically detected and no longer requires
    macros like ADDRESS_SANITIZER to be defined on the command line.
  Breaking Changes:
  * Abseil no longer contains a dynamic_annotations library. Users
    using a supported build system (Bazel or CMake) are unaffected by
    this, but users manually specifying link libraries may get an error
    about a missing linker input.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
  <changelog author="jengelh@inai.de" date="1649073600">- Implement shlib packaging policy</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1656504000">- Add options-old.patch, options-cxx17.patch (boo#1203378)
  * Ensure ABI stability regardless of compiler settings per instruction in the header.</changelog>
  <changelog author="fvogt@suse.com" date="1656504001">- Remove obsolete 0%{suse_version} &lt; 1500 conditions</changelog>
  <changelog author="elimat@opensuse.org" date="1656849600">- Update to version 20220623.0
  What's New:
  * Added absl::AnyInvocable, a move-only function type.
  * Added absl::CordBuffer, a type for buffering data for eventual inclusion an
    absl::Cord, which is useful for writing zero-copy code.
  * Added support for command-line flags of type absl::optional&lt;T&gt;.
  Breaking Changes:
  * CMake builds now use the flag ABSL_BUILD_TESTING (default: OFF) to control
    whether or not unit tests are built.
  * The ABSL_DEPRECATED macro now works with the GCC compiler. GCC users that
    are experiencing new warnings can use -Wno-deprecated-declatations silence
  the warnings or use -Wno-error=deprecated-declarations to see warnings but
  not fail the build.
  * ABSL_CONST_INIT uses the C++20 keyword constinit when available. Some
    compilers are more strict about where this keyword must appear compared to
  the pre-C++20 implementation.
  * Bazel builds now depend on the bazelbuild/bazel-skylib repository.
    See Abseil's WORKSPACE file for an example of how to add this dependency.
  Other:
  * This will be the last release to support C++11. Future releases will require at least C++14.
- run spec-cleaner</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1657540800">- Add Fix-maes-msse41-leaking-into-pkgconfig.patch
  * Do not make programs compiled with abseil require new-ish CPUs (boo#1203379)</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 20220623.1:
  * minor warning fix</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to 20230125.2
  What's New:
    The Abseil logging library has been released. This library
    provides facilities for writing short text messages about the
    status of a program to stderr, disk files, or other sinks
    (via an extension API). See the logging library documentation
    for more information.
    An extension point, AbslStringify(), allows user-defined types
    to seamlessly work with Abseil's string formatting functions
    like absl::StrCat() and absl::StrFormat().
    A library for computing CRC32C checksums has been added.
    Floating-point parsing now uses the Eisel-Lemire algorithm,
    which provides a significant speed improvement.
    The flags library now provides suggestions for the closest
    flag(s) in the case of misspelled flags.
    Using CMake to install Abseil now makes the installed artifacts
    (in particular absl/base/options.h) reflect the compiled ABI.
  Breaking Changes:
    Abseil now requires at least C++14 and follows Google's Foundational
    C++ Support Policy. See this table for a list of currently supported
    versions compilers, platforms, and build tools.
    The legacy spellings of the thread annotation macros/functions
    (e.g. GUARDED_BY()) have been removed by default in favor of the
    ABSL_ prefixed versions (e.g. ABSL_GUARDED_BY()) due to clashes with
    other libraries. The compatibility macro ABSL_LEGACY_THREAD_ANNOTATIONS
    can be defined on the compile command-line to temporarily restore these
    spellings, but this compatibility macro will be removed in the future.
  Known Issues
    The Abseil logging library in this release is not a feature-complete
    replacement for glog yet. VLOG and DFATAL are examples of features
    that have not yet been released.
- obsolete Fix-maes-msse41-leaking-into-pkgconfig.patch</changelog>
  <changelog author="adrian@suse.de" date="1685016000">- update to 20230125.3
  Details can be found on:
    https://github.com/abseil/abseil-cpp/releases/tag/20230125.3</changelog>
  <changelog author="fvogt@suse.com" date="1688040000">- Add baselibs.conf to make protobuf happy. Hopefully temporary.</changelog>
  <changelog author="fstrba@suse.com" date="1691582400">- Fix build on older systems by requiring C++17 compliant compiler
- Added patch:
  * cmake.patch
    + lower the cmake requirement to 3.5 in order to be able to
    build on SLE12SP5</changelog>
  <changelog author="adrian@suse.de" date="1694088000">- update to 20230802.0
  What's New:
  * Added the nullability library for designating the expected
    nullability of pointers. Currently these serve as annotations
    only, but it is expected that compilers will one day be able
    to use these annotations for diagnostic purposes.
  * Added the prefetch library as a portable layer for moving data
    into caches before it is read.
  * Abseil's hash tables now detect many more programming errors
    in debug and sanitizer builds.
  * Abseil's synchronization objects now differentiate absolute
    waits (when passed an absl::Time) from relative waits (when
    passed an absl::Duration) when the underlying platform supports
    differentiating these cases. This only makes a difference when
    system clocks are adjusted.
  * Abseil's flag parsing library includes additional methods that
    make it easier to use when another library also expects to be
    able to parse flags.
  * absl::string_view is now available as a smaller target,
    @com_google_absl//absl/strings:string_view, so that users may
    use this library without depending on the much larger
    @com_google_absl//absl/strings target.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1696593600">- update to 20230802.1:
  * Add StdcppWaiter to the end of the list of waiter
    implementations</changelog>
  <changelog author="dmueller@suse.com" date="1705665600">- fix build for non-SUSE distributions</changelog>
</package>
<package pkgid="1a62bdac75f522fb481456cce64040977d1ef3357223c239f4eee3f8440d0697" name="libabsl2308_0_0" arch="s390x">
  <version epoch="0" ver="20230802.1" rel="150400.10.4.1"/>
  <changelog author="fvogt@suse.com" date="1604664000">- Drop source package, was only used by grpc which was switched
  over to use the shared library</changelog>
  <changelog author="elimat@opensuse.org" date="1609243200">- Update to version 20200923.2
  What's New:
  * absl::StatusOr&lt;T&gt; has been released. See our blog
    post for more information.
  * Abseil Flags reflection interfaces have been released.
  * Abseil Flags memory usage has been significantly optimized.
  * Abseil now supports a "hardened" build mode. This build mode enables
    runtime checks that guard against programming errors that may lead
    to security vulnerabilities.
  Notable Fixes:
  * Sanitizer dynamic annotations like AnnotateRWLockCreate that are
    also defined by the compiler sanitizer implementation are no longer
    also defined by Abseil.
  * Sanitizer macros are now prefixed with ABSL_ to avoid naming collisions.
  * Sanitizer usage is now automatically detected and no longer requires
    macros like ADDRESS_SANITIZER to be defined on the command line.
  Breaking Changes:
  * Abseil no longer contains a dynamic_annotations library. Users
    using a supported build system (Bazel or CMake) are unaffected by
    this, but users manually specifying link libraries may get an error
    about a missing linker input.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
  <changelog author="jengelh@inai.de" date="1649073600">- Implement shlib packaging policy</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1656504000">- Add options-old.patch, options-cxx17.patch (boo#1203378)
  * Ensure ABI stability regardless of compiler settings per instruction in the header.</changelog>
  <changelog author="fvogt@suse.com" date="1656504001">- Remove obsolete 0%{suse_version} &lt; 1500 conditions</changelog>
  <changelog author="elimat@opensuse.org" date="1656849600">- Update to version 20220623.0
  What's New:
  * Added absl::AnyInvocable, a move-only function type.
  * Added absl::CordBuffer, a type for buffering data for eventual inclusion an
    absl::Cord, which is useful for writing zero-copy code.
  * Added support for command-line flags of type absl::optional&lt;T&gt;.
  Breaking Changes:
  * CMake builds now use the flag ABSL_BUILD_TESTING (default: OFF) to control
    whether or not unit tests are built.
  * The ABSL_DEPRECATED macro now works with the GCC compiler. GCC users that
    are experiencing new warnings can use -Wno-deprecated-declatations silence
  the warnings or use -Wno-error=deprecated-declarations to see warnings but
  not fail the build.
  * ABSL_CONST_INIT uses the C++20 keyword constinit when available. Some
    compilers are more strict about where this keyword must appear compared to
  the pre-C++20 implementation.
  * Bazel builds now depend on the bazelbuild/bazel-skylib repository.
    See Abseil's WORKSPACE file for an example of how to add this dependency.
  Other:
  * This will be the last release to support C++11. Future releases will require at least C++14.
- run spec-cleaner</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1657540800">- Add Fix-maes-msse41-leaking-into-pkgconfig.patch
  * Do not make programs compiled with abseil require new-ish CPUs (boo#1203379)</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 20220623.1:
  * minor warning fix</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to 20230125.2
  What's New:
    The Abseil logging library has been released. This library
    provides facilities for writing short text messages about the
    status of a program to stderr, disk files, or other sinks
    (via an extension API). See the logging library documentation
    for more information.
    An extension point, AbslStringify(), allows user-defined types
    to seamlessly work with Abseil's string formatting functions
    like absl::StrCat() and absl::StrFormat().
    A library for computing CRC32C checksums has been added.
    Floating-point parsing now uses the Eisel-Lemire algorithm,
    which provides a significant speed improvement.
    The flags library now provides suggestions for the closest
    flag(s) in the case of misspelled flags.
    Using CMake to install Abseil now makes the installed artifacts
    (in particular absl/base/options.h) reflect the compiled ABI.
  Breaking Changes:
    Abseil now requires at least C++14 and follows Google's Foundational
    C++ Support Policy. See this table for a list of currently supported
    versions compilers, platforms, and build tools.
    The legacy spellings of the thread annotation macros/functions
    (e.g. GUARDED_BY()) have been removed by default in favor of the
    ABSL_ prefixed versions (e.g. ABSL_GUARDED_BY()) due to clashes with
    other libraries. The compatibility macro ABSL_LEGACY_THREAD_ANNOTATIONS
    can be defined on the compile command-line to temporarily restore these
    spellings, but this compatibility macro will be removed in the future.
  Known Issues
    The Abseil logging library in this release is not a feature-complete
    replacement for glog yet. VLOG and DFATAL are examples of features
    that have not yet been released.
- obsolete Fix-maes-msse41-leaking-into-pkgconfig.patch</changelog>
  <changelog author="adrian@suse.de" date="1685016000">- update to 20230125.3
  Details can be found on:
    https://github.com/abseil/abseil-cpp/releases/tag/20230125.3</changelog>
  <changelog author="fvogt@suse.com" date="1688040000">- Add baselibs.conf to make protobuf happy. Hopefully temporary.</changelog>
  <changelog author="fstrba@suse.com" date="1691582400">- Fix build on older systems by requiring C++17 compliant compiler
- Added patch:
  * cmake.patch
    + lower the cmake requirement to 3.5 in order to be able to
    build on SLE12SP5</changelog>
  <changelog author="adrian@suse.de" date="1694088000">- update to 20230802.0
  What's New:
  * Added the nullability library for designating the expected
    nullability of pointers. Currently these serve as annotations
    only, but it is expected that compilers will one day be able
    to use these annotations for diagnostic purposes.
  * Added the prefetch library as a portable layer for moving data
    into caches before it is read.
  * Abseil's hash tables now detect many more programming errors
    in debug and sanitizer builds.
  * Abseil's synchronization objects now differentiate absolute
    waits (when passed an absl::Time) from relative waits (when
    passed an absl::Duration) when the underlying platform supports
    differentiating these cases. This only makes a difference when
    system clocks are adjusted.
  * Abseil's flag parsing library includes additional methods that
    make it easier to use when another library also expects to be
    able to parse flags.
  * absl::string_view is now available as a smaller target,
    @com_google_absl//absl/strings:string_view, so that users may
    use this library without depending on the much larger
    @com_google_absl//absl/strings target.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1696593600">- update to 20230802.1:
  * Add StdcppWaiter to the end of the list of waiter
    implementations</changelog>
  <changelog author="dmueller@suse.com" date="1705665600">- fix build for non-SUSE distributions</changelog>
</package>
<package pkgid="218ac726dd655e61d5658c3ac169cbc46f939e241d7459e5200e029aadb5dc82" name="libabsl2308_0_0" arch="x86_64">
  <version epoch="0" ver="20230802.1" rel="150400.10.4.1"/>
  <changelog author="fvogt@suse.com" date="1604664000">- Drop source package, was only used by grpc which was switched
  over to use the shared library</changelog>
  <changelog author="elimat@opensuse.org" date="1609243200">- Update to version 20200923.2
  What's New:
  * absl::StatusOr&lt;T&gt; has been released. See our blog
    post for more information.
  * Abseil Flags reflection interfaces have been released.
  * Abseil Flags memory usage has been significantly optimized.
  * Abseil now supports a "hardened" build mode. This build mode enables
    runtime checks that guard against programming errors that may lead
    to security vulnerabilities.
  Notable Fixes:
  * Sanitizer dynamic annotations like AnnotateRWLockCreate that are
    also defined by the compiler sanitizer implementation are no longer
    also defined by Abseil.
  * Sanitizer macros are now prefixed with ABSL_ to avoid naming collisions.
  * Sanitizer usage is now automatically detected and no longer requires
    macros like ADDRESS_SANITIZER to be defined on the command line.
  Breaking Changes:
  * Abseil no longer contains a dynamic_annotations library. Users
    using a supported build system (Bazel or CMake) are unaffected by
    this, but users manually specifying link libraries may get an error
    about a missing linker input.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
  <changelog author="jengelh@inai.de" date="1649073600">- Implement shlib packaging policy</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1656504000">- Add options-old.patch, options-cxx17.patch (boo#1203378)
  * Ensure ABI stability regardless of compiler settings per instruction in the header.</changelog>
  <changelog author="fvogt@suse.com" date="1656504001">- Remove obsolete 0%{suse_version} &lt; 1500 conditions</changelog>
  <changelog author="elimat@opensuse.org" date="1656849600">- Update to version 20220623.0
  What's New:
  * Added absl::AnyInvocable, a move-only function type.
  * Added absl::CordBuffer, a type for buffering data for eventual inclusion an
    absl::Cord, which is useful for writing zero-copy code.
  * Added support for command-line flags of type absl::optional&lt;T&gt;.
  Breaking Changes:
  * CMake builds now use the flag ABSL_BUILD_TESTING (default: OFF) to control
    whether or not unit tests are built.
  * The ABSL_DEPRECATED macro now works with the GCC compiler. GCC users that
    are experiencing new warnings can use -Wno-deprecated-declatations silence
  the warnings or use -Wno-error=deprecated-declarations to see warnings but
  not fail the build.
  * ABSL_CONST_INIT uses the C++20 keyword constinit when available. Some
    compilers are more strict about where this keyword must appear compared to
  the pre-C++20 implementation.
  * Bazel builds now depend on the bazelbuild/bazel-skylib repository.
    See Abseil's WORKSPACE file for an example of how to add this dependency.
  Other:
  * This will be the last release to support C++11. Future releases will require at least C++14.
- run spec-cleaner</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1657540800">- Add Fix-maes-msse41-leaking-into-pkgconfig.patch
  * Do not make programs compiled with abseil require new-ish CPUs (boo#1203379)</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 20220623.1:
  * minor warning fix</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to 20230125.2
  What's New:
    The Abseil logging library has been released. This library
    provides facilities for writing short text messages about the
    status of a program to stderr, disk files, or other sinks
    (via an extension API). See the logging library documentation
    for more information.
    An extension point, AbslStringify(), allows user-defined types
    to seamlessly work with Abseil's string formatting functions
    like absl::StrCat() and absl::StrFormat().
    A library for computing CRC32C checksums has been added.
    Floating-point parsing now uses the Eisel-Lemire algorithm,
    which provides a significant speed improvement.
    The flags library now provides suggestions for the closest
    flag(s) in the case of misspelled flags.
    Using CMake to install Abseil now makes the installed artifacts
    (in particular absl/base/options.h) reflect the compiled ABI.
  Breaking Changes:
    Abseil now requires at least C++14 and follows Google's Foundational
    C++ Support Policy. See this table for a list of currently supported
    versions compilers, platforms, and build tools.
    The legacy spellings of the thread annotation macros/functions
    (e.g. GUARDED_BY()) have been removed by default in favor of the
    ABSL_ prefixed versions (e.g. ABSL_GUARDED_BY()) due to clashes with
    other libraries. The compatibility macro ABSL_LEGACY_THREAD_ANNOTATIONS
    can be defined on the compile command-line to temporarily restore these
    spellings, but this compatibility macro will be removed in the future.
  Known Issues
    The Abseil logging library in this release is not a feature-complete
    replacement for glog yet. VLOG and DFATAL are examples of features
    that have not yet been released.
- obsolete Fix-maes-msse41-leaking-into-pkgconfig.patch</changelog>
  <changelog author="adrian@suse.de" date="1685016000">- update to 20230125.3
  Details can be found on:
    https://github.com/abseil/abseil-cpp/releases/tag/20230125.3</changelog>
  <changelog author="fvogt@suse.com" date="1688040000">- Add baselibs.conf to make protobuf happy. Hopefully temporary.</changelog>
  <changelog author="fstrba@suse.com" date="1691582400">- Fix build on older systems by requiring C++17 compliant compiler
- Added patch:
  * cmake.patch
    + lower the cmake requirement to 3.5 in order to be able to
    build on SLE12SP5</changelog>
  <changelog author="adrian@suse.de" date="1694088000">- update to 20230802.0
  What's New:
  * Added the nullability library for designating the expected
    nullability of pointers. Currently these serve as annotations
    only, but it is expected that compilers will one day be able
    to use these annotations for diagnostic purposes.
  * Added the prefetch library as a portable layer for moving data
    into caches before it is read.
  * Abseil's hash tables now detect many more programming errors
    in debug and sanitizer builds.
  * Abseil's synchronization objects now differentiate absolute
    waits (when passed an absl::Time) from relative waits (when
    passed an absl::Duration) when the underlying platform supports
    differentiating these cases. This only makes a difference when
    system clocks are adjusted.
  * Abseil's flag parsing library includes additional methods that
    make it easier to use when another library also expects to be
    able to parse flags.
  * absl::string_view is now available as a smaller target,
    @com_google_absl//absl/strings:string_view, so that users may
    use this library without depending on the much larger
    @com_google_absl//absl/strings target.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1696593600">- update to 20230802.1:
  * Add StdcppWaiter to the end of the list of waiter
    implementations</changelog>
  <changelog author="dmueller@suse.com" date="1705665600">- fix build for non-SUSE distributions</changelog>
</package>
<package pkgid="3a771593fa9af56fdd580bfc56028feb71c4ef02552b68c0c89adad70d301af3" name="libapparmor" arch="src">
  <version epoch="0" ver="3.0.4" rel="150500.11.9.1"/>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="scabrero@suse.de" date="1671796800">- Add samba-4-17.patch to update the samba profiles for samba
  version 4.17 (bsc#1206626);</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1693915200">- update zgrep profile to allow egrep helper use (bsc#1214458)
  - zgrep-profile-sync-with-master.diff</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
</package>
<package pkgid="6c65d123e693192f3086aab19eadf00d2766a8b52abc9123418ab1c74517b71a" name="libapparmor1" arch="aarch64">
  <version epoch="0" ver="3.0.4" rel="150500.11.9.1"/>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="scabrero@suse.de" date="1671796800">- Add samba-4-17.patch to update the samba profiles for samba
  version 4.17 (bsc#1206626);</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1693915200">- update zgrep profile to allow egrep helper use (bsc#1214458)
  - zgrep-profile-sync-with-master.diff</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
</package>
<package pkgid="b64a8caccbd34dbf7e357ba65181e03ad93689600390b5e7fd1a3b8725dd819f" name="libapparmor1" arch="s390x">
  <version epoch="0" ver="3.0.4" rel="150500.11.9.1"/>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="scabrero@suse.de" date="1671796800">- Add samba-4-17.patch to update the samba profiles for samba
  version 4.17 (bsc#1206626);</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1693915200">- update zgrep profile to allow egrep helper use (bsc#1214458)
  - zgrep-profile-sync-with-master.diff</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
</package>
<package pkgid="f478d04a97776c45c51b8d4b1c742b925b25ca0c89528bda8fd7f1700ca361d9" name="libapparmor1" arch="x86_64">
  <version epoch="0" ver="3.0.4" rel="150500.11.9.1"/>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="scabrero@suse.de" date="1671796800">- Add samba-4-17.patch to update the samba profiles for samba
  version 4.17 (bsc#1206626);</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1693915200">- update zgrep profile to allow egrep helper use (bsc#1214458)
  - zgrep-profile-sync-with-master.diff</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
</package>
<package pkgid="f5761828e84d6153994f4d5cba2ad9b69a22bac7d98d0333c6119d4241334ce5" name="libavahi-client3" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.10.1"/>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
</package>
<package pkgid="013eb14562d0d38e1747c2e502e12b0c7bd4ad617439e7c08e8ad109bc1f5041" name="libavahi-client3" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.10.1"/>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
</package>
<package pkgid="0dfb6b8fdd07df202a88f1d06b6799d58d24bb6bde5d9b432ae88b1887893ccc" name="libavahi-client3" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.10.1"/>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
</package>
<package pkgid="b75ce724bbbb61e89848a7041541de0e00e30eed8462a43dc9911a2156fbd62b" name="libavahi-client3" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.13.1"/>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
</package>
<package pkgid="c4ad27ab0c1aeacd1bdb2305bde84198f31b73536a492dd4dbf78f13bd29e8a6" name="libavahi-client3" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.13.1"/>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
</package>
<package pkgid="cac31da7f8e67043692c50f20998ece5abb8daa08d8b6822f1b4a1af67e38a33" name="libavahi-client3" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.13.1"/>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
</package>
<package pkgid="86395b4b5b8c0cda6f3b9e7140c00db97452a9becb03f0b93a6c9b4807853712" name="libavahi-common3" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.10.1"/>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
</package>
<package pkgid="27a693ac9298921efcaaaabbaa8e02242b7969fafc20901307b7aa027a247993" name="libavahi-common3" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.10.1"/>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
</package>
<package pkgid="b074cff28ff65e38bac3414ed8c4b69bbc3f60673dc8dcb51c256fe5c51ea73f" name="libavahi-common3" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.10.1"/>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
</package>
<package pkgid="9c92fe1cacc45212ce9451ce61c7659ea1cf40e2e4b080d2972636c2ee85723e" name="libavahi-common3" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.13.1"/>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
</package>
<package pkgid="8e73e5f384855e7bdf632e1f333464f7ead469d067c501dc43719e4b6b39d058" name="libavahi-common3" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.13.1"/>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
</package>
<package pkgid="e922542dcc77345b89587d20777f7f85276d27d642a1a57407d6811fcd6be2c1" name="libavahi-common3" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.13.1"/>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
</package>
<package pkgid="9a8e9f4a290b2e8bb796a221b2351e532940136b4ca0dc1a6dee2c4da12c74f9" name="libavahi-core7" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.10.1"/>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
</package>
<package pkgid="db1ebd01f96195aa8eb60d6f7fe4cc5c24d0db4a71b8bab6ef45fcf110a974aa" name="libavahi-core7" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.10.1"/>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
</package>
<package pkgid="7b737bec445b4463641bff7a848254df25509d84c77f252c1408ab7a0b994a96" name="libavahi-core7" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.10.1"/>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
</package>
<package pkgid="bf88d73d33af4ec45a9340bb229ab51c6d59650ba49c485f840906929c7740bc" name="libavahi-core7" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.13.1"/>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
</package>
<package pkgid="c37e8567939c6e45bc411eb4a0fda7cfce35bd5a8a4c85f725255d420ce28bab" name="libavahi-core7" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.13.1"/>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
</package>
<package pkgid="bd1aa14af4a6f0a64b13a84473c41b6a36280fb2ce12fe51c6b50a6d9f87e404" name="libavahi-core7" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.13.1"/>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
</package>
<package pkgid="e997c1ffa4eed85188f2cbde105c46c56c4d40db818b630793b59a0f9f623376" name="libblkid1" arch="aarch64">
  <version epoch="0" ver="2.37.4" rel="150500.9.3.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="a59cb8b9bf40748574bce89f2b3e41ae45ec1212936d59a99cb5567b79f808ea" name="libblkid1" arch="s390x">
  <version epoch="0" ver="2.37.4" rel="150500.9.3.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="063f795845395ed364d38e2c6475e806005c3760ec86e6c154aa143bfff91370" name="libblkid1" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="150500.9.3.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="9a8c03e0dbbb2996a6b8714c074f085b158258d2881b62ffabca9f50b36dc401" name="libbluetooth3" arch="aarch64">
  <version epoch="0" ver="5.65" rel="150500.3.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
  <changelog author="jlee@suse.com" date="1705406400">- Add pbap-Fix-not-checking-Primary-Secundary-Counter-leng.patch
  pbap: Fix not checking Primary/Secundary Counter length
  (bsc#1218301)(CVE-2023-50230)(bsc#1218300)(CVE-2023-50229)</changelog>
</package>
<package pkgid="1ca3d1f830d8878cc27b4a30e0967be68e13bcbe7839fa1b8f8036fa985c6f5b" name="libbluetooth3" arch="s390x">
  <version epoch="0" ver="5.65" rel="150500.3.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
  <changelog author="jlee@suse.com" date="1705406400">- Add pbap-Fix-not-checking-Primary-Secundary-Counter-leng.patch
  pbap: Fix not checking Primary/Secundary Counter length
  (bsc#1218301)(CVE-2023-50230)(bsc#1218300)(CVE-2023-50229)</changelog>
</package>
<package pkgid="53971f581962ac1679bf5301c5b6d82990da0ea06fe6a9b64e2e3e55ec74c956" name="libbluetooth3" arch="x86_64">
  <version epoch="0" ver="5.65" rel="150500.3.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
  <changelog author="jlee@suse.com" date="1705406400">- Add pbap-Fix-not-checking-Primary-Secundary-Counter-leng.patch
  pbap: Fix not checking Primary/Secundary Counter length
  (bsc#1218301)(CVE-2023-50230)(bsc#1218300)(CVE-2023-50229)</changelog>
</package>
<package pkgid="3039494bc739256caa8c47fcabea9ee8e04332467bffef697c5632cbbf4d151c" name="libbtrfs0" arch="aarch64">
  <version epoch="0" ver="5.14" rel="150500.10.3.1"/>
  <changelog author="info@paolostivanin.com" date="1586174400">- Update to 5.6:
  * inspect logical-resolve: support LOGICAL_INO_V2 as new option '-o',
    helps advanced dedupe tools
  * inspect: user larger buffer (64K) for results
  * subvol delete: support deletion by id (requires kernel 5.7+)
  * dump-tree: new option --hide-names, replace any names
    (file, directory, subvolume, xattr) in the output with stubs
  * various fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1588161600">- Fix content of _dracutmodulesdir variable: this definitively does
  not belong to libexecdir.</changelog>
  <changelog author="dsterba@suse.cz" date="1589371200">- Update to 5.6.1:
  * print warning when multiple block group profiles exist, update 'fi usage'
    summary, add docs to maual page explaining the situation
  * build: optional support for libgcrypt or libsodium, providing hash
    implementations
  * updated docs</changelog>
  <changelog author="dsterba@suse.cz" date="1594036800">- Update to 5.7:
  * mkfs:
  * new option to enable features otherwise enabled at runtime, now
    implemented for quotas, 'mkfs.btrfs -R quota'
  * fix space accounting for small image, DUP and --rootdir
  * option -A removed
  * check: detect ranges with overlapping csum items
  * fi usage: report correct numbers when plain RAID56 profiles are used
  * convert: ensure the data chunks size never exceed device size
  * libbtrfsutil: update documentation regarding subvolume deletion
  * build: support libkcapi as implementation backend for cryptographic
    primitives
  * core: global options for verbosity (-v, -q), subcommands -v or -q are
    aliases and will continue to work but are considered deprecated,
    current command output is preserved to keep scripts working
  * other:
  * build warning fixes
  * btrfs-debugfs ported to python 3</changelog>
  <changelog author="dsterba@suse.cz" date="1603627200">- Update to 5.9:
  * mkfs:
  * switch default to single profile for multi-device filesystem, up to
    now it was raid0 that may not be simple to convert to some other profile
    as raid0 needs a workspace on all device for that
  * new option -R for run-time options (eg. mount time enabled), now
    understands free-space-tree
  * subvolume delete:
  * refuse to delete the default subvolume (kernel will not allow that but
    the error reason is not obvious)
  * warn on EPERM, eg. if send is on progress on the subvolume
  * convert:
  * fix 32bit overflows on large filesystems
  * improved error handling and error messages
  * check free space taking fragmentation into account
  * check:
  * detect and repair wrong inode generation
  * minor improvement in error reporting on roots
  * libbtrfsutils: follow main package versioning (5.9)
  * add pkg-config file definitions
  * python-btrfsutil: follow main package versioning (5.9)
  * inspect tree-stats: print node counts for each level, fanout
  * other:
  * docs:
  * remove obsolete mount options (alloc_start, subvolrootid)
  * deleting default subvolume is not permitted
  * updated or fixed tests
  * .editorconfig updates
  * move files to kernel-shared/
  * CI:
  * updated to use zstd 1.4.5
  * fix reiserfs build
  * more builds with asan, ubsan
  * sb-mod updates
  * build:
  * print .so versions of libraries in configure summary</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dsterba@suse.cz" date="1615118400">- Update to 5.11
  * fix device path canonicalization for device mapper devices
  * receive: remove workaround for setting capabilities, all stable kernels
    have been patched
  * receive: fix duplicate mount path detection
  * rescue: new subcommand create-control-device
  * device stats: minor fix for plain text format output
  * build: detect if e2fsprogs support 64bit timestamps
  * build: drop libmount, required functionality has been reimplemented
  * mkfs: warn when raid56 is used
  * balance convert: warn when raid56 is used
  * other
  * new and updated tests
  * documentation updates
  * seeding device
  * raid56 status
  * CI updates
  * docker images for various distros
- Update to 5.10.1
  * static build works again
  * other:
  * add a way to test static binaries with the testsuite
  * clarify scrub docs
  * update dependencies, minimum version for libmount is 2.24, this may
    change in the future
- Update to 5.10
  * scrub status:
  * print percentage of progress
  * add size unit options
  * fi usage: also print free space from statfs
  * convert: copy full 64 bit timestamp from ext4 if availalble
  * check:
  * add ability to repair extent item generation
  * new option to remove leftovers from inode number cache (-o inode_cache)
  * check for already running exclusive operation (balance, device add/...)
    when starting one
  * preliminary json output support for 'device stats'
  * fixes:
  * subvolume set-default: id 0 correctly falls back to toplevel
  * receive: align internal buffer to allow fast CRC calculation
  * logical-resolve: distinguish -o subvol and bind mounts
  * build: new dependency libmount
  * other
  * doc fixes and updates
  * new tests
  * ci on gitlab temporarily disabled
  * debugging output enhancements</changelog>
  <changelog author="dsterba@suse.cz" date="1620561600">- Update to 5.12
  * libbtrfsutil: relicensed to LGPL v2.1+
  * mkfs: zoned mode support (kernel 5.12+)
  * fi df: show zone_unusable per profile type in zoned mode
  * fi usage: show total amount of zone_unusable
  * fi resize: fix message for exact size
  * image: fix warning and enlarge output file if necessary
  * core
  * refactor chunk allocator for more modes
  * implement zoned mode support: allocation and writes, sb log
  * crypto/hash refactoring and cleanups
  * refactoring and cleanups
  * other
  * test updates
  * CI updates
  * travis-ci integration disabled
  * docker images updated, more coverage
  * incomplete build support for Android removed
  * doc updates
  * chattr mode m for 'NOCOMPRESS"
  * swapfile used from fstab
  * how to add a new export to libbtrfsutil
  * update status of mount options since 5.9
- Update to 5.11.1
  * properly format checksums when a mismatch is reported
  * check: fix false alert on tree block crossing 64K page boundary
  * convert:
  * refuse to convert filesystem with 'needs_recovery'
  * update documentation to require fsck before conversion
  * balance convert: fix raid56 warning when converting other profiles
  * fi resize: improved summary
  * other
  * build: fix checks and autoconf defines
  * fix symlink paths for CI support scripts
  * updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1620820800">- Update to 5.12.1
  * build: fix missing symbols in libbtrfs
  * mkfs: check for minimal number of zones
  * check: fix warning about cache generation when free space tree is enabled
  * fix superblock write in zoned mode on 16K pages</changelog>
  <changelog author="camspam@redhyena.net" date="1623758400">- Fix build for leap
  * --disable-zstd if leap &lt; 42.3
  * --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1623758401">- revert previous change, unintentionally disables zstd on tumbleweed</changelog>
  <changelog author="camspam@redhyena.net" date="1623844800">- Add --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1626091200">- Update to 5.13
  * restore: remove loop checks for extent count and directory scan
  * inspect dump-tree: new options to print node (--csum-headers) and data
    checksums (--csum-items)
  * fi usage:
  * print stripe count for striped profiles
  * print zoned information: size, total unusable
  * mkfs: print note about sha256 accelerated module loading issue
  * check: ability to reset dev_item::bytes_used
  * fixes
  * detect zoned kernel support at run time too
  * exclusive op running check return value
  * fi resize: support cancel (kernel 5.14)
  * device remove: support cancel (kernel 5.14)
  * documentation about general topics
  * compression
  * zoned mode
  * storage model
  * hardware considerations
  * other
  * libbtrfsutil API overview
  * help text fixes and updates
  * hash speedtest measure time, cycles using perf and print throughput</changelog>
  <changelog author="rgoldwyn@suse.com" date="1628596800">- Update to 5.13.1
  * build: fix build on musl libc due to missing definition of NAME_MAX
  * check:
  * batch more work into one transaction when clearing v1 free space inodes
  * detect directoris with wrong number of links
  * libbtrfsutil: fix race between subvolume iterator and deletion
  * mkfs: be more specific about supported profiles for zoned device
  * other:
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1631448000">- Update to 5.14
  * convert:
  * new option --uuid to copy, generate or set a given uuid
  * improve output
  * mkfs:
  * allow to create degenerate raid0 (on 1 device) and raid10 (on 2 devices)
  * image:
  * improved error messages
  * fix some alignment of restored image
  * subvol delete: allow to delete by id when path is not resolvable
  * check:
  * require alignment of nodesize for 64k page systems
  * detect and fix invalid block groups
  * libbtrfs (deprecated):
  * remove most exported symbols, leave only a few that are used by snapper
  * no version change (still 0.1)
  * remove btrfs-list.h, btrfsck.h
  * fixes:
  * reset generation of space v1 if v2 is used
  * fi us: don't wrongly report missing device size when partition is not readable
  * other:
  * build: experimental features
  * build: better detection of 64bit timestamp support for ext4
  * corrupt-block: block group items
  * new and updated tests
  * refactoring
  * experimental features:
  * new image dump format, with data</changelog>
  <changelog author="rgoldwyn@suse.com" date="1632744000">- Deleted upstreamed patches for upgrade:
  - fate#325871
  * 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch
  - btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch
  - btrfs-progs: check: fix segfault with -Q (bsc#1158560)
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch
  - Enqueue feature to wait for exclusive operation to finish (JSC#SLE-15234)
  * 0001-btrfs-progs-add-get_fsid_fd-for-getting-fsid-using-f.patch
  * 0002-btrfs-progs-add-sysfs-file-reading-helpers.patch
  * 0003-btrfs-progs-add-helpers-for-parsing-filesystem-exclu.patch
  * 0004-btrfs-progs-check-for-exclusive-operation-before-iss.patch
  * 0005-btrfs-progs-add-helper-to-check-or-wait-for-exclusiv.patch
  * 0006-btrfs-progs-add-enqueue-parameter-for-exclusive-ops.patch
  - Correct check_running_fs_exclop() return value (bsc#1184481)
  * btrfs-progs-Correct-check_running_fs_exclop-return-v.patch</changelog>
  <changelog author="nborisov@suse.com" date="1638360000">- Ignore multipath devices when probing devices for a btrfs filesystem (bsc#1192983)
  * 0001-btrfs-progs-Add-optional-dependency-on-libudev.patch
  * 0002-btrfs-progs-Ignore-devices-representing-paths-in-mul.patch
  * 0003-btrfs-progs-Add-fallback-code-for-path-device-ignore.patch</changelog>
  <changelog author="dmueller@suse.com" date="1642593600">- add python-rpm-macros (bsc#1194748)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1661774400">- Upstream behavior of btrfs compression=none (JSC#PED-1711)
  * btrfs-progs_props_dont_translate_value_of_compression_none.patch</changelog>
  <changelog author="tabraham@suse.com" date="1702987200">- btrfs-progs: fix defrag -c option parsing (bsc#1218029)
  * btrfs-progs-fix-defrag-c-option-parsing.patch</changelog>
</package>
<package pkgid="88ec4a00983fc9ccdca425dc8dfe6ea32c6bceb426ad217929e644bdd49d1140" name="libbtrfs0" arch="s390x">
  <version epoch="0" ver="5.14" rel="150500.10.3.1"/>
  <changelog author="info@paolostivanin.com" date="1586174400">- Update to 5.6:
  * inspect logical-resolve: support LOGICAL_INO_V2 as new option '-o',
    helps advanced dedupe tools
  * inspect: user larger buffer (64K) for results
  * subvol delete: support deletion by id (requires kernel 5.7+)
  * dump-tree: new option --hide-names, replace any names
    (file, directory, subvolume, xattr) in the output with stubs
  * various fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1588161600">- Fix content of _dracutmodulesdir variable: this definitively does
  not belong to libexecdir.</changelog>
  <changelog author="dsterba@suse.cz" date="1589371200">- Update to 5.6.1:
  * print warning when multiple block group profiles exist, update 'fi usage'
    summary, add docs to maual page explaining the situation
  * build: optional support for libgcrypt or libsodium, providing hash
    implementations
  * updated docs</changelog>
  <changelog author="dsterba@suse.cz" date="1594036800">- Update to 5.7:
  * mkfs:
  * new option to enable features otherwise enabled at runtime, now
    implemented for quotas, 'mkfs.btrfs -R quota'
  * fix space accounting for small image, DUP and --rootdir
  * option -A removed
  * check: detect ranges with overlapping csum items
  * fi usage: report correct numbers when plain RAID56 profiles are used
  * convert: ensure the data chunks size never exceed device size
  * libbtrfsutil: update documentation regarding subvolume deletion
  * build: support libkcapi as implementation backend for cryptographic
    primitives
  * core: global options for verbosity (-v, -q), subcommands -v or -q are
    aliases and will continue to work but are considered deprecated,
    current command output is preserved to keep scripts working
  * other:
  * build warning fixes
  * btrfs-debugfs ported to python 3</changelog>
  <changelog author="dsterba@suse.cz" date="1603627200">- Update to 5.9:
  * mkfs:
  * switch default to single profile for multi-device filesystem, up to
    now it was raid0 that may not be simple to convert to some other profile
    as raid0 needs a workspace on all device for that
  * new option -R for run-time options (eg. mount time enabled), now
    understands free-space-tree
  * subvolume delete:
  * refuse to delete the default subvolume (kernel will not allow that but
    the error reason is not obvious)
  * warn on EPERM, eg. if send is on progress on the subvolume
  * convert:
  * fix 32bit overflows on large filesystems
  * improved error handling and error messages
  * check free space taking fragmentation into account
  * check:
  * detect and repair wrong inode generation
  * minor improvement in error reporting on roots
  * libbtrfsutils: follow main package versioning (5.9)
  * add pkg-config file definitions
  * python-btrfsutil: follow main package versioning (5.9)
  * inspect tree-stats: print node counts for each level, fanout
  * other:
  * docs:
  * remove obsolete mount options (alloc_start, subvolrootid)
  * deleting default subvolume is not permitted
  * updated or fixed tests
  * .editorconfig updates
  * move files to kernel-shared/
  * CI:
  * updated to use zstd 1.4.5
  * fix reiserfs build
  * more builds with asan, ubsan
  * sb-mod updates
  * build:
  * print .so versions of libraries in configure summary</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dsterba@suse.cz" date="1615118400">- Update to 5.11
  * fix device path canonicalization for device mapper devices
  * receive: remove workaround for setting capabilities, all stable kernels
    have been patched
  * receive: fix duplicate mount path detection
  * rescue: new subcommand create-control-device
  * device stats: minor fix for plain text format output
  * build: detect if e2fsprogs support 64bit timestamps
  * build: drop libmount, required functionality has been reimplemented
  * mkfs: warn when raid56 is used
  * balance convert: warn when raid56 is used
  * other
  * new and updated tests
  * documentation updates
  * seeding device
  * raid56 status
  * CI updates
  * docker images for various distros
- Update to 5.10.1
  * static build works again
  * other:
  * add a way to test static binaries with the testsuite
  * clarify scrub docs
  * update dependencies, minimum version for libmount is 2.24, this may
    change in the future
- Update to 5.10
  * scrub status:
  * print percentage of progress
  * add size unit options
  * fi usage: also print free space from statfs
  * convert: copy full 64 bit timestamp from ext4 if availalble
  * check:
  * add ability to repair extent item generation
  * new option to remove leftovers from inode number cache (-o inode_cache)
  * check for already running exclusive operation (balance, device add/...)
    when starting one
  * preliminary json output support for 'device stats'
  * fixes:
  * subvolume set-default: id 0 correctly falls back to toplevel
  * receive: align internal buffer to allow fast CRC calculation
  * logical-resolve: distinguish -o subvol and bind mounts
  * build: new dependency libmount
  * other
  * doc fixes and updates
  * new tests
  * ci on gitlab temporarily disabled
  * debugging output enhancements</changelog>
  <changelog author="dsterba@suse.cz" date="1620561600">- Update to 5.12
  * libbtrfsutil: relicensed to LGPL v2.1+
  * mkfs: zoned mode support (kernel 5.12+)
  * fi df: show zone_unusable per profile type in zoned mode
  * fi usage: show total amount of zone_unusable
  * fi resize: fix message for exact size
  * image: fix warning and enlarge output file if necessary
  * core
  * refactor chunk allocator for more modes
  * implement zoned mode support: allocation and writes, sb log
  * crypto/hash refactoring and cleanups
  * refactoring and cleanups
  * other
  * test updates
  * CI updates
  * travis-ci integration disabled
  * docker images updated, more coverage
  * incomplete build support for Android removed
  * doc updates
  * chattr mode m for 'NOCOMPRESS"
  * swapfile used from fstab
  * how to add a new export to libbtrfsutil
  * update status of mount options since 5.9
- Update to 5.11.1
  * properly format checksums when a mismatch is reported
  * check: fix false alert on tree block crossing 64K page boundary
  * convert:
  * refuse to convert filesystem with 'needs_recovery'
  * update documentation to require fsck before conversion
  * balance convert: fix raid56 warning when converting other profiles
  * fi resize: improved summary
  * other
  * build: fix checks and autoconf defines
  * fix symlink paths for CI support scripts
  * updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1620820800">- Update to 5.12.1
  * build: fix missing symbols in libbtrfs
  * mkfs: check for minimal number of zones
  * check: fix warning about cache generation when free space tree is enabled
  * fix superblock write in zoned mode on 16K pages</changelog>
  <changelog author="camspam@redhyena.net" date="1623758400">- Fix build for leap
  * --disable-zstd if leap &lt; 42.3
  * --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1623758401">- revert previous change, unintentionally disables zstd on tumbleweed</changelog>
  <changelog author="camspam@redhyena.net" date="1623844800">- Add --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1626091200">- Update to 5.13
  * restore: remove loop checks for extent count and directory scan
  * inspect dump-tree: new options to print node (--csum-headers) and data
    checksums (--csum-items)
  * fi usage:
  * print stripe count for striped profiles
  * print zoned information: size, total unusable
  * mkfs: print note about sha256 accelerated module loading issue
  * check: ability to reset dev_item::bytes_used
  * fixes
  * detect zoned kernel support at run time too
  * exclusive op running check return value
  * fi resize: support cancel (kernel 5.14)
  * device remove: support cancel (kernel 5.14)
  * documentation about general topics
  * compression
  * zoned mode
  * storage model
  * hardware considerations
  * other
  * libbtrfsutil API overview
  * help text fixes and updates
  * hash speedtest measure time, cycles using perf and print throughput</changelog>
  <changelog author="rgoldwyn@suse.com" date="1628596800">- Update to 5.13.1
  * build: fix build on musl libc due to missing definition of NAME_MAX
  * check:
  * batch more work into one transaction when clearing v1 free space inodes
  * detect directoris with wrong number of links
  * libbtrfsutil: fix race between subvolume iterator and deletion
  * mkfs: be more specific about supported profiles for zoned device
  * other:
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1631448000">- Update to 5.14
  * convert:
  * new option --uuid to copy, generate or set a given uuid
  * improve output
  * mkfs:
  * allow to create degenerate raid0 (on 1 device) and raid10 (on 2 devices)
  * image:
  * improved error messages
  * fix some alignment of restored image
  * subvol delete: allow to delete by id when path is not resolvable
  * check:
  * require alignment of nodesize for 64k page systems
  * detect and fix invalid block groups
  * libbtrfs (deprecated):
  * remove most exported symbols, leave only a few that are used by snapper
  * no version change (still 0.1)
  * remove btrfs-list.h, btrfsck.h
  * fixes:
  * reset generation of space v1 if v2 is used
  * fi us: don't wrongly report missing device size when partition is not readable
  * other:
  * build: experimental features
  * build: better detection of 64bit timestamp support for ext4
  * corrupt-block: block group items
  * new and updated tests
  * refactoring
  * experimental features:
  * new image dump format, with data</changelog>
  <changelog author="rgoldwyn@suse.com" date="1632744000">- Deleted upstreamed patches for upgrade:
  - fate#325871
  * 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch
  - btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch
  - btrfs-progs: check: fix segfault with -Q (bsc#1158560)
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch
  - Enqueue feature to wait for exclusive operation to finish (JSC#SLE-15234)
  * 0001-btrfs-progs-add-get_fsid_fd-for-getting-fsid-using-f.patch
  * 0002-btrfs-progs-add-sysfs-file-reading-helpers.patch
  * 0003-btrfs-progs-add-helpers-for-parsing-filesystem-exclu.patch
  * 0004-btrfs-progs-check-for-exclusive-operation-before-iss.patch
  * 0005-btrfs-progs-add-helper-to-check-or-wait-for-exclusiv.patch
  * 0006-btrfs-progs-add-enqueue-parameter-for-exclusive-ops.patch
  - Correct check_running_fs_exclop() return value (bsc#1184481)
  * btrfs-progs-Correct-check_running_fs_exclop-return-v.patch</changelog>
  <changelog author="nborisov@suse.com" date="1638360000">- Ignore multipath devices when probing devices for a btrfs filesystem (bsc#1192983)
  * 0001-btrfs-progs-Add-optional-dependency-on-libudev.patch
  * 0002-btrfs-progs-Ignore-devices-representing-paths-in-mul.patch
  * 0003-btrfs-progs-Add-fallback-code-for-path-device-ignore.patch</changelog>
  <changelog author="dmueller@suse.com" date="1642593600">- add python-rpm-macros (bsc#1194748)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1661774400">- Upstream behavior of btrfs compression=none (JSC#PED-1711)
  * btrfs-progs_props_dont_translate_value_of_compression_none.patch</changelog>
  <changelog author="tabraham@suse.com" date="1702987200">- btrfs-progs: fix defrag -c option parsing (bsc#1218029)
  * btrfs-progs-fix-defrag-c-option-parsing.patch</changelog>
</package>
<package pkgid="c00924267d31631d8b78842e1467054d2ff5350d77df23b9c32b431ab7019cb2" name="libbtrfs0" arch="x86_64">
  <version epoch="0" ver="5.14" rel="150500.10.3.1"/>
  <changelog author="info@paolostivanin.com" date="1586174400">- Update to 5.6:
  * inspect logical-resolve: support LOGICAL_INO_V2 as new option '-o',
    helps advanced dedupe tools
  * inspect: user larger buffer (64K) for results
  * subvol delete: support deletion by id (requires kernel 5.7+)
  * dump-tree: new option --hide-names, replace any names
    (file, directory, subvolume, xattr) in the output with stubs
  * various fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1588161600">- Fix content of _dracutmodulesdir variable: this definitively does
  not belong to libexecdir.</changelog>
  <changelog author="dsterba@suse.cz" date="1589371200">- Update to 5.6.1:
  * print warning when multiple block group profiles exist, update 'fi usage'
    summary, add docs to maual page explaining the situation
  * build: optional support for libgcrypt or libsodium, providing hash
    implementations
  * updated docs</changelog>
  <changelog author="dsterba@suse.cz" date="1594036800">- Update to 5.7:
  * mkfs:
  * new option to enable features otherwise enabled at runtime, now
    implemented for quotas, 'mkfs.btrfs -R quota'
  * fix space accounting for small image, DUP and --rootdir
  * option -A removed
  * check: detect ranges with overlapping csum items
  * fi usage: report correct numbers when plain RAID56 profiles are used
  * convert: ensure the data chunks size never exceed device size
  * libbtrfsutil: update documentation regarding subvolume deletion
  * build: support libkcapi as implementation backend for cryptographic
    primitives
  * core: global options for verbosity (-v, -q), subcommands -v or -q are
    aliases and will continue to work but are considered deprecated,
    current command output is preserved to keep scripts working
  * other:
  * build warning fixes
  * btrfs-debugfs ported to python 3</changelog>
  <changelog author="dsterba@suse.cz" date="1603627200">- Update to 5.9:
  * mkfs:
  * switch default to single profile for multi-device filesystem, up to
    now it was raid0 that may not be simple to convert to some other profile
    as raid0 needs a workspace on all device for that
  * new option -R for run-time options (eg. mount time enabled), now
    understands free-space-tree
  * subvolume delete:
  * refuse to delete the default subvolume (kernel will not allow that but
    the error reason is not obvious)
  * warn on EPERM, eg. if send is on progress on the subvolume
  * convert:
  * fix 32bit overflows on large filesystems
  * improved error handling and error messages
  * check free space taking fragmentation into account
  * check:
  * detect and repair wrong inode generation
  * minor improvement in error reporting on roots
  * libbtrfsutils: follow main package versioning (5.9)
  * add pkg-config file definitions
  * python-btrfsutil: follow main package versioning (5.9)
  * inspect tree-stats: print node counts for each level, fanout
  * other:
  * docs:
  * remove obsolete mount options (alloc_start, subvolrootid)
  * deleting default subvolume is not permitted
  * updated or fixed tests
  * .editorconfig updates
  * move files to kernel-shared/
  * CI:
  * updated to use zstd 1.4.5
  * fix reiserfs build
  * more builds with asan, ubsan
  * sb-mod updates
  * build:
  * print .so versions of libraries in configure summary</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dsterba@suse.cz" date="1615118400">- Update to 5.11
  * fix device path canonicalization for device mapper devices
  * receive: remove workaround for setting capabilities, all stable kernels
    have been patched
  * receive: fix duplicate mount path detection
  * rescue: new subcommand create-control-device
  * device stats: minor fix for plain text format output
  * build: detect if e2fsprogs support 64bit timestamps
  * build: drop libmount, required functionality has been reimplemented
  * mkfs: warn when raid56 is used
  * balance convert: warn when raid56 is used
  * other
  * new and updated tests
  * documentation updates
  * seeding device
  * raid56 status
  * CI updates
  * docker images for various distros
- Update to 5.10.1
  * static build works again
  * other:
  * add a way to test static binaries with the testsuite
  * clarify scrub docs
  * update dependencies, minimum version for libmount is 2.24, this may
    change in the future
- Update to 5.10
  * scrub status:
  * print percentage of progress
  * add size unit options
  * fi usage: also print free space from statfs
  * convert: copy full 64 bit timestamp from ext4 if availalble
  * check:
  * add ability to repair extent item generation
  * new option to remove leftovers from inode number cache (-o inode_cache)
  * check for already running exclusive operation (balance, device add/...)
    when starting one
  * preliminary json output support for 'device stats'
  * fixes:
  * subvolume set-default: id 0 correctly falls back to toplevel
  * receive: align internal buffer to allow fast CRC calculation
  * logical-resolve: distinguish -o subvol and bind mounts
  * build: new dependency libmount
  * other
  * doc fixes and updates
  * new tests
  * ci on gitlab temporarily disabled
  * debugging output enhancements</changelog>
  <changelog author="dsterba@suse.cz" date="1620561600">- Update to 5.12
  * libbtrfsutil: relicensed to LGPL v2.1+
  * mkfs: zoned mode support (kernel 5.12+)
  * fi df: show zone_unusable per profile type in zoned mode
  * fi usage: show total amount of zone_unusable
  * fi resize: fix message for exact size
  * image: fix warning and enlarge output file if necessary
  * core
  * refactor chunk allocator for more modes
  * implement zoned mode support: allocation and writes, sb log
  * crypto/hash refactoring and cleanups
  * refactoring and cleanups
  * other
  * test updates
  * CI updates
  * travis-ci integration disabled
  * docker images updated, more coverage
  * incomplete build support for Android removed
  * doc updates
  * chattr mode m for 'NOCOMPRESS"
  * swapfile used from fstab
  * how to add a new export to libbtrfsutil
  * update status of mount options since 5.9
- Update to 5.11.1
  * properly format checksums when a mismatch is reported
  * check: fix false alert on tree block crossing 64K page boundary
  * convert:
  * refuse to convert filesystem with 'needs_recovery'
  * update documentation to require fsck before conversion
  * balance convert: fix raid56 warning when converting other profiles
  * fi resize: improved summary
  * other
  * build: fix checks and autoconf defines
  * fix symlink paths for CI support scripts
  * updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1620820800">- Update to 5.12.1
  * build: fix missing symbols in libbtrfs
  * mkfs: check for minimal number of zones
  * check: fix warning about cache generation when free space tree is enabled
  * fix superblock write in zoned mode on 16K pages</changelog>
  <changelog author="camspam@redhyena.net" date="1623758400">- Fix build for leap
  * --disable-zstd if leap &lt; 42.3
  * --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1623758401">- revert previous change, unintentionally disables zstd on tumbleweed</changelog>
  <changelog author="camspam@redhyena.net" date="1623844800">- Add --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1626091200">- Update to 5.13
  * restore: remove loop checks for extent count and directory scan
  * inspect dump-tree: new options to print node (--csum-headers) and data
    checksums (--csum-items)
  * fi usage:
  * print stripe count for striped profiles
  * print zoned information: size, total unusable
  * mkfs: print note about sha256 accelerated module loading issue
  * check: ability to reset dev_item::bytes_used
  * fixes
  * detect zoned kernel support at run time too
  * exclusive op running check return value
  * fi resize: support cancel (kernel 5.14)
  * device remove: support cancel (kernel 5.14)
  * documentation about general topics
  * compression
  * zoned mode
  * storage model
  * hardware considerations
  * other
  * libbtrfsutil API overview
  * help text fixes and updates
  * hash speedtest measure time, cycles using perf and print throughput</changelog>
  <changelog author="rgoldwyn@suse.com" date="1628596800">- Update to 5.13.1
  * build: fix build on musl libc due to missing definition of NAME_MAX
  * check:
  * batch more work into one transaction when clearing v1 free space inodes
  * detect directoris with wrong number of links
  * libbtrfsutil: fix race between subvolume iterator and deletion
  * mkfs: be more specific about supported profiles for zoned device
  * other:
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1631448000">- Update to 5.14
  * convert:
  * new option --uuid to copy, generate or set a given uuid
  * improve output
  * mkfs:
  * allow to create degenerate raid0 (on 1 device) and raid10 (on 2 devices)
  * image:
  * improved error messages
  * fix some alignment of restored image
  * subvol delete: allow to delete by id when path is not resolvable
  * check:
  * require alignment of nodesize for 64k page systems
  * detect and fix invalid block groups
  * libbtrfs (deprecated):
  * remove most exported symbols, leave only a few that are used by snapper
  * no version change (still 0.1)
  * remove btrfs-list.h, btrfsck.h
  * fixes:
  * reset generation of space v1 if v2 is used
  * fi us: don't wrongly report missing device size when partition is not readable
  * other:
  * build: experimental features
  * build: better detection of 64bit timestamp support for ext4
  * corrupt-block: block group items
  * new and updated tests
  * refactoring
  * experimental features:
  * new image dump format, with data</changelog>
  <changelog author="rgoldwyn@suse.com" date="1632744000">- Deleted upstreamed patches for upgrade:
  - fate#325871
  * 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch
  - btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch
  - btrfs-progs: check: fix segfault with -Q (bsc#1158560)
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch
  - Enqueue feature to wait for exclusive operation to finish (JSC#SLE-15234)
  * 0001-btrfs-progs-add-get_fsid_fd-for-getting-fsid-using-f.patch
  * 0002-btrfs-progs-add-sysfs-file-reading-helpers.patch
  * 0003-btrfs-progs-add-helpers-for-parsing-filesystem-exclu.patch
  * 0004-btrfs-progs-check-for-exclusive-operation-before-iss.patch
  * 0005-btrfs-progs-add-helper-to-check-or-wait-for-exclusiv.patch
  * 0006-btrfs-progs-add-enqueue-parameter-for-exclusive-ops.patch
  - Correct check_running_fs_exclop() return value (bsc#1184481)
  * btrfs-progs-Correct-check_running_fs_exclop-return-v.patch</changelog>
  <changelog author="nborisov@suse.com" date="1638360000">- Ignore multipath devices when probing devices for a btrfs filesystem (bsc#1192983)
  * 0001-btrfs-progs-Add-optional-dependency-on-libudev.patch
  * 0002-btrfs-progs-Ignore-devices-representing-paths-in-mul.patch
  * 0003-btrfs-progs-Add-fallback-code-for-path-device-ignore.patch</changelog>
  <changelog author="dmueller@suse.com" date="1642593600">- add python-rpm-macros (bsc#1194748)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1661774400">- Upstream behavior of btrfs compression=none (JSC#PED-1711)
  * btrfs-progs_props_dont_translate_value_of_compression_none.patch</changelog>
  <changelog author="tabraham@suse.com" date="1702987200">- btrfs-progs: fix defrag -c option parsing (bsc#1218029)
  * btrfs-progs-fix-defrag-c-option-parsing.patch</changelog>
</package>
<package pkgid="8893ba61cac26dbf19cb9904f16d0a57caf5e69ff027530608ac75f3e5b1a63f" name="libcontainers-common" arch="noarch">
  <version epoch="0" ver="20230214" rel="150500.4.6.1"/>
  <changelog author="rbrown@suse.com" date="1654689600">- Add missing comma to previous change</changelog>
  <changelog author="dcermak@suse.com" date="1655208000">- Add missing Requires(post): sed, fixes boo#1200524
- Make %post compatible with dash</changelog>
  <changelog author="fvogt@suse.com" date="1655294400">- Use $() again in %post, but with a space for POSIX compliance</changelog>
  <changelog author="fcrozat@suse.com" date="1659528000">- Resync containers.conf / storage.conf with Fedora
- Create /etc/containers/registries.conf.d and
  add 000-shortnames.conf to it.</changelog>
  <changelog author="fvogt@suse.com" date="1660046400">- Fix obvious typo in containers.conf</changelog>
  <changelog author="dmueller@suse.com" date="1666699200">- set detached sigstore attachments for the SUSE controlled registries</changelog>
  <changelog author="dmueller@suse.com" date="1668081600">- postinstall script: slight cleanup, no functional change</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- add container-storage-driver.sh (bsc#1197093)</changelog>
  <changelog author="dcermak@suse.com" date="1669118400">- Update bundled common to 0.50.1
- Update bundled image to 5.23.1
- Update bundled storage to 1.44.0
- Drop bundled podman
- Bump version to 20221122
- Install container-storage-driver.sh in /etc/ on Leap &amp; SLE</changelog>
  <changelog author="dmueller@suse.com" date="1669636800">- add requires on util-linux-systemd for findmnt in profile script
- only set storage_driver env when no libpod exists
- avoid quoting issue</changelog>
  <changelog author="dcermak@suse.com" date="1670241600">- Remove registry.suse.com from search unqualified-search-registries:
  registry.suse.com responds very slowly to pagination repository listings
  (https://docs.docker.com/registry/spec/api/#pagination) and thereby causes
  every `podman search` to take over 90s. We have to remove it until this
  regression is fixed.</changelog>
  <changelog author="danish.prakash@suse.com" date="1673611200">- storage.conf: Unset 'driver' and set 'driver_priority' to
  allow podman to use 'btrfs' if available and fallback to
  'overlay' if not.
- .spec: rm %post script to set 'btrfs' as storage driver
  in storage.conf</changelog>
  <changelog author="danish.prakash@suse.com" date="1674648000">- Reverts https://build.opensuse.org/request/show/1060361
  Changes introduced to c/storage's storage.conf which adds
  a driver_priority attribute would break consumers of libcontainer-common
  as long as those packages are vendoring an older c/storage version.
  Instead of patching every consumer, we're reverting this change, until
  those packages have been updated downstream. [boo#1207509]</changelog>
  <changelog author="dcermak@suse.com" date="1676376000">- New upstream release 20230214
- bump c/storage to 1.45.3
- bump c/image to 5.24.1
- bump c/common to 0.51.0
- containers.conf:
  * add commented out options containers.read_only,
    engine.platform_to_oci_runtime, engine.events_container_create_inspect_data,
    network.volume_plugin_timeout, engine.runtimes.youki, machine.provider
  * remove deprecated setting containers.userns_size
  * add youki to engine.runtime_supports_json
- shortnames.conf: pull in latest upstream version
- storage.conf: add commented out option storage.transient_store
- correct license to APACHE-2.0 only (there's no GPLv3 code to be found)
- add source URLs to spec
- drop pointless copyright year</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add registry.suse.com to the unqualified-search-registries</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- Remove obsolete Requires(post): util-linux-systemd</changelog>
  <changelog author="dcermak@suse.com" date="1678881601">- Remove container-storage-driver.sh, we want to default to the overlay driver
  instead of btrfs.
  The btrfs driver is not really supported upstream (see
  e.g. https://github.com/containers/podman/issues/16882), there is no real
  development anymore and it appears to have subtle bugs (e.g. the one linked
  previously).
  To prevent further such issues, we will from now on default to the overlay
  driver.</changelog>
  <changelog author="fcrozat@suse.com" date="1682510400">- Own /etc/containers/systemd and /usr/share/containers/systemd,
  useful for podman quadlet.</changelog>
  <changelog author="danish.prakash@suse.com" date="1684238400">- Introduce new subpackage that adds SLE-specific mounts only
  on SLE systems (if sles-release) hence avoiding superfluous
  warnings on non-SLE systems while running podman commands.
  (bsc#1211124)</changelog>
  <changelog author="danish.prakash@suse.com" date="1694692800">- Require libcontainers-sles-mounts for *all* SLE products,
  and not just SLES. (bsc#1215291)</changelog>
</package>
<package pkgid="07169665905431ea879b032b5f85c1093a938d270154684030c210e3826d2183" name="libcontainers-common" arch="src">
  <version epoch="0" ver="20230214" rel="150500.4.6.1"/>
  <changelog author="rbrown@suse.com" date="1654689600">- Add missing comma to previous change</changelog>
  <changelog author="dcermak@suse.com" date="1655208000">- Add missing Requires(post): sed, fixes boo#1200524
- Make %post compatible with dash</changelog>
  <changelog author="fvogt@suse.com" date="1655294400">- Use $() again in %post, but with a space for POSIX compliance</changelog>
  <changelog author="fcrozat@suse.com" date="1659528000">- Resync containers.conf / storage.conf with Fedora
- Create /etc/containers/registries.conf.d and
  add 000-shortnames.conf to it.</changelog>
  <changelog author="fvogt@suse.com" date="1660046400">- Fix obvious typo in containers.conf</changelog>
  <changelog author="dmueller@suse.com" date="1666699200">- set detached sigstore attachments for the SUSE controlled registries</changelog>
  <changelog author="dmueller@suse.com" date="1668081600">- postinstall script: slight cleanup, no functional change</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- add container-storage-driver.sh (bsc#1197093)</changelog>
  <changelog author="dcermak@suse.com" date="1669118400">- Update bundled common to 0.50.1
- Update bundled image to 5.23.1
- Update bundled storage to 1.44.0
- Drop bundled podman
- Bump version to 20221122
- Install container-storage-driver.sh in /etc/ on Leap &amp; SLE</changelog>
  <changelog author="dmueller@suse.com" date="1669636800">- add requires on util-linux-systemd for findmnt in profile script
- only set storage_driver env when no libpod exists
- avoid quoting issue</changelog>
  <changelog author="dcermak@suse.com" date="1670241600">- Remove registry.suse.com from search unqualified-search-registries:
  registry.suse.com responds very slowly to pagination repository listings
  (https://docs.docker.com/registry/spec/api/#pagination) and thereby causes
  every `podman search` to take over 90s. We have to remove it until this
  regression is fixed.</changelog>
  <changelog author="danish.prakash@suse.com" date="1673611200">- storage.conf: Unset 'driver' and set 'driver_priority' to
  allow podman to use 'btrfs' if available and fallback to
  'overlay' if not.
- .spec: rm %post script to set 'btrfs' as storage driver
  in storage.conf</changelog>
  <changelog author="danish.prakash@suse.com" date="1674648000">- Reverts https://build.opensuse.org/request/show/1060361
  Changes introduced to c/storage's storage.conf which adds
  a driver_priority attribute would break consumers of libcontainer-common
  as long as those packages are vendoring an older c/storage version.
  Instead of patching every consumer, we're reverting this change, until
  those packages have been updated downstream. [boo#1207509]</changelog>
  <changelog author="dcermak@suse.com" date="1676376000">- New upstream release 20230214
- bump c/storage to 1.45.3
- bump c/image to 5.24.1
- bump c/common to 0.51.0
- containers.conf:
  * add commented out options containers.read_only,
    engine.platform_to_oci_runtime, engine.events_container_create_inspect_data,
    network.volume_plugin_timeout, engine.runtimes.youki, machine.provider
  * remove deprecated setting containers.userns_size
  * add youki to engine.runtime_supports_json
- shortnames.conf: pull in latest upstream version
- storage.conf: add commented out option storage.transient_store
- correct license to APACHE-2.0 only (there's no GPLv3 code to be found)
- add source URLs to spec
- drop pointless copyright year</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add registry.suse.com to the unqualified-search-registries</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- Remove obsolete Requires(post): util-linux-systemd</changelog>
  <changelog author="dcermak@suse.com" date="1678881601">- Remove container-storage-driver.sh, we want to default to the overlay driver
  instead of btrfs.
  The btrfs driver is not really supported upstream (see
  e.g. https://github.com/containers/podman/issues/16882), there is no real
  development anymore and it appears to have subtle bugs (e.g. the one linked
  previously).
  To prevent further such issues, we will from now on default to the overlay
  driver.</changelog>
  <changelog author="fcrozat@suse.com" date="1682510400">- Own /etc/containers/systemd and /usr/share/containers/systemd,
  useful for podman quadlet.</changelog>
  <changelog author="danish.prakash@suse.com" date="1684238400">- Introduce new subpackage that adds SLE-specific mounts only
  on SLE systems (if sles-release) hence avoiding superfluous
  warnings on non-SLE systems while running podman commands.
  (bsc#1211124)</changelog>
  <changelog author="danish.prakash@suse.com" date="1694692800">- Require libcontainers-sles-mounts for *all* SLE products,
  and not just SLES. (bsc#1215291)</changelog>
</package>
<package pkgid="5e53e6af00f2b89a2c4ab85cf05693ed4d7a3a5f748087e0e09f834697637f69" name="libcontainers-sles-mounts" arch="noarch">
  <version epoch="0" ver="20230214" rel="150500.4.6.1"/>
  <changelog author="rbrown@suse.com" date="1654689600">- Add missing comma to previous change</changelog>
  <changelog author="dcermak@suse.com" date="1655208000">- Add missing Requires(post): sed, fixes boo#1200524
- Make %post compatible with dash</changelog>
  <changelog author="fvogt@suse.com" date="1655294400">- Use $() again in %post, but with a space for POSIX compliance</changelog>
  <changelog author="fcrozat@suse.com" date="1659528000">- Resync containers.conf / storage.conf with Fedora
- Create /etc/containers/registries.conf.d and
  add 000-shortnames.conf to it.</changelog>
  <changelog author="fvogt@suse.com" date="1660046400">- Fix obvious typo in containers.conf</changelog>
  <changelog author="dmueller@suse.com" date="1666699200">- set detached sigstore attachments for the SUSE controlled registries</changelog>
  <changelog author="dmueller@suse.com" date="1668081600">- postinstall script: slight cleanup, no functional change</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- add container-storage-driver.sh (bsc#1197093)</changelog>
  <changelog author="dcermak@suse.com" date="1669118400">- Update bundled common to 0.50.1
- Update bundled image to 5.23.1
- Update bundled storage to 1.44.0
- Drop bundled podman
- Bump version to 20221122
- Install container-storage-driver.sh in /etc/ on Leap &amp; SLE</changelog>
  <changelog author="dmueller@suse.com" date="1669636800">- add requires on util-linux-systemd for findmnt in profile script
- only set storage_driver env when no libpod exists
- avoid quoting issue</changelog>
  <changelog author="dcermak@suse.com" date="1670241600">- Remove registry.suse.com from search unqualified-search-registries:
  registry.suse.com responds very slowly to pagination repository listings
  (https://docs.docker.com/registry/spec/api/#pagination) and thereby causes
  every `podman search` to take over 90s. We have to remove it until this
  regression is fixed.</changelog>
  <changelog author="danish.prakash@suse.com" date="1673611200">- storage.conf: Unset 'driver' and set 'driver_priority' to
  allow podman to use 'btrfs' if available and fallback to
  'overlay' if not.
- .spec: rm %post script to set 'btrfs' as storage driver
  in storage.conf</changelog>
  <changelog author="danish.prakash@suse.com" date="1674648000">- Reverts https://build.opensuse.org/request/show/1060361
  Changes introduced to c/storage's storage.conf which adds
  a driver_priority attribute would break consumers of libcontainer-common
  as long as those packages are vendoring an older c/storage version.
  Instead of patching every consumer, we're reverting this change, until
  those packages have been updated downstream. [boo#1207509]</changelog>
  <changelog author="dcermak@suse.com" date="1676376000">- New upstream release 20230214
- bump c/storage to 1.45.3
- bump c/image to 5.24.1
- bump c/common to 0.51.0
- containers.conf:
  * add commented out options containers.read_only,
    engine.platform_to_oci_runtime, engine.events_container_create_inspect_data,
    network.volume_plugin_timeout, engine.runtimes.youki, machine.provider
  * remove deprecated setting containers.userns_size
  * add youki to engine.runtime_supports_json
- shortnames.conf: pull in latest upstream version
- storage.conf: add commented out option storage.transient_store
- correct license to APACHE-2.0 only (there's no GPLv3 code to be found)
- add source URLs to spec
- drop pointless copyright year</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add registry.suse.com to the unqualified-search-registries</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- Remove obsolete Requires(post): util-linux-systemd</changelog>
  <changelog author="dcermak@suse.com" date="1678881601">- Remove container-storage-driver.sh, we want to default to the overlay driver
  instead of btrfs.
  The btrfs driver is not really supported upstream (see
  e.g. https://github.com/containers/podman/issues/16882), there is no real
  development anymore and it appears to have subtle bugs (e.g. the one linked
  previously).
  To prevent further such issues, we will from now on default to the overlay
  driver.</changelog>
  <changelog author="fcrozat@suse.com" date="1682510400">- Own /etc/containers/systemd and /usr/share/containers/systemd,
  useful for podman quadlet.</changelog>
  <changelog author="danish.prakash@suse.com" date="1684238400">- Introduce new subpackage that adds SLE-specific mounts only
  on SLE systems (if sles-release) hence avoiding superfluous
  warnings on non-SLE systems while running podman commands.
  (bsc#1211124)</changelog>
  <changelog author="danish.prakash@suse.com" date="1694692800">- Require libcontainers-sles-mounts for *all* SLE products,
  and not just SLES. (bsc#1215291)</changelog>
</package>
<package pkgid="24ba9ff8c3f4628c0c6529f0213bfe7007e6fd67a3a740d16489f86f9424295c" name="libcrypt1" arch="aarch64">
  <version epoch="0" ver="4.4.15" rel="150300.4.7.1"/>
  <changelog author="schwab@suse.de" date="1525867200">- ABI compatible replacement for libcypt from glibc</changelog>
  <changelog author="schwab@suse.de" date="1527076800">- Update to libxcrypt 4.0.1</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- Update to libxcrypt 4.1.0
  * Fix spelling of SUSE.
  * Lower the minimum required automake version to 1.14.
  * Fix build with USE_SWAPCONTEXT turned off.
  * Extend --enable-weak-hashes configure option to accept optional
    "glibc" parameter.
  * Fix the leak of obtained random bytes.
  * Check expected output strings for deterministic methods.
  * Fix memory leak in crypt_sha1_rn.
  * Fix read of random bytes out of bounds in gensalt_sha1_rn.
  * Make it possible to disable individual hashes at configure time.
  * Make salt validation pickier.
  * Replace crypt-sunmd5.c with BSD-licensed cleanroom reimplementation.
  * Make crypt_gensalt for $sha1 deterministic.
  * Fix incorrect output-size computation in crypt_sha1_rn.
  * Add docs for SHA1, MD5/Sun, NTHASH.
  * Introduce CRYPT_GENSALT_IMPLEMENTS_* feature test macros.
  * Install libcrypt.pc symlink along with libxcrypt.pc.
  * Extend --enable-obsolete-api configure option.
  * Extend overall test coverage.</changelog>
  <changelog author="jengelh@inai.de" date="1533556800">- Fix RPM groups for Factory.</changelog>
  <changelog author="schwab@suse.de" date="1533729600">- Add conflicts with glibc-devel &lt; 2.28</changelog>
  <changelog author="schwab@suse.de" date="1539086400">- Set compatibility level to suse</changelog>
  <changelog author="mliska@suse.cz" date="1550145600">- Update to version 4.4.3:
  * Add libxcrypt.so, libxcrypt.a and xcrypt.h.
  * Add new man3 manual pages.</changelog>
  <changelog author="schwab@suse.de" date="1550577600">- format-overflow.patch: Fix -Werror=format-overflow</changelog>
  <changelog author="mliska@suse.cz" date="1561032000">- Disable LTO due to symbol versioning (boo#1138833).</changelog>
  <changelog author="schwab@suse.de" date="1575720000">- Update to version 4.4.10
  * Fix alignment problem for GOST 34.11 (Streebog) in gost-yestcrypt.
  * The crypt_* functions will now all fail and set errno to ERANGE if
    their 'phrase' argument is longer than CRYPT_MAX_PASSPHRASE_SIZE
    characters (this is currently 512)
  * The NT hashing method no longer truncates passphrases at 128
    characters; Windows does not do this.
- format-overflow.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1576152000">- gcc10.patch: fix build with gcc10 (bsc#1158192)</changelog>
  <changelog author="schwab@suse.de" date="1579694400">- Update to version 4.4.11
  * Fixes for GCC v10.x
  * Change how the known-answer tests are parallelized
- gcc10.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1580385600">- Update to version 4.4.12
  * Another fix for GCC v10.x, which occurs on s390 architectures only.</changelog>
  <changelog author="schwab@suse.de" date="1583150400">- Update to version 4.4.15
  * The compatibility symbols crypt_gensalt_r, xcrypt, xcrypt_r,
    xcrypt_gensalt, and xcrypt_gensalt_r are deprecated further
  * Speed up ka-sunmd5 by skipping most of the test phrases
- Package README.md and TODO.md (bsc#1165389)</changelog>
  <changelog author="schwab@suse.de" date="1598961600">- Add compatibility provides for SLE15</changelog>
  <changelog author="dmueller@suse.com" date="1612612800">- add compatibility provides for Step 15 as well (bsc#1181571)</changelog>
  <changelog author="pgajdos@suse.com" date="1702382400">- fix variable name for datamember in 'struct crypt_data' [bsc#1215496]
- added patches
  fix https://github.com/besser82/libxcrypt/commit/b212d601549a0fc84cbbcaf21b931f903787d7e2
  + libxcrypt-man-fix-variable-name.patch</changelog>
</package>
<package pkgid="b6b1afcbf0f8f81ced3471c2c5f4975926d1bb01840aea1eacda83eb0ec1c306" name="libcrypt1" arch="s390x">
  <version epoch="0" ver="4.4.15" rel="150300.4.7.1"/>
  <changelog author="schwab@suse.de" date="1525867200">- ABI compatible replacement for libcypt from glibc</changelog>
  <changelog author="schwab@suse.de" date="1527076800">- Update to libxcrypt 4.0.1</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- Update to libxcrypt 4.1.0
  * Fix spelling of SUSE.
  * Lower the minimum required automake version to 1.14.
  * Fix build with USE_SWAPCONTEXT turned off.
  * Extend --enable-weak-hashes configure option to accept optional
    "glibc" parameter.
  * Fix the leak of obtained random bytes.
  * Check expected output strings for deterministic methods.
  * Fix memory leak in crypt_sha1_rn.
  * Fix read of random bytes out of bounds in gensalt_sha1_rn.
  * Make it possible to disable individual hashes at configure time.
  * Make salt validation pickier.
  * Replace crypt-sunmd5.c with BSD-licensed cleanroom reimplementation.
  * Make crypt_gensalt for $sha1 deterministic.
  * Fix incorrect output-size computation in crypt_sha1_rn.
  * Add docs for SHA1, MD5/Sun, NTHASH.
  * Introduce CRYPT_GENSALT_IMPLEMENTS_* feature test macros.
  * Install libcrypt.pc symlink along with libxcrypt.pc.
  * Extend --enable-obsolete-api configure option.
  * Extend overall test coverage.</changelog>
  <changelog author="jengelh@inai.de" date="1533556800">- Fix RPM groups for Factory.</changelog>
  <changelog author="schwab@suse.de" date="1533729600">- Add conflicts with glibc-devel &lt; 2.28</changelog>
  <changelog author="schwab@suse.de" date="1539086400">- Set compatibility level to suse</changelog>
  <changelog author="mliska@suse.cz" date="1550145600">- Update to version 4.4.3:
  * Add libxcrypt.so, libxcrypt.a and xcrypt.h.
  * Add new man3 manual pages.</changelog>
  <changelog author="schwab@suse.de" date="1550577600">- format-overflow.patch: Fix -Werror=format-overflow</changelog>
  <changelog author="mliska@suse.cz" date="1561032000">- Disable LTO due to symbol versioning (boo#1138833).</changelog>
  <changelog author="schwab@suse.de" date="1575720000">- Update to version 4.4.10
  * Fix alignment problem for GOST 34.11 (Streebog) in gost-yestcrypt.
  * The crypt_* functions will now all fail and set errno to ERANGE if
    their 'phrase' argument is longer than CRYPT_MAX_PASSPHRASE_SIZE
    characters (this is currently 512)
  * The NT hashing method no longer truncates passphrases at 128
    characters; Windows does not do this.
- format-overflow.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1576152000">- gcc10.patch: fix build with gcc10 (bsc#1158192)</changelog>
  <changelog author="schwab@suse.de" date="1579694400">- Update to version 4.4.11
  * Fixes for GCC v10.x
  * Change how the known-answer tests are parallelized
- gcc10.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1580385600">- Update to version 4.4.12
  * Another fix for GCC v10.x, which occurs on s390 architectures only.</changelog>
  <changelog author="schwab@suse.de" date="1583150400">- Update to version 4.4.15
  * The compatibility symbols crypt_gensalt_r, xcrypt, xcrypt_r,
    xcrypt_gensalt, and xcrypt_gensalt_r are deprecated further
  * Speed up ka-sunmd5 by skipping most of the test phrases
- Package README.md and TODO.md (bsc#1165389)</changelog>
  <changelog author="schwab@suse.de" date="1598961600">- Add compatibility provides for SLE15</changelog>
  <changelog author="dmueller@suse.com" date="1612612800">- add compatibility provides for Step 15 as well (bsc#1181571)</changelog>
  <changelog author="pgajdos@suse.com" date="1702382400">- fix variable name for datamember in 'struct crypt_data' [bsc#1215496]
- added patches
  fix https://github.com/besser82/libxcrypt/commit/b212d601549a0fc84cbbcaf21b931f903787d7e2
  + libxcrypt-man-fix-variable-name.patch</changelog>
</package>
<package pkgid="4ad93fb0cd888b9ebe695cc906ee787eca9aabcb69c9530885f6032fbbcf2c3d" name="libcrypt1" arch="x86_64">
  <version epoch="0" ver="4.4.15" rel="150300.4.7.1"/>
  <changelog author="schwab@suse.de" date="1525867200">- ABI compatible replacement for libcypt from glibc</changelog>
  <changelog author="schwab@suse.de" date="1527076800">- Update to libxcrypt 4.0.1</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- Update to libxcrypt 4.1.0
  * Fix spelling of SUSE.
  * Lower the minimum required automake version to 1.14.
  * Fix build with USE_SWAPCONTEXT turned off.
  * Extend --enable-weak-hashes configure option to accept optional
    "glibc" parameter.
  * Fix the leak of obtained random bytes.
  * Check expected output strings for deterministic methods.
  * Fix memory leak in crypt_sha1_rn.
  * Fix read of random bytes out of bounds in gensalt_sha1_rn.
  * Make it possible to disable individual hashes at configure time.
  * Make salt validation pickier.
  * Replace crypt-sunmd5.c with BSD-licensed cleanroom reimplementation.
  * Make crypt_gensalt for $sha1 deterministic.
  * Fix incorrect output-size computation in crypt_sha1_rn.
  * Add docs for SHA1, MD5/Sun, NTHASH.
  * Introduce CRYPT_GENSALT_IMPLEMENTS_* feature test macros.
  * Install libcrypt.pc symlink along with libxcrypt.pc.
  * Extend --enable-obsolete-api configure option.
  * Extend overall test coverage.</changelog>
  <changelog author="jengelh@inai.de" date="1533556800">- Fix RPM groups for Factory.</changelog>
  <changelog author="schwab@suse.de" date="1533729600">- Add conflicts with glibc-devel &lt; 2.28</changelog>
  <changelog author="schwab@suse.de" date="1539086400">- Set compatibility level to suse</changelog>
  <changelog author="mliska@suse.cz" date="1550145600">- Update to version 4.4.3:
  * Add libxcrypt.so, libxcrypt.a and xcrypt.h.
  * Add new man3 manual pages.</changelog>
  <changelog author="schwab@suse.de" date="1550577600">- format-overflow.patch: Fix -Werror=format-overflow</changelog>
  <changelog author="mliska@suse.cz" date="1561032000">- Disable LTO due to symbol versioning (boo#1138833).</changelog>
  <changelog author="schwab@suse.de" date="1575720000">- Update to version 4.4.10
  * Fix alignment problem for GOST 34.11 (Streebog) in gost-yestcrypt.
  * The crypt_* functions will now all fail and set errno to ERANGE if
    their 'phrase' argument is longer than CRYPT_MAX_PASSPHRASE_SIZE
    characters (this is currently 512)
  * The NT hashing method no longer truncates passphrases at 128
    characters; Windows does not do this.
- format-overflow.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1576152000">- gcc10.patch: fix build with gcc10 (bsc#1158192)</changelog>
  <changelog author="schwab@suse.de" date="1579694400">- Update to version 4.4.11
  * Fixes for GCC v10.x
  * Change how the known-answer tests are parallelized
- gcc10.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1580385600">- Update to version 4.4.12
  * Another fix for GCC v10.x, which occurs on s390 architectures only.</changelog>
  <changelog author="schwab@suse.de" date="1583150400">- Update to version 4.4.15
  * The compatibility symbols crypt_gensalt_r, xcrypt, xcrypt_r,
    xcrypt_gensalt, and xcrypt_gensalt_r are deprecated further
  * Speed up ka-sunmd5 by skipping most of the test phrases
- Package README.md and TODO.md (bsc#1165389)</changelog>
  <changelog author="schwab@suse.de" date="1598961600">- Add compatibility provides for SLE15</changelog>
  <changelog author="dmueller@suse.com" date="1612612800">- add compatibility provides for Step 15 as well (bsc#1181571)</changelog>
  <changelog author="pgajdos@suse.com" date="1702382400">- fix variable name for datamember in 'struct crypt_data' [bsc#1215496]
- added patches
  fix https://github.com/besser82/libxcrypt/commit/b212d601549a0fc84cbbcaf21b931f903787d7e2
  + libxcrypt-man-fix-variable-name.patch</changelog>
</package>
<package pkgid="cabf433a58c2f8b915542fe52c89e140d5fc92937f5d9d68ef504599087cd101" name="libcups2" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.51.2"/>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
</package>
<package pkgid="2cc39b42ba89bf48cfe4f5cc3677e4adc812112e6a5f4dbc430cf381fafa09c0" name="libcups2" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.51.2"/>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
</package>
<package pkgid="1a68aff3becd9341eb7bfe420f5e548336542ae3d94616edf9fe9052b5dad535" name="libcups2" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.51.2"/>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
</package>
<package pkgid="c0b0b5e64bc9555dfc00f4a6459deb6e5f7e0585f05ce39aba551ce6b7827152" name="libcurl4" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.32.1"/>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
</package>
<package pkgid="72363230c782bc8139584f7b6c661a07fe42554b441b17656d70a47370691c15" name="libcurl4" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.32.1"/>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
</package>
<package pkgid="14901f528d8e28d37214ef02b72883fdd6f281abfc3a1ef7fe8d9c14b71c5ca9" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.32.1"/>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
</package>
<package pkgid="71db41ebef7432590a2f1d4624ca9471b50371e64fad86acc7acfca993b4bd44" name="libcurl4" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.36.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
</package>
<package pkgid="74c40c2b85b963bfdb4de6b1f3f83cc47c84c9b2191b3a5d802327bdd3ffa4a3" name="libcurl4" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.36.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
</package>
<package pkgid="6266ce13ccbf934b0197b6c2a1123c0a4e3ff5dd9da7650092cc2b1907b1c548" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.36.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
</package>
<package pkgid="34aed315e2e826cae93ca8afc8463f239fa29c6ff59599a04ab927d99c87cdd2" name="libcurl4" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.41.1"/>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
</package>
<package pkgid="7e332dc9c9ce473eba03c8cf3afa124ef5bac24afbd951bbea87fadb9c51a74a" name="libcurl4" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.41.1"/>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
</package>
<package pkgid="739698a835ffdfa39d586ec201b656f8eef67fe752b426b27e499d2c04b6e7ac" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.41.1"/>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
</package>
<package pkgid="f25daed1c18c425e2da18e38c7b0bd3e93d49ad518cf96ec90848129fbbd2252" name="libdevmapper-event1_03" arch="aarch64">
  <version epoch="0" ver="2.03.22_1.02.196" rel="150500.7.9.1"/>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6753)
  - device-mapper version upgrade to 1.02.196
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="f97c35c938c6c7c5f2db3caa5eb85a344c283e909e3fb1f3d0b2b5ec9de6b942" name="libdevmapper-event1_03" arch="s390x">
  <version epoch="0" ver="2.03.22_1.02.196" rel="150500.7.9.1"/>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6753)
  - device-mapper version upgrade to 1.02.196
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="5263ced1ddfccb6d9363b84590eb9ae2153e3853018f563cec6a42af6f56aef0" name="libdevmapper-event1_03" arch="x86_64">
  <version epoch="0" ver="2.03.22_1.02.196" rel="150500.7.9.1"/>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6753)
  - device-mapper version upgrade to 1.02.196
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="028bf21976ba086d6eca425a96a2382a05c156d41cdfb0cf5448678b4bb5187d" name="libdevmapper1_03" arch="aarch64">
  <version epoch="0" ver="2.03.22_1.02.196" rel="150500.7.9.1"/>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6753)
  - device-mapper version upgrade to 1.02.196
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="da3dac0c7b2c55f86d5cf8d9c53ed9c604024704b9ec00d9a4f045ff9ed9e2e1" name="libdevmapper1_03" arch="s390x">
  <version epoch="0" ver="2.03.22_1.02.196" rel="150500.7.9.1"/>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6753)
  - device-mapper version upgrade to 1.02.196
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="53bfd79361915100dcaf41e014a18532fb1b733dbefa61bb9049d35dc024a0c6" name="libdevmapper1_03" arch="x86_64">
  <version epoch="0" ver="2.03.22_1.02.196" rel="150500.7.9.1"/>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6753)
  - device-mapper version upgrade to 1.02.196
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="5b74e1c5ad1747823e21ceb6bfecdd26b17e5a252dd7a1286366379164a50677" name="libduktape206" arch="aarch64">
  <version epoch="0" ver="2.6.0" rel="150500.4.2.1"/>
  <changelog author="avvissu@yandex.by" date="1496145600">- Initial package</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Correct RPM group.</changelog>
  <changelog author="avvissu@yandex.by" date="1501329600">- Update to 2.1.1:
  * maintenance release</changelog>
  <changelog author="avvissu@yandex.by" date="1507204800">- Update to 2.2.0:
  * call handling, API improvements, performance</changelog>
  <changelog author="avvissu@yandex.by" date="1524744000">- Update to 2.2.1:
  * maintenance release</changelog>
  <changelog author="sean@suspend.net" date="1539864000">- Update to 2.3.0:
  * ES2015 improvements</changelog>
  <changelog author="avvissu@yandex.by" date="1564401600">- Update to 2.4.0:
  * Minor fixes and improvements</changelog>
  <changelog author="mrey@suse.com" date="1595937600">- Update to 2.5.0:
  * CBOR support, minor fixes and improvements
- spec file changes
  * change http to https in URLs
  * use RPM macros</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1604059200">- Update to 2.6.0:
  * Various fixes and portability improvements.</changelog>
  <changelog author="meissner@suse.com" date="1669636800">- duktape-link-m.patch: link against libm for sin() and related functions,
  in case the compiler with -Os creates external references. bsc#1205805</changelog>
</package>
<package pkgid="4d461b4731a6e916cd0fd6b2ea5cd858aab06ae4bcb19a2e1eef706a65d4cb8c" name="libduktape206" arch="s390x">
  <version epoch="0" ver="2.6.0" rel="150500.4.2.1"/>
  <changelog author="avvissu@yandex.by" date="1496145600">- Initial package</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Correct RPM group.</changelog>
  <changelog author="avvissu@yandex.by" date="1501329600">- Update to 2.1.1:
  * maintenance release</changelog>
  <changelog author="avvissu@yandex.by" date="1507204800">- Update to 2.2.0:
  * call handling, API improvements, performance</changelog>
  <changelog author="avvissu@yandex.by" date="1524744000">- Update to 2.2.1:
  * maintenance release</changelog>
  <changelog author="sean@suspend.net" date="1539864000">- Update to 2.3.0:
  * ES2015 improvements</changelog>
  <changelog author="avvissu@yandex.by" date="1564401600">- Update to 2.4.0:
  * Minor fixes and improvements</changelog>
  <changelog author="mrey@suse.com" date="1595937600">- Update to 2.5.0:
  * CBOR support, minor fixes and improvements
- spec file changes
  * change http to https in URLs
  * use RPM macros</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1604059200">- Update to 2.6.0:
  * Various fixes and portability improvements.</changelog>
  <changelog author="meissner@suse.com" date="1669636800">- duktape-link-m.patch: link against libm for sin() and related functions,
  in case the compiler with -Os creates external references. bsc#1205805</changelog>
</package>
<package pkgid="63df23429fd66049ee0106d5a6fbfd7a733f4564265f17b6b7e9dea458469e84" name="libduktape206" arch="x86_64">
  <version epoch="0" ver="2.6.0" rel="150500.4.2.1"/>
  <changelog author="avvissu@yandex.by" date="1496145600">- Initial package</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Correct RPM group.</changelog>
  <changelog author="avvissu@yandex.by" date="1501329600">- Update to 2.1.1:
  * maintenance release</changelog>
  <changelog author="avvissu@yandex.by" date="1507204800">- Update to 2.2.0:
  * call handling, API improvements, performance</changelog>
  <changelog author="avvissu@yandex.by" date="1524744000">- Update to 2.2.1:
  * maintenance release</changelog>
  <changelog author="sean@suspend.net" date="1539864000">- Update to 2.3.0:
  * ES2015 improvements</changelog>
  <changelog author="avvissu@yandex.by" date="1564401600">- Update to 2.4.0:
  * Minor fixes and improvements</changelog>
  <changelog author="mrey@suse.com" date="1595937600">- Update to 2.5.0:
  * CBOR support, minor fixes and improvements
- spec file changes
  * change http to https in URLs
  * use RPM macros</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1604059200">- Update to 2.6.0:
  * Various fixes and portability improvements.</changelog>
  <changelog author="meissner@suse.com" date="1669636800">- duktape-link-m.patch: link against libm for sin() and related functions,
  in case the compiler with -Os creates external references. bsc#1205805</changelog>
</package>
<package pkgid="e60e3917bf7d3f782370f77cf0ff3369a3772a4854d9f6879f9d33876c788259" name="libduktape206" arch="aarch64">
  <version epoch="0" ver="2.6.0" rel="150500.4.5.1"/>
  <changelog author="avvissu@yandex.by" date="1496145600">- Initial package</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Correct RPM group.</changelog>
  <changelog author="avvissu@yandex.by" date="1501329600">- Update to 2.1.1:
  * maintenance release</changelog>
  <changelog author="avvissu@yandex.by" date="1507204800">- Update to 2.2.0:
  * call handling, API improvements, performance</changelog>
  <changelog author="avvissu@yandex.by" date="1524744000">- Update to 2.2.1:
  * maintenance release</changelog>
  <changelog author="sean@suspend.net" date="1539864000">- Update to 2.3.0:
  * ES2015 improvements</changelog>
  <changelog author="avvissu@yandex.by" date="1564401600">- Update to 2.4.0:
  * Minor fixes and improvements</changelog>
  <changelog author="mrey@suse.com" date="1595937600">- Update to 2.5.0:
  * CBOR support, minor fixes and improvements
- spec file changes
  * change http to https in URLs
  * use RPM macros</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1604059200">- Update to 2.6.0:
  * Various fixes and portability improvements.</changelog>
  <changelog author="meissner@suse.com" date="1669636800">- duktape-link-m.patch: link against libm for sin() and related functions,
  in case the compiler with -Os creates external references. bsc#1205805</changelog>
  <changelog author="yfjiang@suse.com" date="1705060800">- Ship libduktape206-32bit: needed by libproxy since version 0.5.</changelog>
</package>
<package pkgid="b7592e2cc2ccc593b075aafe7b48a0a96f934c8d6a32cc14bc2d778bc9ed73a4" name="libduktape206" arch="s390x">
  <version epoch="0" ver="2.6.0" rel="150500.4.5.1"/>
  <changelog author="avvissu@yandex.by" date="1496145600">- Initial package</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Correct RPM group.</changelog>
  <changelog author="avvissu@yandex.by" date="1501329600">- Update to 2.1.1:
  * maintenance release</changelog>
  <changelog author="avvissu@yandex.by" date="1507204800">- Update to 2.2.0:
  * call handling, API improvements, performance</changelog>
  <changelog author="avvissu@yandex.by" date="1524744000">- Update to 2.2.1:
  * maintenance release</changelog>
  <changelog author="sean@suspend.net" date="1539864000">- Update to 2.3.0:
  * ES2015 improvements</changelog>
  <changelog author="avvissu@yandex.by" date="1564401600">- Update to 2.4.0:
  * Minor fixes and improvements</changelog>
  <changelog author="mrey@suse.com" date="1595937600">- Update to 2.5.0:
  * CBOR support, minor fixes and improvements
- spec file changes
  * change http to https in URLs
  * use RPM macros</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1604059200">- Update to 2.6.0:
  * Various fixes and portability improvements.</changelog>
  <changelog author="meissner@suse.com" date="1669636800">- duktape-link-m.patch: link against libm for sin() and related functions,
  in case the compiler with -Os creates external references. bsc#1205805</changelog>
  <changelog author="yfjiang@suse.com" date="1705060800">- Ship libduktape206-32bit: needed by libproxy since version 0.5.</changelog>
</package>
<package pkgid="5ff6b603292382819d2999d44241221c851a6e5dd223eac7315539bb11bdc9a6" name="libduktape206" arch="x86_64">
  <version epoch="0" ver="2.6.0" rel="150500.4.5.1"/>
  <changelog author="avvissu@yandex.by" date="1496145600">- Initial package</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Correct RPM group.</changelog>
  <changelog author="avvissu@yandex.by" date="1501329600">- Update to 2.1.1:
  * maintenance release</changelog>
  <changelog author="avvissu@yandex.by" date="1507204800">- Update to 2.2.0:
  * call handling, API improvements, performance</changelog>
  <changelog author="avvissu@yandex.by" date="1524744000">- Update to 2.2.1:
  * maintenance release</changelog>
  <changelog author="sean@suspend.net" date="1539864000">- Update to 2.3.0:
  * ES2015 improvements</changelog>
  <changelog author="avvissu@yandex.by" date="1564401600">- Update to 2.4.0:
  * Minor fixes and improvements</changelog>
  <changelog author="mrey@suse.com" date="1595937600">- Update to 2.5.0:
  * CBOR support, minor fixes and improvements
- spec file changes
  * change http to https in URLs
  * use RPM macros</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1604059200">- Update to 2.6.0:
  * Various fixes and portability improvements.</changelog>
  <changelog author="meissner@suse.com" date="1669636800">- duktape-link-m.patch: link against libm for sin() and related functions,
  in case the compiler with -Os creates external references. bsc#1205805</changelog>
  <changelog author="yfjiang@suse.com" date="1705060800">- Ship libduktape206-32bit: needed by libproxy since version 0.5.</changelog>
</package>
<package pkgid="30662160ced050a02b0b8c10efaee7eb01b757f7ce1551ffd9a4c0038bddb0d5" name="libeconf" arch="src">
  <version epoch="0" ver="0.5.2" rel="150400.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1594382400">- Update to version 0.3.8+git20200710.5126fff:
  * Add CMake build scripts, remove autotools support
  * Move C++ ABI compatibility section</changelog>
  <changelog author="lnussel@suse.de" date="1603368000">- explicitly BuildRequire: pkgconfig for /usr/lib/rpm/pkgconfigdeps.sh
  On TW it's pulled in implicitly by libxcrypt-devel which is not the
  case on 15.2</changelog>
  <changelog author="schubi@suse.com" date="1617883200">- Update to version 0.4.0+git20210408.6d33e5e:
  * Man pages libeconf.3 and econftool.8.
  * Handling multiline strings.
  * Added libeconf_ext which returns more information like
    line_nr, comments, path of the configuration file,...
  * Econftool, an command line interface for handling configuration
    files.
  * Generating HTML API documentation with doxygen.
  * Improving error handling and semantic file check.
  * Joining entries with the same key to one single entry if
    env variable ECONF_JOIN_SAME_ENTRIES has been set.</changelog>
  <changelog author="schubi@suse.com" date="1618228800">- Update to version 0.4.0+git20210412.1513a26:
  * Added econftool cat option (#146)
  * new API call: econf_readDirsHistory (showing ALL locations)
  * new API call: econf_getPath (absolute path of the configuration file)</changelog>
  <changelog author="schubi@suse.com" date="1618315200">- Update to version 0.4.0+git20210413.fdb8025:
  * Installing man pages via meson. (#147)</changelog>
  <changelog author="schubi@suse.com" date="1618488000">- Removed doxygen from build requires.</changelog>
  <changelog author="schubi@suse.com" date="1625659200">- Update to version 0.4.0+git20210707.537a8a:
  * Fixed resource leaks found by Iker Pedrosa.</changelog>
  <changelog author="Stefan Schubert schubi@suse.com" date="1625745600">- Update to version 0.4.0+git20210708.6918ea1:
  * Fixed covscan FORWARD_NULL_issues warnings</changelog>
  <changelog author="schubi@localhost" date="1625832000">- Update to version 0.4.1+git20210709.cf671f2:
  * CMake fixes regarding installation of econftool and man pages.</changelog>
  <changelog author="schubi@suse.com" date="1636632000">- Update to version libeconf-0.4.2+git20211111.c7a2c52:
  * CMake fixes regarding document installation.
  * Fixed different issues while writing string values to file.
  * Writing comments to file too.
  * Fixed memory leaks.
  * Fixed crash while merging values.</changelog>
  <changelog author="schubi@suse.com" date="1641297600">- Update to version 0.4.2+git20220104.5dfd69d:
  * Reading numbers with different bases (e.g. oktal) (bsc#1193632) (#157)</changelog>
  <changelog author="schubi@suse.com" date="1641297601">- Update to version 0.4.4+git20220104.962774f:
  * Fixed i586 build (#158)</changelog>
  <changelog author="schubi@suse.com" date="1649246400">- Update to version 0.4.5+git20220406.c9658f2:
  * econftool:
  * * New call "syntax" for checking the configuration files only.
    Returns an error string with line number if an error occurs.
  * * New options "--comment" and "--delimeters"
  * * Parsing one file only if needed.</changelog>
  <changelog author="schubi@suse.com" date="1651060800">- Update to version 0.4.6+git20220427.3016f4e:
  * econftool:
  * * Parsing error: Reporting file and line nr.
  * * --delimeters=spaces Taking all kind of spaces for delimiter
  * libeconf:
    Fixed bsc#1198165: Parsing files correctly which have space characters
    AND none space characters as delimiters.</changelog>
  <changelog author="schubi@suse.com" date="1668427200">- Update to version 0.4.8+git20221114.7ff7704:
  * Parsing files which are containing keys only (#170)
    All delimiters are allowed now : "", " =", " ", "=". But the
    user should use "" in order to be distinct.
  * /usr/etc/shells.d/&lt;file_name&gt; will not be parsed if
    /etc/shells.d/&lt;file_name&gt; is defined too.
  * Lto build fixed (#168)
  * New calls: econf_comment_tag, econf_delimiter_tag, econf_set_comment_tag,
    econf_set_delimiter_tag
  * Checking UID,GroupID, permissions,... of the parsed files (#165)
    New calls: econf_requireOwner, econf_requireGroup, econf_requirePermissions,
    econf_followSymlinks
  * Ignoring Group without brackets; Do not hold brackets in the internal data structure. (#164)
  * Error handling improved for nums and booleans (#163)</changelog>
  <changelog author="schubi@suse.com" date="1669204800">- Update to version 0.4.9:
  * libeconf.h: added missing sys/types.h header (#171)
  * new API calls: econf_readFileWithCallback,
    econf_readDirsWithCallback, econf_readDirsHistoryWithCallback (#172)
  * Checking NULL comment parameter in the parsing functions.</changelog>
  <changelog author="schubi@suse.com" date="1669982400">- Update to version 0.5.0:
  * API calls econf_read*WithCallback supporting a general (void *)
    argument for user defined data with which the callback function is
    called.
  * Tagged following functions deprecated:
    econf_requireOwner, econf_requireGroup, econf_requirePermissions,
    econf_followSymlinks, econf_reset_security_settings
    Use one of the econf_read*WithCallback functions instead.</changelog>
  <changelog author="schubi@suse.com" date="1674129600">- Update to version 0.5.1:
  * Reading files in /usr/_vendor_/_example_._suffix_.d/* regardless
    there is a /etc/_example_._suffix_ file. (#175)</changelog>
  <changelog author="schubi@suse.com" date="1679659200">- Update to version 0.5.2:
  * Fixed build for aarch64 and gcc13.
  * Making the output verbose when a test fails.
  * Fixed a stack-buffer-overflow vulnerability in "econf_writeFile"
    function.
  * Fixed a stack-buffer-overflow vulnerability in "read_file"
    function.
  * Added new feature: econf_set_conf_dirs (const char **dir_postfix_list)
    Sets a list of directory structures (with order) which describes
    the directories in which the files have to be parsed.
    E.G. with the given list: {"/conf.d/", ".d/", "/", NULL} files in following
    directories will be parsed:
    "&lt;default_dirs&gt;/&lt;project_name&gt;.&lt;suffix&gt;.d/"
    "&lt;default_dirs&gt;/&lt;project_name&gt;/conf.d/"
    "&lt;default_dirs&gt;/&lt;project_name&gt;.d/"
    "&lt;default_dirs&gt;/&lt;project_name&gt;/"
    The entry "&lt;default_dirs&gt;/&lt;project_name&gt;.&lt;suffix&gt;.d/" will be added
    automatically.
  * General code cleanup.</changelog>
  <changelog author="schubi@suse.com" date="1694001600">- Additional info for version 0.5.2:
  * Fixed a stack-buffer-overflow vulnerability in "econf_writeFile"
    function. (CVE-2023-30078, CVE-2023-32181, bsc#1211078)
  * Fixed a stack-buffer-overflow vulnerability in "read_file"
    function. (CVE-2023-30079, CVE-2023-22652, bsc#1211078)</changelog>
</package>
<package pkgid="e654a112184913261664490d7680499062916ae1789ae220c83e4421decade3f" name="libeconf0" arch="aarch64">
  <version epoch="0" ver="0.5.2" rel="150400.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1594382400">- Update to version 0.3.8+git20200710.5126fff:
  * Add CMake build scripts, remove autotools support
  * Move C++ ABI compatibility section</changelog>
  <changelog author="lnussel@suse.de" date="1603368000">- explicitly BuildRequire: pkgconfig for /usr/lib/rpm/pkgconfigdeps.sh
  On TW it's pulled in implicitly by libxcrypt-devel which is not the
  case on 15.2</changelog>
  <changelog author="schubi@suse.com" date="1617883200">- Update to version 0.4.0+git20210408.6d33e5e:
  * Man pages libeconf.3 and econftool.8.
  * Handling multiline strings.
  * Added libeconf_ext which returns more information like
    line_nr, comments, path of the configuration file,...
  * Econftool, an command line interface for handling configuration
    files.
  * Generating HTML API documentation with doxygen.
  * Improving error handling and semantic file check.
  * Joining entries with the same key to one single entry if
    env variable ECONF_JOIN_SAME_ENTRIES has been set.</changelog>
  <changelog author="schubi@suse.com" date="1618228800">- Update to version 0.4.0+git20210412.1513a26:
  * Added econftool cat option (#146)
  * new API call: econf_readDirsHistory (showing ALL locations)
  * new API call: econf_getPath (absolute path of the configuration file)</changelog>
  <changelog author="schubi@suse.com" date="1618315200">- Update to version 0.4.0+git20210413.fdb8025:
  * Installing man pages via meson. (#147)</changelog>
  <changelog author="schubi@suse.com" date="1618488000">- Removed doxygen from build requires.</changelog>
  <changelog author="schubi@suse.com" date="1625659200">- Update to version 0.4.0+git20210707.537a8a:
  * Fixed resource leaks found by Iker Pedrosa.</changelog>
  <changelog author="Stefan Schubert schubi@suse.com" date="1625745600">- Update to version 0.4.0+git20210708.6918ea1:
  * Fixed covscan FORWARD_NULL_issues warnings</changelog>
  <changelog author="schubi@localhost" date="1625832000">- Update to version 0.4.1+git20210709.cf671f2:
  * CMake fixes regarding installation of econftool and man pages.</changelog>
  <changelog author="schubi@suse.com" date="1636632000">- Update to version libeconf-0.4.2+git20211111.c7a2c52:
  * CMake fixes regarding document installation.
  * Fixed different issues while writing string values to file.
  * Writing comments to file too.
  * Fixed memory leaks.
  * Fixed crash while merging values.</changelog>
  <changelog author="schubi@suse.com" date="1641297600">- Update to version 0.4.2+git20220104.5dfd69d:
  * Reading numbers with different bases (e.g. oktal) (bsc#1193632) (#157)</changelog>
  <changelog author="schubi@suse.com" date="1641297601">- Update to version 0.4.4+git20220104.962774f:
  * Fixed i586 build (#158)</changelog>
  <changelog author="schubi@suse.com" date="1649246400">- Update to version 0.4.5+git20220406.c9658f2:
  * econftool:
  * * New call "syntax" for checking the configuration files only.
    Returns an error string with line number if an error occurs.
  * * New options "--comment" and "--delimeters"
  * * Parsing one file only if needed.</changelog>
  <changelog author="schubi@suse.com" date="1651060800">- Update to version 0.4.6+git20220427.3016f4e:
  * econftool:
  * * Parsing error: Reporting file and line nr.
  * * --delimeters=spaces Taking all kind of spaces for delimiter
  * libeconf:
    Fixed bsc#1198165: Parsing files correctly which have space characters
    AND none space characters as delimiters.</changelog>
  <changelog author="schubi@suse.com" date="1668427200">- Update to version 0.4.8+git20221114.7ff7704:
  * Parsing files which are containing keys only (#170)
    All delimiters are allowed now : "", " =", " ", "=". But the
    user should use "" in order to be distinct.
  * /usr/etc/shells.d/&lt;file_name&gt; will not be parsed if
    /etc/shells.d/&lt;file_name&gt; is defined too.
  * Lto build fixed (#168)
  * New calls: econf_comment_tag, econf_delimiter_tag, econf_set_comment_tag,
    econf_set_delimiter_tag
  * Checking UID,GroupID, permissions,... of the parsed files (#165)
    New calls: econf_requireOwner, econf_requireGroup, econf_requirePermissions,
    econf_followSymlinks
  * Ignoring Group without brackets; Do not hold brackets in the internal data structure. (#164)
  * Error handling improved for nums and booleans (#163)</changelog>
  <changelog author="schubi@suse.com" date="1669204800">- Update to version 0.4.9:
  * libeconf.h: added missing sys/types.h header (#171)
  * new API calls: econf_readFileWithCallback,
    econf_readDirsWithCallback, econf_readDirsHistoryWithCallback (#172)
  * Checking NULL comment parameter in the parsing functions.</changelog>
  <changelog author="schubi@suse.com" date="1669982400">- Update to version 0.5.0:
  * API calls econf_read*WithCallback supporting a general (void *)
    argument for user defined data with which the callback function is
    called.
  * Tagged following functions deprecated:
    econf_requireOwner, econf_requireGroup, econf_requirePermissions,
    econf_followSymlinks, econf_reset_security_settings
    Use one of the econf_read*WithCallback functions instead.</changelog>
  <changelog author="schubi@suse.com" date="1674129600">- Update to version 0.5.1:
  * Reading files in /usr/_vendor_/_example_._suffix_.d/* regardless
    there is a /etc/_example_._suffix_ file. (#175)</changelog>
  <changelog author="schubi@suse.com" date="1679659200">- Update to version 0.5.2:
  * Fixed build for aarch64 and gcc13.
  * Making the output verbose when a test fails.
  * Fixed a stack-buffer-overflow vulnerability in "econf_writeFile"
    function.
  * Fixed a stack-buffer-overflow vulnerability in "read_file"
    function.
  * Added new feature: econf_set_conf_dirs (const char **dir_postfix_list)
    Sets a list of directory structures (with order) which describes
    the directories in which the files have to be parsed.
    E.G. with the given list: {"/conf.d/", ".d/", "/", NULL} files in following
    directories will be parsed:
    "&lt;default_dirs&gt;/&lt;project_name&gt;.&lt;suffix&gt;.d/"
    "&lt;default_dirs&gt;/&lt;project_name&gt;/conf.d/"
    "&lt;default_dirs&gt;/&lt;project_name&gt;.d/"
    "&lt;default_dirs&gt;/&lt;project_name&gt;/"
    The entry "&lt;default_dirs&gt;/&lt;project_name&gt;.&lt;suffix&gt;.d/" will be added
    automatically.
  * General code cleanup.</changelog>
  <changelog author="schubi@suse.com" date="1694001600">- Additional info for version 0.5.2:
  * Fixed a stack-buffer-overflow vulnerability in "econf_writeFile"
    function. (CVE-2023-30078, CVE-2023-32181, bsc#1211078)
  * Fixed a stack-buffer-overflow vulnerability in "read_file"
    function. (CVE-2023-30079, CVE-2023-22652, bsc#1211078)</changelog>
</package>
<package pkgid="66220754f9f0aeee71461bc89816488af2562458de36d35ae2eead0f8534128f" name="libeconf0" arch="s390x">
  <version epoch="0" ver="0.5.2" rel="150400.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1594382400">- Update to version 0.3.8+git20200710.5126fff:
  * Add CMake build scripts, remove autotools support
  * Move C++ ABI compatibility section</changelog>
  <changelog author="lnussel@suse.de" date="1603368000">- explicitly BuildRequire: pkgconfig for /usr/lib/rpm/pkgconfigdeps.sh
  On TW it's pulled in implicitly by libxcrypt-devel which is not the
  case on 15.2</changelog>
  <changelog author="schubi@suse.com" date="1617883200">- Update to version 0.4.0+git20210408.6d33e5e:
  * Man pages libeconf.3 and econftool.8.
  * Handling multiline strings.
  * Added libeconf_ext which returns more information like
    line_nr, comments, path of the configuration file,...
  * Econftool, an command line interface for handling configuration
    files.
  * Generating HTML API documentation with doxygen.
  * Improving error handling and semantic file check.
  * Joining entries with the same key to one single entry if
    env variable ECONF_JOIN_SAME_ENTRIES has been set.</changelog>
  <changelog author="schubi@suse.com" date="1618228800">- Update to version 0.4.0+git20210412.1513a26:
  * Added econftool cat option (#146)
  * new API call: econf_readDirsHistory (showing ALL locations)
  * new API call: econf_getPath (absolute path of the configuration file)</changelog>
  <changelog author="schubi@suse.com" date="1618315200">- Update to version 0.4.0+git20210413.fdb8025:
  * Installing man pages via meson. (#147)</changelog>
  <changelog author="schubi@suse.com" date="1618488000">- Removed doxygen from build requires.</changelog>
  <changelog author="schubi@suse.com" date="1625659200">- Update to version 0.4.0+git20210707.537a8a:
  * Fixed resource leaks found by Iker Pedrosa.</changelog>
  <changelog author="Stefan Schubert schubi@suse.com" date="1625745600">- Update to version 0.4.0+git20210708.6918ea1:
  * Fixed covscan FORWARD_NULL_issues warnings</changelog>
  <changelog author="schubi@localhost" date="1625832000">- Update to version 0.4.1+git20210709.cf671f2:
  * CMake fixes regarding installation of econftool and man pages.</changelog>
  <changelog author="schubi@suse.com" date="1636632000">- Update to version libeconf-0.4.2+git20211111.c7a2c52:
  * CMake fixes regarding document installation.
  * Fixed different issues while writing string values to file.
  * Writing comments to file too.
  * Fixed memory leaks.
  * Fixed crash while merging values.</changelog>
  <changelog author="schubi@suse.com" date="1641297600">- Update to version 0.4.2+git20220104.5dfd69d:
  * Reading numbers with different bases (e.g. oktal) (bsc#1193632) (#157)</changelog>
  <changelog author="schubi@suse.com" date="1641297601">- Update to version 0.4.4+git20220104.962774f:
  * Fixed i586 build (#158)</changelog>
  <changelog author="schubi@suse.com" date="1649246400">- Update to version 0.4.5+git20220406.c9658f2:
  * econftool:
  * * New call "syntax" for checking the configuration files only.
    Returns an error string with line number if an error occurs.
  * * New options "--comment" and "--delimeters"
  * * Parsing one file only if needed.</changelog>
  <changelog author="schubi@suse.com" date="1651060800">- Update to version 0.4.6+git20220427.3016f4e:
  * econftool:
  * * Parsing error: Reporting file and line nr.
  * * --delimeters=spaces Taking all kind of spaces for delimiter
  * libeconf:
    Fixed bsc#1198165: Parsing files correctly which have space characters
    AND none space characters as delimiters.</changelog>
  <changelog author="schubi@suse.com" date="1668427200">- Update to version 0.4.8+git20221114.7ff7704:
  * Parsing files which are containing keys only (#170)
    All delimiters are allowed now : "", " =", " ", "=". But the
    user should use "" in order to be distinct.
  * /usr/etc/shells.d/&lt;file_name&gt; will not be parsed if
    /etc/shells.d/&lt;file_name&gt; is defined too.
  * Lto build fixed (#168)
  * New calls: econf_comment_tag, econf_delimiter_tag, econf_set_comment_tag,
    econf_set_delimiter_tag
  * Checking UID,GroupID, permissions,... of the parsed files (#165)
    New calls: econf_requireOwner, econf_requireGroup, econf_requirePermissions,
    econf_followSymlinks
  * Ignoring Group without brackets; Do not hold brackets in the internal data structure. (#164)
  * Error handling improved for nums and booleans (#163)</changelog>
  <changelog author="schubi@suse.com" date="1669204800">- Update to version 0.4.9:
  * libeconf.h: added missing sys/types.h header (#171)
  * new API calls: econf_readFileWithCallback,
    econf_readDirsWithCallback, econf_readDirsHistoryWithCallback (#172)
  * Checking NULL comment parameter in the parsing functions.</changelog>
  <changelog author="schubi@suse.com" date="1669982400">- Update to version 0.5.0:
  * API calls econf_read*WithCallback supporting a general (void *)
    argument for user defined data with which the callback function is
    called.
  * Tagged following functions deprecated:
    econf_requireOwner, econf_requireGroup, econf_requirePermissions,
    econf_followSymlinks, econf_reset_security_settings
    Use one of the econf_read*WithCallback functions instead.</changelog>
  <changelog author="schubi@suse.com" date="1674129600">- Update to version 0.5.1:
  * Reading files in /usr/_vendor_/_example_._suffix_.d/* regardless
    there is a /etc/_example_._suffix_ file. (#175)</changelog>
  <changelog author="schubi@suse.com" date="1679659200">- Update to version 0.5.2:
  * Fixed build for aarch64 and gcc13.
  * Making the output verbose when a test fails.
  * Fixed a stack-buffer-overflow vulnerability in "econf_writeFile"
    function.
  * Fixed a stack-buffer-overflow vulnerability in "read_file"
    function.
  * Added new feature: econf_set_conf_dirs (const char **dir_postfix_list)
    Sets a list of directory structures (with order) which describes
    the directories in which the files have to be parsed.
    E.G. with the given list: {"/conf.d/", ".d/", "/", NULL} files in following
    directories will be parsed:
    "&lt;default_dirs&gt;/&lt;project_name&gt;.&lt;suffix&gt;.d/"
    "&lt;default_dirs&gt;/&lt;project_name&gt;/conf.d/"
    "&lt;default_dirs&gt;/&lt;project_name&gt;.d/"
    "&lt;default_dirs&gt;/&lt;project_name&gt;/"
    The entry "&lt;default_dirs&gt;/&lt;project_name&gt;.&lt;suffix&gt;.d/" will be added
    automatically.
  * General code cleanup.</changelog>
  <changelog author="schubi@suse.com" date="1694001600">- Additional info for version 0.5.2:
  * Fixed a stack-buffer-overflow vulnerability in "econf_writeFile"
    function. (CVE-2023-30078, CVE-2023-32181, bsc#1211078)
  * Fixed a stack-buffer-overflow vulnerability in "read_file"
    function. (CVE-2023-30079, CVE-2023-22652, bsc#1211078)</changelog>
</package>
<package pkgid="f740e03a398e1a5684f32e385c61748d73e3f5e0c80627f9b24f3decf10d06cf" name="libeconf0" arch="x86_64">
  <version epoch="0" ver="0.5.2" rel="150400.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1594382400">- Update to version 0.3.8+git20200710.5126fff:
  * Add CMake build scripts, remove autotools support
  * Move C++ ABI compatibility section</changelog>
  <changelog author="lnussel@suse.de" date="1603368000">- explicitly BuildRequire: pkgconfig for /usr/lib/rpm/pkgconfigdeps.sh
  On TW it's pulled in implicitly by libxcrypt-devel which is not the
  case on 15.2</changelog>
  <changelog author="schubi@suse.com" date="1617883200">- Update to version 0.4.0+git20210408.6d33e5e:
  * Man pages libeconf.3 and econftool.8.
  * Handling multiline strings.
  * Added libeconf_ext which returns more information like
    line_nr, comments, path of the configuration file,...
  * Econftool, an command line interface for handling configuration
    files.
  * Generating HTML API documentation with doxygen.
  * Improving error handling and semantic file check.
  * Joining entries with the same key to one single entry if
    env variable ECONF_JOIN_SAME_ENTRIES has been set.</changelog>
  <changelog author="schubi@suse.com" date="1618228800">- Update to version 0.4.0+git20210412.1513a26:
  * Added econftool cat option (#146)
  * new API call: econf_readDirsHistory (showing ALL locations)
  * new API call: econf_getPath (absolute path of the configuration file)</changelog>
  <changelog author="schubi@suse.com" date="1618315200">- Update to version 0.4.0+git20210413.fdb8025:
  * Installing man pages via meson. (#147)</changelog>
  <changelog author="schubi@suse.com" date="1618488000">- Removed doxygen from build requires.</changelog>
  <changelog author="schubi@suse.com" date="1625659200">- Update to version 0.4.0+git20210707.537a8a:
  * Fixed resource leaks found by Iker Pedrosa.</changelog>
  <changelog author="Stefan Schubert schubi@suse.com" date="1625745600">- Update to version 0.4.0+git20210708.6918ea1:
  * Fixed covscan FORWARD_NULL_issues warnings</changelog>
  <changelog author="schubi@localhost" date="1625832000">- Update to version 0.4.1+git20210709.cf671f2:
  * CMake fixes regarding installation of econftool and man pages.</changelog>
  <changelog author="schubi@suse.com" date="1636632000">- Update to version libeconf-0.4.2+git20211111.c7a2c52:
  * CMake fixes regarding document installation.
  * Fixed different issues while writing string values to file.
  * Writing comments to file too.
  * Fixed memory leaks.
  * Fixed crash while merging values.</changelog>
  <changelog author="schubi@suse.com" date="1641297600">- Update to version 0.4.2+git20220104.5dfd69d:
  * Reading numbers with different bases (e.g. oktal) (bsc#1193632) (#157)</changelog>
  <changelog author="schubi@suse.com" date="1641297601">- Update to version 0.4.4+git20220104.962774f:
  * Fixed i586 build (#158)</changelog>
  <changelog author="schubi@suse.com" date="1649246400">- Update to version 0.4.5+git20220406.c9658f2:
  * econftool:
  * * New call "syntax" for checking the configuration files only.
    Returns an error string with line number if an error occurs.
  * * New options "--comment" and "--delimeters"
  * * Parsing one file only if needed.</changelog>
  <changelog author="schubi@suse.com" date="1651060800">- Update to version 0.4.6+git20220427.3016f4e:
  * econftool:
  * * Parsing error: Reporting file and line nr.
  * * --delimeters=spaces Taking all kind of spaces for delimiter
  * libeconf:
    Fixed bsc#1198165: Parsing files correctly which have space characters
    AND none space characters as delimiters.</changelog>
  <changelog author="schubi@suse.com" date="1668427200">- Update to version 0.4.8+git20221114.7ff7704:
  * Parsing files which are containing keys only (#170)
    All delimiters are allowed now : "", " =", " ", "=". But the
    user should use "" in order to be distinct.
  * /usr/etc/shells.d/&lt;file_name&gt; will not be parsed if
    /etc/shells.d/&lt;file_name&gt; is defined too.
  * Lto build fixed (#168)
  * New calls: econf_comment_tag, econf_delimiter_tag, econf_set_comment_tag,
    econf_set_delimiter_tag
  * Checking UID,GroupID, permissions,... of the parsed files (#165)
    New calls: econf_requireOwner, econf_requireGroup, econf_requirePermissions,
    econf_followSymlinks
  * Ignoring Group without brackets; Do not hold brackets in the internal data structure. (#164)
  * Error handling improved for nums and booleans (#163)</changelog>
  <changelog author="schubi@suse.com" date="1669204800">- Update to version 0.4.9:
  * libeconf.h: added missing sys/types.h header (#171)
  * new API calls: econf_readFileWithCallback,
    econf_readDirsWithCallback, econf_readDirsHistoryWithCallback (#172)
  * Checking NULL comment parameter in the parsing functions.</changelog>
  <changelog author="schubi@suse.com" date="1669982400">- Update to version 0.5.0:
  * API calls econf_read*WithCallback supporting a general (void *)
    argument for user defined data with which the callback function is
    called.
  * Tagged following functions deprecated:
    econf_requireOwner, econf_requireGroup, econf_requirePermissions,
    econf_followSymlinks, econf_reset_security_settings
    Use one of the econf_read*WithCallback functions instead.</changelog>
  <changelog author="schubi@suse.com" date="1674129600">- Update to version 0.5.1:
  * Reading files in /usr/_vendor_/_example_._suffix_.d/* regardless
    there is a /etc/_example_._suffix_ file. (#175)</changelog>
  <changelog author="schubi@suse.com" date="1679659200">- Update to version 0.5.2:
  * Fixed build for aarch64 and gcc13.
  * Making the output verbose when a test fails.
  * Fixed a stack-buffer-overflow vulnerability in "econf_writeFile"
    function.
  * Fixed a stack-buffer-overflow vulnerability in "read_file"
    function.
  * Added new feature: econf_set_conf_dirs (const char **dir_postfix_list)
    Sets a list of directory structures (with order) which describes
    the directories in which the files have to be parsed.
    E.G. with the given list: {"/conf.d/", ".d/", "/", NULL} files in following
    directories will be parsed:
    "&lt;default_dirs&gt;/&lt;project_name&gt;.&lt;suffix&gt;.d/"
    "&lt;default_dirs&gt;/&lt;project_name&gt;/conf.d/"
    "&lt;default_dirs&gt;/&lt;project_name&gt;.d/"
    "&lt;default_dirs&gt;/&lt;project_name&gt;/"
    The entry "&lt;default_dirs&gt;/&lt;project_name&gt;.&lt;suffix&gt;.d/" will be added
    automatically.
  * General code cleanup.</changelog>
  <changelog author="schubi@suse.com" date="1694001600">- Additional info for version 0.5.2:
  * Fixed a stack-buffer-overflow vulnerability in "econf_writeFile"
    function. (CVE-2023-30078, CVE-2023-32181, bsc#1211078)
  * Fixed a stack-buffer-overflow vulnerability in "read_file"
    function. (CVE-2023-30079, CVE-2023-22652, bsc#1211078)</changelog>
</package>
<package pkgid="3333a5e5d885bce71b0a6a17cce065d1b07618277aacb5bee6f763bb958c4f85" name="libekmfweb1" arch="s390x">
  <version epoch="0" ver="2.30.0" rel="150500.9.10.1"/>
  <changelog author="nikolay.gueorguiev@suse.com" date="1673352000">- Updated read_values.c for z16 machine type (bsc#1206832)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1673438400">- Updated read_values.c for z16 machine type (bsc#1206832)
  * Added the IBM LinuxONE Emperor 4 machine type
  * Updated the z16 machine type to IBM z16 A01</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1675684800">- Added patch (bsc#1207947)
  * s390-tools-sles15sp5-zkey-Support-EP11-host-library-version-4.patch</changelog>
  <changelog author="jose.gomez@suse.com" date="1676548800">- Implemented read_values -u. The result of -u is a unique identifier composed of:
  * Machine Serial Number.
  * LPAR Name.
  * VM Name (can be optional).</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1676980800">- Applied the following patches (bsc#1208527, bsc#1206173)
  * s390-tools-sles15sp5-01-zipl-boot-discard-.eh_frame-and-.interp-input-sectio.patch
  * s390-tools-sles15sp5-02-zipl-boot-declare-that-no-executable-stack-is-requir.patch
  * s390-tools-sles15sp5-03-zipl-boot-use-no-warn-rwx-segments-linker-flag.patch
  * s390-tools-sles15sp5-04-zipl-boot-disable-build-id.patch
  * s390-tools-sles15sp5-05-zipl-boot-simplify-objcopy-commands.patch
  * s390-tools-sles15sp5-06-zipl-move-STAGE2_MAX_SIZE-and-STAGE1B_LOAD_ADDR-to-l.patch
  * s390-tools-sles15sp5-07-zipl-boot-use-linker-scripts-for-all-bootloaders.patch
  * s390-tools-sles15sp5-08-genprotimg-boot-declare-that-no-executable-stack-is-.patch
  * s390-tools-sles15sp5-09-genprotimg-boot-use-no-warn-rwx-segments-linker-flag.patch
  * s390-tools-sles15sp5-10-genprotimg-boot-disable-build-id.patch
  * s390-tools-sles15sp5-11-genprotimg-boot-Makefile-simplify-objcopy-command.patch
  * s390-tools-sles15sp5-12-genprotimg-boot-improve-linker-scripts.patch
  * s390-tools-sles15sp5-13-genprotimg-boot-stage3b-add-size-check-to-the-linker.patch
  * s390-tools-sles15sp5-14-genprotimg-boot-stage3b_reloc.bin-add-linker-script.patch
  * s390-tools-sles15sp5-15-zipl-Embed-loader-data-directly-into-boot-object.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678276800">- Updated cputype (bsc#1208983)
  * Changed the script to avoid "/usr/bin/cputype: line xx: nnnn: command not found",
    when machine type was found more than once in the /proc/cpuinfo.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678708800">- Applied a patch (bsc#1209196)
  * s390-tools-sles15sp5-lszcrypt-use-separate-index-for-inner-sub-device-loo.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1679572800">- Allow activation of devices at boot via kernel command line
  for live installation media (jsc#PED-2975)
  * Added a Source dracut-zdev-live-20230321.tar
  * Updated the .spec file for the new Source
-  Amended read_value.c</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1681905600">- Tailored the .spec, added a patch
  * s390-tools-ALP-zdev-live.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1683028800">- Applies a fix, splitting of rd.zdev-parameters, in
  * s390-tools-ALP-zdev-live.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1683201600">- Applied patches for ziomon: fix for SCSI devices of type disk without block dev
    (bsc#1211008)
  * s390-tools-sles15sp5-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch
  * s390-tools-sles15sp5-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1692619200">- Applies patches (bsc#1213377, bsc#1213852, bsc#1214114)
  * s390-tools-sles15sp5-01-zdev-add-missing-label-in-the-udev-rules.patch
  * s390-tools-sles15sp5-01-zdev-add-proper-value-input-for-the-ZDEV_SITE_ID-key.patch
  * s390-tools-sles15sp5-02-zdev-use-rename-file-to-avoid-any-symlinks-created.patch
  * s390-tools-sles15sp5-dasdfmt-Fall-back-to-full-format-if-space-release-fa.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1698926400">- Applied a patch (jsc#PED-6539, jsc#PED-6373)
  * s390-tools-sles15sp6-zkey-Support-EP11-AES-keys-with-prepended-header-to-.patch
- Updated read_values.c (bsc#1214466, bsc#1214534)
  * Update read_values.c to support the new IBM z Processors
- Updated SUSE's tools and their corresponding man pages (bsc#1216257)
  * ctc_configure
  * dasd_configure.opensuse
  * dasd_configure.8
  * dasd_configure.suse
  * mkdump.pl.opensuse
  * mkdump.pl.suse
  * qeth_configure
  * qeth_configure.8
  * zfcp_disk_configure
  * zfcp_disk_configure.8
  * zfcp_host_configure.8
  * zfcp_host_configure
- Updated cputype script
  * Amended cputype to support the new IBM z Processors</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1699876800">* Upgrade 390-tools from version 2.25.0 to version v2.29.0 (Latest)
  * * * *
  - General:
  - s390-tools now supports tools written in Rust.
  - Add compdb Makefile target to create 'compile_commands.json' to support LSP
  - backends in IDEs and editors
  - Add new tools / libraries:
  * rust/pv: Library for pv tools written in rust
  * rust/pvsecret: Tool to manage UV-secrets
  * Changes of existing tools:
  - dbginfo.sh: Global IFS variable
  - genprotimg: Add support for add-secret requests
  - genprotimg: Build debuginfo files for bootloader
  - hyptop: Add real SMT utilization field
  - hyptop: Allow users to set speedup factor
  - pvattest: Add yaml-output for verify command
  - zipl: Build debuginfo files for bootloader
  * Bug Fixes:
  - dump2tar: Fix truncated paths
  - zdev/dracut: fix kdump build to integrate with site support
  * * * *
  * v2.28.0
  - Changes of existing tools:
  - chzcrypt: Support for SE AP pass-through support
  - genprotimg: Add support for non-s390x architectures
  - lszcrypt: Support for SE AP pass-through support
  - zdev: Add support for autoquiesce related sysfs attributes
  * Bug Fixes:
  - ap_tools/ap-check: Handle missing 'matrix' and 'control_domains' attrs
  - ap_tools/ap-check: Hold ap config file lock over get attributes
  - s390-tools: Fix build for ppc64le
  - zdev: Add missing label in the udev-rules
  - zdev: Add proper value input for the ZDEV_SITE_ID key
  - zdev: Use rename-file to avoid any symlinks created
  - zipl/dump: fix ngdump dracut helper script
  * * * *
  * v2.27.0
  * Changes of existing tools:
  - s390-tools cross-compile and non-s390x support:
  - pkg-config is now mandatory for the build process
  - Add PKG_CONFIG Makefile variable to select pkg-config program;
  - default pkg-config or $(CROSS_COMPILE)pkg-config if
  - CROSS_COMPILE is set
  - Rename Makefile variable ARCH to HOST_ARCH. HOST_ARCH is the
    architecture that will run the produced (executable) objects
  - Add the Makefile variable BUILD_ARCH. BUILD_ARCH is the
    architecture of the build system. For each Makefile variable like
    CC, LINK, CPP, ... there is a suffixed version of it - e.g.
    CC_FOR_BUILD. This is useful for cross compiling, and this naming
    convention is very similar to the Meson convention (see
    https://mesonbuild.com/Reference-tables.html#environment-variables-per-machine).
  - Limit build targets for non-s390x architectures (pvattest)
  - dasdfmt: Fall back to full format if space release fails
  - dbginfo.sh: Add nstat for network and SNMP stats
  - dbginfo.sh: Rework crypto data collection
  - hyptop: Show thread util by default
  - zipl: Add support for list-directed IPL dump from ECKD DASD
  * Bug Fixes:
  - lszcrypt: Fix argument parsing
  - zdev/dracut: Fix out-of-memory (OOM) situations in the kdump crashkernel environment
  - ziomon/ziorep_config: Fix for SCSI devices of type disk without block dev
  - pvextract-hdr: Fix parsing issues on little-endian systems
  * * * *
  * v2.26.0
  * Remove tools / libraries:
  - Remove vmconvert and libvmdump in favor of vmdump file support in zdump
  * Changes of existing tools:
  - ipl_tools: Add support for list-directed IPL from ECKD DASD
  - lszcrypt: Display hardware filtering support capability
  - vmur: Remove option -c for dump file conversion (See zdump changes)
  - zdev: Add zfcp ber_stop parameter handling
  - zdump: Add vmdump dfi for vmdump format to elf format
  - zkey: Support EP11 host library version
  * Bug Fixes:
  - zipl: Move dump parmline processing and verification
  - zipl/genprotimg: Various build improvements
  * * * *
  * Removed obsolete IBM patches
  - s390-tools-sles15sp5-zipl-boot-disable-Warray-bounds-for-now.patch
  - s390-tools-sles15sp5-zkey-Support-EP11-host-library-version-4.patch
  * Removed obsolete patches for bug 1208527, and bug 1206173
  - s390-tools-sles15sp5-01-zipl-boot-discard-.eh_frame-and-.interp-input-sectio.patch
  - s390-tools-sles15sp5-02-zipl-boot-declare-that-no-executable-stack-is-requir.patch
  - s390-tools-sles15sp5-03-zipl-boot-use-no-warn-rwx-segments-linker-flag.patch
  - s390-tools-sles15sp5-04-zipl-boot-disable-build-id.patch
  - s390-tools-sles15sp5-05-zipl-boot-simplify-objcopy-commands.patch
  - s390-tools-sles15sp5-06-zipl-move-STAGE2_MAX_SIZE-and-STAGE1B_LOAD_ADDR-to-l.patch
  - s390-tools-sles15sp5-07-zipl-boot-use-linker-scripts-for-all-bootloaders.patch
  - s390-tools-sles15sp5-08-genprotimg-boot-declare-that-no-executable-stack-is-.patch
  - s390-tools-sles15sp5-09-genprotimg-boot-use-no-warn-rwx-segments-linker-flag.patch
  - s390-tools-sles15sp5-10-genprotimg-boot-disable-build-id.patch
  - s390-tools-sles15sp5-11-genprotimg-boot-Makefile-simplify-objcopy-command.patch
  - s390-tools-sles15sp5-12-genprotimg-boot-improve-linker-scripts.patch
  - s390-tools-sles15sp5-13-genprotimg-boot-stage3b-add-size-check-to-the-linker.patch
  - s390-tools-sles15sp5-14-genprotimg-boot-stage3b_reloc.bin-add-linker-script.patch
  - s390-tools-sles15sp5-15-zipl-Embed-loader-data-directly-into-boot-object.patch
  * Removed obsolete patch for bug 1209196
  - s390-tools-sles15sp5-lszcrypt-use-separate-index-for-inner-sub-device-loo.patch
  * Removed obsolete patches for bug 1211008
  - s390-tools-sles15sp5-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch
  - s390-tools-sles15sp5-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch
  * Removed obsolete patch for bug 1213377
  - s390-tools-sles15sp5-01-zdev-add-missing-label-in-the-udev-rules.patch
  * Removed obsolete patches for bug 1213852
  - s390-tools-sles15sp5-01-zdev-add-proper-value-input-for-the-ZDEV_SITE_ID-key.patch
  - s390-tools-sles15sp5-02-zdev-use-rename-file-to-avoid-any-symlinks-created.patch
  * Removed obsolete patch for bug 1214114
  - s390-tools-sles15sp5-dasdfmt-Fall-back-to-full-format-if-space-release-fa.patch
  * Removed obsolete patch
  - s390-tools-sles15sp5-fix-chown-commands-syntax.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1700049600">- Fixed a logic error in read_values.c</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1700827200">- Provide s390-tools on x86_64 to enable Secure Execution in the Cloud
    (jsc#PED-578, jsc#PED-7136, and jsc#PED-7138)
  * Selected tools from the s390-tools package need to be made available on x86_64.
    This will enable the integration of IBM Z machines running Secure Execution in a
    cloud environment where users don't necessarily need to have an s390x environment.
  - genprotimg    - (for building secure images)
  - pvsecret      -
  - pvattest      - (for external attestation)
  - pvextract-hdr -</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1701691200">- Upgrade s390-tools to version 2.30
    (jsc#PED-5783, jsc#PED-6785, jsc#PED-7136, jsc#PED-6539, jsc#PED-4604,
    jsc#PED-6649, jsc#PED-7138 )
- Add new tools / libraries:
  * lspai: Tool to display PAI counter sets
  * s390-tools: Provide a ShellCheck configuration
- Changes of existing tools / libraries:
  * cpumf/pai: Add command line option for realtime scheduling
  * dbginfo.sh: enhance ethtool collection for ROCE
  * libutil/util_lockfile: add routine to return owning pid of file lock
  * lszcrypt: Improve lszcrypt output on SE guests
  * rust: Use a single workspace for all rust tools
  * zdev: limit the derivation of ZDEV_SITE_ID
  * zdump/df_s390: Update 'zgetdump -i' output with zlib info
  * zdump/dfi_s390: Support reading compressed s390_ext dumps
  * zipl/boot: Integrate zlib compression to single volume DASD dumper
  * zipl/boot: compile the bootloaders only if HOST_ARCH is s390x
  * zipl: Add --no-compress option to zipl command
  * zkey: Also check for deconfigured and check-stopped cards
- Bug Fixes:
  * ap_tools/ap-check: handle get-attributes between pre and post event
  * libutil: fix util_file_read_*() using wrong format specifiers
  * rust/pv: fix Invalid write of size
- Amended the SUSE patches for version 2.30
- Revendored vendor.tar.gz
- Removed an obsolete patch
  * s390-tools-sles15sp6-zkey-Support-EP11-AES-keys-with-prepended-header-to-.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1702814400">- Updated the .spec file to use gcc13 (bsc#1217838)
- Amended read_values for '-S' option (bsc#1217923)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1706097600">- Updated the .spec file
  * Explicitly specified 'ExclusiveArch: s390x x86_64'</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1706788800">- Updated read_values.c (bsc#1219227)</changelog>
</package>
<package pkgid="a0e4dcb397325788fae59ff780f9142cad3d0d028c33e5cd51605380a1a597aa" name="libfdisk1" arch="aarch64">
  <version epoch="0" ver="2.37.4" rel="150500.9.3.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="25d9fde6d4395a3e039c352328f581faf9a2e92fffd76465e32a7d2b32eeabd1" name="libfdisk1" arch="s390x">
  <version epoch="0" ver="2.37.4" rel="150500.9.3.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="f8692610b45b11558486f2edf1595e5b7d6ece6ccc3925f1ab334a9b9296a1fa" name="libfdisk1" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="150500.9.3.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="39fcd4f0ff1dcc16d07bcfa94fc8657c8745dc1b1b32afbbef1394118acb4c39" name="libfido2-1" arch="aarch64">
  <version epoch="0" ver="1.13.0" rel="150400.5.3.1"/>
  <changelog author="kbabioch@suse.de" date="1559044800">- Version 1.1.0 (released 2019-05-08)
  * EdDSA (Ed25519) support.
  * fido_dev_make_cred: fix order of CBOR map keys.
  * fido_dev_get_assert: plug memory leak when operating on U2F devices.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1568635200">- Version 1.2.0 (released 2019-07-26)
  * Credential management support.
  * New API reflecting FIDO’s 3-state booleans (true, false, absent):
  - fido_assert_set_up;
  - fido_assert_set_uv;
  - fido_cred_set_rk;
  - fido_cred_set_uv.
  * Command-line tools for Windows.
  * Documentation and reliability fixes.
  * fido_{assert,cred}_set_options() are now marked as deprecated.</changelog>
  <changelog author="kbabioch@suse.de" date="1575806400">- Version 1.3.0 (2019-11-28)
  * assert/hmac: encode public key as per spec, gh#60.
  * fido2-cred: fix creation of resident keys.
  * fido2-{assert,cred}: support for hmac-secret extension.
  * hid_osx: detect device removal, gh#56.
  * hid_osx: fix device detection in MacOS Catalina.
  * New API calls:
  - fido_assert_set_authdata_raw;
  - fido_assert_sigcount;
  - fido_cred_set_authdata_raw;
  - fido_dev_cancel.
  * Middleware library for use by OpenSSH.
  * Support for biometric enrollment.
  * Support for OpenBSD.
  * Support for self-attestation.</changelog>
  <changelog author="mrueckert@suse.de" date="1583064000">- Version 1.3.1
  - fix zero-ing of le1 and le2 when talking to a U2F device.
  - dropping sk-libfido2 middleware, please find it in the openssh
    tree.</changelog>
  <changelog author="idonmez@suse.com" date="1590408000">- Update to version 1.4.0
  * hid_hidapi: hidapi backend; enable with -DUSE_HIDAPI=1.
  * Fall back to U2F if the key claims to, but does not support FIDO2.
  * FIDO2 credential protection (credprot) support.
  * New API calls:
    + fido_cbor_info_fwversion;
    + fido_cred_prot;
    + fido_cred_set_prot;
    + fido_dev_set_transport_functions;
    + fido_set_log_handler.
  * Fixed EdDSA and RSA self-attestation.</changelog>
  <changelog author="idonmez@suse.com" date="1593691200">- Don't build with hidapi support to fix issues with Yubikey 5Ci
  https://github.com/Yubico/libfido2/issues/190</changelog>
  <changelog author="idonmez@suse.com" date="1593777600">- Create a udev subpackage and ship the udev rule</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595592000">- Cleanup udev rules, trying to use the Debian specific plugdev
  group fills up the journal.
- Make the udev rules package noarch, correct Summary</changelog>
  <changelog author="idonmez@suse.com" date="1598961600">- Update to version 1.5.0
  * hid_linux: return FIDO_OK if no devices are found.
  * hid_osx:
    + repair communication with U2F tokens, gh#166;
    + reliability fixes.
  * fido2-{assert,cred}: new options to explicitly toggle UP, UV.
  * Support for configurable report lengths.
  * New API calls:
    + fido_cbor_info_maxcredcntlst
    + fido_cbor_info_maxcredidlen
    + fido_cred_aaguid_len
    + fido_cred_aaguid_ptr
    + fido_dev_get_touch_begin
    + fido_dev_get_touch_status
  * Use COSE_ECDH_ES256 with CTAP_CBOR_CLIENT_PIN; gh#154.
  * Allow CTAP messages up to 2048 bytes; gh#171.
  * Ensure we only list USB devices by default.</changelog>
  <changelog author="idonmez@suse.com" date="1599652800">- Add 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch from upstream
  to fix 32bit compilation issues.</changelog>
  <changelog author="hpj@suse.com" date="1605614400">- Add Conflicts: to supersede version 1.0.0. This is needed for
  a clean upgrade path on SLE.</changelog>
  <changelog author="mpluskal@suse.com" date="1611144000">- Update to version 1.6.0:
  * Fix OpenSSL 1.0 and Cygwin builds.
  * hid_linux: fix build on 32-bit systems.
  * hid_osx: allow reads from spawned threads.
  * Documentation and reliability fixes.
  * New API calls:
    + fido_cred_authdata_raw_len;
    + fido_cred_authdata_raw_ptr;
    + fido_cred_sigcount;
    + fido_dev_get_uv_retry_count;
    + fido_dev_supports_credman.
  * Hardened Windows build.
  * Native FreeBSD and NetBSD support.
  * Use CTAP2 canonical CBOR when combining hmac-secret and credProtect.
- Drop 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch
- Do not build examples as their build fails</changelog>
  <changelog author="rpm@fthiessen.de" date="1618660800">- Update to version 1.7.0:
  * hid_win: detect devices with vendor or product IDs &gt; 0x7fff
  * Support for FIDO 2.1 authenticator configuration.
  * Support for FIDO 2.1 UV token permissions.
  * Support for FIDO 2.1 "credBlobs" and "largeBlobs" extensions.
  * New API calls
  * New fido_init flag to disable fido_dev_open’s U2F fallback
  * Experimental NFC support on Linux.
- Enabled hidapi again, issues related to hidapi are fixed upstream
  * Added fix-cmake-linking.patch to fix linking</changelog>
  <changelog author="paolo.perego@suse.com" date="1631620800">- Update to version 1.8.0:
  * Dropped 'Requires.private' entry from pkg-config file.
  * Better support for FIDO 2.1 authenticators.
  * Support for Windows's native webauthn API.
  * Support for attestation format 'none'.
  * New API calls:
  - fido_assert_set_clientdata;
  - fido_cbor_info_algorithm_cose;
  - fido_cbor_info_algorithm_count;
  - fido_cbor_info_algorithm_type;
  - fido_cbor_info_transports_len;
  - fido_cbor_info_transports_ptr;
  - fido_cred_set_clientdata;
  - fido_cred_set_id;
  - fido_credman_set_dev_rk;
  - fido_dev_is_winhello.
  * fido2-token: new -Sc option to update a resident credential.
  * Documentation and reliability fixes.
  * HID access serialisation on Linux.
- disable fix-cmake-linking.patch, not needed currently</changelog>
  <changelog author="paolo.perego@suse.com" date="1632225600">- Removed fix-cmake-linking.patch because no longer needed</changelog>
  <changelog author="simmphonie@opensuse.org" date="1635768000">- Version 1.9.0 (2021-10-27)
  * Enabled NFC support on Linux.
  * Added OpenSSL 3.0 compatibility.
  * Removed OpenSSL 1.0 compatibility.
  * Support for FIDO 2.1 "minPinLength" extension.
  * Support for COSE_EDDSA, COSE_ES256, and COSE_RS1 attestation.
  * Support for TPM 2.0 attestation.
  * Support for device timeouts; see fido_dev_set_timeout().
  * New API calls:
  - es256_pk_from_EVP_PKEY;
  - fido_cred_attstmt_len;
  - fido_cred_attstmt_ptr;
  - fido_cred_pin_minlen;
  - fido_cred_set_attstmt;
  - fido_cred_set_pin_minlen;
  - fido_dev_set_pin_minlen_rpid;
  - fido_dev_set_timeout;
  - rs256_pk_from_EVP_PKEY.
  * Reliability and portability fixes.
  * Better handling of HID devices without identification strings; gh#381.
  * Fixed detection of Windows’s native webauthn API; gh#382.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1641816000">- Use BuildRequires: openssl-devel instead of forcing 1.1 since 3.x
  is now supported.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1648468800">- Version 1.10.0 (2022-01-17)
  * hid_osx: handle devices with paths &gt; 511 bytes; gh#462.
  * bio: fix CTAP2 canonical CBOR encoding in fido_bio_dev_enroll_*(); gh#480.
  * winhello: fallback to GetTopWindow() if GetForegroundWindow() fails.
  * winhello: fallback to hid_win.c if webauthn.dll isn’t available.
  * New API calls:
  - fido_dev_info_set;
  - fido_dev_io_handle;
  - fido_dev_new_with_info;
  - fido_dev_open_with_info.
  * Cygwin and NetBSD build fixes.
  * Documentation and reliability fixes.
  * Support for TPM 2.0 attestation of COSE_ES256 credentials.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1664971200">- Version 1.12.0 (2022-09-22)
  * Support for COSE_ES384.
  * Support for hidraw(4) on FreeBSD; gh#597.
  * Improved support for FIDO 2.1 authenticators.
  * New API calls:
    + es384_pk_free;
    + es384_pk_from_EC_KEY;
    + es384_pk_from_EVP_PKEY;
    + es384_pk_from_ptr;
    + es384_pk_new;
    + es384_pk_to_EVP_PKEY;
    + fido_cbor_info_certs_len;
    + fido_cbor_info_certs_name_ptr;
    + fido_cbor_info_certs_value_ptr;
    + fido_cbor_info_maxrpid_minpinlen;
    + fido_cbor_info_minpinlen;
    + fido_cbor_info_new_pin_required;
    + fido_cbor_info_rk_remaining;
    + fido_cbor_info_uv_attempts;
    + fido_cbor_info_uv_modality.
  * Documentation and reliability fixes.
- Version 1.11.0 (2022-05-03)
  * Experimental PCSC support; enable with -DUSE_PCSC.
  * Improved OpenSSL 3.0 compatibility.
  * Use RFC1951 raw deflate to compress CTAP 2.1 largeBlobs.
  * winhello: advertise "uv" instead of "clientPin".
  * winhello: support hmac-secret in fido_dev_get_assert().
  * New API calls:
    + fido_cbor_info_maxlargeblob.
  * Documentation and reliability fixes.
  * Separate build and regress targets.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1677240000">- Version 1.13.0 (2023-02-20)
  * Support for linking against OpenSSL on Windows; gh#668.
  * New API calls:
    + fido_assert_empty_allow_list;
    + fido_cred_empty_exclude_list.
  * fido2-token: fix issue when listing large blobs.
  * Improved support for different fuzzing engines.</changelog>
</package>
<package pkgid="4d968c470af88d0d46b30ffefe4547857e1864f3f0a691b8033da07b86591c93" name="libfido2-1" arch="s390x">
  <version epoch="0" ver="1.13.0" rel="150400.5.3.1"/>
  <changelog author="kbabioch@suse.de" date="1559044800">- Version 1.1.0 (released 2019-05-08)
  * EdDSA (Ed25519) support.
  * fido_dev_make_cred: fix order of CBOR map keys.
  * fido_dev_get_assert: plug memory leak when operating on U2F devices.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1568635200">- Version 1.2.0 (released 2019-07-26)
  * Credential management support.
  * New API reflecting FIDO’s 3-state booleans (true, false, absent):
  - fido_assert_set_up;
  - fido_assert_set_uv;
  - fido_cred_set_rk;
  - fido_cred_set_uv.
  * Command-line tools for Windows.
  * Documentation and reliability fixes.
  * fido_{assert,cred}_set_options() are now marked as deprecated.</changelog>
  <changelog author="kbabioch@suse.de" date="1575806400">- Version 1.3.0 (2019-11-28)
  * assert/hmac: encode public key as per spec, gh#60.
  * fido2-cred: fix creation of resident keys.
  * fido2-{assert,cred}: support for hmac-secret extension.
  * hid_osx: detect device removal, gh#56.
  * hid_osx: fix device detection in MacOS Catalina.
  * New API calls:
  - fido_assert_set_authdata_raw;
  - fido_assert_sigcount;
  - fido_cred_set_authdata_raw;
  - fido_dev_cancel.
  * Middleware library for use by OpenSSH.
  * Support for biometric enrollment.
  * Support for OpenBSD.
  * Support for self-attestation.</changelog>
  <changelog author="mrueckert@suse.de" date="1583064000">- Version 1.3.1
  - fix zero-ing of le1 and le2 when talking to a U2F device.
  - dropping sk-libfido2 middleware, please find it in the openssh
    tree.</changelog>
  <changelog author="idonmez@suse.com" date="1590408000">- Update to version 1.4.0
  * hid_hidapi: hidapi backend; enable with -DUSE_HIDAPI=1.
  * Fall back to U2F if the key claims to, but does not support FIDO2.
  * FIDO2 credential protection (credprot) support.
  * New API calls:
    + fido_cbor_info_fwversion;
    + fido_cred_prot;
    + fido_cred_set_prot;
    + fido_dev_set_transport_functions;
    + fido_set_log_handler.
  * Fixed EdDSA and RSA self-attestation.</changelog>
  <changelog author="idonmez@suse.com" date="1593691200">- Don't build with hidapi support to fix issues with Yubikey 5Ci
  https://github.com/Yubico/libfido2/issues/190</changelog>
  <changelog author="idonmez@suse.com" date="1593777600">- Create a udev subpackage and ship the udev rule</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595592000">- Cleanup udev rules, trying to use the Debian specific plugdev
  group fills up the journal.
- Make the udev rules package noarch, correct Summary</changelog>
  <changelog author="idonmez@suse.com" date="1598961600">- Update to version 1.5.0
  * hid_linux: return FIDO_OK if no devices are found.
  * hid_osx:
    + repair communication with U2F tokens, gh#166;
    + reliability fixes.
  * fido2-{assert,cred}: new options to explicitly toggle UP, UV.
  * Support for configurable report lengths.
  * New API calls:
    + fido_cbor_info_maxcredcntlst
    + fido_cbor_info_maxcredidlen
    + fido_cred_aaguid_len
    + fido_cred_aaguid_ptr
    + fido_dev_get_touch_begin
    + fido_dev_get_touch_status
  * Use COSE_ECDH_ES256 with CTAP_CBOR_CLIENT_PIN; gh#154.
  * Allow CTAP messages up to 2048 bytes; gh#171.
  * Ensure we only list USB devices by default.</changelog>
  <changelog author="idonmez@suse.com" date="1599652800">- Add 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch from upstream
  to fix 32bit compilation issues.</changelog>
  <changelog author="hpj@suse.com" date="1605614400">- Add Conflicts: to supersede version 1.0.0. This is needed for
  a clean upgrade path on SLE.</changelog>
  <changelog author="mpluskal@suse.com" date="1611144000">- Update to version 1.6.0:
  * Fix OpenSSL 1.0 and Cygwin builds.
  * hid_linux: fix build on 32-bit systems.
  * hid_osx: allow reads from spawned threads.
  * Documentation and reliability fixes.
  * New API calls:
    + fido_cred_authdata_raw_len;
    + fido_cred_authdata_raw_ptr;
    + fido_cred_sigcount;
    + fido_dev_get_uv_retry_count;
    + fido_dev_supports_credman.
  * Hardened Windows build.
  * Native FreeBSD and NetBSD support.
  * Use CTAP2 canonical CBOR when combining hmac-secret and credProtect.
- Drop 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch
- Do not build examples as their build fails</changelog>
  <changelog author="rpm@fthiessen.de" date="1618660800">- Update to version 1.7.0:
  * hid_win: detect devices with vendor or product IDs &gt; 0x7fff
  * Support for FIDO 2.1 authenticator configuration.
  * Support for FIDO 2.1 UV token permissions.
  * Support for FIDO 2.1 "credBlobs" and "largeBlobs" extensions.
  * New API calls
  * New fido_init flag to disable fido_dev_open’s U2F fallback
  * Experimental NFC support on Linux.
- Enabled hidapi again, issues related to hidapi are fixed upstream
  * Added fix-cmake-linking.patch to fix linking</changelog>
  <changelog author="paolo.perego@suse.com" date="1631620800">- Update to version 1.8.0:
  * Dropped 'Requires.private' entry from pkg-config file.
  * Better support for FIDO 2.1 authenticators.
  * Support for Windows's native webauthn API.
  * Support for attestation format 'none'.
  * New API calls:
  - fido_assert_set_clientdata;
  - fido_cbor_info_algorithm_cose;
  - fido_cbor_info_algorithm_count;
  - fido_cbor_info_algorithm_type;
  - fido_cbor_info_transports_len;
  - fido_cbor_info_transports_ptr;
  - fido_cred_set_clientdata;
  - fido_cred_set_id;
  - fido_credman_set_dev_rk;
  - fido_dev_is_winhello.
  * fido2-token: new -Sc option to update a resident credential.
  * Documentation and reliability fixes.
  * HID access serialisation on Linux.
- disable fix-cmake-linking.patch, not needed currently</changelog>
  <changelog author="paolo.perego@suse.com" date="1632225600">- Removed fix-cmake-linking.patch because no longer needed</changelog>
  <changelog author="simmphonie@opensuse.org" date="1635768000">- Version 1.9.0 (2021-10-27)
  * Enabled NFC support on Linux.
  * Added OpenSSL 3.0 compatibility.
  * Removed OpenSSL 1.0 compatibility.
  * Support for FIDO 2.1 "minPinLength" extension.
  * Support for COSE_EDDSA, COSE_ES256, and COSE_RS1 attestation.
  * Support for TPM 2.0 attestation.
  * Support for device timeouts; see fido_dev_set_timeout().
  * New API calls:
  - es256_pk_from_EVP_PKEY;
  - fido_cred_attstmt_len;
  - fido_cred_attstmt_ptr;
  - fido_cred_pin_minlen;
  - fido_cred_set_attstmt;
  - fido_cred_set_pin_minlen;
  - fido_dev_set_pin_minlen_rpid;
  - fido_dev_set_timeout;
  - rs256_pk_from_EVP_PKEY.
  * Reliability and portability fixes.
  * Better handling of HID devices without identification strings; gh#381.
  * Fixed detection of Windows’s native webauthn API; gh#382.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1641816000">- Use BuildRequires: openssl-devel instead of forcing 1.1 since 3.x
  is now supported.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1648468800">- Version 1.10.0 (2022-01-17)
  * hid_osx: handle devices with paths &gt; 511 bytes; gh#462.
  * bio: fix CTAP2 canonical CBOR encoding in fido_bio_dev_enroll_*(); gh#480.
  * winhello: fallback to GetTopWindow() if GetForegroundWindow() fails.
  * winhello: fallback to hid_win.c if webauthn.dll isn’t available.
  * New API calls:
  - fido_dev_info_set;
  - fido_dev_io_handle;
  - fido_dev_new_with_info;
  - fido_dev_open_with_info.
  * Cygwin and NetBSD build fixes.
  * Documentation and reliability fixes.
  * Support for TPM 2.0 attestation of COSE_ES256 credentials.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1664971200">- Version 1.12.0 (2022-09-22)
  * Support for COSE_ES384.
  * Support for hidraw(4) on FreeBSD; gh#597.
  * Improved support for FIDO 2.1 authenticators.
  * New API calls:
    + es384_pk_free;
    + es384_pk_from_EC_KEY;
    + es384_pk_from_EVP_PKEY;
    + es384_pk_from_ptr;
    + es384_pk_new;
    + es384_pk_to_EVP_PKEY;
    + fido_cbor_info_certs_len;
    + fido_cbor_info_certs_name_ptr;
    + fido_cbor_info_certs_value_ptr;
    + fido_cbor_info_maxrpid_minpinlen;
    + fido_cbor_info_minpinlen;
    + fido_cbor_info_new_pin_required;
    + fido_cbor_info_rk_remaining;
    + fido_cbor_info_uv_attempts;
    + fido_cbor_info_uv_modality.
  * Documentation and reliability fixes.
- Version 1.11.0 (2022-05-03)
  * Experimental PCSC support; enable with -DUSE_PCSC.
  * Improved OpenSSL 3.0 compatibility.
  * Use RFC1951 raw deflate to compress CTAP 2.1 largeBlobs.
  * winhello: advertise "uv" instead of "clientPin".
  * winhello: support hmac-secret in fido_dev_get_assert().
  * New API calls:
    + fido_cbor_info_maxlargeblob.
  * Documentation and reliability fixes.
  * Separate build and regress targets.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1677240000">- Version 1.13.0 (2023-02-20)
  * Support for linking against OpenSSL on Windows; gh#668.
  * New API calls:
    + fido_assert_empty_allow_list;
    + fido_cred_empty_exclude_list.
  * fido2-token: fix issue when listing large blobs.
  * Improved support for different fuzzing engines.</changelog>
</package>
<package pkgid="e3549cc9533144a279bd5f755a862a4ab4ce7de719ab520e2d24563063f3418f" name="libfido2-1" arch="x86_64">
  <version epoch="0" ver="1.13.0" rel="150400.5.3.1"/>
  <changelog author="kbabioch@suse.de" date="1559044800">- Version 1.1.0 (released 2019-05-08)
  * EdDSA (Ed25519) support.
  * fido_dev_make_cred: fix order of CBOR map keys.
  * fido_dev_get_assert: plug memory leak when operating on U2F devices.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1568635200">- Version 1.2.0 (released 2019-07-26)
  * Credential management support.
  * New API reflecting FIDO’s 3-state booleans (true, false, absent):
  - fido_assert_set_up;
  - fido_assert_set_uv;
  - fido_cred_set_rk;
  - fido_cred_set_uv.
  * Command-line tools for Windows.
  * Documentation and reliability fixes.
  * fido_{assert,cred}_set_options() are now marked as deprecated.</changelog>
  <changelog author="kbabioch@suse.de" date="1575806400">- Version 1.3.0 (2019-11-28)
  * assert/hmac: encode public key as per spec, gh#60.
  * fido2-cred: fix creation of resident keys.
  * fido2-{assert,cred}: support for hmac-secret extension.
  * hid_osx: detect device removal, gh#56.
  * hid_osx: fix device detection in MacOS Catalina.
  * New API calls:
  - fido_assert_set_authdata_raw;
  - fido_assert_sigcount;
  - fido_cred_set_authdata_raw;
  - fido_dev_cancel.
  * Middleware library for use by OpenSSH.
  * Support for biometric enrollment.
  * Support for OpenBSD.
  * Support for self-attestation.</changelog>
  <changelog author="mrueckert@suse.de" date="1583064000">- Version 1.3.1
  - fix zero-ing of le1 and le2 when talking to a U2F device.
  - dropping sk-libfido2 middleware, please find it in the openssh
    tree.</changelog>
  <changelog author="idonmez@suse.com" date="1590408000">- Update to version 1.4.0
  * hid_hidapi: hidapi backend; enable with -DUSE_HIDAPI=1.
  * Fall back to U2F if the key claims to, but does not support FIDO2.
  * FIDO2 credential protection (credprot) support.
  * New API calls:
    + fido_cbor_info_fwversion;
    + fido_cred_prot;
    + fido_cred_set_prot;
    + fido_dev_set_transport_functions;
    + fido_set_log_handler.
  * Fixed EdDSA and RSA self-attestation.</changelog>
  <changelog author="idonmez@suse.com" date="1593691200">- Don't build with hidapi support to fix issues with Yubikey 5Ci
  https://github.com/Yubico/libfido2/issues/190</changelog>
  <changelog author="idonmez@suse.com" date="1593777600">- Create a udev subpackage and ship the udev rule</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595592000">- Cleanup udev rules, trying to use the Debian specific plugdev
  group fills up the journal.
- Make the udev rules package noarch, correct Summary</changelog>
  <changelog author="idonmez@suse.com" date="1598961600">- Update to version 1.5.0
  * hid_linux: return FIDO_OK if no devices are found.
  * hid_osx:
    + repair communication with U2F tokens, gh#166;
    + reliability fixes.
  * fido2-{assert,cred}: new options to explicitly toggle UP, UV.
  * Support for configurable report lengths.
  * New API calls:
    + fido_cbor_info_maxcredcntlst
    + fido_cbor_info_maxcredidlen
    + fido_cred_aaguid_len
    + fido_cred_aaguid_ptr
    + fido_dev_get_touch_begin
    + fido_dev_get_touch_status
  * Use COSE_ECDH_ES256 with CTAP_CBOR_CLIENT_PIN; gh#154.
  * Allow CTAP messages up to 2048 bytes; gh#171.
  * Ensure we only list USB devices by default.</changelog>
  <changelog author="idonmez@suse.com" date="1599652800">- Add 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch from upstream
  to fix 32bit compilation issues.</changelog>
  <changelog author="hpj@suse.com" date="1605614400">- Add Conflicts: to supersede version 1.0.0. This is needed for
  a clean upgrade path on SLE.</changelog>
  <changelog author="mpluskal@suse.com" date="1611144000">- Update to version 1.6.0:
  * Fix OpenSSL 1.0 and Cygwin builds.
  * hid_linux: fix build on 32-bit systems.
  * hid_osx: allow reads from spawned threads.
  * Documentation and reliability fixes.
  * New API calls:
    + fido_cred_authdata_raw_len;
    + fido_cred_authdata_raw_ptr;
    + fido_cred_sigcount;
    + fido_dev_get_uv_retry_count;
    + fido_dev_supports_credman.
  * Hardened Windows build.
  * Native FreeBSD and NetBSD support.
  * Use CTAP2 canonical CBOR when combining hmac-secret and credProtect.
- Drop 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch
- Do not build examples as their build fails</changelog>
  <changelog author="rpm@fthiessen.de" date="1618660800">- Update to version 1.7.0:
  * hid_win: detect devices with vendor or product IDs &gt; 0x7fff
  * Support for FIDO 2.1 authenticator configuration.
  * Support for FIDO 2.1 UV token permissions.
  * Support for FIDO 2.1 "credBlobs" and "largeBlobs" extensions.
  * New API calls
  * New fido_init flag to disable fido_dev_open’s U2F fallback
  * Experimental NFC support on Linux.
- Enabled hidapi again, issues related to hidapi are fixed upstream
  * Added fix-cmake-linking.patch to fix linking</changelog>
  <changelog author="paolo.perego@suse.com" date="1631620800">- Update to version 1.8.0:
  * Dropped 'Requires.private' entry from pkg-config file.
  * Better support for FIDO 2.1 authenticators.
  * Support for Windows's native webauthn API.
  * Support for attestation format 'none'.
  * New API calls:
  - fido_assert_set_clientdata;
  - fido_cbor_info_algorithm_cose;
  - fido_cbor_info_algorithm_count;
  - fido_cbor_info_algorithm_type;
  - fido_cbor_info_transports_len;
  - fido_cbor_info_transports_ptr;
  - fido_cred_set_clientdata;
  - fido_cred_set_id;
  - fido_credman_set_dev_rk;
  - fido_dev_is_winhello.
  * fido2-token: new -Sc option to update a resident credential.
  * Documentation and reliability fixes.
  * HID access serialisation on Linux.
- disable fix-cmake-linking.patch, not needed currently</changelog>
  <changelog author="paolo.perego@suse.com" date="1632225600">- Removed fix-cmake-linking.patch because no longer needed</changelog>
  <changelog author="simmphonie@opensuse.org" date="1635768000">- Version 1.9.0 (2021-10-27)
  * Enabled NFC support on Linux.
  * Added OpenSSL 3.0 compatibility.
  * Removed OpenSSL 1.0 compatibility.
  * Support for FIDO 2.1 "minPinLength" extension.
  * Support for COSE_EDDSA, COSE_ES256, and COSE_RS1 attestation.
  * Support for TPM 2.0 attestation.
  * Support for device timeouts; see fido_dev_set_timeout().
  * New API calls:
  - es256_pk_from_EVP_PKEY;
  - fido_cred_attstmt_len;
  - fido_cred_attstmt_ptr;
  - fido_cred_pin_minlen;
  - fido_cred_set_attstmt;
  - fido_cred_set_pin_minlen;
  - fido_dev_set_pin_minlen_rpid;
  - fido_dev_set_timeout;
  - rs256_pk_from_EVP_PKEY.
  * Reliability and portability fixes.
  * Better handling of HID devices without identification strings; gh#381.
  * Fixed detection of Windows’s native webauthn API; gh#382.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1641816000">- Use BuildRequires: openssl-devel instead of forcing 1.1 since 3.x
  is now supported.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1648468800">- Version 1.10.0 (2022-01-17)
  * hid_osx: handle devices with paths &gt; 511 bytes; gh#462.
  * bio: fix CTAP2 canonical CBOR encoding in fido_bio_dev_enroll_*(); gh#480.
  * winhello: fallback to GetTopWindow() if GetForegroundWindow() fails.
  * winhello: fallback to hid_win.c if webauthn.dll isn’t available.
  * New API calls:
  - fido_dev_info_set;
  - fido_dev_io_handle;
  - fido_dev_new_with_info;
  - fido_dev_open_with_info.
  * Cygwin and NetBSD build fixes.
  * Documentation and reliability fixes.
  * Support for TPM 2.0 attestation of COSE_ES256 credentials.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1664971200">- Version 1.12.0 (2022-09-22)
  * Support for COSE_ES384.
  * Support for hidraw(4) on FreeBSD; gh#597.
  * Improved support for FIDO 2.1 authenticators.
  * New API calls:
    + es384_pk_free;
    + es384_pk_from_EC_KEY;
    + es384_pk_from_EVP_PKEY;
    + es384_pk_from_ptr;
    + es384_pk_new;
    + es384_pk_to_EVP_PKEY;
    + fido_cbor_info_certs_len;
    + fido_cbor_info_certs_name_ptr;
    + fido_cbor_info_certs_value_ptr;
    + fido_cbor_info_maxrpid_minpinlen;
    + fido_cbor_info_minpinlen;
    + fido_cbor_info_new_pin_required;
    + fido_cbor_info_rk_remaining;
    + fido_cbor_info_uv_attempts;
    + fido_cbor_info_uv_modality.
  * Documentation and reliability fixes.
- Version 1.11.0 (2022-05-03)
  * Experimental PCSC support; enable with -DUSE_PCSC.
  * Improved OpenSSL 3.0 compatibility.
  * Use RFC1951 raw deflate to compress CTAP 2.1 largeBlobs.
  * winhello: advertise "uv" instead of "clientPin".
  * winhello: support hmac-secret in fido_dev_get_assert().
  * New API calls:
    + fido_cbor_info_maxlargeblob.
  * Documentation and reliability fixes.
  * Separate build and regress targets.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1677240000">- Version 1.13.0 (2023-02-20)
  * Support for linking against OpenSSL on Windows; gh#668.
  * New API calls:
    + fido_assert_empty_allow_list;
    + fido_cred_empty_exclude_list.
  * fido2-token: fix issue when listing large blobs.
  * Improved support for different fuzzing engines.</changelog>
</package>
<package pkgid="78efcf0dd16dd652f30d7585eac241f4c0dc40aa84254ccf098483b7e258f0ee" name="libfido2" arch="src">
  <version epoch="0" ver="1.13.0" rel="150400.5.3.1"/>
  <changelog author="kbabioch@suse.de" date="1559044800">- Version 1.1.0 (released 2019-05-08)
  * EdDSA (Ed25519) support.
  * fido_dev_make_cred: fix order of CBOR map keys.
  * fido_dev_get_assert: plug memory leak when operating on U2F devices.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1568635200">- Version 1.2.0 (released 2019-07-26)
  * Credential management support.
  * New API reflecting FIDO’s 3-state booleans (true, false, absent):
  - fido_assert_set_up;
  - fido_assert_set_uv;
  - fido_cred_set_rk;
  - fido_cred_set_uv.
  * Command-line tools for Windows.
  * Documentation and reliability fixes.
  * fido_{assert,cred}_set_options() are now marked as deprecated.</changelog>
  <changelog author="kbabioch@suse.de" date="1575806400">- Version 1.3.0 (2019-11-28)
  * assert/hmac: encode public key as per spec, gh#60.
  * fido2-cred: fix creation of resident keys.
  * fido2-{assert,cred}: support for hmac-secret extension.
  * hid_osx: detect device removal, gh#56.
  * hid_osx: fix device detection in MacOS Catalina.
  * New API calls:
  - fido_assert_set_authdata_raw;
  - fido_assert_sigcount;
  - fido_cred_set_authdata_raw;
  - fido_dev_cancel.
  * Middleware library for use by OpenSSH.
  * Support for biometric enrollment.
  * Support for OpenBSD.
  * Support for self-attestation.</changelog>
  <changelog author="mrueckert@suse.de" date="1583064000">- Version 1.3.1
  - fix zero-ing of le1 and le2 when talking to a U2F device.
  - dropping sk-libfido2 middleware, please find it in the openssh
    tree.</changelog>
  <changelog author="idonmez@suse.com" date="1590408000">- Update to version 1.4.0
  * hid_hidapi: hidapi backend; enable with -DUSE_HIDAPI=1.
  * Fall back to U2F if the key claims to, but does not support FIDO2.
  * FIDO2 credential protection (credprot) support.
  * New API calls:
    + fido_cbor_info_fwversion;
    + fido_cred_prot;
    + fido_cred_set_prot;
    + fido_dev_set_transport_functions;
    + fido_set_log_handler.
  * Fixed EdDSA and RSA self-attestation.</changelog>
  <changelog author="idonmez@suse.com" date="1593691200">- Don't build with hidapi support to fix issues with Yubikey 5Ci
  https://github.com/Yubico/libfido2/issues/190</changelog>
  <changelog author="idonmez@suse.com" date="1593777600">- Create a udev subpackage and ship the udev rule</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595592000">- Cleanup udev rules, trying to use the Debian specific plugdev
  group fills up the journal.
- Make the udev rules package noarch, correct Summary</changelog>
  <changelog author="idonmez@suse.com" date="1598961600">- Update to version 1.5.0
  * hid_linux: return FIDO_OK if no devices are found.
  * hid_osx:
    + repair communication with U2F tokens, gh#166;
    + reliability fixes.
  * fido2-{assert,cred}: new options to explicitly toggle UP, UV.
  * Support for configurable report lengths.
  * New API calls:
    + fido_cbor_info_maxcredcntlst
    + fido_cbor_info_maxcredidlen
    + fido_cred_aaguid_len
    + fido_cred_aaguid_ptr
    + fido_dev_get_touch_begin
    + fido_dev_get_touch_status
  * Use COSE_ECDH_ES256 with CTAP_CBOR_CLIENT_PIN; gh#154.
  * Allow CTAP messages up to 2048 bytes; gh#171.
  * Ensure we only list USB devices by default.</changelog>
  <changelog author="idonmez@suse.com" date="1599652800">- Add 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch from upstream
  to fix 32bit compilation issues.</changelog>
  <changelog author="hpj@suse.com" date="1605614400">- Add Conflicts: to supersede version 1.0.0. This is needed for
  a clean upgrade path on SLE.</changelog>
  <changelog author="mpluskal@suse.com" date="1611144000">- Update to version 1.6.0:
  * Fix OpenSSL 1.0 and Cygwin builds.
  * hid_linux: fix build on 32-bit systems.
  * hid_osx: allow reads from spawned threads.
  * Documentation and reliability fixes.
  * New API calls:
    + fido_cred_authdata_raw_len;
    + fido_cred_authdata_raw_ptr;
    + fido_cred_sigcount;
    + fido_dev_get_uv_retry_count;
    + fido_dev_supports_credman.
  * Hardened Windows build.
  * Native FreeBSD and NetBSD support.
  * Use CTAP2 canonical CBOR when combining hmac-secret and credProtect.
- Drop 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch
- Do not build examples as their build fails</changelog>
  <changelog author="rpm@fthiessen.de" date="1618660800">- Update to version 1.7.0:
  * hid_win: detect devices with vendor or product IDs &gt; 0x7fff
  * Support for FIDO 2.1 authenticator configuration.
  * Support for FIDO 2.1 UV token permissions.
  * Support for FIDO 2.1 "credBlobs" and "largeBlobs" extensions.
  * New API calls
  * New fido_init flag to disable fido_dev_open’s U2F fallback
  * Experimental NFC support on Linux.
- Enabled hidapi again, issues related to hidapi are fixed upstream
  * Added fix-cmake-linking.patch to fix linking</changelog>
  <changelog author="paolo.perego@suse.com" date="1631620800">- Update to version 1.8.0:
  * Dropped 'Requires.private' entry from pkg-config file.
  * Better support for FIDO 2.1 authenticators.
  * Support for Windows's native webauthn API.
  * Support for attestation format 'none'.
  * New API calls:
  - fido_assert_set_clientdata;
  - fido_cbor_info_algorithm_cose;
  - fido_cbor_info_algorithm_count;
  - fido_cbor_info_algorithm_type;
  - fido_cbor_info_transports_len;
  - fido_cbor_info_transports_ptr;
  - fido_cred_set_clientdata;
  - fido_cred_set_id;
  - fido_credman_set_dev_rk;
  - fido_dev_is_winhello.
  * fido2-token: new -Sc option to update a resident credential.
  * Documentation and reliability fixes.
  * HID access serialisation on Linux.
- disable fix-cmake-linking.patch, not needed currently</changelog>
  <changelog author="paolo.perego@suse.com" date="1632225600">- Removed fix-cmake-linking.patch because no longer needed</changelog>
  <changelog author="simmphonie@opensuse.org" date="1635768000">- Version 1.9.0 (2021-10-27)
  * Enabled NFC support on Linux.
  * Added OpenSSL 3.0 compatibility.
  * Removed OpenSSL 1.0 compatibility.
  * Support for FIDO 2.1 "minPinLength" extension.
  * Support for COSE_EDDSA, COSE_ES256, and COSE_RS1 attestation.
  * Support for TPM 2.0 attestation.
  * Support for device timeouts; see fido_dev_set_timeout().
  * New API calls:
  - es256_pk_from_EVP_PKEY;
  - fido_cred_attstmt_len;
  - fido_cred_attstmt_ptr;
  - fido_cred_pin_minlen;
  - fido_cred_set_attstmt;
  - fido_cred_set_pin_minlen;
  - fido_dev_set_pin_minlen_rpid;
  - fido_dev_set_timeout;
  - rs256_pk_from_EVP_PKEY.
  * Reliability and portability fixes.
  * Better handling of HID devices without identification strings; gh#381.
  * Fixed detection of Windows’s native webauthn API; gh#382.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1641816000">- Use BuildRequires: openssl-devel instead of forcing 1.1 since 3.x
  is now supported.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1648468800">- Version 1.10.0 (2022-01-17)
  * hid_osx: handle devices with paths &gt; 511 bytes; gh#462.
  * bio: fix CTAP2 canonical CBOR encoding in fido_bio_dev_enroll_*(); gh#480.
  * winhello: fallback to GetTopWindow() if GetForegroundWindow() fails.
  * winhello: fallback to hid_win.c if webauthn.dll isn’t available.
  * New API calls:
  - fido_dev_info_set;
  - fido_dev_io_handle;
  - fido_dev_new_with_info;
  - fido_dev_open_with_info.
  * Cygwin and NetBSD build fixes.
  * Documentation and reliability fixes.
  * Support for TPM 2.0 attestation of COSE_ES256 credentials.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1664971200">- Version 1.12.0 (2022-09-22)
  * Support for COSE_ES384.
  * Support for hidraw(4) on FreeBSD; gh#597.
  * Improved support for FIDO 2.1 authenticators.
  * New API calls:
    + es384_pk_free;
    + es384_pk_from_EC_KEY;
    + es384_pk_from_EVP_PKEY;
    + es384_pk_from_ptr;
    + es384_pk_new;
    + es384_pk_to_EVP_PKEY;
    + fido_cbor_info_certs_len;
    + fido_cbor_info_certs_name_ptr;
    + fido_cbor_info_certs_value_ptr;
    + fido_cbor_info_maxrpid_minpinlen;
    + fido_cbor_info_minpinlen;
    + fido_cbor_info_new_pin_required;
    + fido_cbor_info_rk_remaining;
    + fido_cbor_info_uv_attempts;
    + fido_cbor_info_uv_modality.
  * Documentation and reliability fixes.
- Version 1.11.0 (2022-05-03)
  * Experimental PCSC support; enable with -DUSE_PCSC.
  * Improved OpenSSL 3.0 compatibility.
  * Use RFC1951 raw deflate to compress CTAP 2.1 largeBlobs.
  * winhello: advertise "uv" instead of "clientPin".
  * winhello: support hmac-secret in fido_dev_get_assert().
  * New API calls:
    + fido_cbor_info_maxlargeblob.
  * Documentation and reliability fixes.
  * Separate build and regress targets.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1677240000">- Version 1.13.0 (2023-02-20)
  * Support for linking against OpenSSL on Windows; gh#668.
  * New API calls:
    + fido_assert_empty_allow_list;
    + fido_cred_empty_exclude_list.
  * fido2-token: fix issue when listing large blobs.
  * Improved support for different fuzzing engines.</changelog>
</package>
<package pkgid="fa0809363ac3562a3c72b1152ee7f9837656e3cd0ce8aba91970d2364a5eb816" name="libfreebl3" arch="aarch64">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="b628c476f53f78236e279ecbeadc084cb6dab4902fffbf96de1c6a5a7d5d749a" name="libfreebl3" arch="s390x">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="119fff04cd8b7dc3f21372cc82ec1c807a1f14d2f54a2e2637faa322e70c197d" name="libfreebl3" arch="x86_64">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="833ec1e496fea1efc92bff735d90b5afe1381e3b88cdd7527c78c91116060cb1" name="libfreebl3" arch="aarch64">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="fb5754a696a7a3eb257da67fc7386e3a61520dbadb1856a31f2385c298eba85d" name="libfreebl3" arch="s390x">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="d905152d8d1e47f2485ca2fd512f64ea9e3bff769471324fc6b15536fb72a515" name="libfreebl3" arch="x86_64">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="306cbfaede71db3d1fa6e519253f52f5f5c0128bacb3d227fbb9af45644cf2b4" name="libgcc_s1" arch="aarch64">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.3.3"/>
  <changelog author="mliska@suse.cz" date="1679659200">- Use --enable-link-serialization rather that --enable-link-mutex,
  the benefit of the former one is that the linker jobs are not
  holding tokens of the make's jobserver.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1679659201">- Add %limit_build for gcc13 to avoid OOM</changelog>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
</package>
<package pkgid="2abf1900bcf0f09242833eb5b1700d90632148464e915f7dbb8c0c9a39c908a1" name="libgcc_s1" arch="s390x">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.3.3"/>
  <changelog author="mliska@suse.cz" date="1679659200">- Use --enable-link-serialization rather that --enable-link-mutex,
  the benefit of the former one is that the linker jobs are not
  holding tokens of the make's jobserver.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1679659201">- Add %limit_build for gcc13 to avoid OOM</changelog>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
</package>
<package pkgid="3b5b525e46b769487d743fac4988e8490749360dab266f3f43178d3341d7bf5a" name="libgcc_s1" arch="x86_64">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.3.3"/>
  <changelog author="mliska@suse.cz" date="1679659200">- Use --enable-link-serialization rather that --enable-link-mutex,
  the benefit of the former one is that the linker jobs are not
  holding tokens of the make's jobserver.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1679659201">- Add %limit_build for gcc13 to avoid OOM</changelog>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
</package>
<package pkgid="17d742be36e9ba140f264d0c5c9668b90098ac1dab8e8f8ce5fddd0dc78c91f9" name="libgcc_s1" arch="aarch64">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.6.1"/>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
</package>
<package pkgid="351e1f38cc78a2518687e8aeb04f0767d18a7d12ea7e7ff161d3435b770633e7" name="libgcc_s1" arch="s390x">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.6.1"/>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
</package>
<package pkgid="a2c5137517792f9ce0984fd6c6d5ef83465dbe7453cc095484a249ae2260264d" name="libgcc_s1" arch="x86_64">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.6.1"/>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
</package>
<package pkgid="333c58c93c60f39036ca2d77a778f9026f6abdc369dc72c52962610149717982" name="libgnutls30" arch="aarch64">
  <version epoch="0" ver="3.7.3" rel="150400.4.38.1"/>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
</package>
<package pkgid="e3c94e3a08f39f7fd00f5b1336d0ae227c67dca96d6ff0ae5fe5b55c26cfd27f" name="libgnutls30" arch="s390x">
  <version epoch="0" ver="3.7.3" rel="150400.4.38.1"/>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
</package>
<package pkgid="8a8b4cd5b07448ecce55cf5ff246970fb0754873d5537c43307ac4cfe017eb9f" name="libgnutls30" arch="x86_64">
  <version epoch="0" ver="3.7.3" rel="150400.4.38.1"/>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
</package>
<package pkgid="740901af5c93d8905b52bb53a06f6e1db4712cb1c583722086d36b9bb8e50932" name="libgnutls30" arch="aarch64">
  <version epoch="0" ver="3.7.3" rel="150400.4.41.3"/>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
</package>
<package pkgid="4433f50f77cc81339f65caf77df5637faf297fbc9cbb457a6a7a21910523ca32" name="libgnutls30" arch="s390x">
  <version epoch="0" ver="3.7.3" rel="150400.4.41.3"/>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
</package>
<package pkgid="ac71e08bb3176660866c52570dfd9fadfd17f18c396c17c7779b0b17465ad941" name="libgnutls30" arch="x86_64">
  <version epoch="0" ver="3.7.3" rel="150400.4.41.3"/>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
</package>
<package pkgid="b336378fcbcf834d28bf219b9b4a4380a85167e61287be314ee062ca9a6dc8e0" name="libgnutls30-hmac" arch="aarch64">
  <version epoch="0" ver="3.7.3" rel="150400.4.38.1"/>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
</package>
<package pkgid="1db88ff1441d008e673cfbf542cb884fcb62d56bcf147fe4eb65b0d24bd8f531" name="libgnutls30-hmac" arch="s390x">
  <version epoch="0" ver="3.7.3" rel="150400.4.38.1"/>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
</package>
<package pkgid="cf2152ac120095c3511db02cb21d650c72740c01295dc610eeeb2e31b8001891" name="libgnutls30-hmac" arch="x86_64">
  <version epoch="0" ver="3.7.3" rel="150400.4.38.1"/>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
</package>
<package pkgid="fca67704d249b35bb0a6c19bd9fcec3e4ca6520341fc32e805f43a4b01485322" name="libgnutls30-hmac" arch="aarch64">
  <version epoch="0" ver="3.7.3" rel="150400.4.41.3"/>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
</package>
<package pkgid="ba0bfcb6b4deee631f8daefb84ec7e40552bc82461782a54c47cb81cdfa7a3c1" name="libgnutls30-hmac" arch="s390x">
  <version epoch="0" ver="3.7.3" rel="150400.4.41.3"/>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
</package>
<package pkgid="6715043f953ba6c8178d1ba204a1dd0562ac33306badb76ebbf25aa3b78a9c4b" name="libgnutls30-hmac" arch="x86_64">
  <version epoch="0" ver="3.7.3" rel="150400.4.41.3"/>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
</package>
<package pkgid="e0f541a34dff7151c898bee0ec596adc89c0422a9d61761baea33b1c2940d1ec" name="libguestfs" arch="src">
  <version epoch="0" ver="1.48.6" rel="150500.3.8.1"/>
  <changelog author="carnold@suse.com" date="1635249600">- Fix build errors in Factory
  * Alert ocaml_deprecated_cli: Setting a warning with a sequence
    of lowercase or uppercase letters, like 'CDEFLMPSUVYZX', is
    deprecated.
  63c9cd93-m4-guestfs-ocaml.m4-Fix-deprecated-warning-format.patch
  * Error (warning 6 [labels-omitted]): label verbose was omitted
    in the application of this function.
  a4930f5f-customize-Suppress-OCaml-warning.patch</changelog>
  <changelog author="ohering@suse.de" date="1639483200">- Add python-rpm-macros (bsc#1180125)</changelog>
  <changelog author="carnold@suse.com" date="1644235200">- bsc#1195415 - libguestfs: consider dropping build requirement on
  systemd-sysvinit
  libguestfs.spec</changelog>
  <changelog author="carnold@suse.com" date="1645012800">- Update to version 1.46.2
  * This release has moved many virt tools like virt-builder,
    virt-cat, virt-customize, virt-df, etc. to the guestfs-tools
    project. This makes libguestfs a bit easier to build and manage.
  * The build now uses and requires PCRE2 (instead of PCRE).
  * This version requires libvirt ≥ 7.1.0, if libvirt is enabled.
  * gnulib is no longer bundled with libguestfs, making builds from
    git much simpler.
  * Perl Sys::Virt (libvirt bindings for Perl) are no longer
    required by libguestfs.
  * The code has been compiled with both LTO and GCC -fanalyzer and
    many bugs and warnings fixed.
  * Various fixes for qemu 6.1.
  * Update appliance packages on SUSE and several other improvements
    to the init script (Olaf Hering).
  * We now use the qemu / libvirt feature -cpu max to select the
    best CPU to run the appliance.
  * When passing the appliance filesystem UUID to supermin we now
    read it directly out of the appliance instead of using the
    file(1) program. This is more reliable.
  * The qemu -enable-fips option is no longer used. It was not
    needed and has been deprecated by qemu.
  * We no longer use qemu's sga (Serial Graphics Adapter) option
    ROM, instead using the equivalent seabios feature.
  * Various bug fixes
- Package changes
  * New libguestfs.spec file.
  * Moved guestfs-tools to a new and separate project and package
  * Renamed packages
    guestfs-winsupport -&gt; libguestfs-winsupport
    guestfsd -&gt; libguestfsd
  * New packages
    libguestfs, libguestfs-typelib-Guestfs,
    libguestfs-gobject, libguestfs-gobject-devel
    libguestfs-rescue, libguestfs-rsync, libguestfs-xfs
  * Dropped package libguestfs-test
- Dropped scripts and patches
  Pod-Simple-3.23.tar.xz
  libguestfs.test.simple.create-opensuse-guest-crypt-on-lvm.sh
  libguestfs.test.simple.create-opensuse-guest.sh
  libguestfs.test.simple.create-sles12-guest-crypt-on-lvm.sh
  libguestfs.test.simple.create-sles12-guest.sh
  libguestfs.test.simple.run-libugestfs-test-tool.sh
  0001-Introduce-a-wrapper-around-xmlParseURI.patch
  0002-common-extract-UTF-8-conversion-function.patch
  0003-inspector-rpm-summary-and-description-may-not-be-utf.patch
  489b14b7-ocaml-examples-Link-examples-to-gnulib.patch
  63c9cd93-m4-guestfs-ocaml.m4-Fix-deprecated-warning-format.patch
  68a02c2f-customize--resize--sparsify--sysprep-Link-explicitly-with-pthread.patch
  9db0c98c-appliance-enable-bashs-Process-Substitution-feature.patch
  a4930f5f-customize-Suppress-OCaml-warning.patch
  c0de4de9-appliance-add-reboot-and-netconfig-for-SUSE.patch
  e26cfa44-daemon-Build-with--pthread.patch
  f47e0bb6-appliance-reorder-mounting-of-special-filesystems-in-init.patch
  appliance.patch
  libguestfs.env.patch
  makefile-ocaml-find-guestfs.patch
  netconfig.patch</changelog>
  <changelog author="carnold@suse.com" date="1647518400">- Update to version 1.48.0
  * Fix allocation and deallocation of string lists in golang
    bindings (Laszlo Ersek).
  * Multiple fixes to the OCaml bindings:
  * Add support for Kylin (Laszlo Ersek).
  * Add support for Rocky Linux (Neil Hanlon).
  * Inspection of guests which use LUKS encryption on top of LVM
    logical volumes should now work (Laszlo Ersek).
  * "guestfs_list_9p" and "guestfs_mount_9p" are deprecated and
    now return errors.
  * "guestfs_remove_drive" has been deprecated and now returns an
    error.
  * "guestfs_add_drive" no longer supports hotplugging
  * In "guestfs_xfs_admin" the "lazycounter" parameter is deprecated
    because it is no longer supported in recent versions of XFS.
  * The User-mode Linux ("uml") backend has been removed.
  * Partition APIs now cope with the broken MBR partition tables
    created by dosfstools ≥ 4.2 (Laszlo Ersek).
  * Various bug fixes</changelog>
  <changelog author="hpj@urpla.net" date="1649851200">- Avoid useless builds, if ocaml version isn't up to the task
  libguestfs uses get_uint8(), available since ocaml 4.13.0</changelog>
  <changelog author="hpj@urpla.net" date="1649851201">- Add relevant %post{,un} sections
- Add another rpmlint filter
- Add uk man dirs</changelog>
  <changelog author="carnold@suse.com" date="1650283200">- Update to version 1.48.1
  * Updated language files
  * A few bug fixes in this release
  * Drop requirement for newer ocaml required by Bytes.get_uint8.
    It is replaced with a local implementation.</changelog>
  <changelog author="carnold@suse.com" date="1654084800">- Update to version 1.48.3
  * Several bugs fixed in this release since version 1.48.1
  * Updated language files</changelog>
  <changelog author="carnold@suse.com" date="1654257600">- bsc#1190501 - virt-builder fails to install packages when
  building an image. Add Recommends: dhcp-client for the appliance.
  libguestfs.spec</changelog>
  <changelog author="carnold@suse.com" date="1656504000">- bsc#1201064 - Libguestfs: Buffer overflow in get_keys leads
  to DOS - CVE-2022-2211
  CVE-2022-2211-options-fix-buffer-overflow-in-get_keys.patch
  CVE-2022-2211-docs-guestfs-security-document.patch</changelog>
  <changelog author="carnold@suse.com" date="1657627200">- Update to version 1.48.4
  * This is a bug fix release
- Drop patches included in new tarball
  CVE-2022-2211-docs-guestfs-security-document.patch
  CVE-2022-2211-options-fix-buffer-overflow-in-get_keys.patch</changelog>
  <changelog author="carnold@suse.com" date="1662465600">- Upstream patch to fix running configure --disable-ocaml
  f162e47e-m4-Fix-configure-disable-ocaml.patch</changelog>
  <changelog author="carnold@suse.com" date="1664884800">- jsc#PED-2113 [Virt Tools] Refresh Virtualization Tools for Xen
  and KVM Management</changelog>
  <changelog author="carnold@suse.com" date="1665748800">- Drop requirement for icoutils in SLE as this package is not
  available.
  libguestfs.spec</changelog>
  <changelog author="lnussel@suse.de" date="1666267200">- Drop reiserfs (boo#1191092)</changelog>
  <changelog author="carnold@suse.com" date="1669723200">- Update to version 1.48.6
  * jsc#PED-2113
  * This is a bug fix release. No upstream changelog.
- Drop f162e47e-m4-Fix-configure-disable-ocaml.patch</changelog>
  <changelog author="carnold@suse.com" date="1688558400">- bsc#1212972 - cannot find any suitable libguestfs supermin
  libguestfs.spec (see also bsc#1215664)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1688990400">- bsc#1213243 - KubeVirt needs libguestfs with the support of qcow2
  appliances
  Configure with --enable-appliance-format-auto to allow
  qcow2-format fixed appliances.
  libguestfs.spec</changelog>
  <changelog author="carnold@suse.com" date="1695643200">- bsc#1215543 - guestfs regression: file: Use -S option with -z
  Omit-file--S-option-on-older-distros-that-lack-support.patch
  See also bsc#1215461
- bsc#1215586 - guestfs regression: non functional network due to
  missing sysconfig-netconfig
  libguestfs.spec</changelog>
</package>
<package pkgid="2124df8c3697f953d306f5f462f5e78bef3ade11efede09853a426a9db83aa1b" name="libguestfs0" arch="aarch64">
  <version epoch="0" ver="1.48.6" rel="150500.3.8.1"/>
  <changelog author="carnold@suse.com" date="1635249600">- Fix build errors in Factory
  * Alert ocaml_deprecated_cli: Setting a warning with a sequence
    of lowercase or uppercase letters, like 'CDEFLMPSUVYZX', is
    deprecated.
  63c9cd93-m4-guestfs-ocaml.m4-Fix-deprecated-warning-format.patch
  * Error (warning 6 [labels-omitted]): label verbose was omitted
    in the application of this function.
  a4930f5f-customize-Suppress-OCaml-warning.patch</changelog>
  <changelog author="ohering@suse.de" date="1639483200">- Add python-rpm-macros (bsc#1180125)</changelog>
  <changelog author="carnold@suse.com" date="1644235200">- bsc#1195415 - libguestfs: consider dropping build requirement on
  systemd-sysvinit
  libguestfs.spec</changelog>
  <changelog author="carnold@suse.com" date="1645012800">- Update to version 1.46.2
  * This release has moved many virt tools like virt-builder,
    virt-cat, virt-customize, virt-df, etc. to the guestfs-tools
    project. This makes libguestfs a bit easier to build and manage.
  * The build now uses and requires PCRE2 (instead of PCRE).
  * This version requires libvirt ≥ 7.1.0, if libvirt is enabled.
  * gnulib is no longer bundled with libguestfs, making builds from
    git much simpler.
  * Perl Sys::Virt (libvirt bindings for Perl) are no longer
    required by libguestfs.
  * The code has been compiled with both LTO and GCC -fanalyzer and
    many bugs and warnings fixed.
  * Various fixes for qemu 6.1.
  * Update appliance packages on SUSE and several other improvements
    to the init script (Olaf Hering).
  * We now use the qemu / libvirt feature -cpu max to select the
    best CPU to run the appliance.
  * When passing the appliance filesystem UUID to supermin we now
    read it directly out of the appliance instead of using the
    file(1) program. This is more reliable.
  * The qemu -enable-fips option is no longer used. It was not
    needed and has been deprecated by qemu.
  * We no longer use qemu's sga (Serial Graphics Adapter) option
    ROM, instead using the equivalent seabios feature.
  * Various bug fixes
- Package changes
  * New libguestfs.spec file.
  * Moved guestfs-tools to a new and separate project and package
  * Renamed packages
    guestfs-winsupport -&gt; libguestfs-winsupport
    guestfsd -&gt; libguestfsd
  * New packages
    libguestfs, libguestfs-typelib-Guestfs,
    libguestfs-gobject, libguestfs-gobject-devel
    libguestfs-rescue, libguestfs-rsync, libguestfs-xfs
  * Dropped package libguestfs-test
- Dropped scripts and patches
  Pod-Simple-3.23.tar.xz
  libguestfs.test.simple.create-opensuse-guest-crypt-on-lvm.sh
  libguestfs.test.simple.create-opensuse-guest.sh
  libguestfs.test.simple.create-sles12-guest-crypt-on-lvm.sh
  libguestfs.test.simple.create-sles12-guest.sh
  libguestfs.test.simple.run-libugestfs-test-tool.sh
  0001-Introduce-a-wrapper-around-xmlParseURI.patch
  0002-common-extract-UTF-8-conversion-function.patch
  0003-inspector-rpm-summary-and-description-may-not-be-utf.patch
  489b14b7-ocaml-examples-Link-examples-to-gnulib.patch
  63c9cd93-m4-guestfs-ocaml.m4-Fix-deprecated-warning-format.patch
  68a02c2f-customize--resize--sparsify--sysprep-Link-explicitly-with-pthread.patch
  9db0c98c-appliance-enable-bashs-Process-Substitution-feature.patch
  a4930f5f-customize-Suppress-OCaml-warning.patch
  c0de4de9-appliance-add-reboot-and-netconfig-for-SUSE.patch
  e26cfa44-daemon-Build-with--pthread.patch
  f47e0bb6-appliance-reorder-mounting-of-special-filesystems-in-init.patch
  appliance.patch
  libguestfs.env.patch
  makefile-ocaml-find-guestfs.patch
  netconfig.patch</changelog>
  <changelog author="carnold@suse.com" date="1647518400">- Update to version 1.48.0
  * Fix allocation and deallocation of string lists in golang
    bindings (Laszlo Ersek).
  * Multiple fixes to the OCaml bindings:
  * Add support for Kylin (Laszlo Ersek).
  * Add support for Rocky Linux (Neil Hanlon).
  * Inspection of guests which use LUKS encryption on top of LVM
    logical volumes should now work (Laszlo Ersek).
  * "guestfs_list_9p" and "guestfs_mount_9p" are deprecated and
    now return errors.
  * "guestfs_remove_drive" has been deprecated and now returns an
    error.
  * "guestfs_add_drive" no longer supports hotplugging
  * In "guestfs_xfs_admin" the "lazycounter" parameter is deprecated
    because it is no longer supported in recent versions of XFS.
  * The User-mode Linux ("uml") backend has been removed.
  * Partition APIs now cope with the broken MBR partition tables
    created by dosfstools ≥ 4.2 (Laszlo Ersek).
  * Various bug fixes</changelog>
  <changelog author="hpj@urpla.net" date="1649851200">- Avoid useless builds, if ocaml version isn't up to the task
  libguestfs uses get_uint8(), available since ocaml 4.13.0</changelog>
  <changelog author="hpj@urpla.net" date="1649851201">- Add relevant %post{,un} sections
- Add another rpmlint filter
- Add uk man dirs</changelog>
  <changelog author="carnold@suse.com" date="1650283200">- Update to version 1.48.1
  * Updated language files
  * A few bug fixes in this release
  * Drop requirement for newer ocaml required by Bytes.get_uint8.
    It is replaced with a local implementation.</changelog>
  <changelog author="carnold@suse.com" date="1654084800">- Update to version 1.48.3
  * Several bugs fixed in this release since version 1.48.1
  * Updated language files</changelog>
  <changelog author="carnold@suse.com" date="1654257600">- bsc#1190501 - virt-builder fails to install packages when
  building an image. Add Recommends: dhcp-client for the appliance.
  libguestfs.spec</changelog>
  <changelog author="carnold@suse.com" date="1656504000">- bsc#1201064 - Libguestfs: Buffer overflow in get_keys leads
  to DOS - CVE-2022-2211
  CVE-2022-2211-options-fix-buffer-overflow-in-get_keys.patch
  CVE-2022-2211-docs-guestfs-security-document.patch</changelog>
  <changelog author="carnold@suse.com" date="1657627200">- Update to version 1.48.4
  * This is a bug fix release
- Drop patches included in new tarball
  CVE-2022-2211-docs-guestfs-security-document.patch
  CVE-2022-2211-options-fix-buffer-overflow-in-get_keys.patch</changelog>
  <changelog author="carnold@suse.com" date="1662465600">- Upstream patch to fix running configure --disable-ocaml
  f162e47e-m4-Fix-configure-disable-ocaml.patch</changelog>
  <changelog author="carnold@suse.com" date="1664884800">- jsc#PED-2113 [Virt Tools] Refresh Virtualization Tools for Xen
  and KVM Management</changelog>
  <changelog author="carnold@suse.com" date="1665748800">- Drop requirement for icoutils in SLE as this package is not
  available.
  libguestfs.spec</changelog>
  <changelog author="lnussel@suse.de" date="1666267200">- Drop reiserfs (boo#1191092)</changelog>
  <changelog author="carnold@suse.com" date="1669723200">- Update to version 1.48.6
  * jsc#PED-2113
  * This is a bug fix release. No upstream changelog.
- Drop f162e47e-m4-Fix-configure-disable-ocaml.patch</changelog>
  <changelog author="carnold@suse.com" date="1688558400">- bsc#1212972 - cannot find any suitable libguestfs supermin
  libguestfs.spec (see also bsc#1215664)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1688990400">- bsc#1213243 - KubeVirt needs libguestfs with the support of qcow2
  appliances
  Configure with --enable-appliance-format-auto to allow
  qcow2-format fixed appliances.
  libguestfs.spec</changelog>
  <changelog author="carnold@suse.com" date="1695643200">- bsc#1215543 - guestfs regression: file: Use -S option with -z
  Omit-file--S-option-on-older-distros-that-lack-support.patch
  See also bsc#1215461
- bsc#1215586 - guestfs regression: non functional network due to
  missing sysconfig-netconfig
  libguestfs.spec</changelog>
</package>
<package pkgid="53332cb126f631eacea1081d62a97e991fc3d316638cb8bc3230484f30a6a40e" name="libguestfs0" arch="s390x">
  <version epoch="0" ver="1.48.6" rel="150500.3.8.1"/>
  <changelog author="carnold@suse.com" date="1635249600">- Fix build errors in Factory
  * Alert ocaml_deprecated_cli: Setting a warning with a sequence
    of lowercase or uppercase letters, like 'CDEFLMPSUVYZX', is
    deprecated.
  63c9cd93-m4-guestfs-ocaml.m4-Fix-deprecated-warning-format.patch
  * Error (warning 6 [labels-omitted]): label verbose was omitted
    in the application of this function.
  a4930f5f-customize-Suppress-OCaml-warning.patch</changelog>
  <changelog author="ohering@suse.de" date="1639483200">- Add python-rpm-macros (bsc#1180125)</changelog>
  <changelog author="carnold@suse.com" date="1644235200">- bsc#1195415 - libguestfs: consider dropping build requirement on
  systemd-sysvinit
  libguestfs.spec</changelog>
  <changelog author="carnold@suse.com" date="1645012800">- Update to version 1.46.2
  * This release has moved many virt tools like virt-builder,
    virt-cat, virt-customize, virt-df, etc. to the guestfs-tools
    project. This makes libguestfs a bit easier to build and manage.
  * The build now uses and requires PCRE2 (instead of PCRE).
  * This version requires libvirt ≥ 7.1.0, if libvirt is enabled.
  * gnulib is no longer bundled with libguestfs, making builds from
    git much simpler.
  * Perl Sys::Virt (libvirt bindings for Perl) are no longer
    required by libguestfs.
  * The code has been compiled with both LTO and GCC -fanalyzer and
    many bugs and warnings fixed.
  * Various fixes for qemu 6.1.
  * Update appliance packages on SUSE and several other improvements
    to the init script (Olaf Hering).
  * We now use the qemu / libvirt feature -cpu max to select the
    best CPU to run the appliance.
  * When passing the appliance filesystem UUID to supermin we now
    read it directly out of the appliance instead of using the
    file(1) program. This is more reliable.
  * The qemu -enable-fips option is no longer used. It was not
    needed and has been deprecated by qemu.
  * We no longer use qemu's sga (Serial Graphics Adapter) option
    ROM, instead using the equivalent seabios feature.
  * Various bug fixes
- Package changes
  * New libguestfs.spec file.
  * Moved guestfs-tools to a new and separate project and package
  * Renamed packages
    guestfs-winsupport -&gt; libguestfs-winsupport
    guestfsd -&gt; libguestfsd
  * New packages
    libguestfs, libguestfs-typelib-Guestfs,
    libguestfs-gobject, libguestfs-gobject-devel
    libguestfs-rescue, libguestfs-rsync, libguestfs-xfs
  * Dropped package libguestfs-test
- Dropped scripts and patches
  Pod-Simple-3.23.tar.xz
  libguestfs.test.simple.create-opensuse-guest-crypt-on-lvm.sh
  libguestfs.test.simple.create-opensuse-guest.sh
  libguestfs.test.simple.create-sles12-guest-crypt-on-lvm.sh
  libguestfs.test.simple.create-sles12-guest.sh
  libguestfs.test.simple.run-libugestfs-test-tool.sh
  0001-Introduce-a-wrapper-around-xmlParseURI.patch
  0002-common-extract-UTF-8-conversion-function.patch
  0003-inspector-rpm-summary-and-description-may-not-be-utf.patch
  489b14b7-ocaml-examples-Link-examples-to-gnulib.patch
  63c9cd93-m4-guestfs-ocaml.m4-Fix-deprecated-warning-format.patch
  68a02c2f-customize--resize--sparsify--sysprep-Link-explicitly-with-pthread.patch
  9db0c98c-appliance-enable-bashs-Process-Substitution-feature.patch
  a4930f5f-customize-Suppress-OCaml-warning.patch
  c0de4de9-appliance-add-reboot-and-netconfig-for-SUSE.patch
  e26cfa44-daemon-Build-with--pthread.patch
  f47e0bb6-appliance-reorder-mounting-of-special-filesystems-in-init.patch
  appliance.patch
  libguestfs.env.patch
  makefile-ocaml-find-guestfs.patch
  netconfig.patch</changelog>
  <changelog author="carnold@suse.com" date="1647518400">- Update to version 1.48.0
  * Fix allocation and deallocation of string lists in golang
    bindings (Laszlo Ersek).
  * Multiple fixes to the OCaml bindings:
  * Add support for Kylin (Laszlo Ersek).
  * Add support for Rocky Linux (Neil Hanlon).
  * Inspection of guests which use LUKS encryption on top of LVM
    logical volumes should now work (Laszlo Ersek).
  * "guestfs_list_9p" and "guestfs_mount_9p" are deprecated and
    now return errors.
  * "guestfs_remove_drive" has been deprecated and now returns an
    error.
  * "guestfs_add_drive" no longer supports hotplugging
  * In "guestfs_xfs_admin" the "lazycounter" parameter is deprecated
    because it is no longer supported in recent versions of XFS.
  * The User-mode Linux ("uml") backend has been removed.
  * Partition APIs now cope with the broken MBR partition tables
    created by dosfstools ≥ 4.2 (Laszlo Ersek).
  * Various bug fixes</changelog>
  <changelog author="hpj@urpla.net" date="1649851200">- Avoid useless builds, if ocaml version isn't up to the task
  libguestfs uses get_uint8(), available since ocaml 4.13.0</changelog>
  <changelog author="hpj@urpla.net" date="1649851201">- Add relevant %post{,un} sections
- Add another rpmlint filter
- Add uk man dirs</changelog>
  <changelog author="carnold@suse.com" date="1650283200">- Update to version 1.48.1
  * Updated language files
  * A few bug fixes in this release
  * Drop requirement for newer ocaml required by Bytes.get_uint8.
    It is replaced with a local implementation.</changelog>
  <changelog author="carnold@suse.com" date="1654084800">- Update to version 1.48.3
  * Several bugs fixed in this release since version 1.48.1
  * Updated language files</changelog>
  <changelog author="carnold@suse.com" date="1654257600">- bsc#1190501 - virt-builder fails to install packages when
  building an image. Add Recommends: dhcp-client for the appliance.
  libguestfs.spec</changelog>
  <changelog author="carnold@suse.com" date="1656504000">- bsc#1201064 - Libguestfs: Buffer overflow in get_keys leads
  to DOS - CVE-2022-2211
  CVE-2022-2211-options-fix-buffer-overflow-in-get_keys.patch
  CVE-2022-2211-docs-guestfs-security-document.patch</changelog>
  <changelog author="carnold@suse.com" date="1657627200">- Update to version 1.48.4
  * This is a bug fix release
- Drop patches included in new tarball
  CVE-2022-2211-docs-guestfs-security-document.patch
  CVE-2022-2211-options-fix-buffer-overflow-in-get_keys.patch</changelog>
  <changelog author="carnold@suse.com" date="1662465600">- Upstream patch to fix running configure --disable-ocaml
  f162e47e-m4-Fix-configure-disable-ocaml.patch</changelog>
  <changelog author="carnold@suse.com" date="1664884800">- jsc#PED-2113 [Virt Tools] Refresh Virtualization Tools for Xen
  and KVM Management</changelog>
  <changelog author="carnold@suse.com" date="1665748800">- Drop requirement for icoutils in SLE as this package is not
  available.
  libguestfs.spec</changelog>
  <changelog author="lnussel@suse.de" date="1666267200">- Drop reiserfs (boo#1191092)</changelog>
  <changelog author="carnold@suse.com" date="1669723200">- Update to version 1.48.6
  * jsc#PED-2113
  * This is a bug fix release. No upstream changelog.
- Drop f162e47e-m4-Fix-configure-disable-ocaml.patch</changelog>
  <changelog author="carnold@suse.com" date="1688558400">- bsc#1212972 - cannot find any suitable libguestfs supermin
  libguestfs.spec (see also bsc#1215664)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1688990400">- bsc#1213243 - KubeVirt needs libguestfs with the support of qcow2
  appliances
  Configure with --enable-appliance-format-auto to allow
  qcow2-format fixed appliances.
  libguestfs.spec</changelog>
  <changelog author="carnold@suse.com" date="1695643200">- bsc#1215543 - guestfs regression: file: Use -S option with -z
  Omit-file--S-option-on-older-distros-that-lack-support.patch
  See also bsc#1215461
- bsc#1215586 - guestfs regression: non functional network due to
  missing sysconfig-netconfig
  libguestfs.spec</changelog>
</package>
<package pkgid="e802e9e795d8ced84e2c470528e287d18e18b8a61925edb2b790641b0bd24fb0" name="libguestfs0" arch="x86_64">
  <version epoch="0" ver="1.48.6" rel="150500.3.8.1"/>
  <changelog author="carnold@suse.com" date="1635249600">- Fix build errors in Factory
  * Alert ocaml_deprecated_cli: Setting a warning with a sequence
    of lowercase or uppercase letters, like 'CDEFLMPSUVYZX', is
    deprecated.
  63c9cd93-m4-guestfs-ocaml.m4-Fix-deprecated-warning-format.patch
  * Error (warning 6 [labels-omitted]): label verbose was omitted
    in the application of this function.
  a4930f5f-customize-Suppress-OCaml-warning.patch</changelog>
  <changelog author="ohering@suse.de" date="1639483200">- Add python-rpm-macros (bsc#1180125)</changelog>
  <changelog author="carnold@suse.com" date="1644235200">- bsc#1195415 - libguestfs: consider dropping build requirement on
  systemd-sysvinit
  libguestfs.spec</changelog>
  <changelog author="carnold@suse.com" date="1645012800">- Update to version 1.46.2
  * This release has moved many virt tools like virt-builder,
    virt-cat, virt-customize, virt-df, etc. to the guestfs-tools
    project. This makes libguestfs a bit easier to build and manage.
  * The build now uses and requires PCRE2 (instead of PCRE).
  * This version requires libvirt ≥ 7.1.0, if libvirt is enabled.
  * gnulib is no longer bundled with libguestfs, making builds from
    git much simpler.
  * Perl Sys::Virt (libvirt bindings for Perl) are no longer
    required by libguestfs.
  * The code has been compiled with both LTO and GCC -fanalyzer and
    many bugs and warnings fixed.
  * Various fixes for qemu 6.1.
  * Update appliance packages on SUSE and several other improvements
    to the init script (Olaf Hering).
  * We now use the qemu / libvirt feature -cpu max to select the
    best CPU to run the appliance.
  * When passing the appliance filesystem UUID to supermin we now
    read it directly out of the appliance instead of using the
    file(1) program. This is more reliable.
  * The qemu -enable-fips option is no longer used. It was not
    needed and has been deprecated by qemu.
  * We no longer use qemu's sga (Serial Graphics Adapter) option
    ROM, instead using the equivalent seabios feature.
  * Various bug fixes
- Package changes
  * New libguestfs.spec file.
  * Moved guestfs-tools to a new and separate project and package
  * Renamed packages
    guestfs-winsupport -&gt; libguestfs-winsupport
    guestfsd -&gt; libguestfsd
  * New packages
    libguestfs, libguestfs-typelib-Guestfs,
    libguestfs-gobject, libguestfs-gobject-devel
    libguestfs-rescue, libguestfs-rsync, libguestfs-xfs
  * Dropped package libguestfs-test
- Dropped scripts and patches
  Pod-Simple-3.23.tar.xz
  libguestfs.test.simple.create-opensuse-guest-crypt-on-lvm.sh
  libguestfs.test.simple.create-opensuse-guest.sh
  libguestfs.test.simple.create-sles12-guest-crypt-on-lvm.sh
  libguestfs.test.simple.create-sles12-guest.sh
  libguestfs.test.simple.run-libugestfs-test-tool.sh
  0001-Introduce-a-wrapper-around-xmlParseURI.patch
  0002-common-extract-UTF-8-conversion-function.patch
  0003-inspector-rpm-summary-and-description-may-not-be-utf.patch
  489b14b7-ocaml-examples-Link-examples-to-gnulib.patch
  63c9cd93-m4-guestfs-ocaml.m4-Fix-deprecated-warning-format.patch
  68a02c2f-customize--resize--sparsify--sysprep-Link-explicitly-with-pthread.patch
  9db0c98c-appliance-enable-bashs-Process-Substitution-feature.patch
  a4930f5f-customize-Suppress-OCaml-warning.patch
  c0de4de9-appliance-add-reboot-and-netconfig-for-SUSE.patch
  e26cfa44-daemon-Build-with--pthread.patch
  f47e0bb6-appliance-reorder-mounting-of-special-filesystems-in-init.patch
  appliance.patch
  libguestfs.env.patch
  makefile-ocaml-find-guestfs.patch
  netconfig.patch</changelog>
  <changelog author="carnold@suse.com" date="1647518400">- Update to version 1.48.0
  * Fix allocation and deallocation of string lists in golang
    bindings (Laszlo Ersek).
  * Multiple fixes to the OCaml bindings:
  * Add support for Kylin (Laszlo Ersek).
  * Add support for Rocky Linux (Neil Hanlon).
  * Inspection of guests which use LUKS encryption on top of LVM
    logical volumes should now work (Laszlo Ersek).
  * "guestfs_list_9p" and "guestfs_mount_9p" are deprecated and
    now return errors.
  * "guestfs_remove_drive" has been deprecated and now returns an
    error.
  * "guestfs_add_drive" no longer supports hotplugging
  * In "guestfs_xfs_admin" the "lazycounter" parameter is deprecated
    because it is no longer supported in recent versions of XFS.
  * The User-mode Linux ("uml") backend has been removed.
  * Partition APIs now cope with the broken MBR partition tables
    created by dosfstools ≥ 4.2 (Laszlo Ersek).
  * Various bug fixes</changelog>
  <changelog author="hpj@urpla.net" date="1649851200">- Avoid useless builds, if ocaml version isn't up to the task
  libguestfs uses get_uint8(), available since ocaml 4.13.0</changelog>
  <changelog author="hpj@urpla.net" date="1649851201">- Add relevant %post{,un} sections
- Add another rpmlint filter
- Add uk man dirs</changelog>
  <changelog author="carnold@suse.com" date="1650283200">- Update to version 1.48.1
  * Updated language files
  * A few bug fixes in this release
  * Drop requirement for newer ocaml required by Bytes.get_uint8.
    It is replaced with a local implementation.</changelog>
  <changelog author="carnold@suse.com" date="1654084800">- Update to version 1.48.3
  * Several bugs fixed in this release since version 1.48.1
  * Updated language files</changelog>
  <changelog author="carnold@suse.com" date="1654257600">- bsc#1190501 - virt-builder fails to install packages when
  building an image. Add Recommends: dhcp-client for the appliance.
  libguestfs.spec</changelog>
  <changelog author="carnold@suse.com" date="1656504000">- bsc#1201064 - Libguestfs: Buffer overflow in get_keys leads
  to DOS - CVE-2022-2211
  CVE-2022-2211-options-fix-buffer-overflow-in-get_keys.patch
  CVE-2022-2211-docs-guestfs-security-document.patch</changelog>
  <changelog author="carnold@suse.com" date="1657627200">- Update to version 1.48.4
  * This is a bug fix release
- Drop patches included in new tarball
  CVE-2022-2211-docs-guestfs-security-document.patch
  CVE-2022-2211-options-fix-buffer-overflow-in-get_keys.patch</changelog>
  <changelog author="carnold@suse.com" date="1662465600">- Upstream patch to fix running configure --disable-ocaml
  f162e47e-m4-Fix-configure-disable-ocaml.patch</changelog>
  <changelog author="carnold@suse.com" date="1664884800">- jsc#PED-2113 [Virt Tools] Refresh Virtualization Tools for Xen
  and KVM Management</changelog>
  <changelog author="carnold@suse.com" date="1665748800">- Drop requirement for icoutils in SLE as this package is not
  available.
  libguestfs.spec</changelog>
  <changelog author="lnussel@suse.de" date="1666267200">- Drop reiserfs (boo#1191092)</changelog>
  <changelog author="carnold@suse.com" date="1669723200">- Update to version 1.48.6
  * jsc#PED-2113
  * This is a bug fix release. No upstream changelog.
- Drop f162e47e-m4-Fix-configure-disable-ocaml.patch</changelog>
  <changelog author="carnold@suse.com" date="1688558400">- bsc#1212972 - cannot find any suitable libguestfs supermin
  libguestfs.spec (see also bsc#1215664)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1688990400">- bsc#1213243 - KubeVirt needs libguestfs with the support of qcow2
  appliances
  Configure with --enable-appliance-format-auto to allow
  qcow2-format fixed appliances.
  libguestfs.spec</changelog>
  <changelog author="carnold@suse.com" date="1695643200">- bsc#1215543 - guestfs regression: file: Use -S option with -z
  Omit-file--S-option-on-older-distros-that-lack-support.patch
  See also bsc#1215461
- bsc#1215586 - guestfs regression: non functional network due to
  missing sysconfig-netconfig
  libguestfs.spec</changelog>
</package>
<package pkgid="93c6e068d7e1d3d7179ba0da4b69b4eac92e3f3a4dc68a3866f1e472fdce95c2" name="libharfbuzz-gobject0" arch="aarch64">
  <version epoch="0" ver="3.4.0" rel="150400.3.8.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1591185600">- Update to version 2.6.7:
  + Update to Unicode 13.0.0
  + Fix hb_ot_layout_get_ligature_carets for fonts without lcar
    table
- includes fixes from 2.6.6:
  * A fix in AAT kerning for Geeza Pro</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1592913600">- update to 2.6.8:
  + New API to fetch glyph alternates from GSUB table
  + New API +hb_ot_layout_lookup_get_glyph_alternates()
- Drop gpg2 BuildRequires and stop verifying signature during
  build: upstream no longer signs the tarball/signature.</changelog>
  <changelog author="dmueller@suse.com" date="1600344000">- Update to version 2.7.2:
  + Fix a regression in the previous release that caused a crash
    with Kaithi.
  + More OOM fixes.
  + ot-funcs now handles variable empty glyphs better when
    hvar/vvar isn't present.
  + Reverted a GDEF processing regression.
  + A couple of fixes to handle OOM better.
  + Use an implementation for round that always rounds up, some
    minor fluctuations are expected on var font specially when
    hb-ot callback is used.
  + Fix an AAT's `kerx` issue on broken rendering of Devanagari
    Sangam MN.
  + Remove AAT's `lcar` table support from _get_ligature_carets
    API, not even much use on macOS installed fonts (only two
    files). GDEF support is the recommended one and expected to
    work properly after issues fixed two releases ago.
  - Minor memory fixes to handle OOM better specially in hb-ft.
  - Minor .so files versioning scheme change and remove
    stable/unstable scheme differences, was never used in practice
    (always default to stable scheme).
  - We are now suggesting careful packaging of the library using
    meson, https://github.com/harfbuzz/harfbuzz/wiki/Notes-on-migration-to-meson
    for more information.
  - Distribution package URL is changed, either use GitHub
    generated tarballs,
    `https://github.com/harfbuzz/harfbuzz/archive/$pkgver.tar.gz`
    or, even more preferably use commit hash of the release and git
    checkouts like,
    `git+https://github.com/harfbuzz/harfbuzz#commit=$commit`</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609070400">- Update to version 2.7.4:
  + Fix missing --enable-introspection configure option
- Changes from version 2.7.3:
  + Update USE shaper to 2020-08-13 specification, and other
    improvements
  + Don’t disable liga feature in myanmar shaper, to match
    Uniscribe
  + Improvements to language and script tags handling.
  + Update language system tag registry to OpenType 1.8.4
  + Support for serializing and deserializing Unicode buffers
  + Increase buffer work limits to handle fonts with many complex
    lookups
  + Handle more shaping operations in trace output
  + Memory access fixes
  + More OOM fixes
  + Improved documentation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610107200">- Switch to meson buildsystem:
  + Add meson BuildRequires and macros.
  + Replace gcc-c++ for generic c++_compiler BuildRequires.
  + Add meson_test macro in check section, run tests during build.
  + Drop pkgconfig(graphite2) BuildRequires: No longer build
    graphite2 support, following upstream that disables this by
    default.
  + Stop packaging gtk-docs, pass -Ddocs=disabled to meson, this
    way we might avoid a build-cycle and since we did not have a
    explicit docs subpackage, just silently drop them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610539200">- Re-enable graphite2 support: TexLive relies on this to be
  present:
  + Pass -Dgraphite=enabled to meson.
  + Add pkgconfig(graphite2) BuildRequires.</changelog>
  <changelog author="christophe@krop.fr" date="1618315200">- Update to version 2.8.0:
  + Shape joining scripts other than Arabic/Syriac using the
    Universal Shaping Engine. Previously these were shaped using
    the generalized Arabic shaper.
  + Fix regression in shaping of U+0B55 ORIYA SIGN OVERLINE.
  + Update language tags.
  + Variations: reduce error: do not round each interpolated delta.
  + Documentation improvements.
  + Subsetter improvements: subsets most, if not all, lookup types
    now.
  + Fuzzer-found fixes and other improvements when memory failures
    happen.
  + Removed most atomic implementations now that we have C++11
    atomic impl.
  + General codebase upkeep; using more C++11 features: constexpr
    constructors, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620302400">- Update to version 2.8.1:
  + Subsetter now fully supports GSUB/GPOS/GDEF tables (including
    variations); as such, layout tables are retained by subsetter
    by default
  + hb-view supports iTerm2 and kitty inline image protocols
    it can also use Chafa for terminal graphics if available
- Add  pkgconfig(chafa): new, optional depdency.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1626264000">- Update to version 2.8.2:
  + Shaping LTR digits for RTL scripts now makes the native
    direction of the digits LTR, applying shaping and positioning
    rules on the same glyph order as Uniscribe
  + Subsetting COLR v1 and CPAL tables is now supported
  + Various fixes and improvements to the subsetter
  + When applying morx table, mark glyph widths should not be zeroed
  + GPOS is preferred over kerx, if GSUB was applied
  + Regional_Indicator pairs are grouped together when clustering</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Drop pkgconfig(chafa) BuildRequires for now: causes a cycle
  between chafa and harfbuzz, and disable it in meson</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631448000">- harfbuzz 2.9.1:
  + Subsetter API close to stable
  + Various fuzzer-found bug fixes
  + hb_buffer_append() now handles the pre- and post-context which
    previously were left unchanged in the destination buffer
  + hb-view / hb-shape now accept following new arguments:
  - -unicodes: takes a list of hex numbers that represent Unicode
    codepoints.
  + Undeprecated API: hb_set_invert()
- includes changes from 2.9.0:
  + Support multiple variation axes with same tag, aka HOI
  + The coretext testing shaper now passes font variations to
    CoreText
  + hb-shape/hb-view does not break line at new lines unless text
    is read from file
  + hb-view and hb-subset has a --batch now, similar to hb-shape
  + The --batch mode now uses ; as argument separator instead of :
    used previously
  + The --batch in hb-shape does not expect 0th argument anymore.
    That is, the lines read are interpreted as argv[1:], instead
    of argv[0:].
  + The --batch option has been undocumented. We are ready to
    document it; send feedback if you find it useful
  + hb-subset got arguments revamps. Added much-requested
  - -gids-file, --glyphs, --glyphs-file, --unicodes-file,
    supporting ranges in --unicodes.
  + Various bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631966400">- harfbuzz 3.0.0:
  + Unicode 14.0 support
  + hb-subset API and harfbuzz-subset ABI now declared stable
  + hb-style API is now stable</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1636200000">- harfbuzz 3.1.0:
  * Better offset-overflow handling in the subsetter library
  * Improved Unicode 14 properties in the USE shaper, and various
    other USE shaper fixes
  * MATH and COLR v1 tables subsetting support, and various other
    subsetter fixes
  * Support for Pwo Karen / Ason Chin medial la. (Simon Cozens)
  * Apply GPOS positioning when substituting with morx table, if
    kerx is missing
  * Apply calt and clig features across syllable boundaries in
    Indic shaper
  * Meson option for enabling Graphite 2 has been renamed to
    graphite2
  * Build and documentation fixes
- add harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636459200">- Update to version 3.1.1:
  + Work around GCC cast-align error/warning on some platforms.
  + Documentation improvements.
- Drop patch fixed upstream:
  + harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742400">- Update to 3.1.2:
  + hb-shape / hb-view: revert treating text on the commandline as
    single paragraph (was introduced in 3.0.0); add new
  - -single-par to do that
  + Subsetter bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742401">- Update to 3.2.0:
  + Fixed shaping of Apple Color Emoji flags in right-to-left context
  + Fixed positioning of CFF fonts in HB_TINY profile
  + OpenType 1.9 language tags update
  + Add HB_NO_VERTICAL config option
  + Add HB_CONFIG_OVERRIDE_H for easier configuration
  + Improved packing of cmap, loca, and Ligature tables
  + Significantly improved overflow-resolution strategy in the repacker</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644235200">- update to 3.3.2:
  + Revert splitting of pair positioning values introduced in 3.3.0
    as it proved problematic
- includes changes from 3.3.1:
  + Fix heap-use-after-free in harfbuzz-subset introduced in
    previous release
- includes changes from 3.3.0:
  + Improved documentation, code cleanup
  + The low 16-bits of face index will be used by hb_face_create()
    to select a face inside a font collection file format, while the
    high 16-bits will be used by hb_font_create() to load the named
    instance
  + Glyph positions and other font metrics now apply synthetic slant
    set by hb_font_set_synthetic_slant(), for improved positioning
    for synthetically slanted fonts
  + Fixed unintentional locale dependency in hb_variation_to_string()
    for decimal point representation
  + When applying pair positioning (kerning) the positioning value
    is split between the two sides of the pair for improved cursor
    positioning between such pairs
  + Introduced new HB_GLYPH_FLAG_UNSAFE_TO_CONCAT, to be used in
    conjunction with HB_GLYPH_FLAG_UNSAFE_TO_BREAK for optimizing
    re-shaping during line breaking. Check the documentation for
    further details
  + Improved handling of macrolanguages when mapping BCP 47 codes
    to OpenType tags</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644753600">- update to 3.4.0:
  + Perform sanity checks on shaping results is now part of
    “harfbuzz” library and can be enabled by setting the buffer
    flag HB_BUFFER_FLAG_VERIFY
  + Arabic Mark Transient Reordering Algorithm have been updated
    to revision 6
  + ISO 15924 code for mathematical notation, ‘Zmth’, now maps to
    the OpenType ‘math’ tag
  + It is now possible to get at once all math kerning values for a
    given glyph at a given corner
  + Fix locale_t portability issues on systems the typedef’s it to
    a void pointer</changelog>
  <changelog author="mgorse@suse.com" date="1658836800">- Add harfbuzz-CVE-2022-33068.patch: sbix: limit glyph extents
  (boo#1200900 CVE-2022-33068).</changelog>
  <changelog author="mgorse@suse.com" date="1680696000">- Add CVE-2023-25193.patch: limit how far we skip when looking
  back (bsc#1207922 CVE-2023-25193).</changelog>
</package>
<package pkgid="7e60f74ebdb3c1ee7597b8726a1528ac63ad13aa2428c1dd5672e77a221c40bf" name="libharfbuzz-gobject0" arch="s390x">
  <version epoch="0" ver="3.4.0" rel="150400.3.8.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1591185600">- Update to version 2.6.7:
  + Update to Unicode 13.0.0
  + Fix hb_ot_layout_get_ligature_carets for fonts without lcar
    table
- includes fixes from 2.6.6:
  * A fix in AAT kerning for Geeza Pro</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1592913600">- update to 2.6.8:
  + New API to fetch glyph alternates from GSUB table
  + New API +hb_ot_layout_lookup_get_glyph_alternates()
- Drop gpg2 BuildRequires and stop verifying signature during
  build: upstream no longer signs the tarball/signature.</changelog>
  <changelog author="dmueller@suse.com" date="1600344000">- Update to version 2.7.2:
  + Fix a regression in the previous release that caused a crash
    with Kaithi.
  + More OOM fixes.
  + ot-funcs now handles variable empty glyphs better when
    hvar/vvar isn't present.
  + Reverted a GDEF processing regression.
  + A couple of fixes to handle OOM better.
  + Use an implementation for round that always rounds up, some
    minor fluctuations are expected on var font specially when
    hb-ot callback is used.
  + Fix an AAT's `kerx` issue on broken rendering of Devanagari
    Sangam MN.
  + Remove AAT's `lcar` table support from _get_ligature_carets
    API, not even much use on macOS installed fonts (only two
    files). GDEF support is the recommended one and expected to
    work properly after issues fixed two releases ago.
  - Minor memory fixes to handle OOM better specially in hb-ft.
  - Minor .so files versioning scheme change and remove
    stable/unstable scheme differences, was never used in practice
    (always default to stable scheme).
  - We are now suggesting careful packaging of the library using
    meson, https://github.com/harfbuzz/harfbuzz/wiki/Notes-on-migration-to-meson
    for more information.
  - Distribution package URL is changed, either use GitHub
    generated tarballs,
    `https://github.com/harfbuzz/harfbuzz/archive/$pkgver.tar.gz`
    or, even more preferably use commit hash of the release and git
    checkouts like,
    `git+https://github.com/harfbuzz/harfbuzz#commit=$commit`</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609070400">- Update to version 2.7.4:
  + Fix missing --enable-introspection configure option
- Changes from version 2.7.3:
  + Update USE shaper to 2020-08-13 specification, and other
    improvements
  + Don’t disable liga feature in myanmar shaper, to match
    Uniscribe
  + Improvements to language and script tags handling.
  + Update language system tag registry to OpenType 1.8.4
  + Support for serializing and deserializing Unicode buffers
  + Increase buffer work limits to handle fonts with many complex
    lookups
  + Handle more shaping operations in trace output
  + Memory access fixes
  + More OOM fixes
  + Improved documentation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610107200">- Switch to meson buildsystem:
  + Add meson BuildRequires and macros.
  + Replace gcc-c++ for generic c++_compiler BuildRequires.
  + Add meson_test macro in check section, run tests during build.
  + Drop pkgconfig(graphite2) BuildRequires: No longer build
    graphite2 support, following upstream that disables this by
    default.
  + Stop packaging gtk-docs, pass -Ddocs=disabled to meson, this
    way we might avoid a build-cycle and since we did not have a
    explicit docs subpackage, just silently drop them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610539200">- Re-enable graphite2 support: TexLive relies on this to be
  present:
  + Pass -Dgraphite=enabled to meson.
  + Add pkgconfig(graphite2) BuildRequires.</changelog>
  <changelog author="christophe@krop.fr" date="1618315200">- Update to version 2.8.0:
  + Shape joining scripts other than Arabic/Syriac using the
    Universal Shaping Engine. Previously these were shaped using
    the generalized Arabic shaper.
  + Fix regression in shaping of U+0B55 ORIYA SIGN OVERLINE.
  + Update language tags.
  + Variations: reduce error: do not round each interpolated delta.
  + Documentation improvements.
  + Subsetter improvements: subsets most, if not all, lookup types
    now.
  + Fuzzer-found fixes and other improvements when memory failures
    happen.
  + Removed most atomic implementations now that we have C++11
    atomic impl.
  + General codebase upkeep; using more C++11 features: constexpr
    constructors, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620302400">- Update to version 2.8.1:
  + Subsetter now fully supports GSUB/GPOS/GDEF tables (including
    variations); as such, layout tables are retained by subsetter
    by default
  + hb-view supports iTerm2 and kitty inline image protocols
    it can also use Chafa for terminal graphics if available
- Add  pkgconfig(chafa): new, optional depdency.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1626264000">- Update to version 2.8.2:
  + Shaping LTR digits for RTL scripts now makes the native
    direction of the digits LTR, applying shaping and positioning
    rules on the same glyph order as Uniscribe
  + Subsetting COLR v1 and CPAL tables is now supported
  + Various fixes and improvements to the subsetter
  + When applying morx table, mark glyph widths should not be zeroed
  + GPOS is preferred over kerx, if GSUB was applied
  + Regional_Indicator pairs are grouped together when clustering</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Drop pkgconfig(chafa) BuildRequires for now: causes a cycle
  between chafa and harfbuzz, and disable it in meson</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631448000">- harfbuzz 2.9.1:
  + Subsetter API close to stable
  + Various fuzzer-found bug fixes
  + hb_buffer_append() now handles the pre- and post-context which
    previously were left unchanged in the destination buffer
  + hb-view / hb-shape now accept following new arguments:
  - -unicodes: takes a list of hex numbers that represent Unicode
    codepoints.
  + Undeprecated API: hb_set_invert()
- includes changes from 2.9.0:
  + Support multiple variation axes with same tag, aka HOI
  + The coretext testing shaper now passes font variations to
    CoreText
  + hb-shape/hb-view does not break line at new lines unless text
    is read from file
  + hb-view and hb-subset has a --batch now, similar to hb-shape
  + The --batch mode now uses ; as argument separator instead of :
    used previously
  + The --batch in hb-shape does not expect 0th argument anymore.
    That is, the lines read are interpreted as argv[1:], instead
    of argv[0:].
  + The --batch option has been undocumented. We are ready to
    document it; send feedback if you find it useful
  + hb-subset got arguments revamps. Added much-requested
  - -gids-file, --glyphs, --glyphs-file, --unicodes-file,
    supporting ranges in --unicodes.
  + Various bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631966400">- harfbuzz 3.0.0:
  + Unicode 14.0 support
  + hb-subset API and harfbuzz-subset ABI now declared stable
  + hb-style API is now stable</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1636200000">- harfbuzz 3.1.0:
  * Better offset-overflow handling in the subsetter library
  * Improved Unicode 14 properties in the USE shaper, and various
    other USE shaper fixes
  * MATH and COLR v1 tables subsetting support, and various other
    subsetter fixes
  * Support for Pwo Karen / Ason Chin medial la. (Simon Cozens)
  * Apply GPOS positioning when substituting with morx table, if
    kerx is missing
  * Apply calt and clig features across syllable boundaries in
    Indic shaper
  * Meson option for enabling Graphite 2 has been renamed to
    graphite2
  * Build and documentation fixes
- add harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636459200">- Update to version 3.1.1:
  + Work around GCC cast-align error/warning on some platforms.
  + Documentation improvements.
- Drop patch fixed upstream:
  + harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742400">- Update to 3.1.2:
  + hb-shape / hb-view: revert treating text on the commandline as
    single paragraph (was introduced in 3.0.0); add new
  - -single-par to do that
  + Subsetter bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742401">- Update to 3.2.0:
  + Fixed shaping of Apple Color Emoji flags in right-to-left context
  + Fixed positioning of CFF fonts in HB_TINY profile
  + OpenType 1.9 language tags update
  + Add HB_NO_VERTICAL config option
  + Add HB_CONFIG_OVERRIDE_H for easier configuration
  + Improved packing of cmap, loca, and Ligature tables
  + Significantly improved overflow-resolution strategy in the repacker</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644235200">- update to 3.3.2:
  + Revert splitting of pair positioning values introduced in 3.3.0
    as it proved problematic
- includes changes from 3.3.1:
  + Fix heap-use-after-free in harfbuzz-subset introduced in
    previous release
- includes changes from 3.3.0:
  + Improved documentation, code cleanup
  + The low 16-bits of face index will be used by hb_face_create()
    to select a face inside a font collection file format, while the
    high 16-bits will be used by hb_font_create() to load the named
    instance
  + Glyph positions and other font metrics now apply synthetic slant
    set by hb_font_set_synthetic_slant(), for improved positioning
    for synthetically slanted fonts
  + Fixed unintentional locale dependency in hb_variation_to_string()
    for decimal point representation
  + When applying pair positioning (kerning) the positioning value
    is split between the two sides of the pair for improved cursor
    positioning between such pairs
  + Introduced new HB_GLYPH_FLAG_UNSAFE_TO_CONCAT, to be used in
    conjunction with HB_GLYPH_FLAG_UNSAFE_TO_BREAK for optimizing
    re-shaping during line breaking. Check the documentation for
    further details
  + Improved handling of macrolanguages when mapping BCP 47 codes
    to OpenType tags</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644753600">- update to 3.4.0:
  + Perform sanity checks on shaping results is now part of
    “harfbuzz” library and can be enabled by setting the buffer
    flag HB_BUFFER_FLAG_VERIFY
  + Arabic Mark Transient Reordering Algorithm have been updated
    to revision 6
  + ISO 15924 code for mathematical notation, ‘Zmth’, now maps to
    the OpenType ‘math’ tag
  + It is now possible to get at once all math kerning values for a
    given glyph at a given corner
  + Fix locale_t portability issues on systems the typedef’s it to
    a void pointer</changelog>
  <changelog author="mgorse@suse.com" date="1658836800">- Add harfbuzz-CVE-2022-33068.patch: sbix: limit glyph extents
  (boo#1200900 CVE-2022-33068).</changelog>
  <changelog author="mgorse@suse.com" date="1680696000">- Add CVE-2023-25193.patch: limit how far we skip when looking
  back (bsc#1207922 CVE-2023-25193).</changelog>
</package>
<package pkgid="599907df87599767d39f0ef35a6bb5436e8186a3e1a3012f99d8528d29a1af78" name="libharfbuzz-gobject0" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="150400.3.8.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1591185600">- Update to version 2.6.7:
  + Update to Unicode 13.0.0
  + Fix hb_ot_layout_get_ligature_carets for fonts without lcar
    table
- includes fixes from 2.6.6:
  * A fix in AAT kerning for Geeza Pro</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1592913600">- update to 2.6.8:
  + New API to fetch glyph alternates from GSUB table
  + New API +hb_ot_layout_lookup_get_glyph_alternates()
- Drop gpg2 BuildRequires and stop verifying signature during
  build: upstream no longer signs the tarball/signature.</changelog>
  <changelog author="dmueller@suse.com" date="1600344000">- Update to version 2.7.2:
  + Fix a regression in the previous release that caused a crash
    with Kaithi.
  + More OOM fixes.
  + ot-funcs now handles variable empty glyphs better when
    hvar/vvar isn't present.
  + Reverted a GDEF processing regression.
  + A couple of fixes to handle OOM better.
  + Use an implementation for round that always rounds up, some
    minor fluctuations are expected on var font specially when
    hb-ot callback is used.
  + Fix an AAT's `kerx` issue on broken rendering of Devanagari
    Sangam MN.
  + Remove AAT's `lcar` table support from _get_ligature_carets
    API, not even much use on macOS installed fonts (only two
    files). GDEF support is the recommended one and expected to
    work properly after issues fixed two releases ago.
  - Minor memory fixes to handle OOM better specially in hb-ft.
  - Minor .so files versioning scheme change and remove
    stable/unstable scheme differences, was never used in practice
    (always default to stable scheme).
  - We are now suggesting careful packaging of the library using
    meson, https://github.com/harfbuzz/harfbuzz/wiki/Notes-on-migration-to-meson
    for more information.
  - Distribution package URL is changed, either use GitHub
    generated tarballs,
    `https://github.com/harfbuzz/harfbuzz/archive/$pkgver.tar.gz`
    or, even more preferably use commit hash of the release and git
    checkouts like,
    `git+https://github.com/harfbuzz/harfbuzz#commit=$commit`</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609070400">- Update to version 2.7.4:
  + Fix missing --enable-introspection configure option
- Changes from version 2.7.3:
  + Update USE shaper to 2020-08-13 specification, and other
    improvements
  + Don’t disable liga feature in myanmar shaper, to match
    Uniscribe
  + Improvements to language and script tags handling.
  + Update language system tag registry to OpenType 1.8.4
  + Support for serializing and deserializing Unicode buffers
  + Increase buffer work limits to handle fonts with many complex
    lookups
  + Handle more shaping operations in trace output
  + Memory access fixes
  + More OOM fixes
  + Improved documentation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610107200">- Switch to meson buildsystem:
  + Add meson BuildRequires and macros.
  + Replace gcc-c++ for generic c++_compiler BuildRequires.
  + Add meson_test macro in check section, run tests during build.
  + Drop pkgconfig(graphite2) BuildRequires: No longer build
    graphite2 support, following upstream that disables this by
    default.
  + Stop packaging gtk-docs, pass -Ddocs=disabled to meson, this
    way we might avoid a build-cycle and since we did not have a
    explicit docs subpackage, just silently drop them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610539200">- Re-enable graphite2 support: TexLive relies on this to be
  present:
  + Pass -Dgraphite=enabled to meson.
  + Add pkgconfig(graphite2) BuildRequires.</changelog>
  <changelog author="christophe@krop.fr" date="1618315200">- Update to version 2.8.0:
  + Shape joining scripts other than Arabic/Syriac using the
    Universal Shaping Engine. Previously these were shaped using
    the generalized Arabic shaper.
  + Fix regression in shaping of U+0B55 ORIYA SIGN OVERLINE.
  + Update language tags.
  + Variations: reduce error: do not round each interpolated delta.
  + Documentation improvements.
  + Subsetter improvements: subsets most, if not all, lookup types
    now.
  + Fuzzer-found fixes and other improvements when memory failures
    happen.
  + Removed most atomic implementations now that we have C++11
    atomic impl.
  + General codebase upkeep; using more C++11 features: constexpr
    constructors, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620302400">- Update to version 2.8.1:
  + Subsetter now fully supports GSUB/GPOS/GDEF tables (including
    variations); as such, layout tables are retained by subsetter
    by default
  + hb-view supports iTerm2 and kitty inline image protocols
    it can also use Chafa for terminal graphics if available
- Add  pkgconfig(chafa): new, optional depdency.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1626264000">- Update to version 2.8.2:
  + Shaping LTR digits for RTL scripts now makes the native
    direction of the digits LTR, applying shaping and positioning
    rules on the same glyph order as Uniscribe
  + Subsetting COLR v1 and CPAL tables is now supported
  + Various fixes and improvements to the subsetter
  + When applying morx table, mark glyph widths should not be zeroed
  + GPOS is preferred over kerx, if GSUB was applied
  + Regional_Indicator pairs are grouped together when clustering</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Drop pkgconfig(chafa) BuildRequires for now: causes a cycle
  between chafa and harfbuzz, and disable it in meson</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631448000">- harfbuzz 2.9.1:
  + Subsetter API close to stable
  + Various fuzzer-found bug fixes
  + hb_buffer_append() now handles the pre- and post-context which
    previously were left unchanged in the destination buffer
  + hb-view / hb-shape now accept following new arguments:
  - -unicodes: takes a list of hex numbers that represent Unicode
    codepoints.
  + Undeprecated API: hb_set_invert()
- includes changes from 2.9.0:
  + Support multiple variation axes with same tag, aka HOI
  + The coretext testing shaper now passes font variations to
    CoreText
  + hb-shape/hb-view does not break line at new lines unless text
    is read from file
  + hb-view and hb-subset has a --batch now, similar to hb-shape
  + The --batch mode now uses ; as argument separator instead of :
    used previously
  + The --batch in hb-shape does not expect 0th argument anymore.
    That is, the lines read are interpreted as argv[1:], instead
    of argv[0:].
  + The --batch option has been undocumented. We are ready to
    document it; send feedback if you find it useful
  + hb-subset got arguments revamps. Added much-requested
  - -gids-file, --glyphs, --glyphs-file, --unicodes-file,
    supporting ranges in --unicodes.
  + Various bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631966400">- harfbuzz 3.0.0:
  + Unicode 14.0 support
  + hb-subset API and harfbuzz-subset ABI now declared stable
  + hb-style API is now stable</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1636200000">- harfbuzz 3.1.0:
  * Better offset-overflow handling in the subsetter library
  * Improved Unicode 14 properties in the USE shaper, and various
    other USE shaper fixes
  * MATH and COLR v1 tables subsetting support, and various other
    subsetter fixes
  * Support for Pwo Karen / Ason Chin medial la. (Simon Cozens)
  * Apply GPOS positioning when substituting with morx table, if
    kerx is missing
  * Apply calt and clig features across syllable boundaries in
    Indic shaper
  * Meson option for enabling Graphite 2 has been renamed to
    graphite2
  * Build and documentation fixes
- add harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636459200">- Update to version 3.1.1:
  + Work around GCC cast-align error/warning on some platforms.
  + Documentation improvements.
- Drop patch fixed upstream:
  + harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742400">- Update to 3.1.2:
  + hb-shape / hb-view: revert treating text on the commandline as
    single paragraph (was introduced in 3.0.0); add new
  - -single-par to do that
  + Subsetter bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742401">- Update to 3.2.0:
  + Fixed shaping of Apple Color Emoji flags in right-to-left context
  + Fixed positioning of CFF fonts in HB_TINY profile
  + OpenType 1.9 language tags update
  + Add HB_NO_VERTICAL config option
  + Add HB_CONFIG_OVERRIDE_H for easier configuration
  + Improved packing of cmap, loca, and Ligature tables
  + Significantly improved overflow-resolution strategy in the repacker</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644235200">- update to 3.3.2:
  + Revert splitting of pair positioning values introduced in 3.3.0
    as it proved problematic
- includes changes from 3.3.1:
  + Fix heap-use-after-free in harfbuzz-subset introduced in
    previous release
- includes changes from 3.3.0:
  + Improved documentation, code cleanup
  + The low 16-bits of face index will be used by hb_face_create()
    to select a face inside a font collection file format, while the
    high 16-bits will be used by hb_font_create() to load the named
    instance
  + Glyph positions and other font metrics now apply synthetic slant
    set by hb_font_set_synthetic_slant(), for improved positioning
    for synthetically slanted fonts
  + Fixed unintentional locale dependency in hb_variation_to_string()
    for decimal point representation
  + When applying pair positioning (kerning) the positioning value
    is split between the two sides of the pair for improved cursor
    positioning between such pairs
  + Introduced new HB_GLYPH_FLAG_UNSAFE_TO_CONCAT, to be used in
    conjunction with HB_GLYPH_FLAG_UNSAFE_TO_BREAK for optimizing
    re-shaping during line breaking. Check the documentation for
    further details
  + Improved handling of macrolanguages when mapping BCP 47 codes
    to OpenType tags</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644753600">- update to 3.4.0:
  + Perform sanity checks on shaping results is now part of
    “harfbuzz” library and can be enabled by setting the buffer
    flag HB_BUFFER_FLAG_VERIFY
  + Arabic Mark Transient Reordering Algorithm have been updated
    to revision 6
  + ISO 15924 code for mathematical notation, ‘Zmth’, now maps to
    the OpenType ‘math’ tag
  + It is now possible to get at once all math kerning values for a
    given glyph at a given corner
  + Fix locale_t portability issues on systems the typedef’s it to
    a void pointer</changelog>
  <changelog author="mgorse@suse.com" date="1658836800">- Add harfbuzz-CVE-2022-33068.patch: sbix: limit glyph extents
  (boo#1200900 CVE-2022-33068).</changelog>
  <changelog author="mgorse@suse.com" date="1680696000">- Add CVE-2023-25193.patch: limit how far we skip when looking
  back (bsc#1207922 CVE-2023-25193).</changelog>
</package>
<package pkgid="c92c23512df2313de55d8db8cc8d16c92c4b78255bf9f3322866d0a97fcb2c64" name="libharfbuzz0" arch="aarch64">
  <version epoch="0" ver="3.4.0" rel="150400.3.8.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1591185600">- Update to version 2.6.7:
  + Update to Unicode 13.0.0
  + Fix hb_ot_layout_get_ligature_carets for fonts without lcar
    table
- includes fixes from 2.6.6:
  * A fix in AAT kerning for Geeza Pro</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1592913600">- update to 2.6.8:
  + New API to fetch glyph alternates from GSUB table
  + New API +hb_ot_layout_lookup_get_glyph_alternates()
- Drop gpg2 BuildRequires and stop verifying signature during
  build: upstream no longer signs the tarball/signature.</changelog>
  <changelog author="dmueller@suse.com" date="1600344000">- Update to version 2.7.2:
  + Fix a regression in the previous release that caused a crash
    with Kaithi.
  + More OOM fixes.
  + ot-funcs now handles variable empty glyphs better when
    hvar/vvar isn't present.
  + Reverted a GDEF processing regression.
  + A couple of fixes to handle OOM better.
  + Use an implementation for round that always rounds up, some
    minor fluctuations are expected on var font specially when
    hb-ot callback is used.
  + Fix an AAT's `kerx` issue on broken rendering of Devanagari
    Sangam MN.
  + Remove AAT's `lcar` table support from _get_ligature_carets
    API, not even much use on macOS installed fonts (only two
    files). GDEF support is the recommended one and expected to
    work properly after issues fixed two releases ago.
  - Minor memory fixes to handle OOM better specially in hb-ft.
  - Minor .so files versioning scheme change and remove
    stable/unstable scheme differences, was never used in practice
    (always default to stable scheme).
  - We are now suggesting careful packaging of the library using
    meson, https://github.com/harfbuzz/harfbuzz/wiki/Notes-on-migration-to-meson
    for more information.
  - Distribution package URL is changed, either use GitHub
    generated tarballs,
    `https://github.com/harfbuzz/harfbuzz/archive/$pkgver.tar.gz`
    or, even more preferably use commit hash of the release and git
    checkouts like,
    `git+https://github.com/harfbuzz/harfbuzz#commit=$commit`</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609070400">- Update to version 2.7.4:
  + Fix missing --enable-introspection configure option
- Changes from version 2.7.3:
  + Update USE shaper to 2020-08-13 specification, and other
    improvements
  + Don’t disable liga feature in myanmar shaper, to match
    Uniscribe
  + Improvements to language and script tags handling.
  + Update language system tag registry to OpenType 1.8.4
  + Support for serializing and deserializing Unicode buffers
  + Increase buffer work limits to handle fonts with many complex
    lookups
  + Handle more shaping operations in trace output
  + Memory access fixes
  + More OOM fixes
  + Improved documentation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610107200">- Switch to meson buildsystem:
  + Add meson BuildRequires and macros.
  + Replace gcc-c++ for generic c++_compiler BuildRequires.
  + Add meson_test macro in check section, run tests during build.
  + Drop pkgconfig(graphite2) BuildRequires: No longer build
    graphite2 support, following upstream that disables this by
    default.
  + Stop packaging gtk-docs, pass -Ddocs=disabled to meson, this
    way we might avoid a build-cycle and since we did not have a
    explicit docs subpackage, just silently drop them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610539200">- Re-enable graphite2 support: TexLive relies on this to be
  present:
  + Pass -Dgraphite=enabled to meson.
  + Add pkgconfig(graphite2) BuildRequires.</changelog>
  <changelog author="christophe@krop.fr" date="1618315200">- Update to version 2.8.0:
  + Shape joining scripts other than Arabic/Syriac using the
    Universal Shaping Engine. Previously these were shaped using
    the generalized Arabic shaper.
  + Fix regression in shaping of U+0B55 ORIYA SIGN OVERLINE.
  + Update language tags.
  + Variations: reduce error: do not round each interpolated delta.
  + Documentation improvements.
  + Subsetter improvements: subsets most, if not all, lookup types
    now.
  + Fuzzer-found fixes and other improvements when memory failures
    happen.
  + Removed most atomic implementations now that we have C++11
    atomic impl.
  + General codebase upkeep; using more C++11 features: constexpr
    constructors, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620302400">- Update to version 2.8.1:
  + Subsetter now fully supports GSUB/GPOS/GDEF tables (including
    variations); as such, layout tables are retained by subsetter
    by default
  + hb-view supports iTerm2 and kitty inline image protocols
    it can also use Chafa for terminal graphics if available
- Add  pkgconfig(chafa): new, optional depdency.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1626264000">- Update to version 2.8.2:
  + Shaping LTR digits for RTL scripts now makes the native
    direction of the digits LTR, applying shaping and positioning
    rules on the same glyph order as Uniscribe
  + Subsetting COLR v1 and CPAL tables is now supported
  + Various fixes and improvements to the subsetter
  + When applying morx table, mark glyph widths should not be zeroed
  + GPOS is preferred over kerx, if GSUB was applied
  + Regional_Indicator pairs are grouped together when clustering</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Drop pkgconfig(chafa) BuildRequires for now: causes a cycle
  between chafa and harfbuzz, and disable it in meson</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631448000">- harfbuzz 2.9.1:
  + Subsetter API close to stable
  + Various fuzzer-found bug fixes
  + hb_buffer_append() now handles the pre- and post-context which
    previously were left unchanged in the destination buffer
  + hb-view / hb-shape now accept following new arguments:
  - -unicodes: takes a list of hex numbers that represent Unicode
    codepoints.
  + Undeprecated API: hb_set_invert()
- includes changes from 2.9.0:
  + Support multiple variation axes with same tag, aka HOI
  + The coretext testing shaper now passes font variations to
    CoreText
  + hb-shape/hb-view does not break line at new lines unless text
    is read from file
  + hb-view and hb-subset has a --batch now, similar to hb-shape
  + The --batch mode now uses ; as argument separator instead of :
    used previously
  + The --batch in hb-shape does not expect 0th argument anymore.
    That is, the lines read are interpreted as argv[1:], instead
    of argv[0:].
  + The --batch option has been undocumented. We are ready to
    document it; send feedback if you find it useful
  + hb-subset got arguments revamps. Added much-requested
  - -gids-file, --glyphs, --glyphs-file, --unicodes-file,
    supporting ranges in --unicodes.
  + Various bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631966400">- harfbuzz 3.0.0:
  + Unicode 14.0 support
  + hb-subset API and harfbuzz-subset ABI now declared stable
  + hb-style API is now stable</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1636200000">- harfbuzz 3.1.0:
  * Better offset-overflow handling in the subsetter library
  * Improved Unicode 14 properties in the USE shaper, and various
    other USE shaper fixes
  * MATH and COLR v1 tables subsetting support, and various other
    subsetter fixes
  * Support for Pwo Karen / Ason Chin medial la. (Simon Cozens)
  * Apply GPOS positioning when substituting with morx table, if
    kerx is missing
  * Apply calt and clig features across syllable boundaries in
    Indic shaper
  * Meson option for enabling Graphite 2 has been renamed to
    graphite2
  * Build and documentation fixes
- add harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636459200">- Update to version 3.1.1:
  + Work around GCC cast-align error/warning on some platforms.
  + Documentation improvements.
- Drop patch fixed upstream:
  + harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742400">- Update to 3.1.2:
  + hb-shape / hb-view: revert treating text on the commandline as
    single paragraph (was introduced in 3.0.0); add new
  - -single-par to do that
  + Subsetter bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742401">- Update to 3.2.0:
  + Fixed shaping of Apple Color Emoji flags in right-to-left context
  + Fixed positioning of CFF fonts in HB_TINY profile
  + OpenType 1.9 language tags update
  + Add HB_NO_VERTICAL config option
  + Add HB_CONFIG_OVERRIDE_H for easier configuration
  + Improved packing of cmap, loca, and Ligature tables
  + Significantly improved overflow-resolution strategy in the repacker</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644235200">- update to 3.3.2:
  + Revert splitting of pair positioning values introduced in 3.3.0
    as it proved problematic
- includes changes from 3.3.1:
  + Fix heap-use-after-free in harfbuzz-subset introduced in
    previous release
- includes changes from 3.3.0:
  + Improved documentation, code cleanup
  + The low 16-bits of face index will be used by hb_face_create()
    to select a face inside a font collection file format, while the
    high 16-bits will be used by hb_font_create() to load the named
    instance
  + Glyph positions and other font metrics now apply synthetic slant
    set by hb_font_set_synthetic_slant(), for improved positioning
    for synthetically slanted fonts
  + Fixed unintentional locale dependency in hb_variation_to_string()
    for decimal point representation
  + When applying pair positioning (kerning) the positioning value
    is split between the two sides of the pair for improved cursor
    positioning between such pairs
  + Introduced new HB_GLYPH_FLAG_UNSAFE_TO_CONCAT, to be used in
    conjunction with HB_GLYPH_FLAG_UNSAFE_TO_BREAK for optimizing
    re-shaping during line breaking. Check the documentation for
    further details
  + Improved handling of macrolanguages when mapping BCP 47 codes
    to OpenType tags</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644753600">- update to 3.4.0:
  + Perform sanity checks on shaping results is now part of
    “harfbuzz” library and can be enabled by setting the buffer
    flag HB_BUFFER_FLAG_VERIFY
  + Arabic Mark Transient Reordering Algorithm have been updated
    to revision 6
  + ISO 15924 code for mathematical notation, ‘Zmth’, now maps to
    the OpenType ‘math’ tag
  + It is now possible to get at once all math kerning values for a
    given glyph at a given corner
  + Fix locale_t portability issues on systems the typedef’s it to
    a void pointer</changelog>
  <changelog author="mgorse@suse.com" date="1658836800">- Add harfbuzz-CVE-2022-33068.patch: sbix: limit glyph extents
  (boo#1200900 CVE-2022-33068).</changelog>
  <changelog author="mgorse@suse.com" date="1680696000">- Add CVE-2023-25193.patch: limit how far we skip when looking
  back (bsc#1207922 CVE-2023-25193).</changelog>
</package>
<package pkgid="73ceb5906cf7f4ce4efaf1b7f42b5f84a2edb8b8c94e6bc4ca3885bcd4cf0708" name="libharfbuzz0" arch="s390x">
  <version epoch="0" ver="3.4.0" rel="150400.3.8.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1591185600">- Update to version 2.6.7:
  + Update to Unicode 13.0.0
  + Fix hb_ot_layout_get_ligature_carets for fonts without lcar
    table
- includes fixes from 2.6.6:
  * A fix in AAT kerning for Geeza Pro</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1592913600">- update to 2.6.8:
  + New API to fetch glyph alternates from GSUB table
  + New API +hb_ot_layout_lookup_get_glyph_alternates()
- Drop gpg2 BuildRequires and stop verifying signature during
  build: upstream no longer signs the tarball/signature.</changelog>
  <changelog author="dmueller@suse.com" date="1600344000">- Update to version 2.7.2:
  + Fix a regression in the previous release that caused a crash
    with Kaithi.
  + More OOM fixes.
  + ot-funcs now handles variable empty glyphs better when
    hvar/vvar isn't present.
  + Reverted a GDEF processing regression.
  + A couple of fixes to handle OOM better.
  + Use an implementation for round that always rounds up, some
    minor fluctuations are expected on var font specially when
    hb-ot callback is used.
  + Fix an AAT's `kerx` issue on broken rendering of Devanagari
    Sangam MN.
  + Remove AAT's `lcar` table support from _get_ligature_carets
    API, not even much use on macOS installed fonts (only two
    files). GDEF support is the recommended one and expected to
    work properly after issues fixed two releases ago.
  - Minor memory fixes to handle OOM better specially in hb-ft.
  - Minor .so files versioning scheme change and remove
    stable/unstable scheme differences, was never used in practice
    (always default to stable scheme).
  - We are now suggesting careful packaging of the library using
    meson, https://github.com/harfbuzz/harfbuzz/wiki/Notes-on-migration-to-meson
    for more information.
  - Distribution package URL is changed, either use GitHub
    generated tarballs,
    `https://github.com/harfbuzz/harfbuzz/archive/$pkgver.tar.gz`
    or, even more preferably use commit hash of the release and git
    checkouts like,
    `git+https://github.com/harfbuzz/harfbuzz#commit=$commit`</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609070400">- Update to version 2.7.4:
  + Fix missing --enable-introspection configure option
- Changes from version 2.7.3:
  + Update USE shaper to 2020-08-13 specification, and other
    improvements
  + Don’t disable liga feature in myanmar shaper, to match
    Uniscribe
  + Improvements to language and script tags handling.
  + Update language system tag registry to OpenType 1.8.4
  + Support for serializing and deserializing Unicode buffers
  + Increase buffer work limits to handle fonts with many complex
    lookups
  + Handle more shaping operations in trace output
  + Memory access fixes
  + More OOM fixes
  + Improved documentation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610107200">- Switch to meson buildsystem:
  + Add meson BuildRequires and macros.
  + Replace gcc-c++ for generic c++_compiler BuildRequires.
  + Add meson_test macro in check section, run tests during build.
  + Drop pkgconfig(graphite2) BuildRequires: No longer build
    graphite2 support, following upstream that disables this by
    default.
  + Stop packaging gtk-docs, pass -Ddocs=disabled to meson, this
    way we might avoid a build-cycle and since we did not have a
    explicit docs subpackage, just silently drop them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610539200">- Re-enable graphite2 support: TexLive relies on this to be
  present:
  + Pass -Dgraphite=enabled to meson.
  + Add pkgconfig(graphite2) BuildRequires.</changelog>
  <changelog author="christophe@krop.fr" date="1618315200">- Update to version 2.8.0:
  + Shape joining scripts other than Arabic/Syriac using the
    Universal Shaping Engine. Previously these were shaped using
    the generalized Arabic shaper.
  + Fix regression in shaping of U+0B55 ORIYA SIGN OVERLINE.
  + Update language tags.
  + Variations: reduce error: do not round each interpolated delta.
  + Documentation improvements.
  + Subsetter improvements: subsets most, if not all, lookup types
    now.
  + Fuzzer-found fixes and other improvements when memory failures
    happen.
  + Removed most atomic implementations now that we have C++11
    atomic impl.
  + General codebase upkeep; using more C++11 features: constexpr
    constructors, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620302400">- Update to version 2.8.1:
  + Subsetter now fully supports GSUB/GPOS/GDEF tables (including
    variations); as such, layout tables are retained by subsetter
    by default
  + hb-view supports iTerm2 and kitty inline image protocols
    it can also use Chafa for terminal graphics if available
- Add  pkgconfig(chafa): new, optional depdency.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1626264000">- Update to version 2.8.2:
  + Shaping LTR digits for RTL scripts now makes the native
    direction of the digits LTR, applying shaping and positioning
    rules on the same glyph order as Uniscribe
  + Subsetting COLR v1 and CPAL tables is now supported
  + Various fixes and improvements to the subsetter
  + When applying morx table, mark glyph widths should not be zeroed
  + GPOS is preferred over kerx, if GSUB was applied
  + Regional_Indicator pairs are grouped together when clustering</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Drop pkgconfig(chafa) BuildRequires for now: causes a cycle
  between chafa and harfbuzz, and disable it in meson</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631448000">- harfbuzz 2.9.1:
  + Subsetter API close to stable
  + Various fuzzer-found bug fixes
  + hb_buffer_append() now handles the pre- and post-context which
    previously were left unchanged in the destination buffer
  + hb-view / hb-shape now accept following new arguments:
  - -unicodes: takes a list of hex numbers that represent Unicode
    codepoints.
  + Undeprecated API: hb_set_invert()
- includes changes from 2.9.0:
  + Support multiple variation axes with same tag, aka HOI
  + The coretext testing shaper now passes font variations to
    CoreText
  + hb-shape/hb-view does not break line at new lines unless text
    is read from file
  + hb-view and hb-subset has a --batch now, similar to hb-shape
  + The --batch mode now uses ; as argument separator instead of :
    used previously
  + The --batch in hb-shape does not expect 0th argument anymore.
    That is, the lines read are interpreted as argv[1:], instead
    of argv[0:].
  + The --batch option has been undocumented. We are ready to
    document it; send feedback if you find it useful
  + hb-subset got arguments revamps. Added much-requested
  - -gids-file, --glyphs, --glyphs-file, --unicodes-file,
    supporting ranges in --unicodes.
  + Various bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631966400">- harfbuzz 3.0.0:
  + Unicode 14.0 support
  + hb-subset API and harfbuzz-subset ABI now declared stable
  + hb-style API is now stable</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1636200000">- harfbuzz 3.1.0:
  * Better offset-overflow handling in the subsetter library
  * Improved Unicode 14 properties in the USE shaper, and various
    other USE shaper fixes
  * MATH and COLR v1 tables subsetting support, and various other
    subsetter fixes
  * Support for Pwo Karen / Ason Chin medial la. (Simon Cozens)
  * Apply GPOS positioning when substituting with morx table, if
    kerx is missing
  * Apply calt and clig features across syllable boundaries in
    Indic shaper
  * Meson option for enabling Graphite 2 has been renamed to
    graphite2
  * Build and documentation fixes
- add harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636459200">- Update to version 3.1.1:
  + Work around GCC cast-align error/warning on some platforms.
  + Documentation improvements.
- Drop patch fixed upstream:
  + harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742400">- Update to 3.1.2:
  + hb-shape / hb-view: revert treating text on the commandline as
    single paragraph (was introduced in 3.0.0); add new
  - -single-par to do that
  + Subsetter bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742401">- Update to 3.2.0:
  + Fixed shaping of Apple Color Emoji flags in right-to-left context
  + Fixed positioning of CFF fonts in HB_TINY profile
  + OpenType 1.9 language tags update
  + Add HB_NO_VERTICAL config option
  + Add HB_CONFIG_OVERRIDE_H for easier configuration
  + Improved packing of cmap, loca, and Ligature tables
  + Significantly improved overflow-resolution strategy in the repacker</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644235200">- update to 3.3.2:
  + Revert splitting of pair positioning values introduced in 3.3.0
    as it proved problematic
- includes changes from 3.3.1:
  + Fix heap-use-after-free in harfbuzz-subset introduced in
    previous release
- includes changes from 3.3.0:
  + Improved documentation, code cleanup
  + The low 16-bits of face index will be used by hb_face_create()
    to select a face inside a font collection file format, while the
    high 16-bits will be used by hb_font_create() to load the named
    instance
  + Glyph positions and other font metrics now apply synthetic slant
    set by hb_font_set_synthetic_slant(), for improved positioning
    for synthetically slanted fonts
  + Fixed unintentional locale dependency in hb_variation_to_string()
    for decimal point representation
  + When applying pair positioning (kerning) the positioning value
    is split between the two sides of the pair for improved cursor
    positioning between such pairs
  + Introduced new HB_GLYPH_FLAG_UNSAFE_TO_CONCAT, to be used in
    conjunction with HB_GLYPH_FLAG_UNSAFE_TO_BREAK for optimizing
    re-shaping during line breaking. Check the documentation for
    further details
  + Improved handling of macrolanguages when mapping BCP 47 codes
    to OpenType tags</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644753600">- update to 3.4.0:
  + Perform sanity checks on shaping results is now part of
    “harfbuzz” library and can be enabled by setting the buffer
    flag HB_BUFFER_FLAG_VERIFY
  + Arabic Mark Transient Reordering Algorithm have been updated
    to revision 6
  + ISO 15924 code for mathematical notation, ‘Zmth’, now maps to
    the OpenType ‘math’ tag
  + It is now possible to get at once all math kerning values for a
    given glyph at a given corner
  + Fix locale_t portability issues on systems the typedef’s it to
    a void pointer</changelog>
  <changelog author="mgorse@suse.com" date="1658836800">- Add harfbuzz-CVE-2022-33068.patch: sbix: limit glyph extents
  (boo#1200900 CVE-2022-33068).</changelog>
  <changelog author="mgorse@suse.com" date="1680696000">- Add CVE-2023-25193.patch: limit how far we skip when looking
  back (bsc#1207922 CVE-2023-25193).</changelog>
</package>
<package pkgid="66c3f4ab064d3e5b9a8c9584c1d7151758acf3280413ee703f19d4eefda02474" name="libharfbuzz0" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="150400.3.8.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1591185600">- Update to version 2.6.7:
  + Update to Unicode 13.0.0
  + Fix hb_ot_layout_get_ligature_carets for fonts without lcar
    table
- includes fixes from 2.6.6:
  * A fix in AAT kerning for Geeza Pro</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1592913600">- update to 2.6.8:
  + New API to fetch glyph alternates from GSUB table
  + New API +hb_ot_layout_lookup_get_glyph_alternates()
- Drop gpg2 BuildRequires and stop verifying signature during
  build: upstream no longer signs the tarball/signature.</changelog>
  <changelog author="dmueller@suse.com" date="1600344000">- Update to version 2.7.2:
  + Fix a regression in the previous release that caused a crash
    with Kaithi.
  + More OOM fixes.
  + ot-funcs now handles variable empty glyphs better when
    hvar/vvar isn't present.
  + Reverted a GDEF processing regression.
  + A couple of fixes to handle OOM better.
  + Use an implementation for round that always rounds up, some
    minor fluctuations are expected on var font specially when
    hb-ot callback is used.
  + Fix an AAT's `kerx` issue on broken rendering of Devanagari
    Sangam MN.
  + Remove AAT's `lcar` table support from _get_ligature_carets
    API, not even much use on macOS installed fonts (only two
    files). GDEF support is the recommended one and expected to
    work properly after issues fixed two releases ago.
  - Minor memory fixes to handle OOM better specially in hb-ft.
  - Minor .so files versioning scheme change and remove
    stable/unstable scheme differences, was never used in practice
    (always default to stable scheme).
  - We are now suggesting careful packaging of the library using
    meson, https://github.com/harfbuzz/harfbuzz/wiki/Notes-on-migration-to-meson
    for more information.
  - Distribution package URL is changed, either use GitHub
    generated tarballs,
    `https://github.com/harfbuzz/harfbuzz/archive/$pkgver.tar.gz`
    or, even more preferably use commit hash of the release and git
    checkouts like,
    `git+https://github.com/harfbuzz/harfbuzz#commit=$commit`</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609070400">- Update to version 2.7.4:
  + Fix missing --enable-introspection configure option
- Changes from version 2.7.3:
  + Update USE shaper to 2020-08-13 specification, and other
    improvements
  + Don’t disable liga feature in myanmar shaper, to match
    Uniscribe
  + Improvements to language and script tags handling.
  + Update language system tag registry to OpenType 1.8.4
  + Support for serializing and deserializing Unicode buffers
  + Increase buffer work limits to handle fonts with many complex
    lookups
  + Handle more shaping operations in trace output
  + Memory access fixes
  + More OOM fixes
  + Improved documentation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610107200">- Switch to meson buildsystem:
  + Add meson BuildRequires and macros.
  + Replace gcc-c++ for generic c++_compiler BuildRequires.
  + Add meson_test macro in check section, run tests during build.
  + Drop pkgconfig(graphite2) BuildRequires: No longer build
    graphite2 support, following upstream that disables this by
    default.
  + Stop packaging gtk-docs, pass -Ddocs=disabled to meson, this
    way we might avoid a build-cycle and since we did not have a
    explicit docs subpackage, just silently drop them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610539200">- Re-enable graphite2 support: TexLive relies on this to be
  present:
  + Pass -Dgraphite=enabled to meson.
  + Add pkgconfig(graphite2) BuildRequires.</changelog>
  <changelog author="christophe@krop.fr" date="1618315200">- Update to version 2.8.0:
  + Shape joining scripts other than Arabic/Syriac using the
    Universal Shaping Engine. Previously these were shaped using
    the generalized Arabic shaper.
  + Fix regression in shaping of U+0B55 ORIYA SIGN OVERLINE.
  + Update language tags.
  + Variations: reduce error: do not round each interpolated delta.
  + Documentation improvements.
  + Subsetter improvements: subsets most, if not all, lookup types
    now.
  + Fuzzer-found fixes and other improvements when memory failures
    happen.
  + Removed most atomic implementations now that we have C++11
    atomic impl.
  + General codebase upkeep; using more C++11 features: constexpr
    constructors, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620302400">- Update to version 2.8.1:
  + Subsetter now fully supports GSUB/GPOS/GDEF tables (including
    variations); as such, layout tables are retained by subsetter
    by default
  + hb-view supports iTerm2 and kitty inline image protocols
    it can also use Chafa for terminal graphics if available
- Add  pkgconfig(chafa): new, optional depdency.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1626264000">- Update to version 2.8.2:
  + Shaping LTR digits for RTL scripts now makes the native
    direction of the digits LTR, applying shaping and positioning
    rules on the same glyph order as Uniscribe
  + Subsetting COLR v1 and CPAL tables is now supported
  + Various fixes and improvements to the subsetter
  + When applying morx table, mark glyph widths should not be zeroed
  + GPOS is preferred over kerx, if GSUB was applied
  + Regional_Indicator pairs are grouped together when clustering</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Drop pkgconfig(chafa) BuildRequires for now: causes a cycle
  between chafa and harfbuzz, and disable it in meson</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631448000">- harfbuzz 2.9.1:
  + Subsetter API close to stable
  + Various fuzzer-found bug fixes
  + hb_buffer_append() now handles the pre- and post-context which
    previously were left unchanged in the destination buffer
  + hb-view / hb-shape now accept following new arguments:
  - -unicodes: takes a list of hex numbers that represent Unicode
    codepoints.
  + Undeprecated API: hb_set_invert()
- includes changes from 2.9.0:
  + Support multiple variation axes with same tag, aka HOI
  + The coretext testing shaper now passes font variations to
    CoreText
  + hb-shape/hb-view does not break line at new lines unless text
    is read from file
  + hb-view and hb-subset has a --batch now, similar to hb-shape
  + The --batch mode now uses ; as argument separator instead of :
    used previously
  + The --batch in hb-shape does not expect 0th argument anymore.
    That is, the lines read are interpreted as argv[1:], instead
    of argv[0:].
  + The --batch option has been undocumented. We are ready to
    document it; send feedback if you find it useful
  + hb-subset got arguments revamps. Added much-requested
  - -gids-file, --glyphs, --glyphs-file, --unicodes-file,
    supporting ranges in --unicodes.
  + Various bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631966400">- harfbuzz 3.0.0:
  + Unicode 14.0 support
  + hb-subset API and harfbuzz-subset ABI now declared stable
  + hb-style API is now stable</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1636200000">- harfbuzz 3.1.0:
  * Better offset-overflow handling in the subsetter library
  * Improved Unicode 14 properties in the USE shaper, and various
    other USE shaper fixes
  * MATH and COLR v1 tables subsetting support, and various other
    subsetter fixes
  * Support for Pwo Karen / Ason Chin medial la. (Simon Cozens)
  * Apply GPOS positioning when substituting with morx table, if
    kerx is missing
  * Apply calt and clig features across syllable boundaries in
    Indic shaper
  * Meson option for enabling Graphite 2 has been renamed to
    graphite2
  * Build and documentation fixes
- add harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636459200">- Update to version 3.1.1:
  + Work around GCC cast-align error/warning on some platforms.
  + Documentation improvements.
- Drop patch fixed upstream:
  + harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742400">- Update to 3.1.2:
  + hb-shape / hb-view: revert treating text on the commandline as
    single paragraph (was introduced in 3.0.0); add new
  - -single-par to do that
  + Subsetter bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742401">- Update to 3.2.0:
  + Fixed shaping of Apple Color Emoji flags in right-to-left context
  + Fixed positioning of CFF fonts in HB_TINY profile
  + OpenType 1.9 language tags update
  + Add HB_NO_VERTICAL config option
  + Add HB_CONFIG_OVERRIDE_H for easier configuration
  + Improved packing of cmap, loca, and Ligature tables
  + Significantly improved overflow-resolution strategy in the repacker</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644235200">- update to 3.3.2:
  + Revert splitting of pair positioning values introduced in 3.3.0
    as it proved problematic
- includes changes from 3.3.1:
  + Fix heap-use-after-free in harfbuzz-subset introduced in
    previous release
- includes changes from 3.3.0:
  + Improved documentation, code cleanup
  + The low 16-bits of face index will be used by hb_face_create()
    to select a face inside a font collection file format, while the
    high 16-bits will be used by hb_font_create() to load the named
    instance
  + Glyph positions and other font metrics now apply synthetic slant
    set by hb_font_set_synthetic_slant(), for improved positioning
    for synthetically slanted fonts
  + Fixed unintentional locale dependency in hb_variation_to_string()
    for decimal point representation
  + When applying pair positioning (kerning) the positioning value
    is split between the two sides of the pair for improved cursor
    positioning between such pairs
  + Introduced new HB_GLYPH_FLAG_UNSAFE_TO_CONCAT, to be used in
    conjunction with HB_GLYPH_FLAG_UNSAFE_TO_BREAK for optimizing
    re-shaping during line breaking. Check the documentation for
    further details
  + Improved handling of macrolanguages when mapping BCP 47 codes
    to OpenType tags</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644753600">- update to 3.4.0:
  + Perform sanity checks on shaping results is now part of
    “harfbuzz” library and can be enabled by setting the buffer
    flag HB_BUFFER_FLAG_VERIFY
  + Arabic Mark Transient Reordering Algorithm have been updated
    to revision 6
  + ISO 15924 code for mathematical notation, ‘Zmth’, now maps to
    the OpenType ‘math’ tag
  + It is now possible to get at once all math kerning values for a
    given glyph at a given corner
  + Fix locale_t portability issues on systems the typedef’s it to
    a void pointer</changelog>
  <changelog author="mgorse@suse.com" date="1658836800">- Add harfbuzz-CVE-2022-33068.patch: sbix: limit glyph extents
  (boo#1200900 CVE-2022-33068).</changelog>
  <changelog author="mgorse@suse.com" date="1680696000">- Add CVE-2023-25193.patch: limit how far we skip when looking
  back (bsc#1207922 CVE-2023-25193).</changelog>
</package>
<package pkgid="640dc5537f46180fe10441a830a0d37ee0d6aed133909b55c348dc3170358784" name="libhidapi-hidraw0" arch="aarch64">
  <version epoch="0" ver="0.10.1" rel="150300.3.2.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1390824000">- Initial version</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1394798400">- Add do_not_install_docs.patch: don't let make install docs</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1395662400">- Supply LICENSE files with libraries</changelog>
  <changelog author="luca@z3ntu.xyz" date="1563796800">- Update to 0.9.0
- Switch upstream to libusb/hidapi because the original maintainer is not active anymore</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1563796801">- Use disabled services to follow Factory guidelines.</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="jgwang@suse.com" date="1610366400">- Update to version 0.10.1
  * Add FreeBSD/macOS/MinGW/Alpine/Arch Linux/Windows CI
  * Add hid_version/hid_version_str API (#192)
  * Add podspec to support releases via cocoapods
  * Add support for HID over I2C and uhid devices (#166)
  * Fix small casting issue
  * Fix race condition on device close (#189)
  * Fix API prototype for gcc flag -Wstrict-prototypes (#207)
  * Fix strict typecast (#206)
  * Fix -Wall -Wextra -pedantic -Werror compilation (#214) ￼…
  * Drop workaround for kernel &lt; 2.6.34
  * Use pkg-config to find libusb on *freebsd
  * Reattach kernel driver in hidapi-libusb
  * Move local variable declaration to the beginning of the function</changelog>
</package>
<package pkgid="a2f8d85938caba5b11b24866bd2abe5412d2638fd18033be6fa4776712d3b1fe" name="libhidapi-hidraw0" arch="s390x">
  <version epoch="0" ver="0.10.1" rel="150300.3.2.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1390824000">- Initial version</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1394798400">- Add do_not_install_docs.patch: don't let make install docs</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1395662400">- Supply LICENSE files with libraries</changelog>
  <changelog author="luca@z3ntu.xyz" date="1563796800">- Update to 0.9.0
- Switch upstream to libusb/hidapi because the original maintainer is not active anymore</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1563796801">- Use disabled services to follow Factory guidelines.</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="jgwang@suse.com" date="1610366400">- Update to version 0.10.1
  * Add FreeBSD/macOS/MinGW/Alpine/Arch Linux/Windows CI
  * Add hid_version/hid_version_str API (#192)
  * Add podspec to support releases via cocoapods
  * Add support for HID over I2C and uhid devices (#166)
  * Fix small casting issue
  * Fix race condition on device close (#189)
  * Fix API prototype for gcc flag -Wstrict-prototypes (#207)
  * Fix strict typecast (#206)
  * Fix -Wall -Wextra -pedantic -Werror compilation (#214) ￼…
  * Drop workaround for kernel &lt; 2.6.34
  * Use pkg-config to find libusb on *freebsd
  * Reattach kernel driver in hidapi-libusb
  * Move local variable declaration to the beginning of the function</changelog>
</package>
<package pkgid="15574cf563aa7c442ba4f7f4d11f7f53e092ed3792de808ad7cb239e0d34fb95" name="libhidapi-hidraw0" arch="x86_64">
  <version epoch="0" ver="0.10.1" rel="150300.3.2.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1390824000">- Initial version</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1394798400">- Add do_not_install_docs.patch: don't let make install docs</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1395662400">- Supply LICENSE files with libraries</changelog>
  <changelog author="luca@z3ntu.xyz" date="1563796800">- Update to 0.9.0
- Switch upstream to libusb/hidapi because the original maintainer is not active anymore</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1563796801">- Use disabled services to follow Factory guidelines.</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="jgwang@suse.com" date="1610366400">- Update to version 0.10.1
  * Add FreeBSD/macOS/MinGW/Alpine/Arch Linux/Windows CI
  * Add hid_version/hid_version_str API (#192)
  * Add podspec to support releases via cocoapods
  * Add support for HID over I2C and uhid devices (#166)
  * Fix small casting issue
  * Fix race condition on device close (#189)
  * Fix API prototype for gcc flag -Wstrict-prototypes (#207)
  * Fix strict typecast (#206)
  * Fix -Wall -Wextra -pedantic -Werror compilation (#214) ￼…
  * Drop workaround for kernel &lt; 2.6.34
  * Use pkg-config to find libusb on *freebsd
  * Reattach kernel driver in hidapi-libusb
  * Move local variable declaration to the beginning of the function</changelog>
</package>
<package pkgid="3625187d30c7d9d8be04e5f0a8c330bc7f954a52c40fdbea72ee0811d09735f0" name="libhugetlbfs" arch="aarch64">
  <version epoch="0" ver="2.20" rel="150000.3.8.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1424433600">- update to 2.18
  to solve build failures for ppc/ppc64.
  remove following patches now included in 2.18:
    libhugetlbfs-ppc64le.patch
    libhugetlbfs.ppc64le.step2.patch
    libhugetlbfs.ppc64le.step3.patch
    libhugetlbfs.ppc64le.step4.patch
- Add fix_plt_extrasz_always_returning_0_on_ppc64le.patch
  already upstream.</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1435060800">- Add libhugelbfs-2.18-restrict-is-a-reserved-word.patch which
  fixes compilation with GCC 5 (and C99/C11 in general).
  * Add libhugetlbfs-2.18-restrict-is-a-reserved-word.patch</changelog>
  <changelog author="fvogt@suse.com" date="1446811200">- Latest version from git next branch</changelog>
  <changelog author="fvogt@suse.com" date="1446811201">- Add zero_filesize_segment.patch to fix testcase on s390x
- Fixes bnc#919680
- Patches already included mainline and now deleted:
  D libhugetlbfs-2.18-restrict-is-a-reserved-word.patch
  D fix_plt_extrasz_always_returning_0_on_ppc64le.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1489060800">- Update to 2.20
- Bug Fixes:
  * Fix keyword collisions and warnings from GCC 5
  * hugeadm output is parsed for default size in huge_page_setup_helper
  * Testsuite: fallocate tests</changelog>
  <changelog author="jengelh@inai.de" date="1492689600">- Update summary and descriptions a bit
- Move development manpages (*.3) to development subpackage
- Avoid ||/&amp;&amp; in %install because it can leave $? at non-zero
  (unlike if..fi), and %install is run with sh -x.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Run `make install-perlmod` to install/satisfy Perl modules
  required by /usr/bin/cpupcstat, itself installed by just
  `make install` [boo#1057963]</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
  <changelog author="tabraham@suse.com" date="1698926400">- Add libhugetlbfs-increase-mount-buffer.patch for upstream issue gh#43
  (boo#1216576, bsc#1213639)</changelog>
  <changelog author="aschnell@suse.com" date="1700827200">- Add libhugetlbfs-noexecstack.patch (bsc#1213639)
- Increase buffer size in libhugetlbfs-increase-mount-buffer.patch
  as in the provided fix (bsc#1213639)</changelog>
</package>
<package pkgid="848647d3fccf472963f9a760bf901c91c40ede5f7210be8421aa1f345d7896c2" name="libhugetlbfs" arch="s390x">
  <version epoch="0" ver="2.20" rel="150000.3.8.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1424433600">- update to 2.18
  to solve build failures for ppc/ppc64.
  remove following patches now included in 2.18:
    libhugetlbfs-ppc64le.patch
    libhugetlbfs.ppc64le.step2.patch
    libhugetlbfs.ppc64le.step3.patch
    libhugetlbfs.ppc64le.step4.patch
- Add fix_plt_extrasz_always_returning_0_on_ppc64le.patch
  already upstream.</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1435060800">- Add libhugelbfs-2.18-restrict-is-a-reserved-word.patch which
  fixes compilation with GCC 5 (and C99/C11 in general).
  * Add libhugetlbfs-2.18-restrict-is-a-reserved-word.patch</changelog>
  <changelog author="fvogt@suse.com" date="1446811200">- Latest version from git next branch</changelog>
  <changelog author="fvogt@suse.com" date="1446811201">- Add zero_filesize_segment.patch to fix testcase on s390x
- Fixes bnc#919680
- Patches already included mainline and now deleted:
  D libhugetlbfs-2.18-restrict-is-a-reserved-word.patch
  D fix_plt_extrasz_always_returning_0_on_ppc64le.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1489060800">- Update to 2.20
- Bug Fixes:
  * Fix keyword collisions and warnings from GCC 5
  * hugeadm output is parsed for default size in huge_page_setup_helper
  * Testsuite: fallocate tests</changelog>
  <changelog author="jengelh@inai.de" date="1492689600">- Update summary and descriptions a bit
- Move development manpages (*.3) to development subpackage
- Avoid ||/&amp;&amp; in %install because it can leave $? at non-zero
  (unlike if..fi), and %install is run with sh -x.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Run `make install-perlmod` to install/satisfy Perl modules
  required by /usr/bin/cpupcstat, itself installed by just
  `make install` [boo#1057963]</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
  <changelog author="tabraham@suse.com" date="1698926400">- Add libhugetlbfs-increase-mount-buffer.patch for upstream issue gh#43
  (boo#1216576, bsc#1213639)</changelog>
  <changelog author="aschnell@suse.com" date="1700827200">- Add libhugetlbfs-noexecstack.patch (bsc#1213639)
- Increase buffer size in libhugetlbfs-increase-mount-buffer.patch
  as in the provided fix (bsc#1213639)</changelog>
</package>
<package pkgid="99fa0a009a1e86201bb0650a2474fac206e67ac17baed7c8b9d6ccaf79806e02" name="libhugetlbfs" arch="src">
  <version epoch="0" ver="2.20" rel="150000.3.8.1"/>
  <changelog author="meissner@novell.com" date="1306670400">- Do not include the 268MB testcase /usr/lib/libhugetlbfs/tests/obj32/linkhuge_rw.</changelog>
  <changelog author="tabraham@novell.com" date="1318420800">- Update to version 2.12
  * libhugetlbfs usages can now be restricted to certain binary names
  * libhugetlbfs now supports static linking
  * hugeadm uses more human readable directory names for mount points
  * Fix segfault if specified user was not in passwd, failuer in
    getpwuid() is now checked
  * Added tests for static linking to testcase
  * Added missing tests to driver script</changelog>
  <changelog author="tabraham@novell.com" date="1334059200">- Update to version 2.13
  * hugeadm can now be used to control Transparent Huge Page tunables
  * New morecore mode to better support THP
  * Check permissions on hugetlbfs mount point before marking it as
    available
  * Fix shm tests to use random address instead of fixed, old address
    failed on ARM</changelog>
  <changelog author="adrian@suse.de" date="1342008000">- Add excludearch for arm due to lacking support</changelog>
  <changelog author="trenn@suse.de" date="1358942400">- Update to version 2.15
  Features:
  * Some System z functionality went into 2.15
  * Updated man pages
  * Added basic events for core_i7 to oprofile_map_events
  Fixes:
  * Disable Unable to verify address range warning when offset &lt; page_size
  * Remove sscanf in library setup to avoid heap allocation before _morecore
  override
  * Revert heap exhaustion patch
  * hugectl no longer clips LD_LIBRARY_PATH variable
  * Fix clean on failure code to avoid closing stdout</changelog>
  <changelog author="trenn@suse.de" date="1363003200">- Update to version 2.16:
  Features:
  * ARM Support
  * s390x Dynamic TASK_SIZE support
  Bug Fixes:
  * find_mounts() now properly NULL terminates mount point names</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1389441600">- Add support of ppc64le with 4 patches
  libhugetlbfs-ppc64le.patch
  libhugetlbfs.ppc64le.step2.patch
  libhugetlbfs.ppc64le.step3.patch
  libhugetlbfs.ppc64le.step4.patch</changelog>
  <changelog author="trenn@suse.de" date="1392033600">- There are no tests installed in s390(x) case, therefore there are no
  files in %{_libdir}/libhugetlbfs
  Remove the directory from the file list to fix package build for s390(x)</changelog>
  <changelog author="trenn@suse.de" date="1392120000">- Tests compile fine for s390(x), also include them in the package, the same
  way it is done for other archs as well.</changelog>
  <changelog author="dmueller@suse.com" date="1395835200">- update to 2.17:
  * PPC segement alignment restrictions can be disabled
  * Added Aarch64 support
  * Allow compiler overrides for 64 and 32 bit builds
  * hugeadm now handles /etc/mtab being a simlink properly
  * ppc64 fixes
- remove libhugetlbfs.ia64-libdir.patch:
  ia64 is no longer supported by openSUSE
- add ignore-perl-modules.diff: do not install perl modules, unused
  and are installed in the wrong place to be found anyway
- add ARM support
- add disable-rw-on-non-ldscripts.diff: Skip rw tests
- Do not install tests anymore</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1424433600">- update to 2.18
  to solve build failures for ppc/ppc64.
  remove following patches now included in 2.18:
    libhugetlbfs-ppc64le.patch
    libhugetlbfs.ppc64le.step2.patch
    libhugetlbfs.ppc64le.step3.patch
    libhugetlbfs.ppc64le.step4.patch
- Add fix_plt_extrasz_always_returning_0_on_ppc64le.patch
  already upstream.</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1435060800">- Add libhugelbfs-2.18-restrict-is-a-reserved-word.patch which
  fixes compilation with GCC 5 (and C99/C11 in general).
  * Add libhugetlbfs-2.18-restrict-is-a-reserved-word.patch</changelog>
  <changelog author="fvogt@suse.com" date="1446811200">- Latest version from git next branch</changelog>
  <changelog author="fvogt@suse.com" date="1446811201">- Add zero_filesize_segment.patch to fix testcase on s390x
- Fixes bnc#919680
- Patches already included mainline and now deleted:
  D libhugetlbfs-2.18-restrict-is-a-reserved-word.patch
  D fix_plt_extrasz_always_returning_0_on_ppc64le.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1489060800">- Update to 2.20
- Bug Fixes:
  * Fix keyword collisions and warnings from GCC 5
  * hugeadm output is parsed for default size in huge_page_setup_helper
  * Testsuite: fallocate tests</changelog>
  <changelog author="jengelh@inai.de" date="1492689600">- Update summary and descriptions a bit
- Move development manpages (*.3) to development subpackage
- Avoid ||/&amp;&amp; in %install because it can leave $? at non-zero
  (unlike if..fi), and %install is run with sh -x.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Run `make install-perlmod` to install/satisfy Perl modules
  required by /usr/bin/cpupcstat, itself installed by just
  `make install` [boo#1057963]</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
  <changelog author="tabraham@suse.com" date="1698926400">- Add libhugetlbfs-increase-mount-buffer.patch for upstream issue gh#43
  (boo#1216576, bsc#1213639)</changelog>
  <changelog author="aschnell@suse.com" date="1700827200">- Add libhugetlbfs-noexecstack.patch (bsc#1213639)
- Increase buffer size in libhugetlbfs-increase-mount-buffer.patch
  as in the provided fix (bsc#1213639)</changelog>
</package>
<package pkgid="99f55413d4e19d3f9610c85e705c9c992523a75ab8d7c8f66c9d94a7b82cba8a" name="libhugetlbfs" arch="x86_64">
  <version epoch="0" ver="2.20" rel="150000.3.8.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1424433600">- update to 2.18
  to solve build failures for ppc/ppc64.
  remove following patches now included in 2.18:
    libhugetlbfs-ppc64le.patch
    libhugetlbfs.ppc64le.step2.patch
    libhugetlbfs.ppc64le.step3.patch
    libhugetlbfs.ppc64le.step4.patch
- Add fix_plt_extrasz_always_returning_0_on_ppc64le.patch
  already upstream.</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1435060800">- Add libhugelbfs-2.18-restrict-is-a-reserved-word.patch which
  fixes compilation with GCC 5 (and C99/C11 in general).
  * Add libhugetlbfs-2.18-restrict-is-a-reserved-word.patch</changelog>
  <changelog author="fvogt@suse.com" date="1446811200">- Latest version from git next branch</changelog>
  <changelog author="fvogt@suse.com" date="1446811201">- Add zero_filesize_segment.patch to fix testcase on s390x
- Fixes bnc#919680
- Patches already included mainline and now deleted:
  D libhugetlbfs-2.18-restrict-is-a-reserved-word.patch
  D fix_plt_extrasz_always_returning_0_on_ppc64le.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1489060800">- Update to 2.20
- Bug Fixes:
  * Fix keyword collisions and warnings from GCC 5
  * hugeadm output is parsed for default size in huge_page_setup_helper
  * Testsuite: fallocate tests</changelog>
  <changelog author="jengelh@inai.de" date="1492689600">- Update summary and descriptions a bit
- Move development manpages (*.3) to development subpackage
- Avoid ||/&amp;&amp; in %install because it can leave $? at non-zero
  (unlike if..fi), and %install is run with sh -x.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Run `make install-perlmod` to install/satisfy Perl modules
  required by /usr/bin/cpupcstat, itself installed by just
  `make install` [boo#1057963]</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
  <changelog author="tabraham@suse.com" date="1698926400">- Add libhugetlbfs-increase-mount-buffer.patch for upstream issue gh#43
  (boo#1216576, bsc#1213639)</changelog>
  <changelog author="aschnell@suse.com" date="1700827200">- Add libhugetlbfs-noexecstack.patch (bsc#1213639)
- Increase buffer size in libhugetlbfs-increase-mount-buffer.patch
  as in the provided fix (bsc#1213639)</changelog>
</package>
<package pkgid="2699e198acfa40df132806292b93f155f25dfe4cb96a5842071db85a221a2ba8" name="libica" arch="src">
  <version epoch="0" ver="4.2.1" rel="150500.3.3.7"/>
  <changelog author="mpost@suse.com" date="1536667200">- Added "Obsoletes: libica2" to the libica-tools package to fix
  a problem with upgrading from SLES12 SP2 to either SLES12
  SP3/SP4, or SLES15. (bsc#1046435, bsc#1104638)</changelog>
  <changelog author="mpost@suse.com" date="1540209600">- Added "Obsoletes: libica-2_3_0" to the libica-tools package to
  fix a problem with upgrading from SLES12 SP2 to either SLES12
  SP3/SP4, or SLES15. (bsc#1112655)</changelog>
  <changelog author="mpost@suse.com" date="1542196800">- Upgraded to version 3.3.3 (Fate#325690)
  * v3.3.3
    [PATCH] Various bug fixes
  * v3.3.2
    [PATCH] Skip ECC tests if required HW is not available
    [PATCH] Update spec file
  * v3.3.1
    [PATCH] Fix configure.ac to honour CFLAGS
  * v3.3.0
    [FEATURE] Add CEX supported elliptic-curve crypto interfaces
    [FEATURE] Add SIMD supported multiple-precision arithmetic interfaces
    [FEATURE] Add interface to enable/disable SW fallbacks
    [FEATURE] Add 'make check' target, test-suite rework
  * v3.2.1
    [FEATURE] Use z14 PRNO-TRNG to seed SHA512-DRBG.
    [PATCH] Various bug fixes.
- Dropped obsolete patch increment-icastats-counter-for-aes-gcm.patch
- Removed COPYING from %files, since it is no longer in the tarball.
- Added Add-non-executable-gnu-stack-markings-in-the-assembl.patch
  (bsc#1103493).
- Made multiple changes to the spec file based on the output of
  spec-cleaner</changelog>
  <changelog author="mpost@suse.com" date="1542283200">- Upgraded to version 3.4.0 (Fate#325690)
  * v3.4.0
    [FEATURE] Add SHA-512/224 and SHA-512/256 support
- Dropped obsolete patch Add-non-executable-gnu-stack-markings-in-the-assembl.patch
- Made numerous updates to spec file based on spec-cleanup run.</changelog>
  <changelog author="mpluskal@suse.com" date="1563969600">- Run testsuite during build</changelog>
  <changelog author="mpost@suse.com" date="1567166400">- Upgraded to version 3.5.0 (Fate#327840)
  - [FEATURE] Add MSA9 CPACF support for ECDSA sign/verify
- Reworked how libica-tools loads and unloads kernel modules to
  avoid spurious error messages (bsc#1134004):
  * Converted the boot.z90crypt sysV init script to a systemd unit
  file.
  * Removed any references to insserv in the spec file.
  * Updated the z90crypt script itself to properly load and unload
  the kernel modules as they exist today.
  * Eliminated the obsolete libica-SuSE.tar.bz2 archive.
- Updated the README.SUSE file to reflect the change from sysV init
  style script to systemd.
- Made numerous changes to the spec file, based on the output from
  the spec-cleaner command.</changelog>
  <changelog author="mpost@suse.com" date="1571140800">- Upgraded to version 3.6.0 (jsc#SLE-7584)
  * [FEATURE] Add MSA9 CPACF support for Ed25519, Ed448, X25519 and X448</changelog>
  <changelog author="mpost@suse.com" date="1573732800">- Added libica-sles15sp2-x25519-x448-fix-handling-of-non-canonical-values.patch
  (bsc#1156768)</changelog>
  <changelog author="mpost@suse.com" date="1586347200">- Added the following patches for FIPS certification.
  * libica-sles15sp2-Fix-DES-and-TDES-key-length.patch
    (bsc#1166071) Although a DES key has only 56 effective bits,
    all 64 bits must be considered, because the parity bits are
    spread over all 8 bytes of the key.
  * libica-sles15sp2-FIPS-provide-output-iv-as-required-by-FIPS-tests.patch
    (bsc#1166210) FIPS tests require the output iv to be the iv
    resulting from decrypting the last block with a zero iv as input.
  * libica-sles15sp2-icainfo-bugfix-for-RSA-and-EC-related-info-for-softw.patch
    (bsc#1166224) The output from icainfo never shows 'yes' for
    RSA ME, RSA CRT, ECDH, ECDSA sign, ECDSA verify, and ECKGEN,
    due to the missing ICA_FLAG_SW flag in the icaList.</changelog>
  <changelog author="mpost@suse.com" date="1588852800">- Added the following patches for FIPS certification (bsc#1162533)
  * libica-sles15sp2-FIPS-introduce-HMAC-based-library-integrity-check.patch
  * libica-sles15sp2-FIPS-hmac-key.patch
- Added a BuildRequires for the fipscheck package.
- Made a couple of changes to the spec file based upon recommendations
  by spec-cleaner.</changelog>
  <changelog author="mpost@suse.com" date="1600171200">- Fix lack of SHA3 KATs in "make check" processing (bsc#1175277)
  * Added libica-sles15sp2-FIPS-add-SHA3-KATs-to-fips_powerup_tests.patch
  * Added libica-sles15sp2-FIPS-skip-SHA3-tests-if-running-on-hardware-without-.patch
- Fix FIPS hmac check (bsc#1175356).
  * Update FIPS support to upstream
  - Refresh libica-sles15sp2-FIPS-introduce-HMAC-based-library-integrity-check.patch
    from upstream.
  - Add libica-sles15sp2-Build-with-pthread-flag.patch
  - Add libica-sles15sp2-FIPS-HMAC-based-library-integrity-check-addon.patch
  - Add libica-sles15sp2-FIPS-HMAC-based-library-integrity-check-rename-variables.patch
  - Add libica-sles15sp2-FIPS-use-full-library-version-for-hmac-filename.patch
  * FIPS check should fail when hmac is missing
  - Add libica-sles15sp2-FIPS-fix-inconsistent-error-handling.patch
  - Create an hmac for the selftest
  - Check that selftest fails without a hmac
  - Hash libica.so.3 rather than libica.so.3.6.0
  * Fix hmac key format. It should be hexadecimal, not ASCII
  - Refresh libica-sles15sp2-FIPS-hmac-key.patch
- Fix Some internal variables used to store sensitive information
  (keys) were not zeroized before returning to the calling application.
  (bsc#1175357)
  * Added libica-sles15sp2-Zeroize-local-variables.patch
- Updated libica-rpmlintrc to eliminate the warning about the HMAC file
  being a hidden file. It is supposed to be hidden.</changelog>
  <changelog author="mpost@suse.com" date="1600430400">- Upgraded to version 3.7.0 (jsc#SLE-13708)
  * Version 3.7.0
  - [FEATURE] FIPS: Add HMAC based library integrity check
  - [PATCH] icainfo: bugfix for RSA and EC related info for software column.
  - [PATCH] FIPS: provide output iv in cbc-cs decrypt as required by FIPS tests
  - [PATCH] FIPS: Fix DES and TDES key length
  - [PATCH] icastats: Fix stats counter format
  * Version 3.6.1
  - [PATCH] Fix x25519 and x448 handling of non-canonical values
- Removed the following obsolete patches
  * libica-sles15sp2-x25519-x448-fix-handling-of-non-canonical-values.patch
  * libica-sles15sp2-Fix-DES-and-TDES-key-length.patch
  * libica-sles15sp2-FIPS-provide-output-iv-as-required-by-FIPS-tests.patch
  * libica-sles15sp2-icainfo-bugfix-for-RSA-and-EC-related-info-for-softw.patch
  * libica-sles15sp2-Build-with-pthread-flag.patch
  * libica-sles15sp2-FIPS-introduce-HMAC-based-library-integrity-check.patch
  * libica-sles15sp2-FIPS-HMAC-based-library-integrity-check-addon.patch
  * libica-sles15sp2-FIPS-HMAC-based-library-integrity-check-rename-variables.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1623067200">- Update to version 3.8.0 (jsc#SLE-18334)
  - [FEATURE] provide libica-cex module to satisfy special security requirements
  - [FEATURE] FIPS: enforce the HMAC check
- Remove upstreamed patches:
  - libica-sles15sp2-FIPS-add-SHA3-KATs-to-fips_powerup_tests.patch
  - libica-sles15sp2-FIPS-skip-SHA3-tests-if-running-on-hardware-without-.patch
  - libica-sles15sp2-Zeroize-local-variables.patch
- Remove patches obsoleted by upstrea developent:
  * FIPS: Find libica from phdrs.
  - libica-sles15sp2-FIPS-use-full-library-version-for-hmac-filename.patch
  * FIPS: enforce the hmac check
  - libica-sles15sp2-FIPS-fix-inconsistent-error-handling.patch
- Fix up tests and hmac generation
  + libica-FIPS-make-it-possible-to-specify-fipshmac-binary.patch
- Remove obsolete attributes from filelists</changelog>
  <changelog author="mpost@suse.com" date="1634644800">- Upgrade to version 3.9.0 (jsc#SLE-18454, jsc#SLE-18564)
  - [FEATURE] Add support for OpenSSL 3.0
  - [FEATURE] icainfo: new parm -c to display available EC curves
- Replaced the obsolete PreReq: %fillup_prereq
  with                  Requires(post): %fillup_prereq
  in the spec file.</changelog>
  <changelog author="mpost@suse.com" date="1662984000">- Upgraded to version 4.0.3 (jsc#PED-581, jsc#PED-621, jsc#PED-629)
  v4.0.3
  - [PATCH] Reduce the number of open file descriptors
  - [PATCH] Various bug fixes
  v4.0.2
  - [PATCH] Various bug fixes
  v4.0.1
  - [PATCH] Various bug fixes
  - [PATCH] Compute HMAC from installed library
  v4.0.0
  - [UPDATE] NO_SW_FALLBACKS is now the default for libica.so
    [UPDATE] Removed deprecated API functions including tests
    [UPDATE] Introduced 'const' for some API function parameters
    [FEATURE] icastats: new parm -k to display detailed counters
- Replaced libica-sles15sp2-FIPS-hmac-key.patch with an updated
  version named libica-sles15sp5-FIPS-hmac-key.patch.
- Updated the libica-rpmlintrc file to suppress warnings about the
  libica-cex hmac files being hidden.
- Updated the spec file to properly both obsolete and provide two
  older versions of the package.</changelog>
  <changelog author="mpost@suse.com" date="1665489600">- Upgrade to version 4.1.1 (jsc#PED-581, bsc#1202365).
  v4.1.1
  - [PATCH] Fix aes-xts multi-part operations
    [PATCH] Fix make dist
  v4.1.0
  - [FEATURE] FIPS: make libica FIPS 140-3 compliant
    [FEATURE] New API function ica_ecdsa_sign_ex()
    [FEATURE] New icainfo output option -r
  - [PATCH] Various bug fixes
- Removed the following obsolete files:
  baselibs.conf
  icaioctl.h</changelog>
  <changelog author="meissner@suse.com" date="1673870400">- Upgrade to version 4.2.0 (jsc#PED-581, bsc#1202365).
  - [FEATURE] Display build info via icainfo -v
  - [FEATURE] New API function ica_get_build_version()
  - [FEATURE] Display fips indication via icainfo -f
  - [FEATURE] New API function ica_get_fips_indicator()
  - [FEATURE] New API function ica_aes_gcm_initialize_fips()
  - [FEATURE] New API function ica_aes_gcm_kma_get_iv()
  - [FEATURE] New API function ica_get_msa_level()
  - [PATCH] icainfo: check for malloc error when getting functionlist</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1676635200">- Upgrade to version 4.2.1 (jsc#PED-2872)
  - [PATCH] fix regression opening shared memory</changelog>
  <changelog author="otto.hollmann@suse.com" date="1682424000">- Add multibuild flavor to provide library compiled against openssl-3
  [bsc#1207472]</changelog>
  <changelog author="pmonreal@suse.com" date="1687521600">- Rename the hmac files for the openssl3 flavor [bsc#1207472]
  * Add libica-openssl3.patch
  * Rebase libica-sles15sp5-FIPS-hmac-key.patch</changelog>
</package>
<package pkgid="b57102b916aa19fcb86c9684d2d789e4eeef9b26334cc40683f66a0ca547725c" name="libica-tools" arch="s390x">
  <version epoch="0" ver="4.2.1" rel="150500.3.3.7"/>
  <changelog author="mpost@suse.com" date="1536667200">- Added "Obsoletes: libica2" to the libica-tools package to fix
  a problem with upgrading from SLES12 SP2 to either SLES12
  SP3/SP4, or SLES15. (bsc#1046435, bsc#1104638)</changelog>
  <changelog author="mpost@suse.com" date="1540209600">- Added "Obsoletes: libica-2_3_0" to the libica-tools package to
  fix a problem with upgrading from SLES12 SP2 to either SLES12
  SP3/SP4, or SLES15. (bsc#1112655)</changelog>
  <changelog author="mpost@suse.com" date="1542196800">- Upgraded to version 3.3.3 (Fate#325690)
  * v3.3.3
    [PATCH] Various bug fixes
  * v3.3.2
    [PATCH] Skip ECC tests if required HW is not available
    [PATCH] Update spec file
  * v3.3.1
    [PATCH] Fix configure.ac to honour CFLAGS
  * v3.3.0
    [FEATURE] Add CEX supported elliptic-curve crypto interfaces
    [FEATURE] Add SIMD supported multiple-precision arithmetic interfaces
    [FEATURE] Add interface to enable/disable SW fallbacks
    [FEATURE] Add 'make check' target, test-suite rework
  * v3.2.1
    [FEATURE] Use z14 PRNO-TRNG to seed SHA512-DRBG.
    [PATCH] Various bug fixes.
- Dropped obsolete patch increment-icastats-counter-for-aes-gcm.patch
- Removed COPYING from %files, since it is no longer in the tarball.
- Added Add-non-executable-gnu-stack-markings-in-the-assembl.patch
  (bsc#1103493).
- Made multiple changes to the spec file based on the output of
  spec-cleaner</changelog>
  <changelog author="mpost@suse.com" date="1542283200">- Upgraded to version 3.4.0 (Fate#325690)
  * v3.4.0
    [FEATURE] Add SHA-512/224 and SHA-512/256 support
- Dropped obsolete patch Add-non-executable-gnu-stack-markings-in-the-assembl.patch
- Made numerous updates to spec file based on spec-cleanup run.</changelog>
  <changelog author="mpluskal@suse.com" date="1563969600">- Run testsuite during build</changelog>
  <changelog author="mpost@suse.com" date="1567166400">- Upgraded to version 3.5.0 (Fate#327840)
  - [FEATURE] Add MSA9 CPACF support for ECDSA sign/verify
- Reworked how libica-tools loads and unloads kernel modules to
  avoid spurious error messages (bsc#1134004):
  * Converted the boot.z90crypt sysV init script to a systemd unit
  file.
  * Removed any references to insserv in the spec file.
  * Updated the z90crypt script itself to properly load and unload
  the kernel modules as they exist today.
  * Eliminated the obsolete libica-SuSE.tar.bz2 archive.
- Updated the README.SUSE file to reflect the change from sysV init
  style script to systemd.
- Made numerous changes to the spec file, based on the output from
  the spec-cleaner command.</changelog>
  <changelog author="mpost@suse.com" date="1571140800">- Upgraded to version 3.6.0 (jsc#SLE-7584)
  * [FEATURE] Add MSA9 CPACF support for Ed25519, Ed448, X25519 and X448</changelog>
  <changelog author="mpost@suse.com" date="1573732800">- Added libica-sles15sp2-x25519-x448-fix-handling-of-non-canonical-values.patch
  (bsc#1156768)</changelog>
  <changelog author="mpost@suse.com" date="1586347200">- Added the following patches for FIPS certification.
  * libica-sles15sp2-Fix-DES-and-TDES-key-length.patch
    (bsc#1166071) Although a DES key has only 56 effective bits,
    all 64 bits must be considered, because the parity bits are
    spread over all 8 bytes of the key.
  * libica-sles15sp2-FIPS-provide-output-iv-as-required-by-FIPS-tests.patch
    (bsc#1166210) FIPS tests require the output iv to be the iv
    resulting from decrypting the last block with a zero iv as input.
  * libica-sles15sp2-icainfo-bugfix-for-RSA-and-EC-related-info-for-softw.patch
    (bsc#1166224) The output from icainfo never shows 'yes' for
    RSA ME, RSA CRT, ECDH, ECDSA sign, ECDSA verify, and ECKGEN,
    due to the missing ICA_FLAG_SW flag in the icaList.</changelog>
  <changelog author="mpost@suse.com" date="1588852800">- Added the following patches for FIPS certification (bsc#1162533)
  * libica-sles15sp2-FIPS-introduce-HMAC-based-library-integrity-check.patch
  * libica-sles15sp2-FIPS-hmac-key.patch
- Added a BuildRequires for the fipscheck package.
- Made a couple of changes to the spec file based upon recommendations
  by spec-cleaner.</changelog>
  <changelog author="mpost@suse.com" date="1600171200">- Fix lack of SHA3 KATs in "make check" processing (bsc#1175277)
  * Added libica-sles15sp2-FIPS-add-SHA3-KATs-to-fips_powerup_tests.patch
  * Added libica-sles15sp2-FIPS-skip-SHA3-tests-if-running-on-hardware-without-.patch
- Fix FIPS hmac check (bsc#1175356).
  * Update FIPS support to upstream
  - Refresh libica-sles15sp2-FIPS-introduce-HMAC-based-library-integrity-check.patch
    from upstream.
  - Add libica-sles15sp2-Build-with-pthread-flag.patch
  - Add libica-sles15sp2-FIPS-HMAC-based-library-integrity-check-addon.patch
  - Add libica-sles15sp2-FIPS-HMAC-based-library-integrity-check-rename-variables.patch
  - Add libica-sles15sp2-FIPS-use-full-library-version-for-hmac-filename.patch
  * FIPS check should fail when hmac is missing
  - Add libica-sles15sp2-FIPS-fix-inconsistent-error-handling.patch
  - Create an hmac for the selftest
  - Check that selftest fails without a hmac
  - Hash libica.so.3 rather than libica.so.3.6.0
  * Fix hmac key format. It should be hexadecimal, not ASCII
  - Refresh libica-sles15sp2-FIPS-hmac-key.patch
- Fix Some internal variables used to store sensitive information
  (keys) were not zeroized before returning to the calling application.
  (bsc#1175357)
  * Added libica-sles15sp2-Zeroize-local-variables.patch
- Updated libica-rpmlintrc to eliminate the warning about the HMAC file
  being a hidden file. It is supposed to be hidden.</changelog>
  <changelog author="mpost@suse.com" date="1600430400">- Upgraded to version 3.7.0 (jsc#SLE-13708)
  * Version 3.7.0
  - [FEATURE] FIPS: Add HMAC based library integrity check
  - [PATCH] icainfo: bugfix for RSA and EC related info for software column.
  - [PATCH] FIPS: provide output iv in cbc-cs decrypt as required by FIPS tests
  - [PATCH] FIPS: Fix DES and TDES key length
  - [PATCH] icastats: Fix stats counter format
  * Version 3.6.1
  - [PATCH] Fix x25519 and x448 handling of non-canonical values
- Removed the following obsolete patches
  * libica-sles15sp2-x25519-x448-fix-handling-of-non-canonical-values.patch
  * libica-sles15sp2-Fix-DES-and-TDES-key-length.patch
  * libica-sles15sp2-FIPS-provide-output-iv-as-required-by-FIPS-tests.patch
  * libica-sles15sp2-icainfo-bugfix-for-RSA-and-EC-related-info-for-softw.patch
  * libica-sles15sp2-Build-with-pthread-flag.patch
  * libica-sles15sp2-FIPS-introduce-HMAC-based-library-integrity-check.patch
  * libica-sles15sp2-FIPS-HMAC-based-library-integrity-check-addon.patch
  * libica-sles15sp2-FIPS-HMAC-based-library-integrity-check-rename-variables.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1623067200">- Update to version 3.8.0 (jsc#SLE-18334)
  - [FEATURE] provide libica-cex module to satisfy special security requirements
  - [FEATURE] FIPS: enforce the HMAC check
- Remove upstreamed patches:
  - libica-sles15sp2-FIPS-add-SHA3-KATs-to-fips_powerup_tests.patch
  - libica-sles15sp2-FIPS-skip-SHA3-tests-if-running-on-hardware-without-.patch
  - libica-sles15sp2-Zeroize-local-variables.patch
- Remove patches obsoleted by upstrea developent:
  * FIPS: Find libica from phdrs.
  - libica-sles15sp2-FIPS-use-full-library-version-for-hmac-filename.patch
  * FIPS: enforce the hmac check
  - libica-sles15sp2-FIPS-fix-inconsistent-error-handling.patch
- Fix up tests and hmac generation
  + libica-FIPS-make-it-possible-to-specify-fipshmac-binary.patch
- Remove obsolete attributes from filelists</changelog>
  <changelog author="mpost@suse.com" date="1634644800">- Upgrade to version 3.9.0 (jsc#SLE-18454, jsc#SLE-18564)
  - [FEATURE] Add support for OpenSSL 3.0
  - [FEATURE] icainfo: new parm -c to display available EC curves
- Replaced the obsolete PreReq: %fillup_prereq
  with                  Requires(post): %fillup_prereq
  in the spec file.</changelog>
  <changelog author="mpost@suse.com" date="1662984000">- Upgraded to version 4.0.3 (jsc#PED-581, jsc#PED-621, jsc#PED-629)
  v4.0.3
  - [PATCH] Reduce the number of open file descriptors
  - [PATCH] Various bug fixes
  v4.0.2
  - [PATCH] Various bug fixes
  v4.0.1
  - [PATCH] Various bug fixes
  - [PATCH] Compute HMAC from installed library
  v4.0.0
  - [UPDATE] NO_SW_FALLBACKS is now the default for libica.so
    [UPDATE] Removed deprecated API functions including tests
    [UPDATE] Introduced 'const' for some API function parameters
    [FEATURE] icastats: new parm -k to display detailed counters
- Replaced libica-sles15sp2-FIPS-hmac-key.patch with an updated
  version named libica-sles15sp5-FIPS-hmac-key.patch.
- Updated the libica-rpmlintrc file to suppress warnings about the
  libica-cex hmac files being hidden.
- Updated the spec file to properly both obsolete and provide two
  older versions of the package.</changelog>
  <changelog author="mpost@suse.com" date="1665489600">- Upgrade to version 4.1.1 (jsc#PED-581, bsc#1202365).
  v4.1.1
  - [PATCH] Fix aes-xts multi-part operations
    [PATCH] Fix make dist
  v4.1.0
  - [FEATURE] FIPS: make libica FIPS 140-3 compliant
    [FEATURE] New API function ica_ecdsa_sign_ex()
    [FEATURE] New icainfo output option -r
  - [PATCH] Various bug fixes
- Removed the following obsolete files:
  baselibs.conf
  icaioctl.h</changelog>
  <changelog author="meissner@suse.com" date="1673870400">- Upgrade to version 4.2.0 (jsc#PED-581, bsc#1202365).
  - [FEATURE] Display build info via icainfo -v
  - [FEATURE] New API function ica_get_build_version()
  - [FEATURE] Display fips indication via icainfo -f
  - [FEATURE] New API function ica_get_fips_indicator()
  - [FEATURE] New API function ica_aes_gcm_initialize_fips()
  - [FEATURE] New API function ica_aes_gcm_kma_get_iv()
  - [FEATURE] New API function ica_get_msa_level()
  - [PATCH] icainfo: check for malloc error when getting functionlist</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1676635200">- Upgrade to version 4.2.1 (jsc#PED-2872)
  - [PATCH] fix regression opening shared memory</changelog>
  <changelog author="otto.hollmann@suse.com" date="1682424000">- Add multibuild flavor to provide library compiled against openssl-3
  [bsc#1207472]</changelog>
  <changelog author="pmonreal@suse.com" date="1687521600">- Rename the hmac files for the openssl3 flavor [bsc#1207472]
  * Add libica-openssl3.patch
  * Rebase libica-sles15sp5-FIPS-hmac-key.patch</changelog>
</package>
<package pkgid="bf3f17b7bdb346be90cdbe3b4420265417578f4f5c775963df5ce4ed77f2c2cc" name="libica4" arch="s390x">
  <version epoch="0" ver="4.2.1" rel="150500.3.3.7"/>
  <changelog author="mpost@suse.com" date="1536667200">- Added "Obsoletes: libica2" to the libica-tools package to fix
  a problem with upgrading from SLES12 SP2 to either SLES12
  SP3/SP4, or SLES15. (bsc#1046435, bsc#1104638)</changelog>
  <changelog author="mpost@suse.com" date="1540209600">- Added "Obsoletes: libica-2_3_0" to the libica-tools package to
  fix a problem with upgrading from SLES12 SP2 to either SLES12
  SP3/SP4, or SLES15. (bsc#1112655)</changelog>
  <changelog author="mpost@suse.com" date="1542196800">- Upgraded to version 3.3.3 (Fate#325690)
  * v3.3.3
    [PATCH] Various bug fixes
  * v3.3.2
    [PATCH] Skip ECC tests if required HW is not available
    [PATCH] Update spec file
  * v3.3.1
    [PATCH] Fix configure.ac to honour CFLAGS
  * v3.3.0
    [FEATURE] Add CEX supported elliptic-curve crypto interfaces
    [FEATURE] Add SIMD supported multiple-precision arithmetic interfaces
    [FEATURE] Add interface to enable/disable SW fallbacks
    [FEATURE] Add 'make check' target, test-suite rework
  * v3.2.1
    [FEATURE] Use z14 PRNO-TRNG to seed SHA512-DRBG.
    [PATCH] Various bug fixes.
- Dropped obsolete patch increment-icastats-counter-for-aes-gcm.patch
- Removed COPYING from %files, since it is no longer in the tarball.
- Added Add-non-executable-gnu-stack-markings-in-the-assembl.patch
  (bsc#1103493).
- Made multiple changes to the spec file based on the output of
  spec-cleaner</changelog>
  <changelog author="mpost@suse.com" date="1542283200">- Upgraded to version 3.4.0 (Fate#325690)
  * v3.4.0
    [FEATURE] Add SHA-512/224 and SHA-512/256 support
- Dropped obsolete patch Add-non-executable-gnu-stack-markings-in-the-assembl.patch
- Made numerous updates to spec file based on spec-cleanup run.</changelog>
  <changelog author="mpluskal@suse.com" date="1563969600">- Run testsuite during build</changelog>
  <changelog author="mpost@suse.com" date="1567166400">- Upgraded to version 3.5.0 (Fate#327840)
  - [FEATURE] Add MSA9 CPACF support for ECDSA sign/verify
- Reworked how libica-tools loads and unloads kernel modules to
  avoid spurious error messages (bsc#1134004):
  * Converted the boot.z90crypt sysV init script to a systemd unit
  file.
  * Removed any references to insserv in the spec file.
  * Updated the z90crypt script itself to properly load and unload
  the kernel modules as they exist today.
  * Eliminated the obsolete libica-SuSE.tar.bz2 archive.
- Updated the README.SUSE file to reflect the change from sysV init
  style script to systemd.
- Made numerous changes to the spec file, based on the output from
  the spec-cleaner command.</changelog>
  <changelog author="mpost@suse.com" date="1571140800">- Upgraded to version 3.6.0 (jsc#SLE-7584)
  * [FEATURE] Add MSA9 CPACF support for Ed25519, Ed448, X25519 and X448</changelog>
  <changelog author="mpost@suse.com" date="1573732800">- Added libica-sles15sp2-x25519-x448-fix-handling-of-non-canonical-values.patch
  (bsc#1156768)</changelog>
  <changelog author="mpost@suse.com" date="1586347200">- Added the following patches for FIPS certification.
  * libica-sles15sp2-Fix-DES-and-TDES-key-length.patch
    (bsc#1166071) Although a DES key has only 56 effective bits,
    all 64 bits must be considered, because the parity bits are
    spread over all 8 bytes of the key.
  * libica-sles15sp2-FIPS-provide-output-iv-as-required-by-FIPS-tests.patch
    (bsc#1166210) FIPS tests require the output iv to be the iv
    resulting from decrypting the last block with a zero iv as input.
  * libica-sles15sp2-icainfo-bugfix-for-RSA-and-EC-related-info-for-softw.patch
    (bsc#1166224) The output from icainfo never shows 'yes' for
    RSA ME, RSA CRT, ECDH, ECDSA sign, ECDSA verify, and ECKGEN,
    due to the missing ICA_FLAG_SW flag in the icaList.</changelog>
  <changelog author="mpost@suse.com" date="1588852800">- Added the following patches for FIPS certification (bsc#1162533)
  * libica-sles15sp2-FIPS-introduce-HMAC-based-library-integrity-check.patch
  * libica-sles15sp2-FIPS-hmac-key.patch
- Added a BuildRequires for the fipscheck package.
- Made a couple of changes to the spec file based upon recommendations
  by spec-cleaner.</changelog>
  <changelog author="mpost@suse.com" date="1600171200">- Fix lack of SHA3 KATs in "make check" processing (bsc#1175277)
  * Added libica-sles15sp2-FIPS-add-SHA3-KATs-to-fips_powerup_tests.patch
  * Added libica-sles15sp2-FIPS-skip-SHA3-tests-if-running-on-hardware-without-.patch
- Fix FIPS hmac check (bsc#1175356).
  * Update FIPS support to upstream
  - Refresh libica-sles15sp2-FIPS-introduce-HMAC-based-library-integrity-check.patch
    from upstream.
  - Add libica-sles15sp2-Build-with-pthread-flag.patch
  - Add libica-sles15sp2-FIPS-HMAC-based-library-integrity-check-addon.patch
  - Add libica-sles15sp2-FIPS-HMAC-based-library-integrity-check-rename-variables.patch
  - Add libica-sles15sp2-FIPS-use-full-library-version-for-hmac-filename.patch
  * FIPS check should fail when hmac is missing
  - Add libica-sles15sp2-FIPS-fix-inconsistent-error-handling.patch
  - Create an hmac for the selftest
  - Check that selftest fails without a hmac
  - Hash libica.so.3 rather than libica.so.3.6.0
  * Fix hmac key format. It should be hexadecimal, not ASCII
  - Refresh libica-sles15sp2-FIPS-hmac-key.patch
- Fix Some internal variables used to store sensitive information
  (keys) were not zeroized before returning to the calling application.
  (bsc#1175357)
  * Added libica-sles15sp2-Zeroize-local-variables.patch
- Updated libica-rpmlintrc to eliminate the warning about the HMAC file
  being a hidden file. It is supposed to be hidden.</changelog>
  <changelog author="mpost@suse.com" date="1600430400">- Upgraded to version 3.7.0 (jsc#SLE-13708)
  * Version 3.7.0
  - [FEATURE] FIPS: Add HMAC based library integrity check
  - [PATCH] icainfo: bugfix for RSA and EC related info for software column.
  - [PATCH] FIPS: provide output iv in cbc-cs decrypt as required by FIPS tests
  - [PATCH] FIPS: Fix DES and TDES key length
  - [PATCH] icastats: Fix stats counter format
  * Version 3.6.1
  - [PATCH] Fix x25519 and x448 handling of non-canonical values
- Removed the following obsolete patches
  * libica-sles15sp2-x25519-x448-fix-handling-of-non-canonical-values.patch
  * libica-sles15sp2-Fix-DES-and-TDES-key-length.patch
  * libica-sles15sp2-FIPS-provide-output-iv-as-required-by-FIPS-tests.patch
  * libica-sles15sp2-icainfo-bugfix-for-RSA-and-EC-related-info-for-softw.patch
  * libica-sles15sp2-Build-with-pthread-flag.patch
  * libica-sles15sp2-FIPS-introduce-HMAC-based-library-integrity-check.patch
  * libica-sles15sp2-FIPS-HMAC-based-library-integrity-check-addon.patch
  * libica-sles15sp2-FIPS-HMAC-based-library-integrity-check-rename-variables.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1623067200">- Update to version 3.8.0 (jsc#SLE-18334)
  - [FEATURE] provide libica-cex module to satisfy special security requirements
  - [FEATURE] FIPS: enforce the HMAC check
- Remove upstreamed patches:
  - libica-sles15sp2-FIPS-add-SHA3-KATs-to-fips_powerup_tests.patch
  - libica-sles15sp2-FIPS-skip-SHA3-tests-if-running-on-hardware-without-.patch
  - libica-sles15sp2-Zeroize-local-variables.patch
- Remove patches obsoleted by upstrea developent:
  * FIPS: Find libica from phdrs.
  - libica-sles15sp2-FIPS-use-full-library-version-for-hmac-filename.patch
  * FIPS: enforce the hmac check
  - libica-sles15sp2-FIPS-fix-inconsistent-error-handling.patch
- Fix up tests and hmac generation
  + libica-FIPS-make-it-possible-to-specify-fipshmac-binary.patch
- Remove obsolete attributes from filelists</changelog>
  <changelog author="mpost@suse.com" date="1634644800">- Upgrade to version 3.9.0 (jsc#SLE-18454, jsc#SLE-18564)
  - [FEATURE] Add support for OpenSSL 3.0
  - [FEATURE] icainfo: new parm -c to display available EC curves
- Replaced the obsolete PreReq: %fillup_prereq
  with                  Requires(post): %fillup_prereq
  in the spec file.</changelog>
  <changelog author="mpost@suse.com" date="1662984000">- Upgraded to version 4.0.3 (jsc#PED-581, jsc#PED-621, jsc#PED-629)
  v4.0.3
  - [PATCH] Reduce the number of open file descriptors
  - [PATCH] Various bug fixes
  v4.0.2
  - [PATCH] Various bug fixes
  v4.0.1
  - [PATCH] Various bug fixes
  - [PATCH] Compute HMAC from installed library
  v4.0.0
  - [UPDATE] NO_SW_FALLBACKS is now the default for libica.so
    [UPDATE] Removed deprecated API functions including tests
    [UPDATE] Introduced 'const' for some API function parameters
    [FEATURE] icastats: new parm -k to display detailed counters
- Replaced libica-sles15sp2-FIPS-hmac-key.patch with an updated
  version named libica-sles15sp5-FIPS-hmac-key.patch.
- Updated the libica-rpmlintrc file to suppress warnings about the
  libica-cex hmac files being hidden.
- Updated the spec file to properly both obsolete and provide two
  older versions of the package.</changelog>
  <changelog author="mpost@suse.com" date="1665489600">- Upgrade to version 4.1.1 (jsc#PED-581, bsc#1202365).
  v4.1.1
  - [PATCH] Fix aes-xts multi-part operations
    [PATCH] Fix make dist
  v4.1.0
  - [FEATURE] FIPS: make libica FIPS 140-3 compliant
    [FEATURE] New API function ica_ecdsa_sign_ex()
    [FEATURE] New icainfo output option -r
  - [PATCH] Various bug fixes
- Removed the following obsolete files:
  baselibs.conf
  icaioctl.h</changelog>
  <changelog author="meissner@suse.com" date="1673870400">- Upgrade to version 4.2.0 (jsc#PED-581, bsc#1202365).
  - [FEATURE] Display build info via icainfo -v
  - [FEATURE] New API function ica_get_build_version()
  - [FEATURE] Display fips indication via icainfo -f
  - [FEATURE] New API function ica_get_fips_indicator()
  - [FEATURE] New API function ica_aes_gcm_initialize_fips()
  - [FEATURE] New API function ica_aes_gcm_kma_get_iv()
  - [FEATURE] New API function ica_get_msa_level()
  - [PATCH] icainfo: check for malloc error when getting functionlist</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1676635200">- Upgrade to version 4.2.1 (jsc#PED-2872)
  - [PATCH] fix regression opening shared memory</changelog>
  <changelog author="otto.hollmann@suse.com" date="1682424000">- Add multibuild flavor to provide library compiled against openssl-3
  [bsc#1207472]</changelog>
  <changelog author="pmonreal@suse.com" date="1687521600">- Rename the hmac files for the openssl3 flavor [bsc#1207472]
  * Add libica-openssl3.patch
  * Rebase libica-sles15sp5-FIPS-hmac-key.patch</changelog>
</package>
<package pkgid="27018e0819d4a9f1633d2f8a67cf284175d8b7a0da333616c30e63f172f42448" name="libjansson" arch="src">
  <version epoch="0" ver="2.14" rel="150000.3.5.1"/>
  <changelog author="fcastelli@suse.com" date="1318852800">- Create initial package (v2.2.1)</changelog>
  <changelog author="jengelh@medozas.de" date="1319198400">- Remove redundant tags/sections (cf. specfile guidelines)
- Centralize the shlib package name</changelog>
  <changelog author="jengelh@medozas.de" date="1328011200">- Provide pkgconfig symbols</changelog>
  <changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 2.3.1
  * Add support for optional object keys with the "{s?o}" syntax
  in json_unpack and the like
  * Add json_object_update_existing() and json_object_update_missing()
  for updating only existing keys or only adding missing keys to an
  object.
  * Add json_object_foreach() for more convenient iteration over
  objects.
  * When decoding JSON, write the number of bytes that were read from
  input to "error.position" also on success. This is handy with
  JSON_DISABLE_EOF_CHECK.
  * Add support for decoding any JSON value, not just arrays or
  objects. The support is enabled with the new "JSON_DECODE_ANY"
  flag.
  * Avoid problems with object's serial number growing too big.
  * Remove "+" and leading zeros from exponents in the encoder.
  * Decoding functions now return NULL if the first argument is NULL.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature.</changelog>
  <changelog author="jengelh@inai.de" date="1405857600">- Update to new upstream release 2.6
  * Fixed CVE-2013-6401: avoid bad performance in large JSON objects
  * The json_pack et al functions recognize the specifiers "s#", "+"
  and "+#"
  * Add the "JSON_DECODE_INT_AS_REAL" flag
  * Add "json_array_foreach()" function
  * Add the "json_boolean()" macro that returns the JSON true or
  false value based on its argument
  * Add "json_load_callback()" that calls a callback function
  repeatedly to read the JSON input.
  * Add JSON_ESCAPE_SLASH encoding flag to escape all occurences of
  '/' with '\/'.
- Drop defunct gpg-offline and use local source_validator instead</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf</changelog>
  <changelog author="efimovov@gmail.com" date="1415188800">- Update to new upstream release 2.7
  * The json_pack et al functions recognize the specifiers "s%", "+%"
  and "+#"
  * Add length-aware string constructors "json_stringn()" and
  "json_stringn_nocheck()", length-aware string mutators
  "json_string_setn()" and "json_string_setn_nocheck()",
  and a function for getting string's length "json_string_length()"
  * Support ""\u0000"" escapes in the decoder. The support can be
  enabled by using the ""JSON_ALLOW_NUL"" decoding flag
  * Add "json_boolean_value()" as an alias for "json_is_true()"
  * Add JSON_REAL_PRECISION encoding flag/macro for controlling real
  number precision
  * Define the maximum indentation as JSON_MAX_INDENT.
  * Fix cases when some malformed ""\uNNNN"" escapes could crash
  the decoder with an assertion failure
  * Avoid integer overflows with very long strings in UTF-8 decoder
  and hashtable
  * Check for *NULL* key in "json_object_get()"
  and "json_object_del()"
  * "json_unpack()": Allow mixing JSON_STRICT with optional keys.
  * Fix int/int32 mismatch
  * Parse subnormal numbers correctly</changelog>
  <changelog author="coolo@suse.com" date="1488369600">- update to new upstream release 2.9
  * New features:
    Add json_auto_t to automatically decref a value that goes out of scope.
    Available only on GCC and Clang. (#301)
  * Small documentation fixes.
- changelog from 2.8
  * New features:
  - Always preserve insertion order of object items. json_object_iter()
    and friends, json_object_foreach() and json_dumps() and friends now
    always work in the insertion order of object items (#293).
  - Add json_object_foreach_safe() macro that allows json_object_del()
    calls during iteration (#230).
  - Add json_get_alloc_funcs() to allow reading the allocation functions
    set by json_set_alloc_funcs() (#262, #264).
  - Add json_pack() format specifiers s?, o? and O? for values that can
    be null (#261, #270).
  * Bug fixes:
  - Fix a crash when parsing inputs consisting of very deeply nested
    arrays or objects (#282, #284).
  - Never convert numbers to integers in the parser when
    JSON_DECODE_INT_AS_REAL is set.
  - Fix a use-after-free in json_pack() error handling.
  - Fix subnormal number parsing on mingw32.
  - Handle out-of-memory situations gracefully in the hashtable
    implementation</changelog>
  <changelog author="pstivanin@suse.com" date="1675684800">- Update to 2.14 (boo#1201817):
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
    corresponding `nocheck` functions.
    + Add jansson_version_str() and jansson_version_cmp() for runtime
    version checking
    + Add json_object_update_new(), json_object_update_existing_new()
    and json_object_update_missing_new() functions
    + Add json_object_update_recursive()
    + Add `json_pack()` format specifiers s*, o* and O* for values
    that can be omitted if null (#339).
    + Add `json_error_code()` to retrieve numeric error codes
    (#365, #380, #381).
    + Enable thread safety for `json_dump()` on all systems.
    Enable thread safe `json_decref()` and `json_incref()` for
    modern compilers (#389).
    + Add `json_sprintf()` and `json_vsprintf()` (#393).
  * Fixes:
    + Handle `sprintf` corner cases.
    + Add infinite loop check in json_deep_copy()
    + Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
    + Update version detection for sphinx-build
    + Fix error message in `json_pack()` for NULL object (#409).
    + Avoid invalid memory read in `json_pack()` (#421).
    + Call va_end after va_copy in `json_vsprintf()` (#427).
    + Improve handling of formats with '?' and '*' in `json_pack()`
    (#438).
    + Remove inappropriate `jsonp_free()` which caused
    segmentation fault in error handling (#444).
    + Fix incorrect report of success from `json_dump_file()` when
    an error is returned by `fclose()` (#359).
    + Make json_equal() const-correct (#344).
    + Fix incomplete stealing of references by `json_pack()` (#374)
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Add check section.</changelog>
</package>
<package pkgid="15f833d12c22bfbd27df45e7c38615fc451f193122f0a70a8fe165432e00c80b" name="libjansson4" arch="aarch64">
  <version epoch="0" ver="2.14" rel="150000.3.5.1"/>
  <changelog author="fcastelli@suse.com" date="1318852800">- Create initial package (v2.2.1)</changelog>
  <changelog author="jengelh@medozas.de" date="1319198400">- Remove redundant tags/sections (cf. specfile guidelines)
- Centralize the shlib package name</changelog>
  <changelog author="jengelh@medozas.de" date="1328011200">- Provide pkgconfig symbols</changelog>
  <changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 2.3.1
  * Add support for optional object keys with the "{s?o}" syntax
  in json_unpack and the like
  * Add json_object_update_existing() and json_object_update_missing()
  for updating only existing keys or only adding missing keys to an
  object.
  * Add json_object_foreach() for more convenient iteration over
  objects.
  * When decoding JSON, write the number of bytes that were read from
  input to "error.position" also on success. This is handy with
  JSON_DISABLE_EOF_CHECK.
  * Add support for decoding any JSON value, not just arrays or
  objects. The support is enabled with the new "JSON_DECODE_ANY"
  flag.
  * Avoid problems with object's serial number growing too big.
  * Remove "+" and leading zeros from exponents in the encoder.
  * Decoding functions now return NULL if the first argument is NULL.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature.</changelog>
  <changelog author="jengelh@inai.de" date="1405857600">- Update to new upstream release 2.6
  * Fixed CVE-2013-6401: avoid bad performance in large JSON objects
  * The json_pack et al functions recognize the specifiers "s#", "+"
  and "+#"
  * Add the "JSON_DECODE_INT_AS_REAL" flag
  * Add "json_array_foreach()" function
  * Add the "json_boolean()" macro that returns the JSON true or
  false value based on its argument
  * Add "json_load_callback()" that calls a callback function
  repeatedly to read the JSON input.
  * Add JSON_ESCAPE_SLASH encoding flag to escape all occurences of
  '/' with '\/'.
- Drop defunct gpg-offline and use local source_validator instead</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf</changelog>
  <changelog author="efimovov@gmail.com" date="1415188800">- Update to new upstream release 2.7
  * The json_pack et al functions recognize the specifiers "s%", "+%"
  and "+#"
  * Add length-aware string constructors "json_stringn()" and
  "json_stringn_nocheck()", length-aware string mutators
  "json_string_setn()" and "json_string_setn_nocheck()",
  and a function for getting string's length "json_string_length()"
  * Support ""\u0000"" escapes in the decoder. The support can be
  enabled by using the ""JSON_ALLOW_NUL"" decoding flag
  * Add "json_boolean_value()" as an alias for "json_is_true()"
  * Add JSON_REAL_PRECISION encoding flag/macro for controlling real
  number precision
  * Define the maximum indentation as JSON_MAX_INDENT.
  * Fix cases when some malformed ""\uNNNN"" escapes could crash
  the decoder with an assertion failure
  * Avoid integer overflows with very long strings in UTF-8 decoder
  and hashtable
  * Check for *NULL* key in "json_object_get()"
  and "json_object_del()"
  * "json_unpack()": Allow mixing JSON_STRICT with optional keys.
  * Fix int/int32 mismatch
  * Parse subnormal numbers correctly</changelog>
  <changelog author="coolo@suse.com" date="1488369600">- update to new upstream release 2.9
  * New features:
    Add json_auto_t to automatically decref a value that goes out of scope.
    Available only on GCC and Clang. (#301)
  * Small documentation fixes.
- changelog from 2.8
  * New features:
  - Always preserve insertion order of object items. json_object_iter()
    and friends, json_object_foreach() and json_dumps() and friends now
    always work in the insertion order of object items (#293).
  - Add json_object_foreach_safe() macro that allows json_object_del()
    calls during iteration (#230).
  - Add json_get_alloc_funcs() to allow reading the allocation functions
    set by json_set_alloc_funcs() (#262, #264).
  - Add json_pack() format specifiers s?, o? and O? for values that can
    be null (#261, #270).
  * Bug fixes:
  - Fix a crash when parsing inputs consisting of very deeply nested
    arrays or objects (#282, #284).
  - Never convert numbers to integers in the parser when
    JSON_DECODE_INT_AS_REAL is set.
  - Fix a use-after-free in json_pack() error handling.
  - Fix subnormal number parsing on mingw32.
  - Handle out-of-memory situations gracefully in the hashtable
    implementation</changelog>
  <changelog author="pstivanin@suse.com" date="1675684800">- Update to 2.14 (boo#1201817):
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
    corresponding `nocheck` functions.
    + Add jansson_version_str() and jansson_version_cmp() for runtime
    version checking
    + Add json_object_update_new(), json_object_update_existing_new()
    and json_object_update_missing_new() functions
    + Add json_object_update_recursive()
    + Add `json_pack()` format specifiers s*, o* and O* for values
    that can be omitted if null (#339).
    + Add `json_error_code()` to retrieve numeric error codes
    (#365, #380, #381).
    + Enable thread safety for `json_dump()` on all systems.
    Enable thread safe `json_decref()` and `json_incref()` for
    modern compilers (#389).
    + Add `json_sprintf()` and `json_vsprintf()` (#393).
  * Fixes:
    + Handle `sprintf` corner cases.
    + Add infinite loop check in json_deep_copy()
    + Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
    + Update version detection for sphinx-build
    + Fix error message in `json_pack()` for NULL object (#409).
    + Avoid invalid memory read in `json_pack()` (#421).
    + Call va_end after va_copy in `json_vsprintf()` (#427).
    + Improve handling of formats with '?' and '*' in `json_pack()`
    (#438).
    + Remove inappropriate `jsonp_free()` which caused
    segmentation fault in error handling (#444).
    + Fix incorrect report of success from `json_dump_file()` when
    an error is returned by `fclose()` (#359).
    + Make json_equal() const-correct (#344).
    + Fix incomplete stealing of references by `json_pack()` (#374)
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Add check section.</changelog>
</package>
<package pkgid="450e7dde21198dd98567392eb47d0978b07f3fd0587f24ba443d3bd1a0bafdc8" name="libjansson4" arch="s390x">
  <version epoch="0" ver="2.14" rel="150000.3.5.1"/>
  <changelog author="fcastelli@suse.com" date="1318852800">- Create initial package (v2.2.1)</changelog>
  <changelog author="jengelh@medozas.de" date="1319198400">- Remove redundant tags/sections (cf. specfile guidelines)
- Centralize the shlib package name</changelog>
  <changelog author="jengelh@medozas.de" date="1328011200">- Provide pkgconfig symbols</changelog>
  <changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 2.3.1
  * Add support for optional object keys with the "{s?o}" syntax
  in json_unpack and the like
  * Add json_object_update_existing() and json_object_update_missing()
  for updating only existing keys or only adding missing keys to an
  object.
  * Add json_object_foreach() for more convenient iteration over
  objects.
  * When decoding JSON, write the number of bytes that were read from
  input to "error.position" also on success. This is handy with
  JSON_DISABLE_EOF_CHECK.
  * Add support for decoding any JSON value, not just arrays or
  objects. The support is enabled with the new "JSON_DECODE_ANY"
  flag.
  * Avoid problems with object's serial number growing too big.
  * Remove "+" and leading zeros from exponents in the encoder.
  * Decoding functions now return NULL if the first argument is NULL.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature.</changelog>
  <changelog author="jengelh@inai.de" date="1405857600">- Update to new upstream release 2.6
  * Fixed CVE-2013-6401: avoid bad performance in large JSON objects
  * The json_pack et al functions recognize the specifiers "s#", "+"
  and "+#"
  * Add the "JSON_DECODE_INT_AS_REAL" flag
  * Add "json_array_foreach()" function
  * Add the "json_boolean()" macro that returns the JSON true or
  false value based on its argument
  * Add "json_load_callback()" that calls a callback function
  repeatedly to read the JSON input.
  * Add JSON_ESCAPE_SLASH encoding flag to escape all occurences of
  '/' with '\/'.
- Drop defunct gpg-offline and use local source_validator instead</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf</changelog>
  <changelog author="efimovov@gmail.com" date="1415188800">- Update to new upstream release 2.7
  * The json_pack et al functions recognize the specifiers "s%", "+%"
  and "+#"
  * Add length-aware string constructors "json_stringn()" and
  "json_stringn_nocheck()", length-aware string mutators
  "json_string_setn()" and "json_string_setn_nocheck()",
  and a function for getting string's length "json_string_length()"
  * Support ""\u0000"" escapes in the decoder. The support can be
  enabled by using the ""JSON_ALLOW_NUL"" decoding flag
  * Add "json_boolean_value()" as an alias for "json_is_true()"
  * Add JSON_REAL_PRECISION encoding flag/macro for controlling real
  number precision
  * Define the maximum indentation as JSON_MAX_INDENT.
  * Fix cases when some malformed ""\uNNNN"" escapes could crash
  the decoder with an assertion failure
  * Avoid integer overflows with very long strings in UTF-8 decoder
  and hashtable
  * Check for *NULL* key in "json_object_get()"
  and "json_object_del()"
  * "json_unpack()": Allow mixing JSON_STRICT with optional keys.
  * Fix int/int32 mismatch
  * Parse subnormal numbers correctly</changelog>
  <changelog author="coolo@suse.com" date="1488369600">- update to new upstream release 2.9
  * New features:
    Add json_auto_t to automatically decref a value that goes out of scope.
    Available only on GCC and Clang. (#301)
  * Small documentation fixes.
- changelog from 2.8
  * New features:
  - Always preserve insertion order of object items. json_object_iter()
    and friends, json_object_foreach() and json_dumps() and friends now
    always work in the insertion order of object items (#293).
  - Add json_object_foreach_safe() macro that allows json_object_del()
    calls during iteration (#230).
  - Add json_get_alloc_funcs() to allow reading the allocation functions
    set by json_set_alloc_funcs() (#262, #264).
  - Add json_pack() format specifiers s?, o? and O? for values that can
    be null (#261, #270).
  * Bug fixes:
  - Fix a crash when parsing inputs consisting of very deeply nested
    arrays or objects (#282, #284).
  - Never convert numbers to integers in the parser when
    JSON_DECODE_INT_AS_REAL is set.
  - Fix a use-after-free in json_pack() error handling.
  - Fix subnormal number parsing on mingw32.
  - Handle out-of-memory situations gracefully in the hashtable
    implementation</changelog>
  <changelog author="pstivanin@suse.com" date="1675684800">- Update to 2.14 (boo#1201817):
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
    corresponding `nocheck` functions.
    + Add jansson_version_str() and jansson_version_cmp() for runtime
    version checking
    + Add json_object_update_new(), json_object_update_existing_new()
    and json_object_update_missing_new() functions
    + Add json_object_update_recursive()
    + Add `json_pack()` format specifiers s*, o* and O* for values
    that can be omitted if null (#339).
    + Add `json_error_code()` to retrieve numeric error codes
    (#365, #380, #381).
    + Enable thread safety for `json_dump()` on all systems.
    Enable thread safe `json_decref()` and `json_incref()` for
    modern compilers (#389).
    + Add `json_sprintf()` and `json_vsprintf()` (#393).
  * Fixes:
    + Handle `sprintf` corner cases.
    + Add infinite loop check in json_deep_copy()
    + Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
    + Update version detection for sphinx-build
    + Fix error message in `json_pack()` for NULL object (#409).
    + Avoid invalid memory read in `json_pack()` (#421).
    + Call va_end after va_copy in `json_vsprintf()` (#427).
    + Improve handling of formats with '?' and '*' in `json_pack()`
    (#438).
    + Remove inappropriate `jsonp_free()` which caused
    segmentation fault in error handling (#444).
    + Fix incorrect report of success from `json_dump_file()` when
    an error is returned by `fclose()` (#359).
    + Make json_equal() const-correct (#344).
    + Fix incomplete stealing of references by `json_pack()` (#374)
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Add check section.</changelog>
</package>
<package pkgid="5e65fa2322926fe8510b580444a13157ba356b1523563e0c83708d0f1bbdce54" name="libjansson4" arch="x86_64">
  <version epoch="0" ver="2.14" rel="150000.3.5.1"/>
  <changelog author="fcastelli@suse.com" date="1318852800">- Create initial package (v2.2.1)</changelog>
  <changelog author="jengelh@medozas.de" date="1319198400">- Remove redundant tags/sections (cf. specfile guidelines)
- Centralize the shlib package name</changelog>
  <changelog author="jengelh@medozas.de" date="1328011200">- Provide pkgconfig symbols</changelog>
  <changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 2.3.1
  * Add support for optional object keys with the "{s?o}" syntax
  in json_unpack and the like
  * Add json_object_update_existing() and json_object_update_missing()
  for updating only existing keys or only adding missing keys to an
  object.
  * Add json_object_foreach() for more convenient iteration over
  objects.
  * When decoding JSON, write the number of bytes that were read from
  input to "error.position" also on success. This is handy with
  JSON_DISABLE_EOF_CHECK.
  * Add support for decoding any JSON value, not just arrays or
  objects. The support is enabled with the new "JSON_DECODE_ANY"
  flag.
  * Avoid problems with object's serial number growing too big.
  * Remove "+" and leading zeros from exponents in the encoder.
  * Decoding functions now return NULL if the first argument is NULL.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature.</changelog>
  <changelog author="jengelh@inai.de" date="1405857600">- Update to new upstream release 2.6
  * Fixed CVE-2013-6401: avoid bad performance in large JSON objects
  * The json_pack et al functions recognize the specifiers "s#", "+"
  and "+#"
  * Add the "JSON_DECODE_INT_AS_REAL" flag
  * Add "json_array_foreach()" function
  * Add the "json_boolean()" macro that returns the JSON true or
  false value based on its argument
  * Add "json_load_callback()" that calls a callback function
  repeatedly to read the JSON input.
  * Add JSON_ESCAPE_SLASH encoding flag to escape all occurences of
  '/' with '\/'.
- Drop defunct gpg-offline and use local source_validator instead</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf</changelog>
  <changelog author="efimovov@gmail.com" date="1415188800">- Update to new upstream release 2.7
  * The json_pack et al functions recognize the specifiers "s%", "+%"
  and "+#"
  * Add length-aware string constructors "json_stringn()" and
  "json_stringn_nocheck()", length-aware string mutators
  "json_string_setn()" and "json_string_setn_nocheck()",
  and a function for getting string's length "json_string_length()"
  * Support ""\u0000"" escapes in the decoder. The support can be
  enabled by using the ""JSON_ALLOW_NUL"" decoding flag
  * Add "json_boolean_value()" as an alias for "json_is_true()"
  * Add JSON_REAL_PRECISION encoding flag/macro for controlling real
  number precision
  * Define the maximum indentation as JSON_MAX_INDENT.
  * Fix cases when some malformed ""\uNNNN"" escapes could crash
  the decoder with an assertion failure
  * Avoid integer overflows with very long strings in UTF-8 decoder
  and hashtable
  * Check for *NULL* key in "json_object_get()"
  and "json_object_del()"
  * "json_unpack()": Allow mixing JSON_STRICT with optional keys.
  * Fix int/int32 mismatch
  * Parse subnormal numbers correctly</changelog>
  <changelog author="coolo@suse.com" date="1488369600">- update to new upstream release 2.9
  * New features:
    Add json_auto_t to automatically decref a value that goes out of scope.
    Available only on GCC and Clang. (#301)
  * Small documentation fixes.
- changelog from 2.8
  * New features:
  - Always preserve insertion order of object items. json_object_iter()
    and friends, json_object_foreach() and json_dumps() and friends now
    always work in the insertion order of object items (#293).
  - Add json_object_foreach_safe() macro that allows json_object_del()
    calls during iteration (#230).
  - Add json_get_alloc_funcs() to allow reading the allocation functions
    set by json_set_alloc_funcs() (#262, #264).
  - Add json_pack() format specifiers s?, o? and O? for values that can
    be null (#261, #270).
  * Bug fixes:
  - Fix a crash when parsing inputs consisting of very deeply nested
    arrays or objects (#282, #284).
  - Never convert numbers to integers in the parser when
    JSON_DECODE_INT_AS_REAL is set.
  - Fix a use-after-free in json_pack() error handling.
  - Fix subnormal number parsing on mingw32.
  - Handle out-of-memory situations gracefully in the hashtable
    implementation</changelog>
  <changelog author="pstivanin@suse.com" date="1675684800">- Update to 2.14 (boo#1201817):
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
    corresponding `nocheck` functions.
    + Add jansson_version_str() and jansson_version_cmp() for runtime
    version checking
    + Add json_object_update_new(), json_object_update_existing_new()
    and json_object_update_missing_new() functions
    + Add json_object_update_recursive()
    + Add `json_pack()` format specifiers s*, o* and O* for values
    that can be omitted if null (#339).
    + Add `json_error_code()` to retrieve numeric error codes
    (#365, #380, #381).
    + Enable thread safety for `json_dump()` on all systems.
    Enable thread safe `json_decref()` and `json_incref()` for
    modern compilers (#389).
    + Add `json_sprintf()` and `json_vsprintf()` (#393).
  * Fixes:
    + Handle `sprintf` corner cases.
    + Add infinite loop check in json_deep_copy()
    + Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
    + Update version detection for sphinx-build
    + Fix error message in `json_pack()` for NULL object (#409).
    + Avoid invalid memory read in `json_pack()` (#421).
    + Call va_end after va_copy in `json_vsprintf()` (#427).
    + Improve handling of formats with '?' and '*' in `json_pack()`
    (#438).
    + Remove inappropriate `jsonp_free()` which caused
    segmentation fault in error handling (#444).
    + Fix incorrect report of success from `json_dump_file()` when
    an error is returned by `fclose()` (#359).
    + Make json_equal() const-correct (#344).
    + Fix incomplete stealing of references by `json_pack()` (#374)
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Add check section.</changelog>
</package>
<package pkgid="0dcc40112291b6520768918b362d1429c8cbc360b780a6477fe5b913912158d3" name="libjbig2" arch="aarch64">
  <version epoch="0" ver="2.1" rel="150000.3.5.1"/>
  <changelog author="brian@aljex.com" date="1334059200">- Initial SUSE package.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1339156800">- build -32bit packages to make libtiff5-32bit installable</changelog>
  <changelog author="coolo@suse.com" date="1339588800">- fix baselibs.conf</changelog>
  <changelog author="mmeister@suse.com" date="1364472000">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="schwab@linux-m68k.org" date="1374235200">- Don't strip binaries</changelog>
  <changelog author="brian@aljex.com" date="1397563200">- v2.1
-Fixes bnc#870855
-Fixes CVE-2013-6369</changelog>
  <changelog author="pgajdos@suse.com" date="1702987200">- security update
- added patches
  fix CVE-2022-1210 [bsc#1198146], Malicious file leads to a denial of service in TIFF File Handler
  + jbigkit-CVE-2022-1210.patch</changelog>
</package>
<package pkgid="f8fb923c5d1ec7cbe3ed163b7624cc6d8b32c5e07dc19005fd85360f65804662" name="libjbig2" arch="s390x">
  <version epoch="0" ver="2.1" rel="150000.3.5.1"/>
  <changelog author="brian@aljex.com" date="1334059200">- Initial SUSE package.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1339156800">- build -32bit packages to make libtiff5-32bit installable</changelog>
  <changelog author="coolo@suse.com" date="1339588800">- fix baselibs.conf</changelog>
  <changelog author="mmeister@suse.com" date="1364472000">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="schwab@linux-m68k.org" date="1374235200">- Don't strip binaries</changelog>
  <changelog author="brian@aljex.com" date="1397563200">- v2.1
-Fixes bnc#870855
-Fixes CVE-2013-6369</changelog>
  <changelog author="pgajdos@suse.com" date="1702987200">- security update
- added patches
  fix CVE-2022-1210 [bsc#1198146], Malicious file leads to a denial of service in TIFF File Handler
  + jbigkit-CVE-2022-1210.patch</changelog>
</package>
<package pkgid="0daf1ccf387730c39cf914239d06e147ddb46b97597d2f8171a00bfae4caf24d" name="libjbig2" arch="x86_64">
  <version epoch="0" ver="2.1" rel="150000.3.5.1"/>
  <changelog author="brian@aljex.com" date="1334059200">- Initial SUSE package.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1339156800">- build -32bit packages to make libtiff5-32bit installable</changelog>
  <changelog author="coolo@suse.com" date="1339588800">- fix baselibs.conf</changelog>
  <changelog author="mmeister@suse.com" date="1364472000">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="schwab@linux-m68k.org" date="1374235200">- Don't strip binaries</changelog>
  <changelog author="brian@aljex.com" date="1397563200">- v2.1
-Fixes bnc#870855
-Fixes CVE-2013-6369</changelog>
  <changelog author="pgajdos@suse.com" date="1702987200">- security update
- added patches
  fix CVE-2022-1210 [bsc#1198146], Malicious file leads to a denial of service in TIFF File Handler
  + jbigkit-CVE-2022-1210.patch</changelog>
</package>
<package pkgid="95e89608ffd2d49ef210abaf1f633f1fc57baa97cd30736281e6aed67cef97fd" name="libkmipclient1" arch="s390x">
  <version epoch="0" ver="2.30.0" rel="150500.9.10.1"/>
  <changelog author="nikolay.gueorguiev@suse.com" date="1673352000">- Updated read_values.c for z16 machine type (bsc#1206832)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1673438400">- Updated read_values.c for z16 machine type (bsc#1206832)
  * Added the IBM LinuxONE Emperor 4 machine type
  * Updated the z16 machine type to IBM z16 A01</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1675684800">- Added patch (bsc#1207947)
  * s390-tools-sles15sp5-zkey-Support-EP11-host-library-version-4.patch</changelog>
  <changelog author="jose.gomez@suse.com" date="1676548800">- Implemented read_values -u. The result of -u is a unique identifier composed of:
  * Machine Serial Number.
  * LPAR Name.
  * VM Name (can be optional).</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1676980800">- Applied the following patches (bsc#1208527, bsc#1206173)
  * s390-tools-sles15sp5-01-zipl-boot-discard-.eh_frame-and-.interp-input-sectio.patch
  * s390-tools-sles15sp5-02-zipl-boot-declare-that-no-executable-stack-is-requir.patch
  * s390-tools-sles15sp5-03-zipl-boot-use-no-warn-rwx-segments-linker-flag.patch
  * s390-tools-sles15sp5-04-zipl-boot-disable-build-id.patch
  * s390-tools-sles15sp5-05-zipl-boot-simplify-objcopy-commands.patch
  * s390-tools-sles15sp5-06-zipl-move-STAGE2_MAX_SIZE-and-STAGE1B_LOAD_ADDR-to-l.patch
  * s390-tools-sles15sp5-07-zipl-boot-use-linker-scripts-for-all-bootloaders.patch
  * s390-tools-sles15sp5-08-genprotimg-boot-declare-that-no-executable-stack-is-.patch
  * s390-tools-sles15sp5-09-genprotimg-boot-use-no-warn-rwx-segments-linker-flag.patch
  * s390-tools-sles15sp5-10-genprotimg-boot-disable-build-id.patch
  * s390-tools-sles15sp5-11-genprotimg-boot-Makefile-simplify-objcopy-command.patch
  * s390-tools-sles15sp5-12-genprotimg-boot-improve-linker-scripts.patch
  * s390-tools-sles15sp5-13-genprotimg-boot-stage3b-add-size-check-to-the-linker.patch
  * s390-tools-sles15sp5-14-genprotimg-boot-stage3b_reloc.bin-add-linker-script.patch
  * s390-tools-sles15sp5-15-zipl-Embed-loader-data-directly-into-boot-object.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678276800">- Updated cputype (bsc#1208983)
  * Changed the script to avoid "/usr/bin/cputype: line xx: nnnn: command not found",
    when machine type was found more than once in the /proc/cpuinfo.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678708800">- Applied a patch (bsc#1209196)
  * s390-tools-sles15sp5-lszcrypt-use-separate-index-for-inner-sub-device-loo.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1679572800">- Allow activation of devices at boot via kernel command line
  for live installation media (jsc#PED-2975)
  * Added a Source dracut-zdev-live-20230321.tar
  * Updated the .spec file for the new Source
-  Amended read_value.c</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1681905600">- Tailored the .spec, added a patch
  * s390-tools-ALP-zdev-live.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1683028800">- Applies a fix, splitting of rd.zdev-parameters, in
  * s390-tools-ALP-zdev-live.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1683201600">- Applied patches for ziomon: fix for SCSI devices of type disk without block dev
    (bsc#1211008)
  * s390-tools-sles15sp5-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch
  * s390-tools-sles15sp5-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1692619200">- Applies patches (bsc#1213377, bsc#1213852, bsc#1214114)
  * s390-tools-sles15sp5-01-zdev-add-missing-label-in-the-udev-rules.patch
  * s390-tools-sles15sp5-01-zdev-add-proper-value-input-for-the-ZDEV_SITE_ID-key.patch
  * s390-tools-sles15sp5-02-zdev-use-rename-file-to-avoid-any-symlinks-created.patch
  * s390-tools-sles15sp5-dasdfmt-Fall-back-to-full-format-if-space-release-fa.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1698926400">- Applied a patch (jsc#PED-6539, jsc#PED-6373)
  * s390-tools-sles15sp6-zkey-Support-EP11-AES-keys-with-prepended-header-to-.patch
- Updated read_values.c (bsc#1214466, bsc#1214534)
  * Update read_values.c to support the new IBM z Processors
- Updated SUSE's tools and their corresponding man pages (bsc#1216257)
  * ctc_configure
  * dasd_configure.opensuse
  * dasd_configure.8
  * dasd_configure.suse
  * mkdump.pl.opensuse
  * mkdump.pl.suse
  * qeth_configure
  * qeth_configure.8
  * zfcp_disk_configure
  * zfcp_disk_configure.8
  * zfcp_host_configure.8
  * zfcp_host_configure
- Updated cputype script
  * Amended cputype to support the new IBM z Processors</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1699876800">* Upgrade 390-tools from version 2.25.0 to version v2.29.0 (Latest)
  * * * *
  - General:
  - s390-tools now supports tools written in Rust.
  - Add compdb Makefile target to create 'compile_commands.json' to support LSP
  - backends in IDEs and editors
  - Add new tools / libraries:
  * rust/pv: Library for pv tools written in rust
  * rust/pvsecret: Tool to manage UV-secrets
  * Changes of existing tools:
  - dbginfo.sh: Global IFS variable
  - genprotimg: Add support for add-secret requests
  - genprotimg: Build debuginfo files for bootloader
  - hyptop: Add real SMT utilization field
  - hyptop: Allow users to set speedup factor
  - pvattest: Add yaml-output for verify command
  - zipl: Build debuginfo files for bootloader
  * Bug Fixes:
  - dump2tar: Fix truncated paths
  - zdev/dracut: fix kdump build to integrate with site support
  * * * *
  * v2.28.0
  - Changes of existing tools:
  - chzcrypt: Support for SE AP pass-through support
  - genprotimg: Add support for non-s390x architectures
  - lszcrypt: Support for SE AP pass-through support
  - zdev: Add support for autoquiesce related sysfs attributes
  * Bug Fixes:
  - ap_tools/ap-check: Handle missing 'matrix' and 'control_domains' attrs
  - ap_tools/ap-check: Hold ap config file lock over get attributes
  - s390-tools: Fix build for ppc64le
  - zdev: Add missing label in the udev-rules
  - zdev: Add proper value input for the ZDEV_SITE_ID key
  - zdev: Use rename-file to avoid any symlinks created
  - zipl/dump: fix ngdump dracut helper script
  * * * *
  * v2.27.0
  * Changes of existing tools:
  - s390-tools cross-compile and non-s390x support:
  - pkg-config is now mandatory for the build process
  - Add PKG_CONFIG Makefile variable to select pkg-config program;
  - default pkg-config or $(CROSS_COMPILE)pkg-config if
  - CROSS_COMPILE is set
  - Rename Makefile variable ARCH to HOST_ARCH. HOST_ARCH is the
    architecture that will run the produced (executable) objects
  - Add the Makefile variable BUILD_ARCH. BUILD_ARCH is the
    architecture of the build system. For each Makefile variable like
    CC, LINK, CPP, ... there is a suffixed version of it - e.g.
    CC_FOR_BUILD. This is useful for cross compiling, and this naming
    convention is very similar to the Meson convention (see
    https://mesonbuild.com/Reference-tables.html#environment-variables-per-machine).
  - Limit build targets for non-s390x architectures (pvattest)
  - dasdfmt: Fall back to full format if space release fails
  - dbginfo.sh: Add nstat for network and SNMP stats
  - dbginfo.sh: Rework crypto data collection
  - hyptop: Show thread util by default
  - zipl: Add support for list-directed IPL dump from ECKD DASD
  * Bug Fixes:
  - lszcrypt: Fix argument parsing
  - zdev/dracut: Fix out-of-memory (OOM) situations in the kdump crashkernel environment
  - ziomon/ziorep_config: Fix for SCSI devices of type disk without block dev
  - pvextract-hdr: Fix parsing issues on little-endian systems
  * * * *
  * v2.26.0
  * Remove tools / libraries:
  - Remove vmconvert and libvmdump in favor of vmdump file support in zdump
  * Changes of existing tools:
  - ipl_tools: Add support for list-directed IPL from ECKD DASD
  - lszcrypt: Display hardware filtering support capability
  - vmur: Remove option -c for dump file conversion (See zdump changes)
  - zdev: Add zfcp ber_stop parameter handling
  - zdump: Add vmdump dfi for vmdump format to elf format
  - zkey: Support EP11 host library version
  * Bug Fixes:
  - zipl: Move dump parmline processing and verification
  - zipl/genprotimg: Various build improvements
  * * * *
  * Removed obsolete IBM patches
  - s390-tools-sles15sp5-zipl-boot-disable-Warray-bounds-for-now.patch
  - s390-tools-sles15sp5-zkey-Support-EP11-host-library-version-4.patch
  * Removed obsolete patches for bug 1208527, and bug 1206173
  - s390-tools-sles15sp5-01-zipl-boot-discard-.eh_frame-and-.interp-input-sectio.patch
  - s390-tools-sles15sp5-02-zipl-boot-declare-that-no-executable-stack-is-requir.patch
  - s390-tools-sles15sp5-03-zipl-boot-use-no-warn-rwx-segments-linker-flag.patch
  - s390-tools-sles15sp5-04-zipl-boot-disable-build-id.patch
  - s390-tools-sles15sp5-05-zipl-boot-simplify-objcopy-commands.patch
  - s390-tools-sles15sp5-06-zipl-move-STAGE2_MAX_SIZE-and-STAGE1B_LOAD_ADDR-to-l.patch
  - s390-tools-sles15sp5-07-zipl-boot-use-linker-scripts-for-all-bootloaders.patch
  - s390-tools-sles15sp5-08-genprotimg-boot-declare-that-no-executable-stack-is-.patch
  - s390-tools-sles15sp5-09-genprotimg-boot-use-no-warn-rwx-segments-linker-flag.patch
  - s390-tools-sles15sp5-10-genprotimg-boot-disable-build-id.patch
  - s390-tools-sles15sp5-11-genprotimg-boot-Makefile-simplify-objcopy-command.patch
  - s390-tools-sles15sp5-12-genprotimg-boot-improve-linker-scripts.patch
  - s390-tools-sles15sp5-13-genprotimg-boot-stage3b-add-size-check-to-the-linker.patch
  - s390-tools-sles15sp5-14-genprotimg-boot-stage3b_reloc.bin-add-linker-script.patch
  - s390-tools-sles15sp5-15-zipl-Embed-loader-data-directly-into-boot-object.patch
  * Removed obsolete patch for bug 1209196
  - s390-tools-sles15sp5-lszcrypt-use-separate-index-for-inner-sub-device-loo.patch
  * Removed obsolete patches for bug 1211008
  - s390-tools-sles15sp5-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch
  - s390-tools-sles15sp5-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch
  * Removed obsolete patch for bug 1213377
  - s390-tools-sles15sp5-01-zdev-add-missing-label-in-the-udev-rules.patch
  * Removed obsolete patches for bug 1213852
  - s390-tools-sles15sp5-01-zdev-add-proper-value-input-for-the-ZDEV_SITE_ID-key.patch
  - s390-tools-sles15sp5-02-zdev-use-rename-file-to-avoid-any-symlinks-created.patch
  * Removed obsolete patch for bug 1214114
  - s390-tools-sles15sp5-dasdfmt-Fall-back-to-full-format-if-space-release-fa.patch
  * Removed obsolete patch
  - s390-tools-sles15sp5-fix-chown-commands-syntax.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1700049600">- Fixed a logic error in read_values.c</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1700827200">- Provide s390-tools on x86_64 to enable Secure Execution in the Cloud
    (jsc#PED-578, jsc#PED-7136, and jsc#PED-7138)
  * Selected tools from the s390-tools package need to be made available on x86_64.
    This will enable the integration of IBM Z machines running Secure Execution in a
    cloud environment where users don't necessarily need to have an s390x environment.
  - genprotimg    - (for building secure images)
  - pvsecret      -
  - pvattest      - (for external attestation)
  - pvextract-hdr -</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1701691200">- Upgrade s390-tools to version 2.30
    (jsc#PED-5783, jsc#PED-6785, jsc#PED-7136, jsc#PED-6539, jsc#PED-4604,
    jsc#PED-6649, jsc#PED-7138 )
- Add new tools / libraries:
  * lspai: Tool to display PAI counter sets
  * s390-tools: Provide a ShellCheck configuration
- Changes of existing tools / libraries:
  * cpumf/pai: Add command line option for realtime scheduling
  * dbginfo.sh: enhance ethtool collection for ROCE
  * libutil/util_lockfile: add routine to return owning pid of file lock
  * lszcrypt: Improve lszcrypt output on SE guests
  * rust: Use a single workspace for all rust tools
  * zdev: limit the derivation of ZDEV_SITE_ID
  * zdump/df_s390: Update 'zgetdump -i' output with zlib info
  * zdump/dfi_s390: Support reading compressed s390_ext dumps
  * zipl/boot: Integrate zlib compression to single volume DASD dumper
  * zipl/boot: compile the bootloaders only if HOST_ARCH is s390x
  * zipl: Add --no-compress option to zipl command
  * zkey: Also check for deconfigured and check-stopped cards
- Bug Fixes:
  * ap_tools/ap-check: handle get-attributes between pre and post event
  * libutil: fix util_file_read_*() using wrong format specifiers
  * rust/pv: fix Invalid write of size
- Amended the SUSE patches for version 2.30
- Revendored vendor.tar.gz
- Removed an obsolete patch
  * s390-tools-sles15sp6-zkey-Support-EP11-AES-keys-with-prepended-header-to-.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1702814400">- Updated the .spec file to use gcc13 (bsc#1217838)
- Amended read_values for '-S' option (bsc#1217923)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1706097600">- Updated the .spec file
  * Explicitly specified 'ExclusiveArch: s390x x86_64'</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1706788800">- Updated read_values.c (bsc#1219227)</changelog>
</package>
<package pkgid="12158c2dcb1a2f89853fc94ee5197272ec5df9dc629b03f8d02ceafecd445231" name="liblldp_clif1" arch="aarch64">
  <version epoch="0" ver="1.1+77.75e83b6" rel="150500.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1488283200">- Don't use full URL as source, as the tarball does not exist at
  that location.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Fix calling of fillup_only: it knows no -i parameter.</changelog>
  <changelog author="hare@suse.de" date="1547121600">- Update to git commit cb81e9541b5 (FATE#326034,bug#1104011)
  * 8021qaz: Remove unused variable
  * 8021qaz: Honor willing value from config file
  * lldpad: Support DSCP selectors in APP TLV's
  * Fix application tlv display
  * basman_clif: print the OID properly
  * ecp22: deinit l2_packet_data before freeing ecp22
  * DCB set state operation return value check
  * memleak on received TLVs from modules
  * Use interface index instead of name in libconfig
  * Fix 'is_valid_mac' to include mcast mac address
  * lldpad: Fix segfault in lldptool
  * Fixup disabling PG
  + open-lldp-v1.0.1+56.cb81e95.tar.xz
- Remove superseded files
  - open-lldp-1.0.1.tar.gz
  - open-lldp-git-update.patch.bz2
  - open-lldp-gcc5.patch
  - 0001-l2_linux_packet-correctly-process-return-value-of-ge.patch
  - 0002-lldpad-Only-set-Tx-adminStatus-if-interface-is-not-m.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mliska@suse.cz" date="1552996800">- Add gcc9-fix-werror.patch in order to fix bsc#1128299.
- Adjust project URL as we're using the Intel's fork.</changelog>
  <changelog author="mliska@suse.cz" date="1557403200">- Disable -Werror (boo#1128299) and remove gcc9-fix-werror.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1557835200">- Add disable-werror.patch.</changelog>
  <changelog author="hare@suse.com" date="1574164800">- Update to version v1.0.1+95.3168e11:
  * Test with newer GCC 8 and 9 versions
  * RPM build is broken, so skip
  * Place the tarball in the right place
  * A tarball needs to be built after bootstrap.sh for use with RPM
  * Added missing steps for building an RPM
  * Finish off with testing building the RPM
  * Test package installation as well
  * Test under multiple GCC releases
  * Drop requirement for Travis CI testing with Clang
  * Support checking build with Travis CI
  * vdp-netlink: account for sizes properly
  * qbg: avoid warning for extra parens
  * qbg: port name is always a valid pointer
  * dcbx-nl: drop run_cmd
  * ecp: allow for failure to create
  * lldp_util: allow for null ifa_addr element
  * lldpad: Do not enable port if already enabled
  * Silent -Werror=address-of-packed-member warnings.
  * Come up with STRNCPY_TERMINATED (#25).
  * vdptool: fixed compile error for getline()
  * Fix #23 by off by one strncpy value.
  * 8021qaz: Block lldptool set operations if read only mode is on
  * 8021qaz: Add read only option for 8021qaz module
  * lldp: Allow lldptool to modify optional TLV's content
  * 8021qaz: Print dscp2prio map
  * autoconf: Add systemd support in configure.ac
  * rpm-spec: Add vdp22 man files to lldpad.spec.in</changelog>
  <changelog author="hare@suse.com" date="1574164801">- Update to version v1.0.1+102.4c7fcc3:
  * l2_packet: Guard ETH_P_LLDP define (edit: fixes bsc#1156545)
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd directly:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="mliska@suse.cz" date="1586174400">- Use -fcommon in order to fix boo#1160407.</changelog>
  <changelog author="hare@suse.de" date="1596542400">- Update to version v1.0.1+63.f977e67 (bsc#1171284,bsc#1170745,bsc#1153520):
  * lldp/rx.c: Reset state machine variable in process_delete_info()
  * lldp: do not call 'assert' in rxProcessFrame()
  * ecp: allow for failure to create
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="lduncan@suse.com" date="1599220800">- Moved sources from github.com/intel to github/openSUSE
  * upgrading to version v1.0.1+110.6009075a9fcc
  - merged in latest upstream (no API changes)</changelog>
  <changelog author="lduncan@suse.com" date="1599393600">- Update to version v1.0.1+69.e8f522565f5a to removed commpiler
  and rpmlint complaints:
  * Fix bash-completion dir: don't use /etc
  * Fix compiler issue with strcpy(): use memcpy
  * Fix compiler complaint argument type mismatch.
  * Fix compiler complaint declaration vs function.
  * Fix compiler complaint copying to packed member.
  * add 'lldpad.socket' to the '%service_*' macros in the SPEC
    file</changelog>
  <changelog author="lduncan@suse.com" date="1604923200">- Update to version v1.1+15.ef8495548d04, by merging
  upstream version 1.1 + latest, including:
  * Fix merge error: remove bogus line
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  This removed the need for the patch disable-werror.patch.</changelog>
  <changelog author="lduncan@suse.com" date="1607601600">- Update to version v1.1+18.0e969d0edcc4:
  * event_iface: only set rcv buf size if too small (bsc#1175570)</changelog>
  <changelog author="lduncan@suse.com" date="1610107200">- Update to version v1.1+36.e926f7172b96:
  * tx: rename variable
  * event_iface: only set rcv buf size if too small (bsc#1175570)
  * tx: when operating in rx-only mode don't send a port shutdown pdu
  * Update .travis.yml
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  * autoconf: convenience to setup asan and ubsan
  * Post 1.1 release</changelog>
  <changelog author="lduncan@suse.com" date="1632139200">- Update to version v1.1+44.0f781b4162d3:
  * agent: reset frame status on message delete
  * Avoiding null pointer dereference</changelog>
  <changelog author="lduncan@suse.com" date="1666785600">- Update to version v1.1+58.8ca361bab766:
  * clif: Include string.h for mem* function prototypes
  * basman: use return address when pulling address
  * Revert "Use interface index instead of name in libconfig"
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
  <changelog author="tabraham@suse.com" date="1704974400">- Update to version latest Intel upstream (v1.1+77.75e83b6fb98e, jsc#PED-6852):
  * lldpad: dcbx: prevent null dereference in dcbx_free_data (bsc#1212749)
  * dcbx: Fix use-after-free
  * dcbx: Fix NULL pointer dereference
  * dcbx: Fix leak when receiving legacy TLVs with mismatched mode
  * lldp: Reject frames with duplicate TLVs
  * dcbx: Free manifest in rchange callback
  * dcbx: Avoid memory leak if ifup is called twice
  * ctrl_iface: Fix a memory leak in ctrl_iface_deinit
  * lldp: Avoid sending uninitialized data
  * lldptool: fix null pointer deference
  * Revert "Use interface index instead of name in libconfig"
  * Avoiding null pointer dereference
  * agent: reset frame status on message delete
  * basman: use return address when pulling address
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
</package>
<package pkgid="08476910d1e2ed8c952e34aca567ee6d3e32a4110ce79bb2eb62a6b7d1c48d80" name="liblldp_clif1" arch="s390x">
  <version epoch="0" ver="1.1+77.75e83b6" rel="150500.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1488283200">- Don't use full URL as source, as the tarball does not exist at
  that location.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Fix calling of fillup_only: it knows no -i parameter.</changelog>
  <changelog author="hare@suse.de" date="1547121600">- Update to git commit cb81e9541b5 (FATE#326034,bug#1104011)
  * 8021qaz: Remove unused variable
  * 8021qaz: Honor willing value from config file
  * lldpad: Support DSCP selectors in APP TLV's
  * Fix application tlv display
  * basman_clif: print the OID properly
  * ecp22: deinit l2_packet_data before freeing ecp22
  * DCB set state operation return value check
  * memleak on received TLVs from modules
  * Use interface index instead of name in libconfig
  * Fix 'is_valid_mac' to include mcast mac address
  * lldpad: Fix segfault in lldptool
  * Fixup disabling PG
  + open-lldp-v1.0.1+56.cb81e95.tar.xz
- Remove superseded files
  - open-lldp-1.0.1.tar.gz
  - open-lldp-git-update.patch.bz2
  - open-lldp-gcc5.patch
  - 0001-l2_linux_packet-correctly-process-return-value-of-ge.patch
  - 0002-lldpad-Only-set-Tx-adminStatus-if-interface-is-not-m.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mliska@suse.cz" date="1552996800">- Add gcc9-fix-werror.patch in order to fix bsc#1128299.
- Adjust project URL as we're using the Intel's fork.</changelog>
  <changelog author="mliska@suse.cz" date="1557403200">- Disable -Werror (boo#1128299) and remove gcc9-fix-werror.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1557835200">- Add disable-werror.patch.</changelog>
  <changelog author="hare@suse.com" date="1574164800">- Update to version v1.0.1+95.3168e11:
  * Test with newer GCC 8 and 9 versions
  * RPM build is broken, so skip
  * Place the tarball in the right place
  * A tarball needs to be built after bootstrap.sh for use with RPM
  * Added missing steps for building an RPM
  * Finish off with testing building the RPM
  * Test package installation as well
  * Test under multiple GCC releases
  * Drop requirement for Travis CI testing with Clang
  * Support checking build with Travis CI
  * vdp-netlink: account for sizes properly
  * qbg: avoid warning for extra parens
  * qbg: port name is always a valid pointer
  * dcbx-nl: drop run_cmd
  * ecp: allow for failure to create
  * lldp_util: allow for null ifa_addr element
  * lldpad: Do not enable port if already enabled
  * Silent -Werror=address-of-packed-member warnings.
  * Come up with STRNCPY_TERMINATED (#25).
  * vdptool: fixed compile error for getline()
  * Fix #23 by off by one strncpy value.
  * 8021qaz: Block lldptool set operations if read only mode is on
  * 8021qaz: Add read only option for 8021qaz module
  * lldp: Allow lldptool to modify optional TLV's content
  * 8021qaz: Print dscp2prio map
  * autoconf: Add systemd support in configure.ac
  * rpm-spec: Add vdp22 man files to lldpad.spec.in</changelog>
  <changelog author="hare@suse.com" date="1574164801">- Update to version v1.0.1+102.4c7fcc3:
  * l2_packet: Guard ETH_P_LLDP define (edit: fixes bsc#1156545)
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd directly:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="mliska@suse.cz" date="1586174400">- Use -fcommon in order to fix boo#1160407.</changelog>
  <changelog author="hare@suse.de" date="1596542400">- Update to version v1.0.1+63.f977e67 (bsc#1171284,bsc#1170745,bsc#1153520):
  * lldp/rx.c: Reset state machine variable in process_delete_info()
  * lldp: do not call 'assert' in rxProcessFrame()
  * ecp: allow for failure to create
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="lduncan@suse.com" date="1599220800">- Moved sources from github.com/intel to github/openSUSE
  * upgrading to version v1.0.1+110.6009075a9fcc
  - merged in latest upstream (no API changes)</changelog>
  <changelog author="lduncan@suse.com" date="1599393600">- Update to version v1.0.1+69.e8f522565f5a to removed commpiler
  and rpmlint complaints:
  * Fix bash-completion dir: don't use /etc
  * Fix compiler issue with strcpy(): use memcpy
  * Fix compiler complaint argument type mismatch.
  * Fix compiler complaint declaration vs function.
  * Fix compiler complaint copying to packed member.
  * add 'lldpad.socket' to the '%service_*' macros in the SPEC
    file</changelog>
  <changelog author="lduncan@suse.com" date="1604923200">- Update to version v1.1+15.ef8495548d04, by merging
  upstream version 1.1 + latest, including:
  * Fix merge error: remove bogus line
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  This removed the need for the patch disable-werror.patch.</changelog>
  <changelog author="lduncan@suse.com" date="1607601600">- Update to version v1.1+18.0e969d0edcc4:
  * event_iface: only set rcv buf size if too small (bsc#1175570)</changelog>
  <changelog author="lduncan@suse.com" date="1610107200">- Update to version v1.1+36.e926f7172b96:
  * tx: rename variable
  * event_iface: only set rcv buf size if too small (bsc#1175570)
  * tx: when operating in rx-only mode don't send a port shutdown pdu
  * Update .travis.yml
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  * autoconf: convenience to setup asan and ubsan
  * Post 1.1 release</changelog>
  <changelog author="lduncan@suse.com" date="1632139200">- Update to version v1.1+44.0f781b4162d3:
  * agent: reset frame status on message delete
  * Avoiding null pointer dereference</changelog>
  <changelog author="lduncan@suse.com" date="1666785600">- Update to version v1.1+58.8ca361bab766:
  * clif: Include string.h for mem* function prototypes
  * basman: use return address when pulling address
  * Revert "Use interface index instead of name in libconfig"
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
  <changelog author="tabraham@suse.com" date="1704974400">- Update to version latest Intel upstream (v1.1+77.75e83b6fb98e, jsc#PED-6852):
  * lldpad: dcbx: prevent null dereference in dcbx_free_data (bsc#1212749)
  * dcbx: Fix use-after-free
  * dcbx: Fix NULL pointer dereference
  * dcbx: Fix leak when receiving legacy TLVs with mismatched mode
  * lldp: Reject frames with duplicate TLVs
  * dcbx: Free manifest in rchange callback
  * dcbx: Avoid memory leak if ifup is called twice
  * ctrl_iface: Fix a memory leak in ctrl_iface_deinit
  * lldp: Avoid sending uninitialized data
  * lldptool: fix null pointer deference
  * Revert "Use interface index instead of name in libconfig"
  * Avoiding null pointer dereference
  * agent: reset frame status on message delete
  * basman: use return address when pulling address
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
</package>
<package pkgid="fb8e63e256651f1eb2862ba7664f2dccaed6fa38ca2a48bcc770b5673469424c" name="liblldp_clif1" arch="x86_64">
  <version epoch="0" ver="1.1+77.75e83b6" rel="150500.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1488283200">- Don't use full URL as source, as the tarball does not exist at
  that location.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Fix calling of fillup_only: it knows no -i parameter.</changelog>
  <changelog author="hare@suse.de" date="1547121600">- Update to git commit cb81e9541b5 (FATE#326034,bug#1104011)
  * 8021qaz: Remove unused variable
  * 8021qaz: Honor willing value from config file
  * lldpad: Support DSCP selectors in APP TLV's
  * Fix application tlv display
  * basman_clif: print the OID properly
  * ecp22: deinit l2_packet_data before freeing ecp22
  * DCB set state operation return value check
  * memleak on received TLVs from modules
  * Use interface index instead of name in libconfig
  * Fix 'is_valid_mac' to include mcast mac address
  * lldpad: Fix segfault in lldptool
  * Fixup disabling PG
  + open-lldp-v1.0.1+56.cb81e95.tar.xz
- Remove superseded files
  - open-lldp-1.0.1.tar.gz
  - open-lldp-git-update.patch.bz2
  - open-lldp-gcc5.patch
  - 0001-l2_linux_packet-correctly-process-return-value-of-ge.patch
  - 0002-lldpad-Only-set-Tx-adminStatus-if-interface-is-not-m.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mliska@suse.cz" date="1552996800">- Add gcc9-fix-werror.patch in order to fix bsc#1128299.
- Adjust project URL as we're using the Intel's fork.</changelog>
  <changelog author="mliska@suse.cz" date="1557403200">- Disable -Werror (boo#1128299) and remove gcc9-fix-werror.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1557835200">- Add disable-werror.patch.</changelog>
  <changelog author="hare@suse.com" date="1574164800">- Update to version v1.0.1+95.3168e11:
  * Test with newer GCC 8 and 9 versions
  * RPM build is broken, so skip
  * Place the tarball in the right place
  * A tarball needs to be built after bootstrap.sh for use with RPM
  * Added missing steps for building an RPM
  * Finish off with testing building the RPM
  * Test package installation as well
  * Test under multiple GCC releases
  * Drop requirement for Travis CI testing with Clang
  * Support checking build with Travis CI
  * vdp-netlink: account for sizes properly
  * qbg: avoid warning for extra parens
  * qbg: port name is always a valid pointer
  * dcbx-nl: drop run_cmd
  * ecp: allow for failure to create
  * lldp_util: allow for null ifa_addr element
  * lldpad: Do not enable port if already enabled
  * Silent -Werror=address-of-packed-member warnings.
  * Come up with STRNCPY_TERMINATED (#25).
  * vdptool: fixed compile error for getline()
  * Fix #23 by off by one strncpy value.
  * 8021qaz: Block lldptool set operations if read only mode is on
  * 8021qaz: Add read only option for 8021qaz module
  * lldp: Allow lldptool to modify optional TLV's content
  * 8021qaz: Print dscp2prio map
  * autoconf: Add systemd support in configure.ac
  * rpm-spec: Add vdp22 man files to lldpad.spec.in</changelog>
  <changelog author="hare@suse.com" date="1574164801">- Update to version v1.0.1+102.4c7fcc3:
  * l2_packet: Guard ETH_P_LLDP define (edit: fixes bsc#1156545)
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd directly:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="mliska@suse.cz" date="1586174400">- Use -fcommon in order to fix boo#1160407.</changelog>
  <changelog author="hare@suse.de" date="1596542400">- Update to version v1.0.1+63.f977e67 (bsc#1171284,bsc#1170745,bsc#1153520):
  * lldp/rx.c: Reset state machine variable in process_delete_info()
  * lldp: do not call 'assert' in rxProcessFrame()
  * ecp: allow for failure to create
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="lduncan@suse.com" date="1599220800">- Moved sources from github.com/intel to github/openSUSE
  * upgrading to version v1.0.1+110.6009075a9fcc
  - merged in latest upstream (no API changes)</changelog>
  <changelog author="lduncan@suse.com" date="1599393600">- Update to version v1.0.1+69.e8f522565f5a to removed commpiler
  and rpmlint complaints:
  * Fix bash-completion dir: don't use /etc
  * Fix compiler issue with strcpy(): use memcpy
  * Fix compiler complaint argument type mismatch.
  * Fix compiler complaint declaration vs function.
  * Fix compiler complaint copying to packed member.
  * add 'lldpad.socket' to the '%service_*' macros in the SPEC
    file</changelog>
  <changelog author="lduncan@suse.com" date="1604923200">- Update to version v1.1+15.ef8495548d04, by merging
  upstream version 1.1 + latest, including:
  * Fix merge error: remove bogus line
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  This removed the need for the patch disable-werror.patch.</changelog>
  <changelog author="lduncan@suse.com" date="1607601600">- Update to version v1.1+18.0e969d0edcc4:
  * event_iface: only set rcv buf size if too small (bsc#1175570)</changelog>
  <changelog author="lduncan@suse.com" date="1610107200">- Update to version v1.1+36.e926f7172b96:
  * tx: rename variable
  * event_iface: only set rcv buf size if too small (bsc#1175570)
  * tx: when operating in rx-only mode don't send a port shutdown pdu
  * Update .travis.yml
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  * autoconf: convenience to setup asan and ubsan
  * Post 1.1 release</changelog>
  <changelog author="lduncan@suse.com" date="1632139200">- Update to version v1.1+44.0f781b4162d3:
  * agent: reset frame status on message delete
  * Avoiding null pointer dereference</changelog>
  <changelog author="lduncan@suse.com" date="1666785600">- Update to version v1.1+58.8ca361bab766:
  * clif: Include string.h for mem* function prototypes
  * basman: use return address when pulling address
  * Revert "Use interface index instead of name in libconfig"
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
  <changelog author="tabraham@suse.com" date="1704974400">- Update to version latest Intel upstream (v1.1+77.75e83b6fb98e, jsc#PED-6852):
  * lldpad: dcbx: prevent null dereference in dcbx_free_data (bsc#1212749)
  * dcbx: Fix use-after-free
  * dcbx: Fix NULL pointer dereference
  * dcbx: Fix leak when receiving legacy TLVs with mismatched mode
  * lldp: Reject frames with duplicate TLVs
  * dcbx: Free manifest in rchange callback
  * dcbx: Avoid memory leak if ifup is called twice
  * ctrl_iface: Fix a memory leak in ctrl_iface_deinit
  * lldp: Avoid sending uninitialized data
  * lldptool: fix null pointer deference
  * Revert "Use interface index instead of name in libconfig"
  * Avoiding null pointer dereference
  * agent: reset frame status on message delete
  * basman: use return address when pulling address
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
</package>
<package pkgid="b5da1ad231b3b47d3b52da0f8e21bf79e824237547ed240ba9390371ce0ec6a5" name="liblvm2cmd2_03" arch="aarch64">
  <version epoch="0" ver="2.03.22" rel="150500.7.9.1"/>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6753)
  - device-mapper version upgrade to 1.02.196
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="16beef4a9ec3bb396cb99ca67d923886e3f136793682a13ce66fbe18bb70f3c2" name="liblvm2cmd2_03" arch="s390x">
  <version epoch="0" ver="2.03.22" rel="150500.7.9.1"/>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6753)
  - device-mapper version upgrade to 1.02.196
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="f1b7f956a64c5ad2eadff08572347f2760f60f107cc62eda4e40257e23380604" name="liblvm2cmd2_03" arch="x86_64">
  <version epoch="0" ver="2.03.22" rel="150500.7.9.1"/>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6753)
  - device-mapper version upgrade to 1.02.196
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="0b58cfe72d0dbac8e4f81ff1000b65910fa8c3b6758838a48001996a1ddf14d3" name="libmount1" arch="aarch64">
  <version epoch="0" ver="2.37.4" rel="150500.9.3.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="931127631c9f944e0b96ee70479c7bb90961df208a501aa777a96b39ee4b1d28" name="libmount1" arch="s390x">
  <version epoch="0" ver="2.37.4" rel="150500.9.3.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="d4bd799db08286a3822e93843d3b87c5241bbada5e082fabe6ba74e9c5aeba04" name="libmount1" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="150500.9.3.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="6c809c68b2f94526054eb32d9dcfbf30125d25e62c6d3a8b49b0ea73a9b53599" name="libmpath0" arch="aarch64">
  <version epoch="0" ver="0.9.4+77+suse.1f7a63b" rel="150500.3.6.1"/>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1662206400">- Update to version 0.9.0+134+suse.dbf2e2d:
  * Add multipathc command under GPL3.0, and split off libmpathutil
    (bsc#1202616)
  * Fix command completion in interactive mode (bsc#1201483)
  * multipathd: fix use-after-free in handle_path_wwid_change()
    (bsc#1201483)
  * Improve startup time for very large multipath.conf (bsc#1200523)
  * Avoid checker blocking event handling for huge number of devices
    (boo#1203085)
  * Cleanup sysfs accessors in libmultipath
  * Minor upstream bug fixes
  * Spelling fixes
  * Documentation: add ALUA info to README.md, delete README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1662552000">- Update to version 0.9.1+48+suse.9c6c435:
  * Upstream version update
  * kpartx_id: remove bashism
  * Doc: add multipathc.8 manual page</changelog>
  <changelog author="mwilck@suse.com" date="1662724800">- Update to version 0.9.1+52+suse.be8809e:
  * Code-identical to 0.9.1+48+suse.9c6c435 (merge in git repo
    to preserve history; fix revision in _service file).</changelog>
  <changelog author="mwilck@suse.com" date="1666612800">- Update to version 0.9.2+57+suse.cf3c1e9:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * Upstream bug fixes and hwtable updates
- Drop recompress.service, it just slows down build</changelog>
  <changelog author="mwilck@suse.com" date="1666785600">- Update to version 0.9.2+59+suse.ac8942d:
  * Fix segfault in "multipath -t" command (boo#1204731)</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 0.9.4+68+suse.98559ea:
  * libmultipath: bump ABI version to 18.0.0
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * libmultipath: don't leak memory on invalid strings  (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * minor bugfixes
  * hwtable fixes
  * Build system rework
  * spec file: adapt make command line to changes in build system
  * spec file: use make -Orecurse (better readable output)
  * spec file: use verbose build</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.4+71+suse.c648a77:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.4+73+suse.a5414a6:
  * libmultipath: ignore nvme devices if nvme native multipath is enabled
    (bsc#1212854)
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)
    Note: this changes user-visible behavior. multipathd will not
    grab any nvme devices for dm-multipath if nvme native multipathing
    is on (which is the default on SLE and openSUSE).</changelog>
  <changelog author="mwilck@suse.com" date="1704456000">- Update to version 0.9.4+77+suse.1f7a63b:
  * fix ANA prioritizer enablement logic (bsc#1218326)</changelog>
</package>
<package pkgid="a0514b871eab3a25036e6c9d78cadd6ab343cbaba71e8cf597f92d0ad241b497" name="libmpath0" arch="s390x">
  <version epoch="0" ver="0.9.4+77+suse.1f7a63b" rel="150500.3.6.1"/>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1662206400">- Update to version 0.9.0+134+suse.dbf2e2d:
  * Add multipathc command under GPL3.0, and split off libmpathutil
    (bsc#1202616)
  * Fix command completion in interactive mode (bsc#1201483)
  * multipathd: fix use-after-free in handle_path_wwid_change()
    (bsc#1201483)
  * Improve startup time for very large multipath.conf (bsc#1200523)
  * Avoid checker blocking event handling for huge number of devices
    (boo#1203085)
  * Cleanup sysfs accessors in libmultipath
  * Minor upstream bug fixes
  * Spelling fixes
  * Documentation: add ALUA info to README.md, delete README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1662552000">- Update to version 0.9.1+48+suse.9c6c435:
  * Upstream version update
  * kpartx_id: remove bashism
  * Doc: add multipathc.8 manual page</changelog>
  <changelog author="mwilck@suse.com" date="1662724800">- Update to version 0.9.1+52+suse.be8809e:
  * Code-identical to 0.9.1+48+suse.9c6c435 (merge in git repo
    to preserve history; fix revision in _service file).</changelog>
  <changelog author="mwilck@suse.com" date="1666612800">- Update to version 0.9.2+57+suse.cf3c1e9:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * Upstream bug fixes and hwtable updates
- Drop recompress.service, it just slows down build</changelog>
  <changelog author="mwilck@suse.com" date="1666785600">- Update to version 0.9.2+59+suse.ac8942d:
  * Fix segfault in "multipath -t" command (boo#1204731)</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 0.9.4+68+suse.98559ea:
  * libmultipath: bump ABI version to 18.0.0
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * libmultipath: don't leak memory on invalid strings  (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * minor bugfixes
  * hwtable fixes
  * Build system rework
  * spec file: adapt make command line to changes in build system
  * spec file: use make -Orecurse (better readable output)
  * spec file: use verbose build</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.4+71+suse.c648a77:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.4+73+suse.a5414a6:
  * libmultipath: ignore nvme devices if nvme native multipath is enabled
    (bsc#1212854)
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)
    Note: this changes user-visible behavior. multipathd will not
    grab any nvme devices for dm-multipath if nvme native multipathing
    is on (which is the default on SLE and openSUSE).</changelog>
  <changelog author="mwilck@suse.com" date="1704456000">- Update to version 0.9.4+77+suse.1f7a63b:
  * fix ANA prioritizer enablement logic (bsc#1218326)</changelog>
</package>
<package pkgid="957b457288164c4dc20ec7a5d56371e8eb3362a571b7e3ebfb12661c3cc7c44e" name="libmpath0" arch="x86_64">
  <version epoch="0" ver="0.9.4+77+suse.1f7a63b" rel="150500.3.6.1"/>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1662206400">- Update to version 0.9.0+134+suse.dbf2e2d:
  * Add multipathc command under GPL3.0, and split off libmpathutil
    (bsc#1202616)
  * Fix command completion in interactive mode (bsc#1201483)
  * multipathd: fix use-after-free in handle_path_wwid_change()
    (bsc#1201483)
  * Improve startup time for very large multipath.conf (bsc#1200523)
  * Avoid checker blocking event handling for huge number of devices
    (boo#1203085)
  * Cleanup sysfs accessors in libmultipath
  * Minor upstream bug fixes
  * Spelling fixes
  * Documentation: add ALUA info to README.md, delete README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1662552000">- Update to version 0.9.1+48+suse.9c6c435:
  * Upstream version update
  * kpartx_id: remove bashism
  * Doc: add multipathc.8 manual page</changelog>
  <changelog author="mwilck@suse.com" date="1662724800">- Update to version 0.9.1+52+suse.be8809e:
  * Code-identical to 0.9.1+48+suse.9c6c435 (merge in git repo
    to preserve history; fix revision in _service file).</changelog>
  <changelog author="mwilck@suse.com" date="1666612800">- Update to version 0.9.2+57+suse.cf3c1e9:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * Upstream bug fixes and hwtable updates
- Drop recompress.service, it just slows down build</changelog>
  <changelog author="mwilck@suse.com" date="1666785600">- Update to version 0.9.2+59+suse.ac8942d:
  * Fix segfault in "multipath -t" command (boo#1204731)</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 0.9.4+68+suse.98559ea:
  * libmultipath: bump ABI version to 18.0.0
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * libmultipath: don't leak memory on invalid strings  (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * minor bugfixes
  * hwtable fixes
  * Build system rework
  * spec file: adapt make command line to changes in build system
  * spec file: use make -Orecurse (better readable output)
  * spec file: use verbose build</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.4+71+suse.c648a77:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.4+73+suse.a5414a6:
  * libmultipath: ignore nvme devices if nvme native multipath is enabled
    (bsc#1212854)
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)
    Note: this changes user-visible behavior. multipathd will not
    grab any nvme devices for dm-multipath if nvme native multipathing
    is on (which is the default on SLE and openSUSE).</changelog>
  <changelog author="mwilck@suse.com" date="1704456000">- Update to version 0.9.4+77+suse.1f7a63b:
  * fix ANA prioritizer enablement logic (bsc#1218326)</changelog>
</package>
<package pkgid="e899f54706dec122505b3fff52596d818f53ce4ba45128c9068e086574f2fd3d" name="libncurses6" arch="aarch64">
  <version epoch="0" ver="6.1" rel="150000.5.20.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()</changelog>
</package>
<package pkgid="be76d861790671d4af781d109c43597cb7c02d95275a5273a4d787706858d329" name="libncurses6" arch="s390x">
  <version epoch="0" ver="6.1" rel="150000.5.20.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()</changelog>
</package>
<package pkgid="82c089cffb45d74dbb0ef918523e989d4970a349d95299f198301325abb04f71" name="libncurses6" arch="x86_64">
  <version epoch="0" ver="6.1" rel="150000.5.20.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()</changelog>
</package>
<package pkgid="9fa4d108db22e8d288e0dcb12ab14713f39c024258c10f435557b8c94a925a42" name="libnghttp2-14" arch="aarch64">
  <version epoch="0" ver="1.40.0" rel="150200.12.1"/>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513
  “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1697716800">- security update
- added patches
  fix CVE-2023-44487 [bsc#1216123], HTTP/2 Rapid Reset Attack
  + nghttp2-CVE-2023-44487.patch</changelog>
</package>
<package pkgid="e1a8df7b3ff89df83cb20ad50618c53e82016a8962f203e267a7f406dc61b87b" name="libnghttp2-14" arch="s390x">
  <version epoch="0" ver="1.40.0" rel="150200.12.1"/>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513
  “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1697716800">- security update
- added patches
  fix CVE-2023-44487 [bsc#1216123], HTTP/2 Rapid Reset Attack
  + nghttp2-CVE-2023-44487.patch</changelog>
</package>
<package pkgid="6625e233bc93d47e048dfc9d7a6df96a473a542f95815dae87f5c0db80dd532c" name="libnghttp2-14" arch="x86_64">
  <version epoch="0" ver="1.40.0" rel="150200.12.1"/>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513
  “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1697716800">- security update
- added patches
  fix CVE-2023-44487 [bsc#1216123], HTTP/2 Rapid Reset Attack
  + nghttp2-CVE-2023-44487.patch</changelog>
</package>
<package pkgid="b05ed6aeeddea15d818d13f733f8f9b67b2342608460f021cb3eea0d8802e83d" name="libnghttp2-14" arch="aarch64">
  <version epoch="0" ver="1.40.0" rel="150200.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513
  “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
</package>
<package pkgid="412ca9a7dd0421ac72ca85359edc606782c9545efce85a35284f3631d3474f0e" name="libnghttp2-14" arch="s390x">
  <version epoch="0" ver="1.40.0" rel="150200.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513
  “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
</package>
<package pkgid="f0cc94cda0cf8f7b3964eee020fd9e9afd5e9f8ee00f3e97a240c75b2bf8e572" name="libnghttp2-14" arch="x86_64">
  <version epoch="0" ver="1.40.0" rel="150200.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513
  “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
</package>
<package pkgid="387c0ff86d137ba5cae05c1b755d54a9d8516dbb6568aef794e2c7cef0cb7aed" name="libnm0" arch="aarch64">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="514ef20a72c8bb4b93c008013e8a917a3c611acdbf6c65bf4ff5bf61ee93cb5e" name="libnm0" arch="s390x">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="96110d732e8338242809c9479614abd74eaf18fb06ed415ab528f670d16c267f" name="libnm0" arch="x86_64">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="2b47a16f8dd5ae1a5c5519b34f54fc172a7fc56d4a03f92612d59d697393b7cf" name="libnvme" arch="src">
  <version epoch="0" ver="1.4+29.ga3cf0a" rel="150500.4.9.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 1.2 (jsc#PED-553):
  * 64-bit Reference Tags and TP-4068 changes
  * Add more details for return code of MI admin cmds
  * Fix poll.h includes
  * Parse dhchap_host_key on controller level
  * Regenerate all documentation
  * Update json config schema for missing dhchap host key
  * build: Add support to build against LibreSSL
  * build: Drop -nostdinc for LibreSSL header checks
  * fabrics: Add new TP8010 definitions
  * fabrics: Add nvmf_get_discovery_wargs()
  * fabrics: Duplicate strings when merging configs
  * fabrics: Filter out empty strings in add_argument()
  * fabrics: Fix build_options() return values
  * fabrics: Use fallthrough statement
  * fabrics: sanitize dump-config output
  * ioctl: Honor rae in nvme_get_nsid_log
  * ioctl: Set log page offset for nvme_get_log_telemetry_host
  * json-schema: add dhchap_key details to host section
  * json: Enforce correctly formatted JSON config files
  * json: Verify JSON config file starts with an array
  * json: fixup dhchap_ctrl_key definitions
  * libnvme-mi: Introduce NVMe Managament Interface library
  * mi-mctp: Add timeout support to MCTP transport
  * mi: Add Get Log Page helpers
  * mi: Add Identify function for secondary controller list
  * mi: Add Identify helper for ns-descs and primary-ctrl-caps
  * mi: Add endpoint get/set timeout API
  * mi: Add firmware download and commit commands
  * mi: Add identify helper for nsid-capable Controller List
  * mi: Add identify helpers for namespace lists
  * mi: Add identify helpers for namespaces
  * mi: Add maximum More Processing Required limit API
  * mi: Allow Admin-message sized More Processing Required responses
  * mi: Distinguish MI status from NVMe (CDW3) status
  * mi: Fix C++ compiler errors
  * mi: Implement Format NVM command
  * mi: Implement Get &amp; Set Features Admin commands
  * mi: Implement NS attach command and helpers
  * mi: Implement Namespace Management command and create/delete helpers
  * mi: Implement Sanitize command
  * mi: Init ctrl_id within xfer
  * mi: Introduce a helper for response status, unify values with ioctls
  * mi: Set log page offset for nvme_get_log_telemetry_host
  * mi: add nvme_mi_status_to_string()
  * mi: fix a memory leak in nvme_mi_open_mctp()
  * mi: fix get_log_page chunked offset check
  * mi: unify MI Get Log Page function with ioctl API
  * nvme-tree: avoid segfault if auth keys are unavailable
  * python: Use nvmf_get_discovery_wargs()
  * python: add missing ctrl attrs to Python bindings
  * rpmbuild: Enable 'make rpm' to build rpm pkgs #408
  * tree: rename controller 'dhchap_key' to 'dhchap_ctrl_key'
  * types: Move enum nvme_data_tfr to types
  * update/cleanup of documentation
  * util: Add LINE_MAX define
  * util: Add get feature length 2 API to support direction parameter
  * util: Add simple UUID type
  * util: Do not expose fallthrough defines
  * various build fixes
  * various fixes reported by coverity
- Drop upstream patches
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
- Make man page build conditiional. Install man page location has been
  fixed upstream.
- Mark the Python directory own by the libnvme3-python package
- Use fixed manpage build date (boo#1047218)
- Fix installation of manual pages to make them accessible</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 1.2+1.g41e1016:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Use symbol version LIBNVME_1_2_1 for nbft support options
  * 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
  * added %test section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1685016000">- Update to version v1.4 (jsc#PED-553 jsc#PED-3884)
  - Fix invalid string lenght calculcation for UUID (bsc#1209906)
  * fabrics: Fix bad UUID size introduced in recent UUID changes
  - Fix segmentation fault during garbage collection (bsc#1209905)
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
  - Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
  - Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
  - Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
  * test: mi: Explicitly zero args for test API invocations
- Replaced old nbft implementation with the upstream one
- Applied nbft symbol patch directly
  * remove 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
- Don't enable TLS if kernel does not support it (git-fixes)
  * fabrics: Do not pass unsupported options to kernel
- Set version-tag so that version are correctly reported</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 1.4+27.g5ae1c3:
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * nvme-tree: avoid warning in 'list-subsys' (bsc#bsc#1212598)
  * tree: Scan all subsystems (bsc#bsc#1212598)
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
  * fabrics: check genctr after getting discovery entries (bsc#1213618)
  * ioctl: fix RAE bit on last Get Log Page command (bsc#1213618)</changelog>
  <changelog author="dwagner@suse.de" date="1693915200">- Update to version 1.4+29.ga3cf0a:
  * tree: fix segfault in nvme_scan_subsystem() (bsc#1213993)
  * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool (bsc#1213993)</changelog>
</package>
<package pkgid="7389efae7ae241e8456bd58b68b9e7539ff4e58747dc507a95ad9cc63e54aead" name="libnvme-mi1" arch="aarch64">
  <version epoch="0" ver="1.4+29.ga3cf0a" rel="150500.4.9.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 1.2 (jsc#PED-553):
  * 64-bit Reference Tags and TP-4068 changes
  * Add more details for return code of MI admin cmds
  * Fix poll.h includes
  * Parse dhchap_host_key on controller level
  * Regenerate all documentation
  * Update json config schema for missing dhchap host key
  * build: Add support to build against LibreSSL
  * build: Drop -nostdinc for LibreSSL header checks
  * fabrics: Add new TP8010 definitions
  * fabrics: Add nvmf_get_discovery_wargs()
  * fabrics: Duplicate strings when merging configs
  * fabrics: Filter out empty strings in add_argument()
  * fabrics: Fix build_options() return values
  * fabrics: Use fallthrough statement
  * fabrics: sanitize dump-config output
  * ioctl: Honor rae in nvme_get_nsid_log
  * ioctl: Set log page offset for nvme_get_log_telemetry_host
  * json-schema: add dhchap_key details to host section
  * json: Enforce correctly formatted JSON config files
  * json: Verify JSON config file starts with an array
  * json: fixup dhchap_ctrl_key definitions
  * libnvme-mi: Introduce NVMe Managament Interface library
  * mi-mctp: Add timeout support to MCTP transport
  * mi: Add Get Log Page helpers
  * mi: Add Identify function for secondary controller list
  * mi: Add Identify helper for ns-descs and primary-ctrl-caps
  * mi: Add endpoint get/set timeout API
  * mi: Add firmware download and commit commands
  * mi: Add identify helper for nsid-capable Controller List
  * mi: Add identify helpers for namespace lists
  * mi: Add identify helpers for namespaces
  * mi: Add maximum More Processing Required limit API
  * mi: Allow Admin-message sized More Processing Required responses
  * mi: Distinguish MI status from NVMe (CDW3) status
  * mi: Fix C++ compiler errors
  * mi: Implement Format NVM command
  * mi: Implement Get &amp; Set Features Admin commands
  * mi: Implement NS attach command and helpers
  * mi: Implement Namespace Management command and create/delete helpers
  * mi: Implement Sanitize command
  * mi: Init ctrl_id within xfer
  * mi: Introduce a helper for response status, unify values with ioctls
  * mi: Set log page offset for nvme_get_log_telemetry_host
  * mi: add nvme_mi_status_to_string()
  * mi: fix a memory leak in nvme_mi_open_mctp()
  * mi: fix get_log_page chunked offset check
  * mi: unify MI Get Log Page function with ioctl API
  * nvme-tree: avoid segfault if auth keys are unavailable
  * python: Use nvmf_get_discovery_wargs()
  * python: add missing ctrl attrs to Python bindings
  * rpmbuild: Enable 'make rpm' to build rpm pkgs #408
  * tree: rename controller 'dhchap_key' to 'dhchap_ctrl_key'
  * types: Move enum nvme_data_tfr to types
  * update/cleanup of documentation
  * util: Add LINE_MAX define
  * util: Add get feature length 2 API to support direction parameter
  * util: Add simple UUID type
  * util: Do not expose fallthrough defines
  * various build fixes
  * various fixes reported by coverity
- Drop upstream patches
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
- Make man page build conditiional. Install man page location has been
  fixed upstream.
- Mark the Python directory own by the libnvme3-python package
- Use fixed manpage build date (boo#1047218)
- Fix installation of manual pages to make them accessible</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 1.2+1.g41e1016:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Use symbol version LIBNVME_1_2_1 for nbft support options
  * 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
  * added %test section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1685016000">- Update to version v1.4 (jsc#PED-553 jsc#PED-3884)
  - Fix invalid string lenght calculcation for UUID (bsc#1209906)
  * fabrics: Fix bad UUID size introduced in recent UUID changes
  - Fix segmentation fault during garbage collection (bsc#1209905)
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
  - Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
  - Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
  - Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
  * test: mi: Explicitly zero args for test API invocations
- Replaced old nbft implementation with the upstream one
- Applied nbft symbol patch directly
  * remove 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
- Don't enable TLS if kernel does not support it (git-fixes)
  * fabrics: Do not pass unsupported options to kernel
- Set version-tag so that version are correctly reported</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 1.4+27.g5ae1c3:
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * nvme-tree: avoid warning in 'list-subsys' (bsc#bsc#1212598)
  * tree: Scan all subsystems (bsc#bsc#1212598)
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
  * fabrics: check genctr after getting discovery entries (bsc#1213618)
  * ioctl: fix RAE bit on last Get Log Page command (bsc#1213618)</changelog>
  <changelog author="dwagner@suse.de" date="1693915200">- Update to version 1.4+29.ga3cf0a:
  * tree: fix segfault in nvme_scan_subsystem() (bsc#1213993)
  * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool (bsc#1213993)</changelog>
</package>
<package pkgid="f55ea955a7c5d7bf882cde45251884b7cb8c592aa4c85399c13eb554e6fdc98b" name="libnvme-mi1" arch="s390x">
  <version epoch="0" ver="1.4+29.ga3cf0a" rel="150500.4.9.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 1.2 (jsc#PED-553):
  * 64-bit Reference Tags and TP-4068 changes
  * Add more details for return code of MI admin cmds
  * Fix poll.h includes
  * Parse dhchap_host_key on controller level
  * Regenerate all documentation
  * Update json config schema for missing dhchap host key
  * build: Add support to build against LibreSSL
  * build: Drop -nostdinc for LibreSSL header checks
  * fabrics: Add new TP8010 definitions
  * fabrics: Add nvmf_get_discovery_wargs()
  * fabrics: Duplicate strings when merging configs
  * fabrics: Filter out empty strings in add_argument()
  * fabrics: Fix build_options() return values
  * fabrics: Use fallthrough statement
  * fabrics: sanitize dump-config output
  * ioctl: Honor rae in nvme_get_nsid_log
  * ioctl: Set log page offset for nvme_get_log_telemetry_host
  * json-schema: add dhchap_key details to host section
  * json: Enforce correctly formatted JSON config files
  * json: Verify JSON config file starts with an array
  * json: fixup dhchap_ctrl_key definitions
  * libnvme-mi: Introduce NVMe Managament Interface library
  * mi-mctp: Add timeout support to MCTP transport
  * mi: Add Get Log Page helpers
  * mi: Add Identify function for secondary controller list
  * mi: Add Identify helper for ns-descs and primary-ctrl-caps
  * mi: Add endpoint get/set timeout API
  * mi: Add firmware download and commit commands
  * mi: Add identify helper for nsid-capable Controller List
  * mi: Add identify helpers for namespace lists
  * mi: Add identify helpers for namespaces
  * mi: Add maximum More Processing Required limit API
  * mi: Allow Admin-message sized More Processing Required responses
  * mi: Distinguish MI status from NVMe (CDW3) status
  * mi: Fix C++ compiler errors
  * mi: Implement Format NVM command
  * mi: Implement Get &amp; Set Features Admin commands
  * mi: Implement NS attach command and helpers
  * mi: Implement Namespace Management command and create/delete helpers
  * mi: Implement Sanitize command
  * mi: Init ctrl_id within xfer
  * mi: Introduce a helper for response status, unify values with ioctls
  * mi: Set log page offset for nvme_get_log_telemetry_host
  * mi: add nvme_mi_status_to_string()
  * mi: fix a memory leak in nvme_mi_open_mctp()
  * mi: fix get_log_page chunked offset check
  * mi: unify MI Get Log Page function with ioctl API
  * nvme-tree: avoid segfault if auth keys are unavailable
  * python: Use nvmf_get_discovery_wargs()
  * python: add missing ctrl attrs to Python bindings
  * rpmbuild: Enable 'make rpm' to build rpm pkgs #408
  * tree: rename controller 'dhchap_key' to 'dhchap_ctrl_key'
  * types: Move enum nvme_data_tfr to types
  * update/cleanup of documentation
  * util: Add LINE_MAX define
  * util: Add get feature length 2 API to support direction parameter
  * util: Add simple UUID type
  * util: Do not expose fallthrough defines
  * various build fixes
  * various fixes reported by coverity
- Drop upstream patches
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
- Make man page build conditiional. Install man page location has been
  fixed upstream.
- Mark the Python directory own by the libnvme3-python package
- Use fixed manpage build date (boo#1047218)
- Fix installation of manual pages to make them accessible</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 1.2+1.g41e1016:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Use symbol version LIBNVME_1_2_1 for nbft support options
  * 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
  * added %test section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1685016000">- Update to version v1.4 (jsc#PED-553 jsc#PED-3884)
  - Fix invalid string lenght calculcation for UUID (bsc#1209906)
  * fabrics: Fix bad UUID size introduced in recent UUID changes
  - Fix segmentation fault during garbage collection (bsc#1209905)
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
  - Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
  - Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
  - Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
  * test: mi: Explicitly zero args for test API invocations
- Replaced old nbft implementation with the upstream one
- Applied nbft symbol patch directly
  * remove 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
- Don't enable TLS if kernel does not support it (git-fixes)
  * fabrics: Do not pass unsupported options to kernel
- Set version-tag so that version are correctly reported</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 1.4+27.g5ae1c3:
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * nvme-tree: avoid warning in 'list-subsys' (bsc#bsc#1212598)
  * tree: Scan all subsystems (bsc#bsc#1212598)
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
  * fabrics: check genctr after getting discovery entries (bsc#1213618)
  * ioctl: fix RAE bit on last Get Log Page command (bsc#1213618)</changelog>
  <changelog author="dwagner@suse.de" date="1693915200">- Update to version 1.4+29.ga3cf0a:
  * tree: fix segfault in nvme_scan_subsystem() (bsc#1213993)
  * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool (bsc#1213993)</changelog>
</package>
<package pkgid="b47ad515fd050126c06f86f304dc0b22a98fbcc2ccaf15422629af110811d7e6" name="libnvme-mi1" arch="x86_64">
  <version epoch="0" ver="1.4+29.ga3cf0a" rel="150500.4.9.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 1.2 (jsc#PED-553):
  * 64-bit Reference Tags and TP-4068 changes
  * Add more details for return code of MI admin cmds
  * Fix poll.h includes
  * Parse dhchap_host_key on controller level
  * Regenerate all documentation
  * Update json config schema for missing dhchap host key
  * build: Add support to build against LibreSSL
  * build: Drop -nostdinc for LibreSSL header checks
  * fabrics: Add new TP8010 definitions
  * fabrics: Add nvmf_get_discovery_wargs()
  * fabrics: Duplicate strings when merging configs
  * fabrics: Filter out empty strings in add_argument()
  * fabrics: Fix build_options() return values
  * fabrics: Use fallthrough statement
  * fabrics: sanitize dump-config output
  * ioctl: Honor rae in nvme_get_nsid_log
  * ioctl: Set log page offset for nvme_get_log_telemetry_host
  * json-schema: add dhchap_key details to host section
  * json: Enforce correctly formatted JSON config files
  * json: Verify JSON config file starts with an array
  * json: fixup dhchap_ctrl_key definitions
  * libnvme-mi: Introduce NVMe Managament Interface library
  * mi-mctp: Add timeout support to MCTP transport
  * mi: Add Get Log Page helpers
  * mi: Add Identify function for secondary controller list
  * mi: Add Identify helper for ns-descs and primary-ctrl-caps
  * mi: Add endpoint get/set timeout API
  * mi: Add firmware download and commit commands
  * mi: Add identify helper for nsid-capable Controller List
  * mi: Add identify helpers for namespace lists
  * mi: Add identify helpers for namespaces
  * mi: Add maximum More Processing Required limit API
  * mi: Allow Admin-message sized More Processing Required responses
  * mi: Distinguish MI status from NVMe (CDW3) status
  * mi: Fix C++ compiler errors
  * mi: Implement Format NVM command
  * mi: Implement Get &amp; Set Features Admin commands
  * mi: Implement NS attach command and helpers
  * mi: Implement Namespace Management command and create/delete helpers
  * mi: Implement Sanitize command
  * mi: Init ctrl_id within xfer
  * mi: Introduce a helper for response status, unify values with ioctls
  * mi: Set log page offset for nvme_get_log_telemetry_host
  * mi: add nvme_mi_status_to_string()
  * mi: fix a memory leak in nvme_mi_open_mctp()
  * mi: fix get_log_page chunked offset check
  * mi: unify MI Get Log Page function with ioctl API
  * nvme-tree: avoid segfault if auth keys are unavailable
  * python: Use nvmf_get_discovery_wargs()
  * python: add missing ctrl attrs to Python bindings
  * rpmbuild: Enable 'make rpm' to build rpm pkgs #408
  * tree: rename controller 'dhchap_key' to 'dhchap_ctrl_key'
  * types: Move enum nvme_data_tfr to types
  * update/cleanup of documentation
  * util: Add LINE_MAX define
  * util: Add get feature length 2 API to support direction parameter
  * util: Add simple UUID type
  * util: Do not expose fallthrough defines
  * various build fixes
  * various fixes reported by coverity
- Drop upstream patches
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
- Make man page build conditiional. Install man page location has been
  fixed upstream.
- Mark the Python directory own by the libnvme3-python package
- Use fixed manpage build date (boo#1047218)
- Fix installation of manual pages to make them accessible</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 1.2+1.g41e1016:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Use symbol version LIBNVME_1_2_1 for nbft support options
  * 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
  * added %test section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1685016000">- Update to version v1.4 (jsc#PED-553 jsc#PED-3884)
  - Fix invalid string lenght calculcation for UUID (bsc#1209906)
  * fabrics: Fix bad UUID size introduced in recent UUID changes
  - Fix segmentation fault during garbage collection (bsc#1209905)
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
  - Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
  - Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
  - Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
  * test: mi: Explicitly zero args for test API invocations
- Replaced old nbft implementation with the upstream one
- Applied nbft symbol patch directly
  * remove 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
- Don't enable TLS if kernel does not support it (git-fixes)
  * fabrics: Do not pass unsupported options to kernel
- Set version-tag so that version are correctly reported</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 1.4+27.g5ae1c3:
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * nvme-tree: avoid warning in 'list-subsys' (bsc#bsc#1212598)
  * tree: Scan all subsystems (bsc#bsc#1212598)
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
  * fabrics: check genctr after getting discovery entries (bsc#1213618)
  * ioctl: fix RAE bit on last Get Log Page command (bsc#1213618)</changelog>
  <changelog author="dwagner@suse.de" date="1693915200">- Update to version 1.4+29.ga3cf0a:
  * tree: fix segfault in nvme_scan_subsystem() (bsc#1213993)
  * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool (bsc#1213993)</changelog>
</package>
<package pkgid="7284663085c488a8b5986a6c10dd8c14b41712efdec0d2296257d5efc1a91876" name="libnvme1" arch="aarch64">
  <version epoch="0" ver="1.4+29.ga3cf0a" rel="150500.4.9.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 1.2 (jsc#PED-553):
  * 64-bit Reference Tags and TP-4068 changes
  * Add more details for return code of MI admin cmds
  * Fix poll.h includes
  * Parse dhchap_host_key on controller level
  * Regenerate all documentation
  * Update json config schema for missing dhchap host key
  * build: Add support to build against LibreSSL
  * build: Drop -nostdinc for LibreSSL header checks
  * fabrics: Add new TP8010 definitions
  * fabrics: Add nvmf_get_discovery_wargs()
  * fabrics: Duplicate strings when merging configs
  * fabrics: Filter out empty strings in add_argument()
  * fabrics: Fix build_options() return values
  * fabrics: Use fallthrough statement
  * fabrics: sanitize dump-config output
  * ioctl: Honor rae in nvme_get_nsid_log
  * ioctl: Set log page offset for nvme_get_log_telemetry_host
  * json-schema: add dhchap_key details to host section
  * json: Enforce correctly formatted JSON config files
  * json: Verify JSON config file starts with an array
  * json: fixup dhchap_ctrl_key definitions
  * libnvme-mi: Introduce NVMe Managament Interface library
  * mi-mctp: Add timeout support to MCTP transport
  * mi: Add Get Log Page helpers
  * mi: Add Identify function for secondary controller list
  * mi: Add Identify helper for ns-descs and primary-ctrl-caps
  * mi: Add endpoint get/set timeout API
  * mi: Add firmware download and commit commands
  * mi: Add identify helper for nsid-capable Controller List
  * mi: Add identify helpers for namespace lists
  * mi: Add identify helpers for namespaces
  * mi: Add maximum More Processing Required limit API
  * mi: Allow Admin-message sized More Processing Required responses
  * mi: Distinguish MI status from NVMe (CDW3) status
  * mi: Fix C++ compiler errors
  * mi: Implement Format NVM command
  * mi: Implement Get &amp; Set Features Admin commands
  * mi: Implement NS attach command and helpers
  * mi: Implement Namespace Management command and create/delete helpers
  * mi: Implement Sanitize command
  * mi: Init ctrl_id within xfer
  * mi: Introduce a helper for response status, unify values with ioctls
  * mi: Set log page offset for nvme_get_log_telemetry_host
  * mi: add nvme_mi_status_to_string()
  * mi: fix a memory leak in nvme_mi_open_mctp()
  * mi: fix get_log_page chunked offset check
  * mi: unify MI Get Log Page function with ioctl API
  * nvme-tree: avoid segfault if auth keys are unavailable
  * python: Use nvmf_get_discovery_wargs()
  * python: add missing ctrl attrs to Python bindings
  * rpmbuild: Enable 'make rpm' to build rpm pkgs #408
  * tree: rename controller 'dhchap_key' to 'dhchap_ctrl_key'
  * types: Move enum nvme_data_tfr to types
  * update/cleanup of documentation
  * util: Add LINE_MAX define
  * util: Add get feature length 2 API to support direction parameter
  * util: Add simple UUID type
  * util: Do not expose fallthrough defines
  * various build fixes
  * various fixes reported by coverity
- Drop upstream patches
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
- Make man page build conditiional. Install man page location has been
  fixed upstream.
- Mark the Python directory own by the libnvme3-python package
- Use fixed manpage build date (boo#1047218)
- Fix installation of manual pages to make them accessible</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 1.2+1.g41e1016:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Use symbol version LIBNVME_1_2_1 for nbft support options
  * 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
  * added %test section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1685016000">- Update to version v1.4 (jsc#PED-553 jsc#PED-3884)
  - Fix invalid string lenght calculcation for UUID (bsc#1209906)
  * fabrics: Fix bad UUID size introduced in recent UUID changes
  - Fix segmentation fault during garbage collection (bsc#1209905)
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
  - Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
  - Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
  - Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
  * test: mi: Explicitly zero args for test API invocations
- Replaced old nbft implementation with the upstream one
- Applied nbft symbol patch directly
  * remove 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
- Don't enable TLS if kernel does not support it (git-fixes)
  * fabrics: Do not pass unsupported options to kernel
- Set version-tag so that version are correctly reported</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 1.4+27.g5ae1c3:
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * nvme-tree: avoid warning in 'list-subsys' (bsc#bsc#1212598)
  * tree: Scan all subsystems (bsc#bsc#1212598)
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
  * fabrics: check genctr after getting discovery entries (bsc#1213618)
  * ioctl: fix RAE bit on last Get Log Page command (bsc#1213618)</changelog>
  <changelog author="dwagner@suse.de" date="1693915200">- Update to version 1.4+29.ga3cf0a:
  * tree: fix segfault in nvme_scan_subsystem() (bsc#1213993)
  * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool (bsc#1213993)</changelog>
</package>
<package pkgid="ff6a4bd0aa557fd4e04fe049a7f91784cb7bfba28e829cae0a3dbcd956e569fd" name="libnvme1" arch="s390x">
  <version epoch="0" ver="1.4+29.ga3cf0a" rel="150500.4.9.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 1.2 (jsc#PED-553):
  * 64-bit Reference Tags and TP-4068 changes
  * Add more details for return code of MI admin cmds
  * Fix poll.h includes
  * Parse dhchap_host_key on controller level
  * Regenerate all documentation
  * Update json config schema for missing dhchap host key
  * build: Add support to build against LibreSSL
  * build: Drop -nostdinc for LibreSSL header checks
  * fabrics: Add new TP8010 definitions
  * fabrics: Add nvmf_get_discovery_wargs()
  * fabrics: Duplicate strings when merging configs
  * fabrics: Filter out empty strings in add_argument()
  * fabrics: Fix build_options() return values
  * fabrics: Use fallthrough statement
  * fabrics: sanitize dump-config output
  * ioctl: Honor rae in nvme_get_nsid_log
  * ioctl: Set log page offset for nvme_get_log_telemetry_host
  * json-schema: add dhchap_key details to host section
  * json: Enforce correctly formatted JSON config files
  * json: Verify JSON config file starts with an array
  * json: fixup dhchap_ctrl_key definitions
  * libnvme-mi: Introduce NVMe Managament Interface library
  * mi-mctp: Add timeout support to MCTP transport
  * mi: Add Get Log Page helpers
  * mi: Add Identify function for secondary controller list
  * mi: Add Identify helper for ns-descs and primary-ctrl-caps
  * mi: Add endpoint get/set timeout API
  * mi: Add firmware download and commit commands
  * mi: Add identify helper for nsid-capable Controller List
  * mi: Add identify helpers for namespace lists
  * mi: Add identify helpers for namespaces
  * mi: Add maximum More Processing Required limit API
  * mi: Allow Admin-message sized More Processing Required responses
  * mi: Distinguish MI status from NVMe (CDW3) status
  * mi: Fix C++ compiler errors
  * mi: Implement Format NVM command
  * mi: Implement Get &amp; Set Features Admin commands
  * mi: Implement NS attach command and helpers
  * mi: Implement Namespace Management command and create/delete helpers
  * mi: Implement Sanitize command
  * mi: Init ctrl_id within xfer
  * mi: Introduce a helper for response status, unify values with ioctls
  * mi: Set log page offset for nvme_get_log_telemetry_host
  * mi: add nvme_mi_status_to_string()
  * mi: fix a memory leak in nvme_mi_open_mctp()
  * mi: fix get_log_page chunked offset check
  * mi: unify MI Get Log Page function with ioctl API
  * nvme-tree: avoid segfault if auth keys are unavailable
  * python: Use nvmf_get_discovery_wargs()
  * python: add missing ctrl attrs to Python bindings
  * rpmbuild: Enable 'make rpm' to build rpm pkgs #408
  * tree: rename controller 'dhchap_key' to 'dhchap_ctrl_key'
  * types: Move enum nvme_data_tfr to types
  * update/cleanup of documentation
  * util: Add LINE_MAX define
  * util: Add get feature length 2 API to support direction parameter
  * util: Add simple UUID type
  * util: Do not expose fallthrough defines
  * various build fixes
  * various fixes reported by coverity
- Drop upstream patches
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
- Make man page build conditiional. Install man page location has been
  fixed upstream.
- Mark the Python directory own by the libnvme3-python package
- Use fixed manpage build date (boo#1047218)
- Fix installation of manual pages to make them accessible</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 1.2+1.g41e1016:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Use symbol version LIBNVME_1_2_1 for nbft support options
  * 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
  * added %test section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1685016000">- Update to version v1.4 (jsc#PED-553 jsc#PED-3884)
  - Fix invalid string lenght calculcation for UUID (bsc#1209906)
  * fabrics: Fix bad UUID size introduced in recent UUID changes
  - Fix segmentation fault during garbage collection (bsc#1209905)
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
  - Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
  - Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
  - Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
  * test: mi: Explicitly zero args for test API invocations
- Replaced old nbft implementation with the upstream one
- Applied nbft symbol patch directly
  * remove 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
- Don't enable TLS if kernel does not support it (git-fixes)
  * fabrics: Do not pass unsupported options to kernel
- Set version-tag so that version are correctly reported</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 1.4+27.g5ae1c3:
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * nvme-tree: avoid warning in 'list-subsys' (bsc#bsc#1212598)
  * tree: Scan all subsystems (bsc#bsc#1212598)
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
  * fabrics: check genctr after getting discovery entries (bsc#1213618)
  * ioctl: fix RAE bit on last Get Log Page command (bsc#1213618)</changelog>
  <changelog author="dwagner@suse.de" date="1693915200">- Update to version 1.4+29.ga3cf0a:
  * tree: fix segfault in nvme_scan_subsystem() (bsc#1213993)
  * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool (bsc#1213993)</changelog>
</package>
<package pkgid="426c27e24cb86ff6d94114219d9abeeddd4a679b43bda82c30cf8ef711a6fa3e" name="libnvme1" arch="x86_64">
  <version epoch="0" ver="1.4+29.ga3cf0a" rel="150500.4.9.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 1.2 (jsc#PED-553):
  * 64-bit Reference Tags and TP-4068 changes
  * Add more details for return code of MI admin cmds
  * Fix poll.h includes
  * Parse dhchap_host_key on controller level
  * Regenerate all documentation
  * Update json config schema for missing dhchap host key
  * build: Add support to build against LibreSSL
  * build: Drop -nostdinc for LibreSSL header checks
  * fabrics: Add new TP8010 definitions
  * fabrics: Add nvmf_get_discovery_wargs()
  * fabrics: Duplicate strings when merging configs
  * fabrics: Filter out empty strings in add_argument()
  * fabrics: Fix build_options() return values
  * fabrics: Use fallthrough statement
  * fabrics: sanitize dump-config output
  * ioctl: Honor rae in nvme_get_nsid_log
  * ioctl: Set log page offset for nvme_get_log_telemetry_host
  * json-schema: add dhchap_key details to host section
  * json: Enforce correctly formatted JSON config files
  * json: Verify JSON config file starts with an array
  * json: fixup dhchap_ctrl_key definitions
  * libnvme-mi: Introduce NVMe Managament Interface library
  * mi-mctp: Add timeout support to MCTP transport
  * mi: Add Get Log Page helpers
  * mi: Add Identify function for secondary controller list
  * mi: Add Identify helper for ns-descs and primary-ctrl-caps
  * mi: Add endpoint get/set timeout API
  * mi: Add firmware download and commit commands
  * mi: Add identify helper for nsid-capable Controller List
  * mi: Add identify helpers for namespace lists
  * mi: Add identify helpers for namespaces
  * mi: Add maximum More Processing Required limit API
  * mi: Allow Admin-message sized More Processing Required responses
  * mi: Distinguish MI status from NVMe (CDW3) status
  * mi: Fix C++ compiler errors
  * mi: Implement Format NVM command
  * mi: Implement Get &amp; Set Features Admin commands
  * mi: Implement NS attach command and helpers
  * mi: Implement Namespace Management command and create/delete helpers
  * mi: Implement Sanitize command
  * mi: Init ctrl_id within xfer
  * mi: Introduce a helper for response status, unify values with ioctls
  * mi: Set log page offset for nvme_get_log_telemetry_host
  * mi: add nvme_mi_status_to_string()
  * mi: fix a memory leak in nvme_mi_open_mctp()
  * mi: fix get_log_page chunked offset check
  * mi: unify MI Get Log Page function with ioctl API
  * nvme-tree: avoid segfault if auth keys are unavailable
  * python: Use nvmf_get_discovery_wargs()
  * python: add missing ctrl attrs to Python bindings
  * rpmbuild: Enable 'make rpm' to build rpm pkgs #408
  * tree: rename controller 'dhchap_key' to 'dhchap_ctrl_key'
  * types: Move enum nvme_data_tfr to types
  * update/cleanup of documentation
  * util: Add LINE_MAX define
  * util: Add get feature length 2 API to support direction parameter
  * util: Add simple UUID type
  * util: Do not expose fallthrough defines
  * various build fixes
  * various fixes reported by coverity
- Drop upstream patches
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
- Make man page build conditiional. Install man page location has been
  fixed upstream.
- Mark the Python directory own by the libnvme3-python package
- Use fixed manpage build date (boo#1047218)
- Fix installation of manual pages to make them accessible</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 1.2+1.g41e1016:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Use symbol version LIBNVME_1_2_1 for nbft support options
  * 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
  * added %test section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1685016000">- Update to version v1.4 (jsc#PED-553 jsc#PED-3884)
  - Fix invalid string lenght calculcation for UUID (bsc#1209906)
  * fabrics: Fix bad UUID size introduced in recent UUID changes
  - Fix segmentation fault during garbage collection (bsc#1209905)
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
  - Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
  - Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
  - Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
  * test: mi: Explicitly zero args for test API invocations
- Replaced old nbft implementation with the upstream one
- Applied nbft symbol patch directly
  * remove 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
- Don't enable TLS if kernel does not support it (git-fixes)
  * fabrics: Do not pass unsupported options to kernel
- Set version-tag so that version are correctly reported</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 1.4+27.g5ae1c3:
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * nvme-tree: avoid warning in 'list-subsys' (bsc#bsc#1212598)
  * tree: Scan all subsystems (bsc#bsc#1212598)
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
  * fabrics: check genctr after getting discovery entries (bsc#1213618)
  * ioctl: fix RAE bit on last Get Log Page command (bsc#1213618)</changelog>
  <changelog author="dwagner@suse.de" date="1693915200">- Update to version 1.4+29.ga3cf0a:
  * tree: fix segfault in nvme_scan_subsystem() (bsc#1213993)
  * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool (bsc#1213993)</changelog>
</package>
<package pkgid="2688fd4080941ed52e40cdad4c2a670ef088cfafb1ccbd2bbab2e801832996fa" name="libopeniscsiusr0" arch="aarch64">
  <version epoch="0" ver="0.2.0" rel="150500.46.3.1"/>
  <changelog author="lduncan@suse.com" date="1635163200">- Fix the usr-merge changes (bsc#1192013). This includes catching
  all the places that /sbin was still used directly, as well as
  making the SPEC file build using /usr/sbin for openSUSE but
  still use /sbin for SLE, for now.</changelog>
  <changelog author="lduncan@suse.com" date="1636632000">- Merged latest upstream. Mostly cleanup, but includes a fix for
  iscsi-init.service when trying to write to the root volume too
  early (bsc#1192568), as well as an upstream fix for possible
  deadlock when dealing with sysfs.</changelog>
  <changelog author="lduncan@suse.com" date="1644840000">- Updated to latest upstream 2.1.6 as 2.1.6-suse, which contains
  bug fixes and cleanups. See the Changelog for more details.</changelog>
  <changelog author="lduncan@suse.com" date="1646481600">- Update to latest upstream, including test cleanup, minor
  bug fixes (cosmetic), and fixing iscsi-init (bsc#1195656).</changelog>
  <changelog author="lduncan@suse.com" date="1649246400">- Updated to latest upstream, including bug fixes and cleanups.
  Changes included:
  * add handling name/value pairs for firmware login (bsc#1196113),
    including man page update for same
  * Fix bug where some package parts were installed using
    DESTDIR twice
  * general build cleanup (in prep for removing DB files from
    /etc/iscsi some day soon)
  Also, now delivering a "package config" file for libopeniscsiusr.</changelog>
  <changelog author="lduncan@suse.com" date="1651838400">- Updated to latest upstream version, tagged 2.1.7. Changes
  included:
  * updated/fixed test script
  * updated build system
  * several bug fixes, including one for bsc#1199264</changelog>
  <changelog author="lduncan@suse.com" date="1652097600">- Update to latest upstream, including:
  * Added 'distclean' to Makefile targets
  * Ensure Makefile '.PHONY' targets set up correctly
  * fix an iscsid logout bug generating a false error
    and cleanup logout error messages</changelog>
  <changelog author="lduncan@suse.com" date="1652443200">- Set initiatorname in %post (at end of install), for cases
  where root is read-only at startup time (bsc#1198457)</changelog>
  <changelog author="lduncan@suse.com" date="1655467200">- For Tumbleweed, moved logrotate files from user-specific
  directory /etc/logrotate.d to vendor-specific
  /usr/etc/logrotate.d
  (for Stefan Schubert &lt;schubi@suse.com&gt;)</changelog>
  <changelog author="lduncan@suse.com" date="1657108800">- Modify SPEC file so systemd unit files are mode 644 (not 755)
  (bsc#1200570)</changelog>
  <changelog author="lduncan@suse.com" date="1664193600">- Update to upstream version 2.1.8, which includes some bug fixes,
  and adds the ability to build using meson. The SPEC file was
  updated to use meson.
  Also, some files have moved:
  * the "lock" file has moved from /etc/iscsi to /var/lock/iscsi
  * the "database files" have moved from /etc/iscsi to
    /var/lib/iscsi</changelog>
  <changelog author="lduncan@suse.com" date="1668600000">- Updated to latest upstream. Changes:
  * iscsid/iscsiuio: fix OOM adjustment (github issue #377)</changelog>
  <changelog author="lduncan@suse.com" date="1670414400">- Moving DB files from /etc/iscsi/* to /var/lib/iscsi/* for
  SLE-15-SP5 and forward, as is done in Tumbleweed.
- Added /etc/iscsi/README.DB-files-moved, and added SPEC file
  changes to support this, including a post-install script to
  move the DB files, only installed if DB files are moved.
- Renamed shared library from libopeniscsiusr0_2_0 to
  libopeniscsiusr0, to correctly match SONAME in library.</changelog>
  <changelog author="lduncan@suse.com" date="1671451200">- Updated SPEC file dependencies for libopeniscsiusr to avoid
  conflicting package installation.</changelog>
  <changelog author="lduncan@suse.com" date="1671624000">- Update iscsid.service so it starts iscsid.socket, if needed
  (bsc#1206132).</changelog>
  <changelog author="lduncan@suse.com" date="1677326400">- Build system: meson builds were ignoring optflags, and other
  passed in compiler options.</changelog>
  <changelog author="lduncan@suse.com" date="1681732800">- Remove "--strip" in SPEC file for meson build, so that
  debuginfo is generated. (from mwilck) (bsc#1210536)</changelog>
  <changelog author="lduncan@suse.com" date="1686830400">- Upgrade to upstream version 2.1.9 with tag "2.1.9-suse"
  (bsc#1210514), replacing open-iscsi-2.1.8-suse.tar.bz2 with
  open-iscsi-2.1.9-suse.tar.bz2, and resetting
  open-iscsi-SUSE-latest.diff.bz2. A summary from the ChangeLog
  file:
  * Fix discoveryd compiler warning
  * Sync iscsi_if.h with kernel
  * Handle old DB records correctly
  * Make IQN configuration for iscsi-iname
  * remove OFFLOAD_BOOT_SUPPORTED, which is always true
  * Use UUID for IPC, not "root"
  * do not support SHA3 for libressl
  * build meson cleanups, including changing default DB home
  * Updated README about NOPs
  * Remove "BindTo" in systemd service file
  * Some iscsiuio fixes, including licensing and memory leaks
    (bsc#1210514)
  * Small netlink fixes
  * Fix OOM adjustment
  * Some error recovery fixes
  * Some spelling fixes</changelog>
  <changelog author="lduncan@suse.com" date="1687262400">- Fix iscsiuio build version by updating iscsiuio/meson.build
  and RPM SPEC file (bsc#1210514), updating
  open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1698235200">- Updated to latest upstream, which includes (bsc#1210514):
  * several fixes to harden iscsiuio, including:
  - logging now uses syslog
  - shutdown now waits for helper threads to complete
  - netlink socket cleanup
  * some minor bug fixes, some helping builds on musl
  This updates iscsiuio version to 0.7.8.8.
  This updates open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="a09e33bef6427dda0dcae758de3d197b4fc569188b91c691093f79d68a5ad345" name="libopeniscsiusr0" arch="s390x">
  <version epoch="0" ver="0.2.0" rel="150500.46.3.1"/>
  <changelog author="lduncan@suse.com" date="1635163200">- Fix the usr-merge changes (bsc#1192013). This includes catching
  all the places that /sbin was still used directly, as well as
  making the SPEC file build using /usr/sbin for openSUSE but
  still use /sbin for SLE, for now.</changelog>
  <changelog author="lduncan@suse.com" date="1636632000">- Merged latest upstream. Mostly cleanup, but includes a fix for
  iscsi-init.service when trying to write to the root volume too
  early (bsc#1192568), as well as an upstream fix for possible
  deadlock when dealing with sysfs.</changelog>
  <changelog author="lduncan@suse.com" date="1644840000">- Updated to latest upstream 2.1.6 as 2.1.6-suse, which contains
  bug fixes and cleanups. See the Changelog for more details.</changelog>
  <changelog author="lduncan@suse.com" date="1646481600">- Update to latest upstream, including test cleanup, minor
  bug fixes (cosmetic), and fixing iscsi-init (bsc#1195656).</changelog>
  <changelog author="lduncan@suse.com" date="1649246400">- Updated to latest upstream, including bug fixes and cleanups.
  Changes included:
  * add handling name/value pairs for firmware login (bsc#1196113),
    including man page update for same
  * Fix bug where some package parts were installed using
    DESTDIR twice
  * general build cleanup (in prep for removing DB files from
    /etc/iscsi some day soon)
  Also, now delivering a "package config" file for libopeniscsiusr.</changelog>
  <changelog author="lduncan@suse.com" date="1651838400">- Updated to latest upstream version, tagged 2.1.7. Changes
  included:
  * updated/fixed test script
  * updated build system
  * several bug fixes, including one for bsc#1199264</changelog>
  <changelog author="lduncan@suse.com" date="1652097600">- Update to latest upstream, including:
  * Added 'distclean' to Makefile targets
  * Ensure Makefile '.PHONY' targets set up correctly
  * fix an iscsid logout bug generating a false error
    and cleanup logout error messages</changelog>
  <changelog author="lduncan@suse.com" date="1652443200">- Set initiatorname in %post (at end of install), for cases
  where root is read-only at startup time (bsc#1198457)</changelog>
  <changelog author="lduncan@suse.com" date="1655467200">- For Tumbleweed, moved logrotate files from user-specific
  directory /etc/logrotate.d to vendor-specific
  /usr/etc/logrotate.d
  (for Stefan Schubert &lt;schubi@suse.com&gt;)</changelog>
  <changelog author="lduncan@suse.com" date="1657108800">- Modify SPEC file so systemd unit files are mode 644 (not 755)
  (bsc#1200570)</changelog>
  <changelog author="lduncan@suse.com" date="1664193600">- Update to upstream version 2.1.8, which includes some bug fixes,
  and adds the ability to build using meson. The SPEC file was
  updated to use meson.
  Also, some files have moved:
  * the "lock" file has moved from /etc/iscsi to /var/lock/iscsi
  * the "database files" have moved from /etc/iscsi to
    /var/lib/iscsi</changelog>
  <changelog author="lduncan@suse.com" date="1668600000">- Updated to latest upstream. Changes:
  * iscsid/iscsiuio: fix OOM adjustment (github issue #377)</changelog>
  <changelog author="lduncan@suse.com" date="1670414400">- Moving DB files from /etc/iscsi/* to /var/lib/iscsi/* for
  SLE-15-SP5 and forward, as is done in Tumbleweed.
- Added /etc/iscsi/README.DB-files-moved, and added SPEC file
  changes to support this, including a post-install script to
  move the DB files, only installed if DB files are moved.
- Renamed shared library from libopeniscsiusr0_2_0 to
  libopeniscsiusr0, to correctly match SONAME in library.</changelog>
  <changelog author="lduncan@suse.com" date="1671451200">- Updated SPEC file dependencies for libopeniscsiusr to avoid
  conflicting package installation.</changelog>
  <changelog author="lduncan@suse.com" date="1671624000">- Update iscsid.service so it starts iscsid.socket, if needed
  (bsc#1206132).</changelog>
  <changelog author="lduncan@suse.com" date="1677326400">- Build system: meson builds were ignoring optflags, and other
  passed in compiler options.</changelog>
  <changelog author="lduncan@suse.com" date="1681732800">- Remove "--strip" in SPEC file for meson build, so that
  debuginfo is generated. (from mwilck) (bsc#1210536)</changelog>
  <changelog author="lduncan@suse.com" date="1686830400">- Upgrade to upstream version 2.1.9 with tag "2.1.9-suse"
  (bsc#1210514), replacing open-iscsi-2.1.8-suse.tar.bz2 with
  open-iscsi-2.1.9-suse.tar.bz2, and resetting
  open-iscsi-SUSE-latest.diff.bz2. A summary from the ChangeLog
  file:
  * Fix discoveryd compiler warning
  * Sync iscsi_if.h with kernel
  * Handle old DB records correctly
  * Make IQN configuration for iscsi-iname
  * remove OFFLOAD_BOOT_SUPPORTED, which is always true
  * Use UUID for IPC, not "root"
  * do not support SHA3 for libressl
  * build meson cleanups, including changing default DB home
  * Updated README about NOPs
  * Remove "BindTo" in systemd service file
  * Some iscsiuio fixes, including licensing and memory leaks
    (bsc#1210514)
  * Small netlink fixes
  * Fix OOM adjustment
  * Some error recovery fixes
  * Some spelling fixes</changelog>
  <changelog author="lduncan@suse.com" date="1687262400">- Fix iscsiuio build version by updating iscsiuio/meson.build
  and RPM SPEC file (bsc#1210514), updating
  open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1698235200">- Updated to latest upstream, which includes (bsc#1210514):
  * several fixes to harden iscsiuio, including:
  - logging now uses syslog
  - shutdown now waits for helper threads to complete
  - netlink socket cleanup
  * some minor bug fixes, some helping builds on musl
  This updates iscsiuio version to 0.7.8.8.
  This updates open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="b03c9337f626b74c4a1628e7c118038c6da99958930dbdc490e6645da60e7d5f" name="libopeniscsiusr0" arch="x86_64">
  <version epoch="0" ver="0.2.0" rel="150500.46.3.1"/>
  <changelog author="lduncan@suse.com" date="1635163200">- Fix the usr-merge changes (bsc#1192013). This includes catching
  all the places that /sbin was still used directly, as well as
  making the SPEC file build using /usr/sbin for openSUSE but
  still use /sbin for SLE, for now.</changelog>
  <changelog author="lduncan@suse.com" date="1636632000">- Merged latest upstream. Mostly cleanup, but includes a fix for
  iscsi-init.service when trying to write to the root volume too
  early (bsc#1192568), as well as an upstream fix for possible
  deadlock when dealing with sysfs.</changelog>
  <changelog author="lduncan@suse.com" date="1644840000">- Updated to latest upstream 2.1.6 as 2.1.6-suse, which contains
  bug fixes and cleanups. See the Changelog for more details.</changelog>
  <changelog author="lduncan@suse.com" date="1646481600">- Update to latest upstream, including test cleanup, minor
  bug fixes (cosmetic), and fixing iscsi-init (bsc#1195656).</changelog>
  <changelog author="lduncan@suse.com" date="1649246400">- Updated to latest upstream, including bug fixes and cleanups.
  Changes included:
  * add handling name/value pairs for firmware login (bsc#1196113),
    including man page update for same
  * Fix bug where some package parts were installed using
    DESTDIR twice
  * general build cleanup (in prep for removing DB files from
    /etc/iscsi some day soon)
  Also, now delivering a "package config" file for libopeniscsiusr.</changelog>
  <changelog author="lduncan@suse.com" date="1651838400">- Updated to latest upstream version, tagged 2.1.7. Changes
  included:
  * updated/fixed test script
  * updated build system
  * several bug fixes, including one for bsc#1199264</changelog>
  <changelog author="lduncan@suse.com" date="1652097600">- Update to latest upstream, including:
  * Added 'distclean' to Makefile targets
  * Ensure Makefile '.PHONY' targets set up correctly
  * fix an iscsid logout bug generating a false error
    and cleanup logout error messages</changelog>
  <changelog author="lduncan@suse.com" date="1652443200">- Set initiatorname in %post (at end of install), for cases
  where root is read-only at startup time (bsc#1198457)</changelog>
  <changelog author="lduncan@suse.com" date="1655467200">- For Tumbleweed, moved logrotate files from user-specific
  directory /etc/logrotate.d to vendor-specific
  /usr/etc/logrotate.d
  (for Stefan Schubert &lt;schubi@suse.com&gt;)</changelog>
  <changelog author="lduncan@suse.com" date="1657108800">- Modify SPEC file so systemd unit files are mode 644 (not 755)
  (bsc#1200570)</changelog>
  <changelog author="lduncan@suse.com" date="1664193600">- Update to upstream version 2.1.8, which includes some bug fixes,
  and adds the ability to build using meson. The SPEC file was
  updated to use meson.
  Also, some files have moved:
  * the "lock" file has moved from /etc/iscsi to /var/lock/iscsi
  * the "database files" have moved from /etc/iscsi to
    /var/lib/iscsi</changelog>
  <changelog author="lduncan@suse.com" date="1668600000">- Updated to latest upstream. Changes:
  * iscsid/iscsiuio: fix OOM adjustment (github issue #377)</changelog>
  <changelog author="lduncan@suse.com" date="1670414400">- Moving DB files from /etc/iscsi/* to /var/lib/iscsi/* for
  SLE-15-SP5 and forward, as is done in Tumbleweed.
- Added /etc/iscsi/README.DB-files-moved, and added SPEC file
  changes to support this, including a post-install script to
  move the DB files, only installed if DB files are moved.
- Renamed shared library from libopeniscsiusr0_2_0 to
  libopeniscsiusr0, to correctly match SONAME in library.</changelog>
  <changelog author="lduncan@suse.com" date="1671451200">- Updated SPEC file dependencies for libopeniscsiusr to avoid
  conflicting package installation.</changelog>
  <changelog author="lduncan@suse.com" date="1671624000">- Update iscsid.service so it starts iscsid.socket, if needed
  (bsc#1206132).</changelog>
  <changelog author="lduncan@suse.com" date="1677326400">- Build system: meson builds were ignoring optflags, and other
  passed in compiler options.</changelog>
  <changelog author="lduncan@suse.com" date="1681732800">- Remove "--strip" in SPEC file for meson build, so that
  debuginfo is generated. (from mwilck) (bsc#1210536)</changelog>
  <changelog author="lduncan@suse.com" date="1686830400">- Upgrade to upstream version 2.1.9 with tag "2.1.9-suse"
  (bsc#1210514), replacing open-iscsi-2.1.8-suse.tar.bz2 with
  open-iscsi-2.1.9-suse.tar.bz2, and resetting
  open-iscsi-SUSE-latest.diff.bz2. A summary from the ChangeLog
  file:
  * Fix discoveryd compiler warning
  * Sync iscsi_if.h with kernel
  * Handle old DB records correctly
  * Make IQN configuration for iscsi-iname
  * remove OFFLOAD_BOOT_SUPPORTED, which is always true
  * Use UUID for IPC, not "root"
  * do not support SHA3 for libressl
  * build meson cleanups, including changing default DB home
  * Updated README about NOPs
  * Remove "BindTo" in systemd service file
  * Some iscsiuio fixes, including licensing and memory leaks
    (bsc#1210514)
  * Small netlink fixes
  * Fix OOM adjustment
  * Some error recovery fixes
  * Some spelling fixes</changelog>
  <changelog author="lduncan@suse.com" date="1687262400">- Fix iscsiuio build version by updating iscsiuio/meson.build
  and RPM SPEC file (bsc#1210514), updating
  open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1698235200">- Updated to latest upstream, which includes (bsc#1210514):
  * several fixes to harden iscsiuio, including:
  - logging now uses syslog
  - shutdown now waits for helper threads to complete
  - netlink socket cleanup
  * some minor bug fixes, some helping builds on musl
  This updates iscsiuio version to 0.7.8.8.
  This updates open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="9baa07daa9aeaf8ce3d5756c450aa6a8b745e94f6601e33e20c71739f0c236f5" name="libopenssl-1_1-devel" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.19.1"/>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
</package>
<package pkgid="d30b9b49185cc3a345e2fe79df465d94eac044df480c9793cf09f8665598aac1" name="libopenssl-1_1-devel" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.19.1"/>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
</package>
<package pkgid="0e4f535af47d0bb96b37002f7c72d4ff85f194b28866a1a790b79b0f8281484d" name="libopenssl-1_1-devel" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.19.1"/>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
</package>
<package pkgid="b07386189b1734bee02676a8df448e9584956a112ca8de2f07d624ca926b8f19" name="libopenssl-1_1-devel" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.22.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="d63e313d2d393334253341e756c47f2afa681876d78c5abe170990f59b18caf4" name="libopenssl-1_1-devel" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.22.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="8652ad8508b9da2cbc11effb690462257d74877c261925cfb6d85cc93c20663a" name="libopenssl-1_1-devel" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.22.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="7454c34e37cffb500a781686f2aae7016394e622d66c6ae05d0855e50bd04114" name="libopenssl-1_1-devel" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.25.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="cc50b48c13635c90f54f654ede710bce05bc245b498e56ef498ec37d843e850f" name="libopenssl-1_1-devel" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.25.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="5eb01f90933380a3fb32d57ce4f6c704a972a774dda638cda7350e898e642062" name="libopenssl-1_1-devel" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.25.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="18da95ac39899dc7b6e7f6ab0f3b7ccde3a7cfb8d4b4570c29ad79e4dd52d443" name="libopenssl1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.19.1"/>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
</package>
<package pkgid="b61b6361df1fccf626007dbc04173b32ee7c0ec4dd7f23d9512e6aa5ddc4c7be" name="libopenssl1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.19.1"/>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
</package>
<package pkgid="b81fa14d871c6ef141d0ee0641c4a273c8d8e3cefee61a69cc905df9592c598f" name="libopenssl1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.19.1"/>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
</package>
<package pkgid="41dea6e14da80488e485b36195dd0771d1f980083a8db3bbc0c3a1b564656d64" name="libopenssl1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.22.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="6dd3fee276bd70820d8f64a7213435a868746a006b0382e5a2203a2c0c9716e7" name="libopenssl1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.22.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="5c4bbf68cf0f771887c8ac86bf5e5bbc574ce12adc7c8379ecefb7246eb01908" name="libopenssl1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.22.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="0141ef16dbf3aca3c6ef82cbc08553939debb5f3450e506a7f49931783e9176f" name="libopenssl1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.25.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="abac643f9db7753d42de4d22a6830b223633663aa4dab274d791dc810b9ec9e4" name="libopenssl1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.25.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="86165ecafee8b62a441c526d1cbe514f30e3c1883ca16d9aadaee51da2cff844" name="libopenssl1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.25.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="fc4285fa6c0d66eb9990dc3ff47aa14ee9c44d7f2cb10d7cab729671ef13c772" name="libopenssl1_1-hmac" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.19.1"/>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
</package>
<package pkgid="1448e691aea58350d356489c54421036785a8bae3787ed230ea8dbeaa950a119" name="libopenssl1_1-hmac" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.19.1"/>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
</package>
<package pkgid="4c0dfa75d0cc0fa7d9acba10a18f875dd8b06b58d06473c36cadd10ca285a508" name="libopenssl1_1-hmac" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.19.1"/>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
</package>
<package pkgid="da6b9de5760848c3cbd1c86f82579ae842d757d6141b3f20bd0bc491d93a0238" name="libopenssl1_1-hmac" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.22.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="371d7ad2a528c3d032a727e790be87389ae291c0ffef827dcbd58880bd29fe9c" name="libopenssl1_1-hmac" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.22.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="1215d46c741e39d0e2ea5226b8a232a37347b08aabd595f858e06183c71bafa9" name="libopenssl1_1-hmac" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.22.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="80cf27879cd845cfbc9be2e15fb16dd872cc05d42700574159a09c523aa47e46" name="libopenssl1_1-hmac" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.25.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="2b1b92183d6d246a924ce39684dc5779f1d0ba447c5411f20026b159dd8fa847" name="libopenssl1_1-hmac" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.25.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="6be80464b3038687c5a25314ca2b96a54a2edc541e7c8733bfb44c99d9613079" name="libopenssl1_1-hmac" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.25.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="59531056bc3e3e9f50e3a29d2214b45fc4559c4a968a09b4361654b8314bc3f0" name="libp11-kit0" arch="aarch64">
  <version epoch="0" ver="0.23.22" rel="150500.8.3.1"/>
  <changelog author="lnussel@suse.de" date="1413201600">- remove patches:
  * trust-Print-label-of-certificate-when-complaining-.patch
  * trust-Dont-use-invalid-public-keys-for-looking-up-.patch
- new version 0.20.7 (stable)
  * New public pkcs11x.h header containing extensions [fdo#83495]
  * Export necessary defines to lookup attached extensions [fdo#83495]
  * Build fixes
- new version 0.20.6 (stable)
  * Make the p11-kit-proxy.so module respect critical = no [fdo#83651]
  * Build fix for FreeBSD [fdo#75674]
- new version 0.20.5 (stable)
  * Don't use invalid keys for looking up stapled extensions [fdo#82328]
  * Better error messages when invalid certificate extensions
  * Fix parsing of some odd OpenSSL TRUSTED CERTIFICATE files
  * Fix some leaks, and memory issues
  * Silence some clang scanner warnings
- new version 0.20.4 (stable)
  * Don't complain about C_Finalize after a fork
  * Fix typo</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Update to version 0.23.1 (stable)
  * Use new PKCS#11 URI draft fields for URIs [fdo#86474 fdo#87582]
  * Add pem-directory-hash extract format
  * Build fixes
- Remove 0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff;
  fixed on upstream release
- Remove autoconf, automake and libtool require; unneeded dependencies
- Add gtk-doc require; needed to build html documentation
- Remove redundant %clean section</changelog>
  <changelog author="mpluskal@suse.com" date="1454932800">- Update to 0.23.2
  * Fix forking issues with libffi
  * Fix various crashes in corner cases
  * Updated translations
  * Build fixes
- Make building more verbose
- Enable tests
- Small spec file cleanup with spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- 32-bit compatibility fixes:
  * Add PKCS11 module to p11-kit-32bit (bsc#996047#c39)
  * Add p11-kit-nss-trust-32bit NSS module
  * Fix potential bi-arch issue with private binaries
    (fdo#98817, p11-kit-biarch.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="lnussel@suse.de" date="1573819200">- support loading NSS attribute CKA_NSS_MOZILLA_CA_POLICY so Firefox
  detects built in certificates (boo#1154871,
  0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch,
  0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch)</changelog>
  <changelog author="lnussel@suse.de" date="1577102400">- Also build documentation (boo#1013125)</changelog>
  <changelog author="scabrero@suse.de" date="1628683200">- Update to version 0.23.22 (bsc#1180064, bsc#1180065, bsc#1180066):
  * Fix memory-safety issues that affect the RPC protocol
  (CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363), discovered
  and fixed by David Cook
  * anchor: Prefer persistent format when storing anchor [PR#329]
  * common: Fix infloop in p11_path_build [PR#326, PR#327]
  * proxy: C_CloseAllSessions: Make sure that calloc args are non-zero [PR#325]
  * common: Check for a NULL locale before freeing it [PR#321]
  * Build and test fixes [PR#313, PR#315, PR#317, PR#318, PR#319, PR#323,
  PR#330, PR#333, PR#334, PR#335, PR#338, PR#339]
- Changes for version 0.23.21
  * proxy: Do not assign duplicate slot IDs [PR#282]
  * common: Get program name based on executable path if possible [PR#307]
  * anchor: Exit with non-zero code, if any error occurs [PR#304]
  * Build and test fixes [PR#283, PR#290, PR#291, PR#292, PR#296, PR#299,
  PR#305, PR#306, PR#309, PR#311]
- Changes for version 0.23.20:
  * Revert "Fix RPC when length-s are 0" changes [PR#276]
- Changes for version 0.23.19:
  * common: add Russian PKCS#11 extensions to pkcs11x.h header [PR#255]
  * Add simple bash completion for provided commands [PR#258]
  * Unbreak list matching in enable-in and disable-in [PR#262]
  * Fix RPC when length-s are 0 [PR#259]
  * rpc: Add vsock transport support [PR#270]
  * trust: Support CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER [PR#265]
  * Build fixes [PR#271, PR#272, PR#273, ...]
- Changes for version 0.23.18:
  * rpc: Allow empty CK_DATE value [PR#253]
  * build: Meson fixes [PR#245]
  * build: Adjust feature parity between meson and autotools [PR#247]
- Changes for version 0.23.17:
  * common: Fix uClibc-ng compilation [PR#237]
  * trust: do not allow daylight to invalidate date validation [PR#236]
  * build: Port to meson build system [PR#231, PR#234]
  * rpc: On UNIX wait on condition variable instead of FD if header is for a different thread [PR#232]
  * doc: Add 'server' command in help [PR#229]
  * Build and test fixes [PR#230]
- Changes for version 0.23.16:
  * proxy: Support C_WaitForSlotEvent() if CKF_DONT_BLOCK is specified [PR#225]
  * conf: Ignore user configuration if the program is running as root [PR#226]
  * proxy: Refresh slot list on every C_GetSlotList call [PR#224]
  * modules: Fix index used in call to p11_dict_remove() [PR#219]
  * Fix Win32 p11_dl_error crash [PR#218]
  * modules: check gl.modules before iterates on it when freeing [PR#217]
  * trust: Ignore unreadable content in anchors [PR#215]
  * extract-jks: Prefer _p11_extract_jks_timestamp to SOURCE_DATE_EPOCH [PR#213]
- Changes for version 0.23.15:
  * trust: Improve error handling if backed trust file is corrupted [PR#206]
  * url: Prefer upper-case letters in hex characters when encoding [PR#193]
  * trust/extract-jks.c: also honor SOURCE_DATE_EPOCH time [PR#202]
  * virtual: Prefer fixed closures to libffi closures [PR#196]
  * Fix issues spotted by coverity and cppcheck [PR#194, PR#204]
  * Build and test fixes [PR#164, PR#191, PR#199, PR#201]
- Changes for version 0.23.14:
  * proxy: Avoid invalid memory access when unloading proxy module [PR#180]
  * Update pkcs11 header to allow SoftHSMv2 to compile [PR#181]
  * build: Restore libpthread dependency [PR#183]
  * Build fixes [PR#188]
- Changes for version 0.23.13:
  * server: Enable socket activation through systemd [PR#173]
  * rpc-server: p11_kit_remote_serve_tokens: Allow exporting all modules
    [PR#174]
  * proxy: Fail early if there is no slot mapping [PR#175]
  * Remove hard dependency on libpthread [PR#177]
  * Build fixes [PR#170, PR#176]
- Changes for version 0.23.12
  * Fix compile error when PKCS#11 GNU calling convention is enabled [PR#160]
  * Fix getauxval() and secure_getenv() emulation on macOS and FreeBSD [PR#167]
  * Build and test fixes on macOS [PR#162, PR#168]
- Changes for version 0.23.11
  * trust: Add extractor for edk2/cacerts.bin [PR#139]
  * modules: Add option to control module visibility from proxy [PR#140]
  * trust: Prevent trust module being loaded by proxy module [PR#142]
  * library: Use dedicated locale object for printing error [PR#148]
  * Treat CKR_CRYPTOKI_ALREADY_INITIALIZED correctly [PR#134]
  * Improve const correctness for P11KitUri [PR#152]
  * PKCS#11 URI scheme comparison is now case insensitive [PR#156]
  * Build and test fixes [PR#151, PR#149, PR#141, PR#138, PR#135]
- Changes for version 0.23.10
  * filter: Respect "write-protected" vendor-specific attribute in
    PKCS#11 URI [PR#129]
  * server: Improve shell integration and documentation [PR#107, PR#108]
  * proxy: Reuse existing slot ID mapping in after fork() [PR#120]
  * trust: Forcibly mark "Default Trust" read-only [PR#123]
  * New function p11_kit_override_system_files() which can be used for
    testing [PR#110]
  * trust: Filter out duplicate extensions [PR#69]
  * Update translations [PR#128]
  * Bug fixes [PR#125, PR#126]
- Changes for version 0.23.9
  * Fix p11-kit server regressions [PR#103, PR#104]
  * trust: Respect anyExtendedKeyUsage in CA certificates [PR#99]
  * Build fixes related to reallocarray [PR#96, PR#98, PR#100]
- Changes for version 0.23.8
  * Improve vendor query attributes handling in PKCS#11 URI [PR#92]
  * Add OTP and GOST mechanisms to pkcs11.h [PR#90, PR#91]
  * New envvar P11_KIT_NO_USER_CONFIG to stop looking at user
    configurations [PR#87]
  * Build fixes for Solaris and 32-bit big-endian platforms [PR#81, PR#86]
- Changes for version 0.23.7
  * Fix memory issues with "p11-kit server" [PR#78]
  * Build fixes [PR#77 ...]
- Changes for version 0.23.6
  * Port "p11-kit server" to Windows and portability fixes of the RPC
    protocol [PR#67, PR#72, PR#74]
  * Recover the old behavior of "trust anchor --remove" [PR#70, PR#71]
  * Build fixes [PR#63 ...]
- Changes for version 0.23.5
  * Fix license notice of common/unix-peer.c [PR#58]
  * Remove systemd unit files for now [PR#60]
  * Build fixes for FreeBSD [PR#56]
- Changes for version 0.23.4
  * Recognize query attributes defined in PKCS#11 URI (RFC7512) [PR#31,
    PR#37, PR#52]
  * The trust policy module now recognizes CKA_NSS_MOZILLA_CA_POLICY
    attribute, used by Firefox [#99453, PR#46]
  * Add 'trust dump' command to dump all PKCS#11 objects in the
    persistence format [PR#44]
  * New experimental 'p11-kit server' command that allows PKCS#11
    forwarding through a Unix domain socket.  A client-side module
    p11-kit-client.so is also provided [PR#15]
  * Add systemd unit files for exporting the proxy module through a
    Unix domain socket [PR#35]
  * New P11KitIter API to iterate over slots, tokens, and modules in
    addition to objects [PR#28]
  * libffi dependency is now optional [PR#9]
  * Build fixes for FreeBSD, macOS, and Windows [PR#32, PR#39, PR#45]
- Changes for version 0.23.3
  * Install private executables in libexecdir [fdo#98817]
  * Fix link error of proxy module on macOS [fdo#98022]
  * Use new PKCS#11 URI specification for URIs [fdo#97245]
  * Support x-init-reserved argument of C_Initialize() in remote modules
    [fdo#80519]
  * Incorporate changes from PKCS#11 2.40 specification
  * Bump libtool library version
  * Documentation fixes
  * Build fixes [fdo#87192 ...]
- Move RPM macros to %_rpmmacrodir.
- New server subpackage
- Change keyring to new maintainer Daiki Ueno
- Avoid bareword to fix build failure
- Remove obsolete patches:
  * p11-kit-biarch.patch
  * 0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch
  * 0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch</changelog>
  <changelog author="lnussel@suse.com" date="1674648000">- Backport IBM specific mechanism and attributes (Jira#PED-584)
  0001-Add-IBM-specific-mechanism-and-attributes.patch
  0002-Add-support-for-serializing-CK_ECDH1_DERIVE_PARAMS-m.patch
  0003-client-Allow-zero-part-length-at-C_SignUpdate.patch
  0004-Fix-support-of-CKA_DERIVE_TEMPLATE.patch
  0005-Add-other-SHA-variants-also-for-RSA-and-EC-signature.patch
  0006-Add-support-for-missing-AES-and-DES-DES3-mechanisms.patch
  0007-Add-support-for-MAC-and-HMAC-general-mechanisms.patch
  0008-Add-support-for-CKM_DH_PKCS_DERIVE.patch
  0009-rpc-Handle-special-cases-for-buffer-and-length.patch
  0010-Add-support-for-CKM_AES_CTR.patch
  0011-Add-support-for-CKM_AES_GCM.patch
  0012-common-pkcs11x.h-Support-CRYPTOKI_GNU-for-IBM-vendor.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1698148800">- Ensure that programs using &lt;p11-kit/pkcs11x.h&gt; can be compiled
  with CRYPTOKI_GNU. Fixes GnuTLS builds. [jsc#PED-6705]
  * Add p11-kit-pkcs11-gnu-Enable-testing-with-p11-kit-pkcs11x.h.patch</changelog>
</package>
<package pkgid="7aae922bb9d4af0a78b597eeaefb209e2ce9e4210a1380aaf52cf8b7448ab394" name="libp11-kit0" arch="s390x">
  <version epoch="0" ver="0.23.22" rel="150500.8.3.1"/>
  <changelog author="lnussel@suse.de" date="1413201600">- remove patches:
  * trust-Print-label-of-certificate-when-complaining-.patch
  * trust-Dont-use-invalid-public-keys-for-looking-up-.patch
- new version 0.20.7 (stable)
  * New public pkcs11x.h header containing extensions [fdo#83495]
  * Export necessary defines to lookup attached extensions [fdo#83495]
  * Build fixes
- new version 0.20.6 (stable)
  * Make the p11-kit-proxy.so module respect critical = no [fdo#83651]
  * Build fix for FreeBSD [fdo#75674]
- new version 0.20.5 (stable)
  * Don't use invalid keys for looking up stapled extensions [fdo#82328]
  * Better error messages when invalid certificate extensions
  * Fix parsing of some odd OpenSSL TRUSTED CERTIFICATE files
  * Fix some leaks, and memory issues
  * Silence some clang scanner warnings
- new version 0.20.4 (stable)
  * Don't complain about C_Finalize after a fork
  * Fix typo</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Update to version 0.23.1 (stable)
  * Use new PKCS#11 URI draft fields for URIs [fdo#86474 fdo#87582]
  * Add pem-directory-hash extract format
  * Build fixes
- Remove 0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff;
  fixed on upstream release
- Remove autoconf, automake and libtool require; unneeded dependencies
- Add gtk-doc require; needed to build html documentation
- Remove redundant %clean section</changelog>
  <changelog author="mpluskal@suse.com" date="1454932800">- Update to 0.23.2
  * Fix forking issues with libffi
  * Fix various crashes in corner cases
  * Updated translations
  * Build fixes
- Make building more verbose
- Enable tests
- Small spec file cleanup with spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- 32-bit compatibility fixes:
  * Add PKCS11 module to p11-kit-32bit (bsc#996047#c39)
  * Add p11-kit-nss-trust-32bit NSS module
  * Fix potential bi-arch issue with private binaries
    (fdo#98817, p11-kit-biarch.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="lnussel@suse.de" date="1573819200">- support loading NSS attribute CKA_NSS_MOZILLA_CA_POLICY so Firefox
  detects built in certificates (boo#1154871,
  0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch,
  0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch)</changelog>
  <changelog author="lnussel@suse.de" date="1577102400">- Also build documentation (boo#1013125)</changelog>
  <changelog author="scabrero@suse.de" date="1628683200">- Update to version 0.23.22 (bsc#1180064, bsc#1180065, bsc#1180066):
  * Fix memory-safety issues that affect the RPC protocol
  (CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363), discovered
  and fixed by David Cook
  * anchor: Prefer persistent format when storing anchor [PR#329]
  * common: Fix infloop in p11_path_build [PR#326, PR#327]
  * proxy: C_CloseAllSessions: Make sure that calloc args are non-zero [PR#325]
  * common: Check for a NULL locale before freeing it [PR#321]
  * Build and test fixes [PR#313, PR#315, PR#317, PR#318, PR#319, PR#323,
  PR#330, PR#333, PR#334, PR#335, PR#338, PR#339]
- Changes for version 0.23.21
  * proxy: Do not assign duplicate slot IDs [PR#282]
  * common: Get program name based on executable path if possible [PR#307]
  * anchor: Exit with non-zero code, if any error occurs [PR#304]
  * Build and test fixes [PR#283, PR#290, PR#291, PR#292, PR#296, PR#299,
  PR#305, PR#306, PR#309, PR#311]
- Changes for version 0.23.20:
  * Revert "Fix RPC when length-s are 0" changes [PR#276]
- Changes for version 0.23.19:
  * common: add Russian PKCS#11 extensions to pkcs11x.h header [PR#255]
  * Add simple bash completion for provided commands [PR#258]
  * Unbreak list matching in enable-in and disable-in [PR#262]
  * Fix RPC when length-s are 0 [PR#259]
  * rpc: Add vsock transport support [PR#270]
  * trust: Support CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER [PR#265]
  * Build fixes [PR#271, PR#272, PR#273, ...]
- Changes for version 0.23.18:
  * rpc: Allow empty CK_DATE value [PR#253]
  * build: Meson fixes [PR#245]
  * build: Adjust feature parity between meson and autotools [PR#247]
- Changes for version 0.23.17:
  * common: Fix uClibc-ng compilation [PR#237]
  * trust: do not allow daylight to invalidate date validation [PR#236]
  * build: Port to meson build system [PR#231, PR#234]
  * rpc: On UNIX wait on condition variable instead of FD if header is for a different thread [PR#232]
  * doc: Add 'server' command in help [PR#229]
  * Build and test fixes [PR#230]
- Changes for version 0.23.16:
  * proxy: Support C_WaitForSlotEvent() if CKF_DONT_BLOCK is specified [PR#225]
  * conf: Ignore user configuration if the program is running as root [PR#226]
  * proxy: Refresh slot list on every C_GetSlotList call [PR#224]
  * modules: Fix index used in call to p11_dict_remove() [PR#219]
  * Fix Win32 p11_dl_error crash [PR#218]
  * modules: check gl.modules before iterates on it when freeing [PR#217]
  * trust: Ignore unreadable content in anchors [PR#215]
  * extract-jks: Prefer _p11_extract_jks_timestamp to SOURCE_DATE_EPOCH [PR#213]
- Changes for version 0.23.15:
  * trust: Improve error handling if backed trust file is corrupted [PR#206]
  * url: Prefer upper-case letters in hex characters when encoding [PR#193]
  * trust/extract-jks.c: also honor SOURCE_DATE_EPOCH time [PR#202]
  * virtual: Prefer fixed closures to libffi closures [PR#196]
  * Fix issues spotted by coverity and cppcheck [PR#194, PR#204]
  * Build and test fixes [PR#164, PR#191, PR#199, PR#201]
- Changes for version 0.23.14:
  * proxy: Avoid invalid memory access when unloading proxy module [PR#180]
  * Update pkcs11 header to allow SoftHSMv2 to compile [PR#181]
  * build: Restore libpthread dependency [PR#183]
  * Build fixes [PR#188]
- Changes for version 0.23.13:
  * server: Enable socket activation through systemd [PR#173]
  * rpc-server: p11_kit_remote_serve_tokens: Allow exporting all modules
    [PR#174]
  * proxy: Fail early if there is no slot mapping [PR#175]
  * Remove hard dependency on libpthread [PR#177]
  * Build fixes [PR#170, PR#176]
- Changes for version 0.23.12
  * Fix compile error when PKCS#11 GNU calling convention is enabled [PR#160]
  * Fix getauxval() and secure_getenv() emulation on macOS and FreeBSD [PR#167]
  * Build and test fixes on macOS [PR#162, PR#168]
- Changes for version 0.23.11
  * trust: Add extractor for edk2/cacerts.bin [PR#139]
  * modules: Add option to control module visibility from proxy [PR#140]
  * trust: Prevent trust module being loaded by proxy module [PR#142]
  * library: Use dedicated locale object for printing error [PR#148]
  * Treat CKR_CRYPTOKI_ALREADY_INITIALIZED correctly [PR#134]
  * Improve const correctness for P11KitUri [PR#152]
  * PKCS#11 URI scheme comparison is now case insensitive [PR#156]
  * Build and test fixes [PR#151, PR#149, PR#141, PR#138, PR#135]
- Changes for version 0.23.10
  * filter: Respect "write-protected" vendor-specific attribute in
    PKCS#11 URI [PR#129]
  * server: Improve shell integration and documentation [PR#107, PR#108]
  * proxy: Reuse existing slot ID mapping in after fork() [PR#120]
  * trust: Forcibly mark "Default Trust" read-only [PR#123]
  * New function p11_kit_override_system_files() which can be used for
    testing [PR#110]
  * trust: Filter out duplicate extensions [PR#69]
  * Update translations [PR#128]
  * Bug fixes [PR#125, PR#126]
- Changes for version 0.23.9
  * Fix p11-kit server regressions [PR#103, PR#104]
  * trust: Respect anyExtendedKeyUsage in CA certificates [PR#99]
  * Build fixes related to reallocarray [PR#96, PR#98, PR#100]
- Changes for version 0.23.8
  * Improve vendor query attributes handling in PKCS#11 URI [PR#92]
  * Add OTP and GOST mechanisms to pkcs11.h [PR#90, PR#91]
  * New envvar P11_KIT_NO_USER_CONFIG to stop looking at user
    configurations [PR#87]
  * Build fixes for Solaris and 32-bit big-endian platforms [PR#81, PR#86]
- Changes for version 0.23.7
  * Fix memory issues with "p11-kit server" [PR#78]
  * Build fixes [PR#77 ...]
- Changes for version 0.23.6
  * Port "p11-kit server" to Windows and portability fixes of the RPC
    protocol [PR#67, PR#72, PR#74]
  * Recover the old behavior of "trust anchor --remove" [PR#70, PR#71]
  * Build fixes [PR#63 ...]
- Changes for version 0.23.5
  * Fix license notice of common/unix-peer.c [PR#58]
  * Remove systemd unit files for now [PR#60]
  * Build fixes for FreeBSD [PR#56]
- Changes for version 0.23.4
  * Recognize query attributes defined in PKCS#11 URI (RFC7512) [PR#31,
    PR#37, PR#52]
  * The trust policy module now recognizes CKA_NSS_MOZILLA_CA_POLICY
    attribute, used by Firefox [#99453, PR#46]
  * Add 'trust dump' command to dump all PKCS#11 objects in the
    persistence format [PR#44]
  * New experimental 'p11-kit server' command that allows PKCS#11
    forwarding through a Unix domain socket.  A client-side module
    p11-kit-client.so is also provided [PR#15]
  * Add systemd unit files for exporting the proxy module through a
    Unix domain socket [PR#35]
  * New P11KitIter API to iterate over slots, tokens, and modules in
    addition to objects [PR#28]
  * libffi dependency is now optional [PR#9]
  * Build fixes for FreeBSD, macOS, and Windows [PR#32, PR#39, PR#45]
- Changes for version 0.23.3
  * Install private executables in libexecdir [fdo#98817]
  * Fix link error of proxy module on macOS [fdo#98022]
  * Use new PKCS#11 URI specification for URIs [fdo#97245]
  * Support x-init-reserved argument of C_Initialize() in remote modules
    [fdo#80519]
  * Incorporate changes from PKCS#11 2.40 specification
  * Bump libtool library version
  * Documentation fixes
  * Build fixes [fdo#87192 ...]
- Move RPM macros to %_rpmmacrodir.
- New server subpackage
- Change keyring to new maintainer Daiki Ueno
- Avoid bareword to fix build failure
- Remove obsolete patches:
  * p11-kit-biarch.patch
  * 0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch
  * 0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch</changelog>
  <changelog author="lnussel@suse.com" date="1674648000">- Backport IBM specific mechanism and attributes (Jira#PED-584)
  0001-Add-IBM-specific-mechanism-and-attributes.patch
  0002-Add-support-for-serializing-CK_ECDH1_DERIVE_PARAMS-m.patch
  0003-client-Allow-zero-part-length-at-C_SignUpdate.patch
  0004-Fix-support-of-CKA_DERIVE_TEMPLATE.patch
  0005-Add-other-SHA-variants-also-for-RSA-and-EC-signature.patch
  0006-Add-support-for-missing-AES-and-DES-DES3-mechanisms.patch
  0007-Add-support-for-MAC-and-HMAC-general-mechanisms.patch
  0008-Add-support-for-CKM_DH_PKCS_DERIVE.patch
  0009-rpc-Handle-special-cases-for-buffer-and-length.patch
  0010-Add-support-for-CKM_AES_CTR.patch
  0011-Add-support-for-CKM_AES_GCM.patch
  0012-common-pkcs11x.h-Support-CRYPTOKI_GNU-for-IBM-vendor.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1698148800">- Ensure that programs using &lt;p11-kit/pkcs11x.h&gt; can be compiled
  with CRYPTOKI_GNU. Fixes GnuTLS builds. [jsc#PED-6705]
  * Add p11-kit-pkcs11-gnu-Enable-testing-with-p11-kit-pkcs11x.h.patch</changelog>
</package>
<package pkgid="03e72b18ec6be3e2e6671d85057c0187d7acf6ac30b018d2008247cd4aa9c36b" name="libp11-kit0" arch="x86_64">
  <version epoch="0" ver="0.23.22" rel="150500.8.3.1"/>
  <changelog author="lnussel@suse.de" date="1413201600">- remove patches:
  * trust-Print-label-of-certificate-when-complaining-.patch
  * trust-Dont-use-invalid-public-keys-for-looking-up-.patch
- new version 0.20.7 (stable)
  * New public pkcs11x.h header containing extensions [fdo#83495]
  * Export necessary defines to lookup attached extensions [fdo#83495]
  * Build fixes
- new version 0.20.6 (stable)
  * Make the p11-kit-proxy.so module respect critical = no [fdo#83651]
  * Build fix for FreeBSD [fdo#75674]
- new version 0.20.5 (stable)
  * Don't use invalid keys for looking up stapled extensions [fdo#82328]
  * Better error messages when invalid certificate extensions
  * Fix parsing of some odd OpenSSL TRUSTED CERTIFICATE files
  * Fix some leaks, and memory issues
  * Silence some clang scanner warnings
- new version 0.20.4 (stable)
  * Don't complain about C_Finalize after a fork
  * Fix typo</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Update to version 0.23.1 (stable)
  * Use new PKCS#11 URI draft fields for URIs [fdo#86474 fdo#87582]
  * Add pem-directory-hash extract format
  * Build fixes
- Remove 0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff;
  fixed on upstream release
- Remove autoconf, automake and libtool require; unneeded dependencies
- Add gtk-doc require; needed to build html documentation
- Remove redundant %clean section</changelog>
  <changelog author="mpluskal@suse.com" date="1454932800">- Update to 0.23.2
  * Fix forking issues with libffi
  * Fix various crashes in corner cases
  * Updated translations
  * Build fixes
- Make building more verbose
- Enable tests
- Small spec file cleanup with spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- 32-bit compatibility fixes:
  * Add PKCS11 module to p11-kit-32bit (bsc#996047#c39)
  * Add p11-kit-nss-trust-32bit NSS module
  * Fix potential bi-arch issue with private binaries
    (fdo#98817, p11-kit-biarch.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="lnussel@suse.de" date="1573819200">- support loading NSS attribute CKA_NSS_MOZILLA_CA_POLICY so Firefox
  detects built in certificates (boo#1154871,
  0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch,
  0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch)</changelog>
  <changelog author="lnussel@suse.de" date="1577102400">- Also build documentation (boo#1013125)</changelog>
  <changelog author="scabrero@suse.de" date="1628683200">- Update to version 0.23.22 (bsc#1180064, bsc#1180065, bsc#1180066):
  * Fix memory-safety issues that affect the RPC protocol
  (CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363), discovered
  and fixed by David Cook
  * anchor: Prefer persistent format when storing anchor [PR#329]
  * common: Fix infloop in p11_path_build [PR#326, PR#327]
  * proxy: C_CloseAllSessions: Make sure that calloc args are non-zero [PR#325]
  * common: Check for a NULL locale before freeing it [PR#321]
  * Build and test fixes [PR#313, PR#315, PR#317, PR#318, PR#319, PR#323,
  PR#330, PR#333, PR#334, PR#335, PR#338, PR#339]
- Changes for version 0.23.21
  * proxy: Do not assign duplicate slot IDs [PR#282]
  * common: Get program name based on executable path if possible [PR#307]
  * anchor: Exit with non-zero code, if any error occurs [PR#304]
  * Build and test fixes [PR#283, PR#290, PR#291, PR#292, PR#296, PR#299,
  PR#305, PR#306, PR#309, PR#311]
- Changes for version 0.23.20:
  * Revert "Fix RPC when length-s are 0" changes [PR#276]
- Changes for version 0.23.19:
  * common: add Russian PKCS#11 extensions to pkcs11x.h header [PR#255]
  * Add simple bash completion for provided commands [PR#258]
  * Unbreak list matching in enable-in and disable-in [PR#262]
  * Fix RPC when length-s are 0 [PR#259]
  * rpc: Add vsock transport support [PR#270]
  * trust: Support CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER [PR#265]
  * Build fixes [PR#271, PR#272, PR#273, ...]
- Changes for version 0.23.18:
  * rpc: Allow empty CK_DATE value [PR#253]
  * build: Meson fixes [PR#245]
  * build: Adjust feature parity between meson and autotools [PR#247]
- Changes for version 0.23.17:
  * common: Fix uClibc-ng compilation [PR#237]
  * trust: do not allow daylight to invalidate date validation [PR#236]
  * build: Port to meson build system [PR#231, PR#234]
  * rpc: On UNIX wait on condition variable instead of FD if header is for a different thread [PR#232]
  * doc: Add 'server' command in help [PR#229]
  * Build and test fixes [PR#230]
- Changes for version 0.23.16:
  * proxy: Support C_WaitForSlotEvent() if CKF_DONT_BLOCK is specified [PR#225]
  * conf: Ignore user configuration if the program is running as root [PR#226]
  * proxy: Refresh slot list on every C_GetSlotList call [PR#224]
  * modules: Fix index used in call to p11_dict_remove() [PR#219]
  * Fix Win32 p11_dl_error crash [PR#218]
  * modules: check gl.modules before iterates on it when freeing [PR#217]
  * trust: Ignore unreadable content in anchors [PR#215]
  * extract-jks: Prefer _p11_extract_jks_timestamp to SOURCE_DATE_EPOCH [PR#213]
- Changes for version 0.23.15:
  * trust: Improve error handling if backed trust file is corrupted [PR#206]
  * url: Prefer upper-case letters in hex characters when encoding [PR#193]
  * trust/extract-jks.c: also honor SOURCE_DATE_EPOCH time [PR#202]
  * virtual: Prefer fixed closures to libffi closures [PR#196]
  * Fix issues spotted by coverity and cppcheck [PR#194, PR#204]
  * Build and test fixes [PR#164, PR#191, PR#199, PR#201]
- Changes for version 0.23.14:
  * proxy: Avoid invalid memory access when unloading proxy module [PR#180]
  * Update pkcs11 header to allow SoftHSMv2 to compile [PR#181]
  * build: Restore libpthread dependency [PR#183]
  * Build fixes [PR#188]
- Changes for version 0.23.13:
  * server: Enable socket activation through systemd [PR#173]
  * rpc-server: p11_kit_remote_serve_tokens: Allow exporting all modules
    [PR#174]
  * proxy: Fail early if there is no slot mapping [PR#175]
  * Remove hard dependency on libpthread [PR#177]
  * Build fixes [PR#170, PR#176]
- Changes for version 0.23.12
  * Fix compile error when PKCS#11 GNU calling convention is enabled [PR#160]
  * Fix getauxval() and secure_getenv() emulation on macOS and FreeBSD [PR#167]
  * Build and test fixes on macOS [PR#162, PR#168]
- Changes for version 0.23.11
  * trust: Add extractor for edk2/cacerts.bin [PR#139]
  * modules: Add option to control module visibility from proxy [PR#140]
  * trust: Prevent trust module being loaded by proxy module [PR#142]
  * library: Use dedicated locale object for printing error [PR#148]
  * Treat CKR_CRYPTOKI_ALREADY_INITIALIZED correctly [PR#134]
  * Improve const correctness for P11KitUri [PR#152]
  * PKCS#11 URI scheme comparison is now case insensitive [PR#156]
  * Build and test fixes [PR#151, PR#149, PR#141, PR#138, PR#135]
- Changes for version 0.23.10
  * filter: Respect "write-protected" vendor-specific attribute in
    PKCS#11 URI [PR#129]
  * server: Improve shell integration and documentation [PR#107, PR#108]
  * proxy: Reuse existing slot ID mapping in after fork() [PR#120]
  * trust: Forcibly mark "Default Trust" read-only [PR#123]
  * New function p11_kit_override_system_files() which can be used for
    testing [PR#110]
  * trust: Filter out duplicate extensions [PR#69]
  * Update translations [PR#128]
  * Bug fixes [PR#125, PR#126]
- Changes for version 0.23.9
  * Fix p11-kit server regressions [PR#103, PR#104]
  * trust: Respect anyExtendedKeyUsage in CA certificates [PR#99]
  * Build fixes related to reallocarray [PR#96, PR#98, PR#100]
- Changes for version 0.23.8
  * Improve vendor query attributes handling in PKCS#11 URI [PR#92]
  * Add OTP and GOST mechanisms to pkcs11.h [PR#90, PR#91]
  * New envvar P11_KIT_NO_USER_CONFIG to stop looking at user
    configurations [PR#87]
  * Build fixes for Solaris and 32-bit big-endian platforms [PR#81, PR#86]
- Changes for version 0.23.7
  * Fix memory issues with "p11-kit server" [PR#78]
  * Build fixes [PR#77 ...]
- Changes for version 0.23.6
  * Port "p11-kit server" to Windows and portability fixes of the RPC
    protocol [PR#67, PR#72, PR#74]
  * Recover the old behavior of "trust anchor --remove" [PR#70, PR#71]
  * Build fixes [PR#63 ...]
- Changes for version 0.23.5
  * Fix license notice of common/unix-peer.c [PR#58]
  * Remove systemd unit files for now [PR#60]
  * Build fixes for FreeBSD [PR#56]
- Changes for version 0.23.4
  * Recognize query attributes defined in PKCS#11 URI (RFC7512) [PR#31,
    PR#37, PR#52]
  * The trust policy module now recognizes CKA_NSS_MOZILLA_CA_POLICY
    attribute, used by Firefox [#99453, PR#46]
  * Add 'trust dump' command to dump all PKCS#11 objects in the
    persistence format [PR#44]
  * New experimental 'p11-kit server' command that allows PKCS#11
    forwarding through a Unix domain socket.  A client-side module
    p11-kit-client.so is also provided [PR#15]
  * Add systemd unit files for exporting the proxy module through a
    Unix domain socket [PR#35]
  * New P11KitIter API to iterate over slots, tokens, and modules in
    addition to objects [PR#28]
  * libffi dependency is now optional [PR#9]
  * Build fixes for FreeBSD, macOS, and Windows [PR#32, PR#39, PR#45]
- Changes for version 0.23.3
  * Install private executables in libexecdir [fdo#98817]
  * Fix link error of proxy module on macOS [fdo#98022]
  * Use new PKCS#11 URI specification for URIs [fdo#97245]
  * Support x-init-reserved argument of C_Initialize() in remote modules
    [fdo#80519]
  * Incorporate changes from PKCS#11 2.40 specification
  * Bump libtool library version
  * Documentation fixes
  * Build fixes [fdo#87192 ...]
- Move RPM macros to %_rpmmacrodir.
- New server subpackage
- Change keyring to new maintainer Daiki Ueno
- Avoid bareword to fix build failure
- Remove obsolete patches:
  * p11-kit-biarch.patch
  * 0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch
  * 0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch</changelog>
  <changelog author="lnussel@suse.com" date="1674648000">- Backport IBM specific mechanism and attributes (Jira#PED-584)
  0001-Add-IBM-specific-mechanism-and-attributes.patch
  0002-Add-support-for-serializing-CK_ECDH1_DERIVE_PARAMS-m.patch
  0003-client-Allow-zero-part-length-at-C_SignUpdate.patch
  0004-Fix-support-of-CKA_DERIVE_TEMPLATE.patch
  0005-Add-other-SHA-variants-also-for-RSA-and-EC-signature.patch
  0006-Add-support-for-missing-AES-and-DES-DES3-mechanisms.patch
  0007-Add-support-for-MAC-and-HMAC-general-mechanisms.patch
  0008-Add-support-for-CKM_DH_PKCS_DERIVE.patch
  0009-rpc-Handle-special-cases-for-buffer-and-length.patch
  0010-Add-support-for-CKM_AES_CTR.patch
  0011-Add-support-for-CKM_AES_GCM.patch
  0012-common-pkcs11x.h-Support-CRYPTOKI_GNU-for-IBM-vendor.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1698148800">- Ensure that programs using &lt;p11-kit/pkcs11x.h&gt; can be compiled
  with CRYPTOKI_GNU. Fixes GnuTLS builds. [jsc#PED-6705]
  * Add p11-kit-pkcs11-gnu-Enable-testing-with-p11-kit-pkcs11x.h.patch</changelog>
</package>
<package pkgid="35d69831aa18dc7537c8a096587adf88792e6abe1ce8d04055f3b48dd0161d17" name="libpci3" arch="aarch64">
  <version epoch="0" ver="3.5.6" rel="150300.13.6.1"/>
  <changelog author="tchvatal@suse.com" date="1416312000">- Version bump to 3.3.0:
  * Device names exported by BIOS are displayed on Linux.
  * On Linux systems, HWDB is used to look up device names
    when our ID database gives no match. (More precisely,
    HWDB is consulted after local pci.ids, but before using
    network to query online pci.ids.) Thanks to Tom Gundersen
    for the initial patch.
  * Added experimental back-end for OS X / Darwin. Thanks to
    Richard Yao for providing it.
  * Filters now support matching by device class. Original
    patch by Matthew Wilcox, wrappers for ABI compatibility
    by me.
  * Interrupt Pin and Interrupt Line registers are displayed
    for bridge devices, too.
  * Several portability bugs have been fixed.
  * Several typos have been fixed. Also, use of questionable
    constructs in man pages has been reduced.
  * PCIe link capabilities now include the ASPMOptComp bit.
  * The "CRS Software Visibility" bit is now decoded properly.
  * Updated pci.ids to the current snapshot of the database.
- Refresh patch:
  * pciutils-endianh.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1441540800">- Update to 3.3.1
  * Removed hacks for backward compatibility with Linux libc5,
    which were breaking newer non-glibc Linux systems. Thanks
    to Felix Janda.
  * Display VirtIO vendor-specific capability. Patch by Gerd
    Hoffmann.
  * Fixed memory leak in name cache.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1447416000">- Update to 3.4.0
  * On Linux, we report NUMA nodes of devices.
  * The sysfs back-end does not die on read errors
    of optional attributes. Instead, a warning is produced.
  * Fixed several minor bugs.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="jengelh@inai.de" date="1448107200">- Summary update</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 3.4.1:
  * New capabilities decoded: Process Address Space, Page Request
    Interface, Enhanced Allocation. Thanks to David Daney and
    David Woodhouse.
  * DevCap SlotPowerLimit is now decoded for all components with
    upstream ports.</changelog>
  <changelog author="mpluskal@suse.com" date="1463745600">- Update to version 3.5.0:
  * New capabilities decoded: Downstream Port Containment,
    Precision Time Measurement. Thanks to Keith Busch and
    Jonathan Yong.
  * Domain numbers extended to 31 bits. This will be used by the
    Linux kernel on some machines in near future.
  * Enhanced allocation regions are now decoded on Linux.
  * The NetBSD back-end supports PCIe extended configuration space.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1464177600">- Update to version 3.5.1:
  * Fixed symbol versioning of pci_init().</changelog>
  <changelog author="mpluskal@suse.com" date="1488196800">- Update to version 3.5.4:
  * Previous version broke compilation on systems, for which
    lib/types.h did not provide a 64-bit integer type. It is
    provided everywhere now.
- Changes for version 3.5.3:
  * When lspci looks for Linux kernel modules, it uses the default
  path to module directory provided by libkmod. Previously,
  it tried to construct the path explicitly, which need not
  work on all systems.
  * Improved formatting of memory and I/O ranges behind a bridge.
  * PCIe link capabilities now display GEN4 speed (16GT/s).
  * PCIe device capabilities now show bits related to atomic
    operations.
- Changes for version 3.5.2:
  * The L1 power management capability is now decoded more
  thoroughly. Thanks to Rajat Jain for the patch.
  * The table of configuration registers used by setpci
  had a bug in the definition of SUBSYSTEM_VENDOR_ID.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to version 3.5.5
  * Better decoding of AER capability.
  * "Slot Implemented" flag is decoded for PCI/PCI-X to PCIe bridges.
  * Minor fixes of decoding other capabilities.
  * As usual, updated pci.ids to the current snapshot of the
    database.
- cleanup with spec-cleaner
- switch from ftp to https
- track signature</changelog>
  <changelog author="aavindraa@gmail.com" date="1511092800">- Update to version 3.5.6
  * MN VPD keyword is decoded correctly.
  * As usual, updated pci.ids to the current snapshot of the
    database.
  * FreeBSD back-end: read-only access for non-root, support
    DragonFly BSD, support extended config space.</changelog>
  <changelog author="msuchanek@suse.com" date="1590062400">- Fix lspci outputs few of the VPD data fields are displayed as unknown (bsc#1170554, ltc#185587).
  Added:
  * pciutils-VPD-When-printing-item-IDs-escape-non-ASCII-characte.patch
  * pciutils-VPD-Cleanup.patch
  * pciutils-Add-decoding-of-vendor-specific-VPD-fields.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603972800">- Add decode support for RCECs [jsc#SLE-13735]
- added patches
  https://github.com/pciutils/pciutils/commit/e12bd01eea67ca8cf539263124843ba281eb6ecc
  + pciutils-add-decode-support-for-RCECs.patch</changelog>
  <changelog author="vliaskovitis@suse.com" date="1643025600">- Add pciutils-Add-PCIe-5.0-data-rate-32-GT-s-support.patch
  Add pciutils-Add-PCIe-6.0-data-rate-64-GT-s-support.patch
  (bsc#1192862)</changelog>
  <changelog author="psimons@suse.com" date="1696420800">- Apply "lspci-Fixed-buffer-overflows-in-ls-tree.c.patch" to fix a
  buffer overflow error that would cause lspci to crash on systems
  with complex topologies. [bsc#1215265]
- Add "pciutils.keyring" so that the tarball's signature can be
  verified at build time.
- Use "%license" tag instead of "%doc" to install the package's
  license file.</changelog>
</package>
<package pkgid="e3d199d1397a78dbe612f534d6818657fb5cd9ebc2b591e2107c44586f7f2470" name="libpci3" arch="s390x">
  <version epoch="0" ver="3.5.6" rel="150300.13.6.1"/>
  <changelog author="tchvatal@suse.com" date="1416312000">- Version bump to 3.3.0:
  * Device names exported by BIOS are displayed on Linux.
  * On Linux systems, HWDB is used to look up device names
    when our ID database gives no match. (More precisely,
    HWDB is consulted after local pci.ids, but before using
    network to query online pci.ids.) Thanks to Tom Gundersen
    for the initial patch.
  * Added experimental back-end for OS X / Darwin. Thanks to
    Richard Yao for providing it.
  * Filters now support matching by device class. Original
    patch by Matthew Wilcox, wrappers for ABI compatibility
    by me.
  * Interrupt Pin and Interrupt Line registers are displayed
    for bridge devices, too.
  * Several portability bugs have been fixed.
  * Several typos have been fixed. Also, use of questionable
    constructs in man pages has been reduced.
  * PCIe link capabilities now include the ASPMOptComp bit.
  * The "CRS Software Visibility" bit is now decoded properly.
  * Updated pci.ids to the current snapshot of the database.
- Refresh patch:
  * pciutils-endianh.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1441540800">- Update to 3.3.1
  * Removed hacks for backward compatibility with Linux libc5,
    which were breaking newer non-glibc Linux systems. Thanks
    to Felix Janda.
  * Display VirtIO vendor-specific capability. Patch by Gerd
    Hoffmann.
  * Fixed memory leak in name cache.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1447416000">- Update to 3.4.0
  * On Linux, we report NUMA nodes of devices.
  * The sysfs back-end does not die on read errors
    of optional attributes. Instead, a warning is produced.
  * Fixed several minor bugs.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="jengelh@inai.de" date="1448107200">- Summary update</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 3.4.1:
  * New capabilities decoded: Process Address Space, Page Request
    Interface, Enhanced Allocation. Thanks to David Daney and
    David Woodhouse.
  * DevCap SlotPowerLimit is now decoded for all components with
    upstream ports.</changelog>
  <changelog author="mpluskal@suse.com" date="1463745600">- Update to version 3.5.0:
  * New capabilities decoded: Downstream Port Containment,
    Precision Time Measurement. Thanks to Keith Busch and
    Jonathan Yong.
  * Domain numbers extended to 31 bits. This will be used by the
    Linux kernel on some machines in near future.
  * Enhanced allocation regions are now decoded on Linux.
  * The NetBSD back-end supports PCIe extended configuration space.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1464177600">- Update to version 3.5.1:
  * Fixed symbol versioning of pci_init().</changelog>
  <changelog author="mpluskal@suse.com" date="1488196800">- Update to version 3.5.4:
  * Previous version broke compilation on systems, for which
    lib/types.h did not provide a 64-bit integer type. It is
    provided everywhere now.
- Changes for version 3.5.3:
  * When lspci looks for Linux kernel modules, it uses the default
  path to module directory provided by libkmod. Previously,
  it tried to construct the path explicitly, which need not
  work on all systems.
  * Improved formatting of memory and I/O ranges behind a bridge.
  * PCIe link capabilities now display GEN4 speed (16GT/s).
  * PCIe device capabilities now show bits related to atomic
    operations.
- Changes for version 3.5.2:
  * The L1 power management capability is now decoded more
  thoroughly. Thanks to Rajat Jain for the patch.
  * The table of configuration registers used by setpci
  had a bug in the definition of SUBSYSTEM_VENDOR_ID.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to version 3.5.5
  * Better decoding of AER capability.
  * "Slot Implemented" flag is decoded for PCI/PCI-X to PCIe bridges.
  * Minor fixes of decoding other capabilities.
  * As usual, updated pci.ids to the current snapshot of the
    database.
- cleanup with spec-cleaner
- switch from ftp to https
- track signature</changelog>
  <changelog author="aavindraa@gmail.com" date="1511092800">- Update to version 3.5.6
  * MN VPD keyword is decoded correctly.
  * As usual, updated pci.ids to the current snapshot of the
    database.
  * FreeBSD back-end: read-only access for non-root, support
    DragonFly BSD, support extended config space.</changelog>
  <changelog author="msuchanek@suse.com" date="1590062400">- Fix lspci outputs few of the VPD data fields are displayed as unknown (bsc#1170554, ltc#185587).
  Added:
  * pciutils-VPD-When-printing-item-IDs-escape-non-ASCII-characte.patch
  * pciutils-VPD-Cleanup.patch
  * pciutils-Add-decoding-of-vendor-specific-VPD-fields.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603972800">- Add decode support for RCECs [jsc#SLE-13735]
- added patches
  https://github.com/pciutils/pciutils/commit/e12bd01eea67ca8cf539263124843ba281eb6ecc
  + pciutils-add-decode-support-for-RCECs.patch</changelog>
  <changelog author="vliaskovitis@suse.com" date="1643025600">- Add pciutils-Add-PCIe-5.0-data-rate-32-GT-s-support.patch
  Add pciutils-Add-PCIe-6.0-data-rate-64-GT-s-support.patch
  (bsc#1192862)</changelog>
  <changelog author="psimons@suse.com" date="1696420800">- Apply "lspci-Fixed-buffer-overflows-in-ls-tree.c.patch" to fix a
  buffer overflow error that would cause lspci to crash on systems
  with complex topologies. [bsc#1215265]
- Add "pciutils.keyring" so that the tarball's signature can be
  verified at build time.
- Use "%license" tag instead of "%doc" to install the package's
  license file.</changelog>
</package>
<package pkgid="da2c4916f7a7352e8c0426e4fc12b9bb803773e1b6e09ca63f7443cd16e0b935" name="libpci3" arch="x86_64">
  <version epoch="0" ver="3.5.6" rel="150300.13.6.1"/>
  <changelog author="tchvatal@suse.com" date="1416312000">- Version bump to 3.3.0:
  * Device names exported by BIOS are displayed on Linux.
  * On Linux systems, HWDB is used to look up device names
    when our ID database gives no match. (More precisely,
    HWDB is consulted after local pci.ids, but before using
    network to query online pci.ids.) Thanks to Tom Gundersen
    for the initial patch.
  * Added experimental back-end for OS X / Darwin. Thanks to
    Richard Yao for providing it.
  * Filters now support matching by device class. Original
    patch by Matthew Wilcox, wrappers for ABI compatibility
    by me.
  * Interrupt Pin and Interrupt Line registers are displayed
    for bridge devices, too.
  * Several portability bugs have been fixed.
  * Several typos have been fixed. Also, use of questionable
    constructs in man pages has been reduced.
  * PCIe link capabilities now include the ASPMOptComp bit.
  * The "CRS Software Visibility" bit is now decoded properly.
  * Updated pci.ids to the current snapshot of the database.
- Refresh patch:
  * pciutils-endianh.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1441540800">- Update to 3.3.1
  * Removed hacks for backward compatibility with Linux libc5,
    which were breaking newer non-glibc Linux systems. Thanks
    to Felix Janda.
  * Display VirtIO vendor-specific capability. Patch by Gerd
    Hoffmann.
  * Fixed memory leak in name cache.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1447416000">- Update to 3.4.0
  * On Linux, we report NUMA nodes of devices.
  * The sysfs back-end does not die on read errors
    of optional attributes. Instead, a warning is produced.
  * Fixed several minor bugs.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="jengelh@inai.de" date="1448107200">- Summary update</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 3.4.1:
  * New capabilities decoded: Process Address Space, Page Request
    Interface, Enhanced Allocation. Thanks to David Daney and
    David Woodhouse.
  * DevCap SlotPowerLimit is now decoded for all components with
    upstream ports.</changelog>
  <changelog author="mpluskal@suse.com" date="1463745600">- Update to version 3.5.0:
  * New capabilities decoded: Downstream Port Containment,
    Precision Time Measurement. Thanks to Keith Busch and
    Jonathan Yong.
  * Domain numbers extended to 31 bits. This will be used by the
    Linux kernel on some machines in near future.
  * Enhanced allocation regions are now decoded on Linux.
  * The NetBSD back-end supports PCIe extended configuration space.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1464177600">- Update to version 3.5.1:
  * Fixed symbol versioning of pci_init().</changelog>
  <changelog author="mpluskal@suse.com" date="1488196800">- Update to version 3.5.4:
  * Previous version broke compilation on systems, for which
    lib/types.h did not provide a 64-bit integer type. It is
    provided everywhere now.
- Changes for version 3.5.3:
  * When lspci looks for Linux kernel modules, it uses the default
  path to module directory provided by libkmod. Previously,
  it tried to construct the path explicitly, which need not
  work on all systems.
  * Improved formatting of memory and I/O ranges behind a bridge.
  * PCIe link capabilities now display GEN4 speed (16GT/s).
  * PCIe device capabilities now show bits related to atomic
    operations.
- Changes for version 3.5.2:
  * The L1 power management capability is now decoded more
  thoroughly. Thanks to Rajat Jain for the patch.
  * The table of configuration registers used by setpci
  had a bug in the definition of SUBSYSTEM_VENDOR_ID.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to version 3.5.5
  * Better decoding of AER capability.
  * "Slot Implemented" flag is decoded for PCI/PCI-X to PCIe bridges.
  * Minor fixes of decoding other capabilities.
  * As usual, updated pci.ids to the current snapshot of the
    database.
- cleanup with spec-cleaner
- switch from ftp to https
- track signature</changelog>
  <changelog author="aavindraa@gmail.com" date="1511092800">- Update to version 3.5.6
  * MN VPD keyword is decoded correctly.
  * As usual, updated pci.ids to the current snapshot of the
    database.
  * FreeBSD back-end: read-only access for non-root, support
    DragonFly BSD, support extended config space.</changelog>
  <changelog author="msuchanek@suse.com" date="1590062400">- Fix lspci outputs few of the VPD data fields are displayed as unknown (bsc#1170554, ltc#185587).
  Added:
  * pciutils-VPD-When-printing-item-IDs-escape-non-ASCII-characte.patch
  * pciutils-VPD-Cleanup.patch
  * pciutils-Add-decoding-of-vendor-specific-VPD-fields.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603972800">- Add decode support for RCECs [jsc#SLE-13735]
- added patches
  https://github.com/pciutils/pciutils/commit/e12bd01eea67ca8cf539263124843ba281eb6ecc
  + pciutils-add-decode-support-for-RCECs.patch</changelog>
  <changelog author="vliaskovitis@suse.com" date="1643025600">- Add pciutils-Add-PCIe-5.0-data-rate-32-GT-s-support.patch
  Add pciutils-Add-PCIe-6.0-data-rate-64-GT-s-support.patch
  (bsc#1192862)</changelog>
  <changelog author="psimons@suse.com" date="1696420800">- Apply "lspci-Fixed-buffer-overflows-in-ls-tree.c.patch" to fix a
  buffer overflow error that would cause lspci to crash on systems
  with complex topologies. [bsc#1215265]
- Add "pciutils.keyring" so that the tarball's signature can be
  verified at build time.
- Use "%license" tag instead of "%doc" to install the package's
  license file.</changelog>
</package>
<package pkgid="096da2248c0d95d101dcf99378a5c78fa80ffaac0ae414a4e7e186ef6cf5eef2" name="libprocps8" arch="aarch64">
  <version epoch="0" ver="3.3.17" rel="150000.7.37.1"/>
  <changelog author="mliska@suse.cz" date="1602072000">- Add upstream procps-check-sanity-of-SC_ARG_MAX.patch in order to fix
  pgrep: cannot allocate 4611686018427387903 bytes when ulimit -s is unlimited.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612267200">- Package translations in procps-lang.</changelog>
  <changelog author="werner@suse.de" date="1612958400">- Update to procps-ng-3.3.17
  * library: Incremented to 8:3:0
    (no removals or additions, internal changes only)
  * all: properly handle utf8 cmdline translations         issue #176
  * kill: Pass int to signalled process                    merge #32
  * pgrep: Pass int to signalled process                   merge #32
  * pgrep: Check sanity of SG_ARG_MAX                      issue #152
  * pgrep: Add older than selection                        merge #79
  * pidof: Quiet mode                                      merge #83
  * pidof: show worker threads                             Redhat #1803640
  * ps.1: Mention stime alias                              issue #164
  * ps: check also match on truncated 16 char comm names
  * ps: Add exe output option                              Redhat #1399206
  * ps: A lot more sorting available                       merge #99
  * pwait: New command waits for a process                 merge #97
  * sysctl: Match systemd directory order                  Debian #950788
  * sysctl: Document directory order                       Debian #951550
  * top: ensure config file backward compatibility         Debian #951335
  * top: add command line 'e' for symmetry with 'E'        issue #165
  * top: add '4' toggle for two abreast cpu display        issue #172
  * top: add '!' toggle for combining multiple cpus
  * top: fix potential SEGV involving -p switch            merge #114
  * vmstat: Wide mode gives wider proc columns             merge #48
  * watch: Add environment variable for interval           merge #62
  * watch: Add no linewrap option                          issue #182
  * watch: Support more colors                             merge #106,#109
  * free,uptime,slabtop: complain about extra ops          issue #181
- Remove now obsolete upstream patches
  * procps-check-sanity-of-SC_ARG_MAX.patch
  * procps-ng-3e1c00d0.patch
- Port patches
  * procps-ng-3.3.10-integer-overflow.patch
  * procps-ng-3.3.10-large_pcpu.patch
  * procps-ng-3.3.8-accuracy.dif
  * procps-ng-3.3.8-bnc634840.patch
  * procps-ng-3.3.8-petabytes.patch
  * procps-ng-3.3.8-tinfo.dif
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612958401">- Fix directory for Ukrainian man pages translations.
- Move localized man pages to lang package.
- Remove obsolete conditionals.
- Remove obsolete --enable-oomem option.
- Run spec-cleaner.</changelog>
  <changelog author="werner@suse.de" date="1613044800">- Add /usr/share/man/uk dir to file list for lang sub package</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1613995200">- Remove /usr/share/man/uk dir to file list for lang sub package:
  It's now provided by filesystem.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1615377600">- Don't install translated man pages for non-installed binaries
  (uptime, kill).</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1625227200">- Skip test suite on emulated riscv64 systems as the qemu process
  is unexpected on the command lines of processes</changelog>
  <changelog author="werner@suse.de" date="1642680000">- Correct used URLs</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Some older products do not know about /usr/share/man/uk</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
  <changelog author="kukuk@suse.com" date="1692187200">- procps-ng-3.3.17-logind.patch: Backport from 4.x git, prefer
  logind over utmp (jsc#PED-3144)</changelog>
  <changelog author="werner@suse.de" date="1692360000">- Modify patches
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-ng-3.3.17-logind.patch
  to real to not truncate output of w with option -n</changelog>
  <changelog author="werner@suse.de" date="1695211200">- Submit latest procps 3.3.17 to SLE-15 tree for jira#PED-3244
  and jira#PED-6369
- The patches now upstream had been dropped meanwhile
  * procps-vmstat-1b9ea611.patch (bsc#1185417)
  - For support up to 2048 CPU as well
  * bsc1209122-a6c0795d.patch (bnc#1209122)
  - allow `-´ as leading character to ignore possible errors
    on systctl entries
  * patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753)
  - was a backport of an upstream fix to get the first CPU
    summary correct
- Enable pidof for SLE-15 as this is provided by sysvinit-tools
- Use a check on syscall __NR_pidfd_open to decide if
  the pwait tool and its manual page will be build</changelog>
</package>
<package pkgid="9e08e84a6160c20e016b8aa769e3b9ff3e86823804d24002af6c2a2b4fb9b460" name="libprocps8" arch="ppc64le">
  <version epoch="0" ver="3.3.17" rel="150000.7.37.1"/>
  <changelog author="mliska@suse.cz" date="1602072000">- Add upstream procps-check-sanity-of-SC_ARG_MAX.patch in order to fix
  pgrep: cannot allocate 4611686018427387903 bytes when ulimit -s is unlimited.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612267200">- Package translations in procps-lang.</changelog>
  <changelog author="werner@suse.de" date="1612958400">- Update to procps-ng-3.3.17
  * library: Incremented to 8:3:0
    (no removals or additions, internal changes only)
  * all: properly handle utf8 cmdline translations         issue #176
  * kill: Pass int to signalled process                    merge #32
  * pgrep: Pass int to signalled process                   merge #32
  * pgrep: Check sanity of SG_ARG_MAX                      issue #152
  * pgrep: Add older than selection                        merge #79
  * pidof: Quiet mode                                      merge #83
  * pidof: show worker threads                             Redhat #1803640
  * ps.1: Mention stime alias                              issue #164
  * ps: check also match on truncated 16 char comm names
  * ps: Add exe output option                              Redhat #1399206
  * ps: A lot more sorting available                       merge #99
  * pwait: New command waits for a process                 merge #97
  * sysctl: Match systemd directory order                  Debian #950788
  * sysctl: Document directory order                       Debian #951550
  * top: ensure config file backward compatibility         Debian #951335
  * top: add command line 'e' for symmetry with 'E'        issue #165
  * top: add '4' toggle for two abreast cpu display        issue #172
  * top: add '!' toggle for combining multiple cpus
  * top: fix potential SEGV involving -p switch            merge #114
  * vmstat: Wide mode gives wider proc columns             merge #48
  * watch: Add environment variable for interval           merge #62
  * watch: Add no linewrap option                          issue #182
  * watch: Support more colors                             merge #106,#109
  * free,uptime,slabtop: complain about extra ops          issue #181
- Remove now obsolete upstream patches
  * procps-check-sanity-of-SC_ARG_MAX.patch
  * procps-ng-3e1c00d0.patch
- Port patches
  * procps-ng-3.3.10-integer-overflow.patch
  * procps-ng-3.3.10-large_pcpu.patch
  * procps-ng-3.3.8-accuracy.dif
  * procps-ng-3.3.8-bnc634840.patch
  * procps-ng-3.3.8-petabytes.patch
  * procps-ng-3.3.8-tinfo.dif
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612958401">- Fix directory for Ukrainian man pages translations.
- Move localized man pages to lang package.
- Remove obsolete conditionals.
- Remove obsolete --enable-oomem option.
- Run spec-cleaner.</changelog>
  <changelog author="werner@suse.de" date="1613044800">- Add /usr/share/man/uk dir to file list for lang sub package</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1613995200">- Remove /usr/share/man/uk dir to file list for lang sub package:
  It's now provided by filesystem.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1615377600">- Don't install translated man pages for non-installed binaries
  (uptime, kill).</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1625227200">- Skip test suite on emulated riscv64 systems as the qemu process
  is unexpected on the command lines of processes</changelog>
  <changelog author="werner@suse.de" date="1642680000">- Correct used URLs</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Some older products do not know about /usr/share/man/uk</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
  <changelog author="kukuk@suse.com" date="1692187200">- procps-ng-3.3.17-logind.patch: Backport from 4.x git, prefer
  logind over utmp (jsc#PED-3144)</changelog>
  <changelog author="werner@suse.de" date="1692360000">- Modify patches
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-ng-3.3.17-logind.patch
  to real to not truncate output of w with option -n</changelog>
  <changelog author="werner@suse.de" date="1695211200">- Submit latest procps 3.3.17 to SLE-15 tree for jira#PED-3244
  and jira#PED-6369
- The patches now upstream had been dropped meanwhile
  * procps-vmstat-1b9ea611.patch (bsc#1185417)
  - For support up to 2048 CPU as well
  * bsc1209122-a6c0795d.patch (bnc#1209122)
  - allow `-´ as leading character to ignore possible errors
    on systctl entries
  * patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753)
  - was a backport of an upstream fix to get the first CPU
    summary correct
- Enable pidof for SLE-15 as this is provided by sysvinit-tools
- Use a check on syscall __NR_pidfd_open to decide if
  the pwait tool and its manual page will be build</changelog>
</package>
<package pkgid="6ca0c667c705991456719b928a78d683db074b4b9c6a690bb451c218eff1d45b" name="libprocps8" arch="s390x">
  <version epoch="0" ver="3.3.17" rel="150000.7.37.1"/>
  <changelog author="mliska@suse.cz" date="1602072000">- Add upstream procps-check-sanity-of-SC_ARG_MAX.patch in order to fix
  pgrep: cannot allocate 4611686018427387903 bytes when ulimit -s is unlimited.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612267200">- Package translations in procps-lang.</changelog>
  <changelog author="werner@suse.de" date="1612958400">- Update to procps-ng-3.3.17
  * library: Incremented to 8:3:0
    (no removals or additions, internal changes only)
  * all: properly handle utf8 cmdline translations         issue #176
  * kill: Pass int to signalled process                    merge #32
  * pgrep: Pass int to signalled process                   merge #32
  * pgrep: Check sanity of SG_ARG_MAX                      issue #152
  * pgrep: Add older than selection                        merge #79
  * pidof: Quiet mode                                      merge #83
  * pidof: show worker threads                             Redhat #1803640
  * ps.1: Mention stime alias                              issue #164
  * ps: check also match on truncated 16 char comm names
  * ps: Add exe output option                              Redhat #1399206
  * ps: A lot more sorting available                       merge #99
  * pwait: New command waits for a process                 merge #97
  * sysctl: Match systemd directory order                  Debian #950788
  * sysctl: Document directory order                       Debian #951550
  * top: ensure config file backward compatibility         Debian #951335
  * top: add command line 'e' for symmetry with 'E'        issue #165
  * top: add '4' toggle for two abreast cpu display        issue #172
  * top: add '!' toggle for combining multiple cpus
  * top: fix potential SEGV involving -p switch            merge #114
  * vmstat: Wide mode gives wider proc columns             merge #48
  * watch: Add environment variable for interval           merge #62
  * watch: Add no linewrap option                          issue #182
  * watch: Support more colors                             merge #106,#109
  * free,uptime,slabtop: complain about extra ops          issue #181
- Remove now obsolete upstream patches
  * procps-check-sanity-of-SC_ARG_MAX.patch
  * procps-ng-3e1c00d0.patch
- Port patches
  * procps-ng-3.3.10-integer-overflow.patch
  * procps-ng-3.3.10-large_pcpu.patch
  * procps-ng-3.3.8-accuracy.dif
  * procps-ng-3.3.8-bnc634840.patch
  * procps-ng-3.3.8-petabytes.patch
  * procps-ng-3.3.8-tinfo.dif
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612958401">- Fix directory for Ukrainian man pages translations.
- Move localized man pages to lang package.
- Remove obsolete conditionals.
- Remove obsolete --enable-oomem option.
- Run spec-cleaner.</changelog>
  <changelog author="werner@suse.de" date="1613044800">- Add /usr/share/man/uk dir to file list for lang sub package</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1613995200">- Remove /usr/share/man/uk dir to file list for lang sub package:
  It's now provided by filesystem.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1615377600">- Don't install translated man pages for non-installed binaries
  (uptime, kill).</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1625227200">- Skip test suite on emulated riscv64 systems as the qemu process
  is unexpected on the command lines of processes</changelog>
  <changelog author="werner@suse.de" date="1642680000">- Correct used URLs</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Some older products do not know about /usr/share/man/uk</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
  <changelog author="kukuk@suse.com" date="1692187200">- procps-ng-3.3.17-logind.patch: Backport from 4.x git, prefer
  logind over utmp (jsc#PED-3144)</changelog>
  <changelog author="werner@suse.de" date="1692360000">- Modify patches
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-ng-3.3.17-logind.patch
  to real to not truncate output of w with option -n</changelog>
  <changelog author="werner@suse.de" date="1695211200">- Submit latest procps 3.3.17 to SLE-15 tree for jira#PED-3244
  and jira#PED-6369
- The patches now upstream had been dropped meanwhile
  * procps-vmstat-1b9ea611.patch (bsc#1185417)
  - For support up to 2048 CPU as well
  * bsc1209122-a6c0795d.patch (bnc#1209122)
  - allow `-´ as leading character to ignore possible errors
    on systctl entries
  * patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753)
  - was a backport of an upstream fix to get the first CPU
    summary correct
- Enable pidof for SLE-15 as this is provided by sysvinit-tools
- Use a check on syscall __NR_pidfd_open to decide if
  the pwait tool and its manual page will be build</changelog>
</package>
<package pkgid="6feb6a642a83b70bbb015f173290e529667b6b1fc233a62dba7eac1374a41f5c" name="libprocps8" arch="x86_64">
  <version epoch="0" ver="3.3.17" rel="150000.7.37.1"/>
  <changelog author="mliska@suse.cz" date="1602072000">- Add upstream procps-check-sanity-of-SC_ARG_MAX.patch in order to fix
  pgrep: cannot allocate 4611686018427387903 bytes when ulimit -s is unlimited.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612267200">- Package translations in procps-lang.</changelog>
  <changelog author="werner@suse.de" date="1612958400">- Update to procps-ng-3.3.17
  * library: Incremented to 8:3:0
    (no removals or additions, internal changes only)
  * all: properly handle utf8 cmdline translations         issue #176
  * kill: Pass int to signalled process                    merge #32
  * pgrep: Pass int to signalled process                   merge #32
  * pgrep: Check sanity of SG_ARG_MAX                      issue #152
  * pgrep: Add older than selection                        merge #79
  * pidof: Quiet mode                                      merge #83
  * pidof: show worker threads                             Redhat #1803640
  * ps.1: Mention stime alias                              issue #164
  * ps: check also match on truncated 16 char comm names
  * ps: Add exe output option                              Redhat #1399206
  * ps: A lot more sorting available                       merge #99
  * pwait: New command waits for a process                 merge #97
  * sysctl: Match systemd directory order                  Debian #950788
  * sysctl: Document directory order                       Debian #951550
  * top: ensure config file backward compatibility         Debian #951335
  * top: add command line 'e' for symmetry with 'E'        issue #165
  * top: add '4' toggle for two abreast cpu display        issue #172
  * top: add '!' toggle for combining multiple cpus
  * top: fix potential SEGV involving -p switch            merge #114
  * vmstat: Wide mode gives wider proc columns             merge #48
  * watch: Add environment variable for interval           merge #62
  * watch: Add no linewrap option                          issue #182
  * watch: Support more colors                             merge #106,#109
  * free,uptime,slabtop: complain about extra ops          issue #181
- Remove now obsolete upstream patches
  * procps-check-sanity-of-SC_ARG_MAX.patch
  * procps-ng-3e1c00d0.patch
- Port patches
  * procps-ng-3.3.10-integer-overflow.patch
  * procps-ng-3.3.10-large_pcpu.patch
  * procps-ng-3.3.8-accuracy.dif
  * procps-ng-3.3.8-bnc634840.patch
  * procps-ng-3.3.8-petabytes.patch
  * procps-ng-3.3.8-tinfo.dif
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612958401">- Fix directory for Ukrainian man pages translations.
- Move localized man pages to lang package.
- Remove obsolete conditionals.
- Remove obsolete --enable-oomem option.
- Run spec-cleaner.</changelog>
  <changelog author="werner@suse.de" date="1613044800">- Add /usr/share/man/uk dir to file list for lang sub package</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1613995200">- Remove /usr/share/man/uk dir to file list for lang sub package:
  It's now provided by filesystem.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1615377600">- Don't install translated man pages for non-installed binaries
  (uptime, kill).</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1625227200">- Skip test suite on emulated riscv64 systems as the qemu process
  is unexpected on the command lines of processes</changelog>
  <changelog author="werner@suse.de" date="1642680000">- Correct used URLs</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Some older products do not know about /usr/share/man/uk</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
  <changelog author="kukuk@suse.com" date="1692187200">- procps-ng-3.3.17-logind.patch: Backport from 4.x git, prefer
  logind over utmp (jsc#PED-3144)</changelog>
  <changelog author="werner@suse.de" date="1692360000">- Modify patches
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-ng-3.3.17-logind.patch
  to real to not truncate output of w with option -n</changelog>
  <changelog author="werner@suse.de" date="1695211200">- Submit latest procps 3.3.17 to SLE-15 tree for jira#PED-3244
  and jira#PED-6369
- The patches now upstream had been dropped meanwhile
  * procps-vmstat-1b9ea611.patch (bsc#1185417)
  - For support up to 2048 CPU as well
  * bsc1209122-a6c0795d.patch (bnc#1209122)
  - allow `-´ as leading character to ignore possible errors
    on systctl entries
  * patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753)
  - was a backport of an upstream fix to get the first CPU
    summary correct
- Enable pidof for SLE-15 as this is provided by sysvinit-tools
- Use a check on syscall __NR_pidfd_open to decide if
  the pwait tool and its manual page will be build</changelog>
</package>
<package pkgid="0146f765267f05969100322510f156d8bc66b5c80a9b6387ed06c95313b20d53" name="libprotobuf-lite25_1_0" arch="aarch64">
  <version epoch="0" ver="25.1" rel="150400.9.3.1"/>
  <changelog author="dmueller@suse.com" date="1659614400">- add 10355.patch to fix soversioning</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 21.5:
  PHP
  * Added getContainingOneof and getRealContainingOneof to descriptor.
  * fix PHP readonly legacy files for nested messages
  Python
  * Fixed comparison of maps in Python.</changelog>
  <changelog author="dmueller@suse.com" date="1663588800">- update to 21.6:
  C++:
  * Reduce memory consumption of MessageSet parsing</changelog>
  <changelog author="dmueller@suse.com" date="1667044800">- update to 21.9:
  * Ruby
  * Replace libc strdup usage with internal impl to restore musl compat (#10818)
  * Auto capitalize enums name in Ruby (#10454) (#10763)
  * Other
  * Fix for grpc.tools #17995 &amp; protobuf #7474 (handle UTF-8 paths in argumentfile) (#10721)
  * C++
  * 21.x No longer define no_threadlocal on OpenBSD (#10743)
  * Java
  * Mark default instance as immutable first to avoid race during static initialization of default instances (#10771)
  * Refactoring java full runtime to reuse sub-message builders and prepare to
    migrate parsing logic from parse constructor to builder.
  * Move proto wireformat parsing functionality from the private "parsing
    constructor" to the Builder class.
  * Change the Lite runtime to prefer merging from the wireformat into mutable
    messages rather than building up a new immutable object before merging. This
    way results in fewer allocations and copy operations.
  * Make message-type extensions merge from wire-format instead of building up
    instances and merging afterwards. This has much better performance.
  * Fix TextFormat parser to build up recurring (but supposedly not repeated)
    sub-messages directly from text rather than building a new sub-message and
    merging the fully formed message into the existing field.</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 21.10:
  * Java
  * Use bit-field int values in buildPartial to skip work on unset groups of
    fields. (#10960)
  * Mark nested builder as clean after clear is called (#10984)</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- update to 21.11:
  * Python
  * Add license file to pypi wheels (#10936)
  * Fix round-trip bug (#10158)</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- update to v21.12:
  * Python
  * Fix broken enum ranges (#11171)
  * Stop requiring extension fields to have a sythetic oneof (#11091)
  * Python runtime 4.21.10 not works generated code can not load valid
    proto.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO (boo#1133277).</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to v22.3
  UPB (Python/PHP/Ruby C-Extension)
  * Remove src prefix from proto import
  * Fix .gitmodules to use the correct absl branch
  * Remove erroneous dependency on googletest
- update to 22.2:
  Java
  * Add version to intra proto dependencies and add kotlin stdlib
    dependency
  * Add $ back for osgi header
  * Remove $ in pom files
- update to 22.1:
  * Add visibility of plugin.proto to python directory
  * Strip "src" from file name of plugin.proto
  * Add OSGi headers to pom files.
  * Remove errorprone dependency from kotlin protos.
  * Version protoc according to the compiler version number.
- update to 22.0:
  * This version includes breaking changes to: Cpp.
    Please refer to the migration guide for information:
    https://protobuf.dev/support/migration/#compiler-22
  * [Cpp] Migrate to Abseil's logging library.
  * [Cpp] `proto2::Map::value_type` changes to `std::pair`.
  * [Cpp] Mark final ZeroCopyInputStream, ZeroCopyOutputStream,
    and DefaultFieldComparator classes.
  * [Cpp] Add a dependency on Abseil (#10416)
  * [Cpp] Remove all autotools usage (#10132)
  * [Cpp] Add C++20 reserved keywords
  * [Cpp] Dropped C++11 Support
  * [Cpp] Delete Arena::Init
  * [Cpp] Replace JSON parser with new implementation
  * [Cpp] Make RepeatedField::GetArena non-const in order to
    support split RepeatedFields.
  * long list of bindings specific fixes see
    https://github.com/protocolbuffers/protobuf/releases/tag/v22.0
- python sub packages version is set 4.22.3 as defined in
  python/google/protobuf/__init__.py to stay compatible
- skip python2 builds by default
- drop patches:
  * 10355.patch,
  * gcc12-disable-__constinit-with-c++-11.patch (merged upstream)
- added patches:
  * add-missing-stdint-header.patch   added for compile fixes</changelog>
  <changelog author="fstrba@suse.com" date="1682596800">- Make possible to build on older systems, like SLE12 that miss
  some of the used macros.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Mention the rpmlintrc file in the spec.</changelog>
  <changelog author="mpluskal@suse.com" date="1683633600">- Fix confusion in versions</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- drop python2 handling
- fix version handling and package the private libs again</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 22.5:
  C++
  * Add missing cstdint header
  * Fix: missing -DPROTOBUF_USE_DLLS in pkg-config (#12700)
  * Avoid using string(JOIN..., which requires cmake 3.12
  * Explicitly include GTest package in examples
  * Bump Abseil submodule to 20230125.3 (#12660)
- update to 22.4:
  C++
  * Fix libprotoc: export useful symbols from .so
  * Fix btree issue in map tests.
  Python
  * Fix bug in _internal_copy_files where the rule would fail in
    downstream repositories.
  Other
  * Bump utf8_range to version with working pkg-config (#12584)
  * Fix declared dependencies for pkg-config
  * Update abseil dependency and reorder dependencies to ensure
    we use the version specified in protobuf_deps.
  * Turn off clang::musttail on i386</changelog>
  <changelog author="fvogt@suse.com" date="1686744000">- Add patch to fix linking ThreadSafeArena:
  * 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch
- Drop the protobuf-source package, no longer used</changelog>
  <changelog author="dmueller@suse.com" date="1688385600">- update to 23.3:
  C++
  * Regenerate stale files
  * Use the same ABI for static and shared libraries on non-
    Windows platforms
  * Add a workaround for GCC constexpr bug
  Objective-C
  * Regenerate stale files
  UPB (Python/PHP/Ruby C-Extension)
  * Fixed a bug in `upb_Map_Delete()` that caused crashes in
    map.delete(k) for Ruby when string-keyed maps were in use.
  Compiler
  * Add missing header to Objective-c generator
  * Add a workaround for GCC constexpr bug
  Java
  * Rollback of: Simplify protobuf Java message builder by
    removing methods that calls the super class only.
  Csharp
  * [C#] Replace regex that validates descriptor names
- drop 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1688731200">- update to 23.4:
  * Add dllexport_decl for generated default instance.
  * Deps: Update Guava to 32.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1698667200">- Build with source and target levels 8
  * fixes build with JDK21
- Install the pom file with the new %%mvn_install_pom macro
- Do not install the pom-only artifacts, since the %%mvn_install_pom
  macro resolves the variables at the install time</changelog>
  <changelog author="dmueller@suse.com" date="1703160000">- build against modern python on sle15</changelog>
  <changelog author="dmueller@suse.com" date="1704196800">- update to 25.1:
  * Raise warnings for deprecated python syntax usages
  * Add support for extensions in CRuby, JRuby, and FFI Ruby
  * Add support for options in CRuby, JRuby and FFI (#14594)
- update to 25.0:
  * Implement proto2/proto3 with editions
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Editions: Introduce functionality to protoc for generating
    edition feature set defaults.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Publish extension declarations with declaration
    verifications.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Protoc: parser rejects explicit use of map_entry option
  * Protoc: validate that reserved range start is before end
  * Protoc: support identifiers as reserved names in addition to
    string literals (only in editions)
  * Drop support for Bazel 5.
  * Allow code generators to specify whether or not they support
    editions.
  [#] C++
  * Set `PROTOBUF_EXPORT` on
    `InternalOutOfLineDeleteMessageLite()`
  * Update stale checked-in files
  * Apply PROTOBUF_NOINLINE to declarations of some functions
    that want it.
  * Implement proto2/proto3 with editions
  * Make JSON UTF-8 boundary check inclusive of the largest
    possible UTF-8 character.
  * Reduce `Map::size_type` to 32-bits. Protobuf containers can't
    have more than that
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Fix bug in reflection based Swap of map fields.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Add prefetching to arena allocations.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    repeated and map field accessors.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    string field accessors.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Fixes for 32-bit MSVC.
  * Publish extension declarations with declaration
    verifications.
  * Export the constants in protobuf's any.h to support DLL
    builds.
  * Implement AbslStringify for the Descriptor family of types.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    message field accessors.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Introduce C++ feature for UTF8 validation.
  * Protoc: validate that reserved range start is before end
  * Remove option to disable the table-driven parser in protoc.
  * Lock down ctype=CORD in proto file.
  * Support split repeated fields.
  * In OSS mode omit some extern template specializations.
  * Allow code generators to specify whether or not they support
    editions.
  [#] Java
  * Implement proto2/proto3 with editions
  * Remove synthetic oneofs from Java gencode field accessor
    tables.
  * Timestamps.parse: Add error handling for invalid
    hours/minutes in the timezone offset.
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Add missing debugging version info to Protobuf Java gencode
    when multiple files are generated.
  * Fix a bad cast in putBuilderIfAbsent when already present due
    to using the result of put() directly (which is null if it
    currently has no value)
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Fix a NPE in putBuilderIfAbsent due to using the result of
    put() directly (which is null if it currently has no value)
  * Update Kotlin compiler to escape package names
  * Add MapFieldBuilder and change codegen to generate it and the
    put{field}BuilderIfAbsent method.
  * Introduce recursion limit in Java text format parsing
  * Consider the protobuf.Any invalid if typeUrl.split("/")
    returns an empty array.
  * Mark `FieldDescriptor.hasOptionalKeyword()` as deprecated.
  * Fixed Python memory leak in map lookup.
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Ensure Timestamp.ToDatetime(tz) has correct offset
  * Do not check required field for upb python MergeFrom
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Emit __slots__ in pyi output as a tuple rather than a list
    for --pyi_out.
  * Fix a bug that strips options from descriptor.proto in
    Python.
  * Raise warings for message.UnknownFields() usages and navigate
    to the new add
  * Add protobuf python keyword support in path for stub
    generator.
  * Add tuple support to set Struct
  * ### Python C-Extension (Default)
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Check that ffi-compiler loads before using it to define
    tasks.
  [#] UPB (Python/PHP/Ruby C-Extension)
  * Include .inc files directly instead of through a filegroup
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Add utf8_validation feature back to the global feature set.
  * Do not check required field for upb python MergeFrom
  * Merge the protobuf and upb Bazel repos
  * Added malloc_trim() calls to Python allocator so RSS will
    decrease when memory is freed
  * Upb: fix a Python memory leak in ByteSize()
  * Support ASAN detection on clang
  * Upb: bugfix for importing a proto3 enum from within a proto2
    file
  * Expose methods needed by Ruby FFI using UPB_API
  * Fix `PyUpb_Message_MergeInternal` segfault</changelog>
</package>
<package pkgid="752b8162fdb52957ef09056c7f771fb4dbc55c70beff70e6279b08432b7f502d" name="libprotobuf-lite25_1_0" arch="ppc64le">
  <version epoch="0" ver="25.1" rel="150400.9.3.1"/>
  <changelog author="dmueller@suse.com" date="1659614400">- add 10355.patch to fix soversioning</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 21.5:
  PHP
  * Added getContainingOneof and getRealContainingOneof to descriptor.
  * fix PHP readonly legacy files for nested messages
  Python
  * Fixed comparison of maps in Python.</changelog>
  <changelog author="dmueller@suse.com" date="1663588800">- update to 21.6:
  C++:
  * Reduce memory consumption of MessageSet parsing</changelog>
  <changelog author="dmueller@suse.com" date="1667044800">- update to 21.9:
  * Ruby
  * Replace libc strdup usage with internal impl to restore musl compat (#10818)
  * Auto capitalize enums name in Ruby (#10454) (#10763)
  * Other
  * Fix for grpc.tools #17995 &amp; protobuf #7474 (handle UTF-8 paths in argumentfile) (#10721)
  * C++
  * 21.x No longer define no_threadlocal on OpenBSD (#10743)
  * Java
  * Mark default instance as immutable first to avoid race during static initialization of default instances (#10771)
  * Refactoring java full runtime to reuse sub-message builders and prepare to
    migrate parsing logic from parse constructor to builder.
  * Move proto wireformat parsing functionality from the private "parsing
    constructor" to the Builder class.
  * Change the Lite runtime to prefer merging from the wireformat into mutable
    messages rather than building up a new immutable object before merging. This
    way results in fewer allocations and copy operations.
  * Make message-type extensions merge from wire-format instead of building up
    instances and merging afterwards. This has much better performance.
  * Fix TextFormat parser to build up recurring (but supposedly not repeated)
    sub-messages directly from text rather than building a new sub-message and
    merging the fully formed message into the existing field.</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 21.10:
  * Java
  * Use bit-field int values in buildPartial to skip work on unset groups of
    fields. (#10960)
  * Mark nested builder as clean after clear is called (#10984)</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- update to 21.11:
  * Python
  * Add license file to pypi wheels (#10936)
  * Fix round-trip bug (#10158)</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- update to v21.12:
  * Python
  * Fix broken enum ranges (#11171)
  * Stop requiring extension fields to have a sythetic oneof (#11091)
  * Python runtime 4.21.10 not works generated code can not load valid
    proto.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO (boo#1133277).</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to v22.3
  UPB (Python/PHP/Ruby C-Extension)
  * Remove src prefix from proto import
  * Fix .gitmodules to use the correct absl branch
  * Remove erroneous dependency on googletest
- update to 22.2:
  Java
  * Add version to intra proto dependencies and add kotlin stdlib
    dependency
  * Add $ back for osgi header
  * Remove $ in pom files
- update to 22.1:
  * Add visibility of plugin.proto to python directory
  * Strip "src" from file name of plugin.proto
  * Add OSGi headers to pom files.
  * Remove errorprone dependency from kotlin protos.
  * Version protoc according to the compiler version number.
- update to 22.0:
  * This version includes breaking changes to: Cpp.
    Please refer to the migration guide for information:
    https://protobuf.dev/support/migration/#compiler-22
  * [Cpp] Migrate to Abseil's logging library.
  * [Cpp] `proto2::Map::value_type` changes to `std::pair`.
  * [Cpp] Mark final ZeroCopyInputStream, ZeroCopyOutputStream,
    and DefaultFieldComparator classes.
  * [Cpp] Add a dependency on Abseil (#10416)
  * [Cpp] Remove all autotools usage (#10132)
  * [Cpp] Add C++20 reserved keywords
  * [Cpp] Dropped C++11 Support
  * [Cpp] Delete Arena::Init
  * [Cpp] Replace JSON parser with new implementation
  * [Cpp] Make RepeatedField::GetArena non-const in order to
    support split RepeatedFields.
  * long list of bindings specific fixes see
    https://github.com/protocolbuffers/protobuf/releases/tag/v22.0
- python sub packages version is set 4.22.3 as defined in
  python/google/protobuf/__init__.py to stay compatible
- skip python2 builds by default
- drop patches:
  * 10355.patch,
  * gcc12-disable-__constinit-with-c++-11.patch (merged upstream)
- added patches:
  * add-missing-stdint-header.patch   added for compile fixes</changelog>
  <changelog author="fstrba@suse.com" date="1682596800">- Make possible to build on older systems, like SLE12 that miss
  some of the used macros.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Mention the rpmlintrc file in the spec.</changelog>
  <changelog author="mpluskal@suse.com" date="1683633600">- Fix confusion in versions</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- drop python2 handling
- fix version handling and package the private libs again</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 22.5:
  C++
  * Add missing cstdint header
  * Fix: missing -DPROTOBUF_USE_DLLS in pkg-config (#12700)
  * Avoid using string(JOIN..., which requires cmake 3.12
  * Explicitly include GTest package in examples
  * Bump Abseil submodule to 20230125.3 (#12660)
- update to 22.4:
  C++
  * Fix libprotoc: export useful symbols from .so
  * Fix btree issue in map tests.
  Python
  * Fix bug in _internal_copy_files where the rule would fail in
    downstream repositories.
  Other
  * Bump utf8_range to version with working pkg-config (#12584)
  * Fix declared dependencies for pkg-config
  * Update abseil dependency and reorder dependencies to ensure
    we use the version specified in protobuf_deps.
  * Turn off clang::musttail on i386</changelog>
  <changelog author="fvogt@suse.com" date="1686744000">- Add patch to fix linking ThreadSafeArena:
  * 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch
- Drop the protobuf-source package, no longer used</changelog>
  <changelog author="dmueller@suse.com" date="1688385600">- update to 23.3:
  C++
  * Regenerate stale files
  * Use the same ABI for static and shared libraries on non-
    Windows platforms
  * Add a workaround for GCC constexpr bug
  Objective-C
  * Regenerate stale files
  UPB (Python/PHP/Ruby C-Extension)
  * Fixed a bug in `upb_Map_Delete()` that caused crashes in
    map.delete(k) for Ruby when string-keyed maps were in use.
  Compiler
  * Add missing header to Objective-c generator
  * Add a workaround for GCC constexpr bug
  Java
  * Rollback of: Simplify protobuf Java message builder by
    removing methods that calls the super class only.
  Csharp
  * [C#] Replace regex that validates descriptor names
- drop 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1688731200">- update to 23.4:
  * Add dllexport_decl for generated default instance.
  * Deps: Update Guava to 32.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1698667200">- Build with source and target levels 8
  * fixes build with JDK21
- Install the pom file with the new %%mvn_install_pom macro
- Do not install the pom-only artifacts, since the %%mvn_install_pom
  macro resolves the variables at the install time</changelog>
  <changelog author="dmueller@suse.com" date="1703160000">- build against modern python on sle15</changelog>
  <changelog author="dmueller@suse.com" date="1704196800">- update to 25.1:
  * Raise warnings for deprecated python syntax usages
  * Add support for extensions in CRuby, JRuby, and FFI Ruby
  * Add support for options in CRuby, JRuby and FFI (#14594)
- update to 25.0:
  * Implement proto2/proto3 with editions
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Editions: Introduce functionality to protoc for generating
    edition feature set defaults.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Publish extension declarations with declaration
    verifications.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Protoc: parser rejects explicit use of map_entry option
  * Protoc: validate that reserved range start is before end
  * Protoc: support identifiers as reserved names in addition to
    string literals (only in editions)
  * Drop support for Bazel 5.
  * Allow code generators to specify whether or not they support
    editions.
  [#] C++
  * Set `PROTOBUF_EXPORT` on
    `InternalOutOfLineDeleteMessageLite()`
  * Update stale checked-in files
  * Apply PROTOBUF_NOINLINE to declarations of some functions
    that want it.
  * Implement proto2/proto3 with editions
  * Make JSON UTF-8 boundary check inclusive of the largest
    possible UTF-8 character.
  * Reduce `Map::size_type` to 32-bits. Protobuf containers can't
    have more than that
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Fix bug in reflection based Swap of map fields.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Add prefetching to arena allocations.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    repeated and map field accessors.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    string field accessors.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Fixes for 32-bit MSVC.
  * Publish extension declarations with declaration
    verifications.
  * Export the constants in protobuf's any.h to support DLL
    builds.
  * Implement AbslStringify for the Descriptor family of types.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    message field accessors.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Introduce C++ feature for UTF8 validation.
  * Protoc: validate that reserved range start is before end
  * Remove option to disable the table-driven parser in protoc.
  * Lock down ctype=CORD in proto file.
  * Support split repeated fields.
  * In OSS mode omit some extern template specializations.
  * Allow code generators to specify whether or not they support
    editions.
  [#] Java
  * Implement proto2/proto3 with editions
  * Remove synthetic oneofs from Java gencode field accessor
    tables.
  * Timestamps.parse: Add error handling for invalid
    hours/minutes in the timezone offset.
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Add missing debugging version info to Protobuf Java gencode
    when multiple files are generated.
  * Fix a bad cast in putBuilderIfAbsent when already present due
    to using the result of put() directly (which is null if it
    currently has no value)
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Fix a NPE in putBuilderIfAbsent due to using the result of
    put() directly (which is null if it currently has no value)
  * Update Kotlin compiler to escape package names
  * Add MapFieldBuilder and change codegen to generate it and the
    put{field}BuilderIfAbsent method.
  * Introduce recursion limit in Java text format parsing
  * Consider the protobuf.Any invalid if typeUrl.split("/")
    returns an empty array.
  * Mark `FieldDescriptor.hasOptionalKeyword()` as deprecated.
  * Fixed Python memory leak in map lookup.
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Ensure Timestamp.ToDatetime(tz) has correct offset
  * Do not check required field for upb python MergeFrom
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Emit __slots__ in pyi output as a tuple rather than a list
    for --pyi_out.
  * Fix a bug that strips options from descriptor.proto in
    Python.
  * Raise warings for message.UnknownFields() usages and navigate
    to the new add
  * Add protobuf python keyword support in path for stub
    generator.
  * Add tuple support to set Struct
  * ### Python C-Extension (Default)
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Check that ffi-compiler loads before using it to define
    tasks.
  [#] UPB (Python/PHP/Ruby C-Extension)
  * Include .inc files directly instead of through a filegroup
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Add utf8_validation feature back to the global feature set.
  * Do not check required field for upb python MergeFrom
  * Merge the protobuf and upb Bazel repos
  * Added malloc_trim() calls to Python allocator so RSS will
    decrease when memory is freed
  * Upb: fix a Python memory leak in ByteSize()
  * Support ASAN detection on clang
  * Upb: bugfix for importing a proto3 enum from within a proto2
    file
  * Expose methods needed by Ruby FFI using UPB_API
  * Fix `PyUpb_Message_MergeInternal` segfault</changelog>
</package>
<package pkgid="c6a1491c4f12383bf302e53868fc49cf525652e8e1dc48ba4c89c821c743eff9" name="libprotobuf-lite25_1_0" arch="s390x">
  <version epoch="0" ver="25.1" rel="150400.9.3.1"/>
  <changelog author="dmueller@suse.com" date="1659614400">- add 10355.patch to fix soversioning</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 21.5:
  PHP
  * Added getContainingOneof and getRealContainingOneof to descriptor.
  * fix PHP readonly legacy files for nested messages
  Python
  * Fixed comparison of maps in Python.</changelog>
  <changelog author="dmueller@suse.com" date="1663588800">- update to 21.6:
  C++:
  * Reduce memory consumption of MessageSet parsing</changelog>
  <changelog author="dmueller@suse.com" date="1667044800">- update to 21.9:
  * Ruby
  * Replace libc strdup usage with internal impl to restore musl compat (#10818)
  * Auto capitalize enums name in Ruby (#10454) (#10763)
  * Other
  * Fix for grpc.tools #17995 &amp; protobuf #7474 (handle UTF-8 paths in argumentfile) (#10721)
  * C++
  * 21.x No longer define no_threadlocal on OpenBSD (#10743)
  * Java
  * Mark default instance as immutable first to avoid race during static initialization of default instances (#10771)
  * Refactoring java full runtime to reuse sub-message builders and prepare to
    migrate parsing logic from parse constructor to builder.
  * Move proto wireformat parsing functionality from the private "parsing
    constructor" to the Builder class.
  * Change the Lite runtime to prefer merging from the wireformat into mutable
    messages rather than building up a new immutable object before merging. This
    way results in fewer allocations and copy operations.
  * Make message-type extensions merge from wire-format instead of building up
    instances and merging afterwards. This has much better performance.
  * Fix TextFormat parser to build up recurring (but supposedly not repeated)
    sub-messages directly from text rather than building a new sub-message and
    merging the fully formed message into the existing field.</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 21.10:
  * Java
  * Use bit-field int values in buildPartial to skip work on unset groups of
    fields. (#10960)
  * Mark nested builder as clean after clear is called (#10984)</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- update to 21.11:
  * Python
  * Add license file to pypi wheels (#10936)
  * Fix round-trip bug (#10158)</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- update to v21.12:
  * Python
  * Fix broken enum ranges (#11171)
  * Stop requiring extension fields to have a sythetic oneof (#11091)
  * Python runtime 4.21.10 not works generated code can not load valid
    proto.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO (boo#1133277).</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to v22.3
  UPB (Python/PHP/Ruby C-Extension)
  * Remove src prefix from proto import
  * Fix .gitmodules to use the correct absl branch
  * Remove erroneous dependency on googletest
- update to 22.2:
  Java
  * Add version to intra proto dependencies and add kotlin stdlib
    dependency
  * Add $ back for osgi header
  * Remove $ in pom files
- update to 22.1:
  * Add visibility of plugin.proto to python directory
  * Strip "src" from file name of plugin.proto
  * Add OSGi headers to pom files.
  * Remove errorprone dependency from kotlin protos.
  * Version protoc according to the compiler version number.
- update to 22.0:
  * This version includes breaking changes to: Cpp.
    Please refer to the migration guide for information:
    https://protobuf.dev/support/migration/#compiler-22
  * [Cpp] Migrate to Abseil's logging library.
  * [Cpp] `proto2::Map::value_type` changes to `std::pair`.
  * [Cpp] Mark final ZeroCopyInputStream, ZeroCopyOutputStream,
    and DefaultFieldComparator classes.
  * [Cpp] Add a dependency on Abseil (#10416)
  * [Cpp] Remove all autotools usage (#10132)
  * [Cpp] Add C++20 reserved keywords
  * [Cpp] Dropped C++11 Support
  * [Cpp] Delete Arena::Init
  * [Cpp] Replace JSON parser with new implementation
  * [Cpp] Make RepeatedField::GetArena non-const in order to
    support split RepeatedFields.
  * long list of bindings specific fixes see
    https://github.com/protocolbuffers/protobuf/releases/tag/v22.0
- python sub packages version is set 4.22.3 as defined in
  python/google/protobuf/__init__.py to stay compatible
- skip python2 builds by default
- drop patches:
  * 10355.patch,
  * gcc12-disable-__constinit-with-c++-11.patch (merged upstream)
- added patches:
  * add-missing-stdint-header.patch   added for compile fixes</changelog>
  <changelog author="fstrba@suse.com" date="1682596800">- Make possible to build on older systems, like SLE12 that miss
  some of the used macros.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Mention the rpmlintrc file in the spec.</changelog>
  <changelog author="mpluskal@suse.com" date="1683633600">- Fix confusion in versions</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- drop python2 handling
- fix version handling and package the private libs again</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 22.5:
  C++
  * Add missing cstdint header
  * Fix: missing -DPROTOBUF_USE_DLLS in pkg-config (#12700)
  * Avoid using string(JOIN..., which requires cmake 3.12
  * Explicitly include GTest package in examples
  * Bump Abseil submodule to 20230125.3 (#12660)
- update to 22.4:
  C++
  * Fix libprotoc: export useful symbols from .so
  * Fix btree issue in map tests.
  Python
  * Fix bug in _internal_copy_files where the rule would fail in
    downstream repositories.
  Other
  * Bump utf8_range to version with working pkg-config (#12584)
  * Fix declared dependencies for pkg-config
  * Update abseil dependency and reorder dependencies to ensure
    we use the version specified in protobuf_deps.
  * Turn off clang::musttail on i386</changelog>
  <changelog author="fvogt@suse.com" date="1686744000">- Add patch to fix linking ThreadSafeArena:
  * 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch
- Drop the protobuf-source package, no longer used</changelog>
  <changelog author="dmueller@suse.com" date="1688385600">- update to 23.3:
  C++
  * Regenerate stale files
  * Use the same ABI for static and shared libraries on non-
    Windows platforms
  * Add a workaround for GCC constexpr bug
  Objective-C
  * Regenerate stale files
  UPB (Python/PHP/Ruby C-Extension)
  * Fixed a bug in `upb_Map_Delete()` that caused crashes in
    map.delete(k) for Ruby when string-keyed maps were in use.
  Compiler
  * Add missing header to Objective-c generator
  * Add a workaround for GCC constexpr bug
  Java
  * Rollback of: Simplify protobuf Java message builder by
    removing methods that calls the super class only.
  Csharp
  * [C#] Replace regex that validates descriptor names
- drop 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1688731200">- update to 23.4:
  * Add dllexport_decl for generated default instance.
  * Deps: Update Guava to 32.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1698667200">- Build with source and target levels 8
  * fixes build with JDK21
- Install the pom file with the new %%mvn_install_pom macro
- Do not install the pom-only artifacts, since the %%mvn_install_pom
  macro resolves the variables at the install time</changelog>
  <changelog author="dmueller@suse.com" date="1703160000">- build against modern python on sle15</changelog>
  <changelog author="dmueller@suse.com" date="1704196800">- update to 25.1:
  * Raise warnings for deprecated python syntax usages
  * Add support for extensions in CRuby, JRuby, and FFI Ruby
  * Add support for options in CRuby, JRuby and FFI (#14594)
- update to 25.0:
  * Implement proto2/proto3 with editions
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Editions: Introduce functionality to protoc for generating
    edition feature set defaults.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Publish extension declarations with declaration
    verifications.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Protoc: parser rejects explicit use of map_entry option
  * Protoc: validate that reserved range start is before end
  * Protoc: support identifiers as reserved names in addition to
    string literals (only in editions)
  * Drop support for Bazel 5.
  * Allow code generators to specify whether or not they support
    editions.
  [#] C++
  * Set `PROTOBUF_EXPORT` on
    `InternalOutOfLineDeleteMessageLite()`
  * Update stale checked-in files
  * Apply PROTOBUF_NOINLINE to declarations of some functions
    that want it.
  * Implement proto2/proto3 with editions
  * Make JSON UTF-8 boundary check inclusive of the largest
    possible UTF-8 character.
  * Reduce `Map::size_type` to 32-bits. Protobuf containers can't
    have more than that
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Fix bug in reflection based Swap of map fields.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Add prefetching to arena allocations.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    repeated and map field accessors.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    string field accessors.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Fixes for 32-bit MSVC.
  * Publish extension declarations with declaration
    verifications.
  * Export the constants in protobuf's any.h to support DLL
    builds.
  * Implement AbslStringify for the Descriptor family of types.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    message field accessors.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Introduce C++ feature for UTF8 validation.
  * Protoc: validate that reserved range start is before end
  * Remove option to disable the table-driven parser in protoc.
  * Lock down ctype=CORD in proto file.
  * Support split repeated fields.
  * In OSS mode omit some extern template specializations.
  * Allow code generators to specify whether or not they support
    editions.
  [#] Java
  * Implement proto2/proto3 with editions
  * Remove synthetic oneofs from Java gencode field accessor
    tables.
  * Timestamps.parse: Add error handling for invalid
    hours/minutes in the timezone offset.
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Add missing debugging version info to Protobuf Java gencode
    when multiple files are generated.
  * Fix a bad cast in putBuilderIfAbsent when already present due
    to using the result of put() directly (which is null if it
    currently has no value)
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Fix a NPE in putBuilderIfAbsent due to using the result of
    put() directly (which is null if it currently has no value)
  * Update Kotlin compiler to escape package names
  * Add MapFieldBuilder and change codegen to generate it and the
    put{field}BuilderIfAbsent method.
  * Introduce recursion limit in Java text format parsing
  * Consider the protobuf.Any invalid if typeUrl.split("/")
    returns an empty array.
  * Mark `FieldDescriptor.hasOptionalKeyword()` as deprecated.
  * Fixed Python memory leak in map lookup.
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Ensure Timestamp.ToDatetime(tz) has correct offset
  * Do not check required field for upb python MergeFrom
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Emit __slots__ in pyi output as a tuple rather than a list
    for --pyi_out.
  * Fix a bug that strips options from descriptor.proto in
    Python.
  * Raise warings for message.UnknownFields() usages and navigate
    to the new add
  * Add protobuf python keyword support in path for stub
    generator.
  * Add tuple support to set Struct
  * ### Python C-Extension (Default)
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Check that ffi-compiler loads before using it to define
    tasks.
  [#] UPB (Python/PHP/Ruby C-Extension)
  * Include .inc files directly instead of through a filegroup
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Add utf8_validation feature back to the global feature set.
  * Do not check required field for upb python MergeFrom
  * Merge the protobuf and upb Bazel repos
  * Added malloc_trim() calls to Python allocator so RSS will
    decrease when memory is freed
  * Upb: fix a Python memory leak in ByteSize()
  * Support ASAN detection on clang
  * Upb: bugfix for importing a proto3 enum from within a proto2
    file
  * Expose methods needed by Ruby FFI using UPB_API
  * Fix `PyUpb_Message_MergeInternal` segfault</changelog>
</package>
<package pkgid="99accaea3c59a4a07bffda5e37a3c4707d3f1569410b652dc80312dc90888640" name="libprotobuf-lite25_1_0" arch="x86_64">
  <version epoch="0" ver="25.1" rel="150400.9.3.1"/>
  <changelog author="dmueller@suse.com" date="1659614400">- add 10355.patch to fix soversioning</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 21.5:
  PHP
  * Added getContainingOneof and getRealContainingOneof to descriptor.
  * fix PHP readonly legacy files for nested messages
  Python
  * Fixed comparison of maps in Python.</changelog>
  <changelog author="dmueller@suse.com" date="1663588800">- update to 21.6:
  C++:
  * Reduce memory consumption of MessageSet parsing</changelog>
  <changelog author="dmueller@suse.com" date="1667044800">- update to 21.9:
  * Ruby
  * Replace libc strdup usage with internal impl to restore musl compat (#10818)
  * Auto capitalize enums name in Ruby (#10454) (#10763)
  * Other
  * Fix for grpc.tools #17995 &amp; protobuf #7474 (handle UTF-8 paths in argumentfile) (#10721)
  * C++
  * 21.x No longer define no_threadlocal on OpenBSD (#10743)
  * Java
  * Mark default instance as immutable first to avoid race during static initialization of default instances (#10771)
  * Refactoring java full runtime to reuse sub-message builders and prepare to
    migrate parsing logic from parse constructor to builder.
  * Move proto wireformat parsing functionality from the private "parsing
    constructor" to the Builder class.
  * Change the Lite runtime to prefer merging from the wireformat into mutable
    messages rather than building up a new immutable object before merging. This
    way results in fewer allocations and copy operations.
  * Make message-type extensions merge from wire-format instead of building up
    instances and merging afterwards. This has much better performance.
  * Fix TextFormat parser to build up recurring (but supposedly not repeated)
    sub-messages directly from text rather than building a new sub-message and
    merging the fully formed message into the existing field.</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 21.10:
  * Java
  * Use bit-field int values in buildPartial to skip work on unset groups of
    fields. (#10960)
  * Mark nested builder as clean after clear is called (#10984)</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- update to 21.11:
  * Python
  * Add license file to pypi wheels (#10936)
  * Fix round-trip bug (#10158)</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- update to v21.12:
  * Python
  * Fix broken enum ranges (#11171)
  * Stop requiring extension fields to have a sythetic oneof (#11091)
  * Python runtime 4.21.10 not works generated code can not load valid
    proto.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO (boo#1133277).</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to v22.3
  UPB (Python/PHP/Ruby C-Extension)
  * Remove src prefix from proto import
  * Fix .gitmodules to use the correct absl branch
  * Remove erroneous dependency on googletest
- update to 22.2:
  Java
  * Add version to intra proto dependencies and add kotlin stdlib
    dependency
  * Add $ back for osgi header
  * Remove $ in pom files
- update to 22.1:
  * Add visibility of plugin.proto to python directory
  * Strip "src" from file name of plugin.proto
  * Add OSGi headers to pom files.
  * Remove errorprone dependency from kotlin protos.
  * Version protoc according to the compiler version number.
- update to 22.0:
  * This version includes breaking changes to: Cpp.
    Please refer to the migration guide for information:
    https://protobuf.dev/support/migration/#compiler-22
  * [Cpp] Migrate to Abseil's logging library.
  * [Cpp] `proto2::Map::value_type` changes to `std::pair`.
  * [Cpp] Mark final ZeroCopyInputStream, ZeroCopyOutputStream,
    and DefaultFieldComparator classes.
  * [Cpp] Add a dependency on Abseil (#10416)
  * [Cpp] Remove all autotools usage (#10132)
  * [Cpp] Add C++20 reserved keywords
  * [Cpp] Dropped C++11 Support
  * [Cpp] Delete Arena::Init
  * [Cpp] Replace JSON parser with new implementation
  * [Cpp] Make RepeatedField::GetArena non-const in order to
    support split RepeatedFields.
  * long list of bindings specific fixes see
    https://github.com/protocolbuffers/protobuf/releases/tag/v22.0
- python sub packages version is set 4.22.3 as defined in
  python/google/protobuf/__init__.py to stay compatible
- skip python2 builds by default
- drop patches:
  * 10355.patch,
  * gcc12-disable-__constinit-with-c++-11.patch (merged upstream)
- added patches:
  * add-missing-stdint-header.patch   added for compile fixes</changelog>
  <changelog author="fstrba@suse.com" date="1682596800">- Make possible to build on older systems, like SLE12 that miss
  some of the used macros.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Mention the rpmlintrc file in the spec.</changelog>
  <changelog author="mpluskal@suse.com" date="1683633600">- Fix confusion in versions</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- drop python2 handling
- fix version handling and package the private libs again</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 22.5:
  C++
  * Add missing cstdint header
  * Fix: missing -DPROTOBUF_USE_DLLS in pkg-config (#12700)
  * Avoid using string(JOIN..., which requires cmake 3.12
  * Explicitly include GTest package in examples
  * Bump Abseil submodule to 20230125.3 (#12660)
- update to 22.4:
  C++
  * Fix libprotoc: export useful symbols from .so
  * Fix btree issue in map tests.
  Python
  * Fix bug in _internal_copy_files where the rule would fail in
    downstream repositories.
  Other
  * Bump utf8_range to version with working pkg-config (#12584)
  * Fix declared dependencies for pkg-config
  * Update abseil dependency and reorder dependencies to ensure
    we use the version specified in protobuf_deps.
  * Turn off clang::musttail on i386</changelog>
  <changelog author="fvogt@suse.com" date="1686744000">- Add patch to fix linking ThreadSafeArena:
  * 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch
- Drop the protobuf-source package, no longer used</changelog>
  <changelog author="dmueller@suse.com" date="1688385600">- update to 23.3:
  C++
  * Regenerate stale files
  * Use the same ABI for static and shared libraries on non-
    Windows platforms
  * Add a workaround for GCC constexpr bug
  Objective-C
  * Regenerate stale files
  UPB (Python/PHP/Ruby C-Extension)
  * Fixed a bug in `upb_Map_Delete()` that caused crashes in
    map.delete(k) for Ruby when string-keyed maps were in use.
  Compiler
  * Add missing header to Objective-c generator
  * Add a workaround for GCC constexpr bug
  Java
  * Rollback of: Simplify protobuf Java message builder by
    removing methods that calls the super class only.
  Csharp
  * [C#] Replace regex that validates descriptor names
- drop 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1688731200">- update to 23.4:
  * Add dllexport_decl for generated default instance.
  * Deps: Update Guava to 32.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1698667200">- Build with source and target levels 8
  * fixes build with JDK21
- Install the pom file with the new %%mvn_install_pom macro
- Do not install the pom-only artifacts, since the %%mvn_install_pom
  macro resolves the variables at the install time</changelog>
  <changelog author="dmueller@suse.com" date="1703160000">- build against modern python on sle15</changelog>
  <changelog author="dmueller@suse.com" date="1704196800">- update to 25.1:
  * Raise warnings for deprecated python syntax usages
  * Add support for extensions in CRuby, JRuby, and FFI Ruby
  * Add support for options in CRuby, JRuby and FFI (#14594)
- update to 25.0:
  * Implement proto2/proto3 with editions
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Editions: Introduce functionality to protoc for generating
    edition feature set defaults.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Publish extension declarations with declaration
    verifications.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Protoc: parser rejects explicit use of map_entry option
  * Protoc: validate that reserved range start is before end
  * Protoc: support identifiers as reserved names in addition to
    string literals (only in editions)
  * Drop support for Bazel 5.
  * Allow code generators to specify whether or not they support
    editions.
  [#] C++
  * Set `PROTOBUF_EXPORT` on
    `InternalOutOfLineDeleteMessageLite()`
  * Update stale checked-in files
  * Apply PROTOBUF_NOINLINE to declarations of some functions
    that want it.
  * Implement proto2/proto3 with editions
  * Make JSON UTF-8 boundary check inclusive of the largest
    possible UTF-8 character.
  * Reduce `Map::size_type` to 32-bits. Protobuf containers can't
    have more than that
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Fix bug in reflection based Swap of map fields.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Add prefetching to arena allocations.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    repeated and map field accessors.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    string field accessors.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Fixes for 32-bit MSVC.
  * Publish extension declarations with declaration
    verifications.
  * Export the constants in protobuf's any.h to support DLL
    builds.
  * Implement AbslStringify for the Descriptor family of types.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    message field accessors.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Introduce C++ feature for UTF8 validation.
  * Protoc: validate that reserved range start is before end
  * Remove option to disable the table-driven parser in protoc.
  * Lock down ctype=CORD in proto file.
  * Support split repeated fields.
  * In OSS mode omit some extern template specializations.
  * Allow code generators to specify whether or not they support
    editions.
  [#] Java
  * Implement proto2/proto3 with editions
  * Remove synthetic oneofs from Java gencode field accessor
    tables.
  * Timestamps.parse: Add error handling for invalid
    hours/minutes in the timezone offset.
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Add missing debugging version info to Protobuf Java gencode
    when multiple files are generated.
  * Fix a bad cast in putBuilderIfAbsent when already present due
    to using the result of put() directly (which is null if it
    currently has no value)
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Fix a NPE in putBuilderIfAbsent due to using the result of
    put() directly (which is null if it currently has no value)
  * Update Kotlin compiler to escape package names
  * Add MapFieldBuilder and change codegen to generate it and the
    put{field}BuilderIfAbsent method.
  * Introduce recursion limit in Java text format parsing
  * Consider the protobuf.Any invalid if typeUrl.split("/")
    returns an empty array.
  * Mark `FieldDescriptor.hasOptionalKeyword()` as deprecated.
  * Fixed Python memory leak in map lookup.
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Ensure Timestamp.ToDatetime(tz) has correct offset
  * Do not check required field for upb python MergeFrom
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Emit __slots__ in pyi output as a tuple rather than a list
    for --pyi_out.
  * Fix a bug that strips options from descriptor.proto in
    Python.
  * Raise warings for message.UnknownFields() usages and navigate
    to the new add
  * Add protobuf python keyword support in path for stub
    generator.
  * Add tuple support to set Struct
  * ### Python C-Extension (Default)
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Check that ffi-compiler loads before using it to define
    tasks.
  [#] UPB (Python/PHP/Ruby C-Extension)
  * Include .inc files directly instead of through a filegroup
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Add utf8_validation feature back to the global feature set.
  * Do not check required field for upb python MergeFrom
  * Merge the protobuf and upb Bazel repos
  * Added malloc_trim() calls to Python allocator so RSS will
    decrease when memory is freed
  * Upb: fix a Python memory leak in ByteSize()
  * Support ASAN detection on clang
  * Upb: bugfix for importing a proto3 enum from within a proto2
    file
  * Expose methods needed by Ruby FFI using UPB_API
  * Fix `PyUpb_Message_MergeInternal` segfault</changelog>
</package>
<package pkgid="af49a0c42313d763841cfcf321ff545a3377ccdd712bb5b3a2e3032cbd14502d" name="libpython3_6m1_0" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.51.1"/>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
</package>
<package pkgid="7d73e4f72000198897e733a59de0d6b37d5e2dd0f379dbd1b5b60096c10b76f1" name="libpython3_6m1_0" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.51.1"/>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
</package>
<package pkgid="d4065caa31a1a86fcc5d761c6cd78e334ea074b8c281e70784ec27d640423fd7" name="libpython3_6m1_0" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.51.1"/>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
</package>
<package pkgid="2390da5290018b2eecddc57d0d0cd7abccfe87bda5089cdddaa00ee5472db504" name="libpython3_6m1_0" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.54.1"/>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
</package>
<package pkgid="97bd62787bab3d0c3ec31b297ffcd2fdaf8fd07343874aba444a4bb18e4bbf01" name="libpython3_6m1_0" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.54.1"/>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
</package>
<package pkgid="35627dd68e7b5841030dc089a66e7a8f9dc88c1d5fe9859493422e69cdf70a4d" name="libpython3_6m1_0" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.54.1"/>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
</package>
<package pkgid="c8e01bfdddc8cd7ceac2c4681a0e775c27fcc63ad530c59c02ef2e037dcf567f" name="librados2" arch="aarch64">
  <version epoch="0" ver="16.2.13.66+g54799ee0666" rel="150400.3.9.2"/>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit
  + (bsc#1187748) When an RBD is mapped, it is attempted to be deployed as an OSD.</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)
  + (bsc#1196046) mgr/cephadm: try to get FQDN for configuration files</changelog>
  <changelog author="tserong@suse.com" date="1658836800">- Update to 16.2.9-538-g9de83fa4064:
  + (bsc#1201604) cephfs-shell: move source to separate subdirectory</changelog>
  <changelog author="tserong@suse.com" date="1665057600">- Update to 16.2.9-539-gea74dd900cd:
  + (bsc#1202292) ceph.spec.in: Add -DFMT_DEPRECATED_OSTREAM to CXXFLAGS</changelog>
  <changelog author="michael.fritch@suse.com" date="1674820800">- Update to 16.2.11-56-gc067055f8f5:
  + (bsc#1199183) osd, tools, kv: non-aggressive, on-line trimming of accumulated dups
  + (bsc#1200262) ceph-volume: fix fast device alloc size on mulitple device
  + (bsc#1200501) cephadm: update monitoring container images
  + (bsc#1200978) mgr/dashboard: prevent alert redirect
  + (bsc#1201797) mgr/volumes: Add subvolumegroup resize cmd
  + (bsc#1201837) mgr/volumes: Fix subvolume discover during upgrade (CVE-2022-0670)
  + (bsc#1201976) monitoring/ceph-mixin: add RGW host to label info
  + (bsc#1202077) mgr/dashboard: enable addition of custom Prometheus alerts
  + (bsc#1203375) python-common: Add 'KB' to supported suffixes in SizeMatcher
  + (bsc#1204430) ceph-crash: drop privleges to run as "ceph" user, rather than root (CVE-2022-3650)
  + (bsc#1205025) rgw: Guard against malformed bucket URLs (CVE-2022-3854)
  + (bsc#1205436) mgr/dashboard: fix rgw connect when using ssl</changelog>
  <changelog author="tserong@suse.com" date="1674820801">- Update to 16.2.11-57-g9be7fb44a33:
  + ceph.spec.in: Replace %usrmerged macro with regular version check
- checkin.sh: default to ses7p branch</changelog>
  <changelog author="tserong@suse.com" date="1675771200">- Update to 16.2.11-58-g38d6afd3b78:
  + test/CMakeLists.txt: move 'APPEND rgw_libs Boost::filesystem' to top level</changelog>
  <changelog author="tserong@suse.com" date="1678449600">- Update to 16.2.11-62-gce6291a3463:
  + (bsc#1201088) fix FTBFS on gcc 13</changelog>
  <changelog author="tserong@suse.com" date="1680004800">- Update to 16.2.11-65-g8b7e6fc0182:
  + (bsc#1201088) test/librados: fix FTBFS on gcc 13
  + (bsc#1208820) mgr/dashboard: allow to pass controls on iscsi disk create</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="tserong@suse.com" date="1683806400">- Update to 16.2.13-66-g54799ee0666:
  + (bsc#1199880) mgr: don't dump global config holding gil
  + (bsc#1209621) cephadm: fix NFS haproxy failover if active node disappears
  + (bsc#1210153) mgr/cephadm: fix handling of mgr upgrades with 3 or more mgrs
  + (bsc#1210243, bsc#1210314) ceph-volume: fix regression in activate
  + (bsc#1210719) cephadm: mount host /etc/hosts for daemon containers in podman deployments
  + (bsc#1210784) mgr/dashboard: Fix SSO error: 'str' object has no attribute 'decode'
  + (bsc#1210944) cmake: patch boost source to support python 3.11
  + (bsc#1211090) fix FTBFS on s390x</changelog>
  <changelog author="tserong@suse.com" date="1684929600">- Add "#!BuildConstraint" to spec files for compatibility with _multibuild</changelog>
  <changelog author="tserong@suse.com" date="1687867200">- Remove _constraints file, add README-constraints.txt and pre_checkin.env</changelog>
</package>
<package pkgid="706ed669da0b19f8e71429a31f600b95e5bb2803e57feb9cee25cb929aee2e09" name="librados2" arch="x86_64">
  <version epoch="0" ver="16.2.13.66+g54799ee0666" rel="150400.3.9.2"/>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit
  + (bsc#1187748) When an RBD is mapped, it is attempted to be deployed as an OSD.</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)
  + (bsc#1196046) mgr/cephadm: try to get FQDN for configuration files</changelog>
  <changelog author="tserong@suse.com" date="1658836800">- Update to 16.2.9-538-g9de83fa4064:
  + (bsc#1201604) cephfs-shell: move source to separate subdirectory</changelog>
  <changelog author="tserong@suse.com" date="1665057600">- Update to 16.2.9-539-gea74dd900cd:
  + (bsc#1202292) ceph.spec.in: Add -DFMT_DEPRECATED_OSTREAM to CXXFLAGS</changelog>
  <changelog author="michael.fritch@suse.com" date="1674820800">- Update to 16.2.11-56-gc067055f8f5:
  + (bsc#1199183) osd, tools, kv: non-aggressive, on-line trimming of accumulated dups
  + (bsc#1200262) ceph-volume: fix fast device alloc size on mulitple device
  + (bsc#1200501) cephadm: update monitoring container images
  + (bsc#1200978) mgr/dashboard: prevent alert redirect
  + (bsc#1201797) mgr/volumes: Add subvolumegroup resize cmd
  + (bsc#1201837) mgr/volumes: Fix subvolume discover during upgrade (CVE-2022-0670)
  + (bsc#1201976) monitoring/ceph-mixin: add RGW host to label info
  + (bsc#1202077) mgr/dashboard: enable addition of custom Prometheus alerts
  + (bsc#1203375) python-common: Add 'KB' to supported suffixes in SizeMatcher
  + (bsc#1204430) ceph-crash: drop privleges to run as "ceph" user, rather than root (CVE-2022-3650)
  + (bsc#1205025) rgw: Guard against malformed bucket URLs (CVE-2022-3854)
  + (bsc#1205436) mgr/dashboard: fix rgw connect when using ssl</changelog>
  <changelog author="tserong@suse.com" date="1674820801">- Update to 16.2.11-57-g9be7fb44a33:
  + ceph.spec.in: Replace %usrmerged macro with regular version check
- checkin.sh: default to ses7p branch</changelog>
  <changelog author="tserong@suse.com" date="1675771200">- Update to 16.2.11-58-g38d6afd3b78:
  + test/CMakeLists.txt: move 'APPEND rgw_libs Boost::filesystem' to top level</changelog>
  <changelog author="tserong@suse.com" date="1678449600">- Update to 16.2.11-62-gce6291a3463:
  + (bsc#1201088) fix FTBFS on gcc 13</changelog>
  <changelog author="tserong@suse.com" date="1680004800">- Update to 16.2.11-65-g8b7e6fc0182:
  + (bsc#1201088) test/librados: fix FTBFS on gcc 13
  + (bsc#1208820) mgr/dashboard: allow to pass controls on iscsi disk create</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="tserong@suse.com" date="1683806400">- Update to 16.2.13-66-g54799ee0666:
  + (bsc#1199880) mgr: don't dump global config holding gil
  + (bsc#1209621) cephadm: fix NFS haproxy failover if active node disappears
  + (bsc#1210153) mgr/cephadm: fix handling of mgr upgrades with 3 or more mgrs
  + (bsc#1210243, bsc#1210314) ceph-volume: fix regression in activate
  + (bsc#1210719) cephadm: mount host /etc/hosts for daemon containers in podman deployments
  + (bsc#1210784) mgr/dashboard: Fix SSO error: 'str' object has no attribute 'decode'
  + (bsc#1210944) cmake: patch boost source to support python 3.11
  + (bsc#1211090) fix FTBFS on s390x</changelog>
  <changelog author="tserong@suse.com" date="1684929600">- Add "#!BuildConstraint" to spec files for compatibility with _multibuild</changelog>
  <changelog author="tserong@suse.com" date="1687867200">- Remove _constraints file, add README-constraints.txt and pre_checkin.env</changelog>
</package>
<package pkgid="9360962f2c866cee0859f2340688008f9ebac9d27af3f1d7cddcd0ca5eb508a1" name="librbd1" arch="aarch64">
  <version epoch="0" ver="16.2.13.66+g54799ee0666" rel="150400.3.9.2"/>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit
  + (bsc#1187748) When an RBD is mapped, it is attempted to be deployed as an OSD.</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)
  + (bsc#1196046) mgr/cephadm: try to get FQDN for configuration files</changelog>
  <changelog author="tserong@suse.com" date="1658836800">- Update to 16.2.9-538-g9de83fa4064:
  + (bsc#1201604) cephfs-shell: move source to separate subdirectory</changelog>
  <changelog author="tserong@suse.com" date="1665057600">- Update to 16.2.9-539-gea74dd900cd:
  + (bsc#1202292) ceph.spec.in: Add -DFMT_DEPRECATED_OSTREAM to CXXFLAGS</changelog>
  <changelog author="michael.fritch@suse.com" date="1674820800">- Update to 16.2.11-56-gc067055f8f5:
  + (bsc#1199183) osd, tools, kv: non-aggressive, on-line trimming of accumulated dups
  + (bsc#1200262) ceph-volume: fix fast device alloc size on mulitple device
  + (bsc#1200501) cephadm: update monitoring container images
  + (bsc#1200978) mgr/dashboard: prevent alert redirect
  + (bsc#1201797) mgr/volumes: Add subvolumegroup resize cmd
  + (bsc#1201837) mgr/volumes: Fix subvolume discover during upgrade (CVE-2022-0670)
  + (bsc#1201976) monitoring/ceph-mixin: add RGW host to label info
  + (bsc#1202077) mgr/dashboard: enable addition of custom Prometheus alerts
  + (bsc#1203375) python-common: Add 'KB' to supported suffixes in SizeMatcher
  + (bsc#1204430) ceph-crash: drop privleges to run as "ceph" user, rather than root (CVE-2022-3650)
  + (bsc#1205025) rgw: Guard against malformed bucket URLs (CVE-2022-3854)
  + (bsc#1205436) mgr/dashboard: fix rgw connect when using ssl</changelog>
  <changelog author="tserong@suse.com" date="1674820801">- Update to 16.2.11-57-g9be7fb44a33:
  + ceph.spec.in: Replace %usrmerged macro with regular version check
- checkin.sh: default to ses7p branch</changelog>
  <changelog author="tserong@suse.com" date="1675771200">- Update to 16.2.11-58-g38d6afd3b78:
  + test/CMakeLists.txt: move 'APPEND rgw_libs Boost::filesystem' to top level</changelog>
  <changelog author="tserong@suse.com" date="1678449600">- Update to 16.2.11-62-gce6291a3463:
  + (bsc#1201088) fix FTBFS on gcc 13</changelog>
  <changelog author="tserong@suse.com" date="1680004800">- Update to 16.2.11-65-g8b7e6fc0182:
  + (bsc#1201088) test/librados: fix FTBFS on gcc 13
  + (bsc#1208820) mgr/dashboard: allow to pass controls on iscsi disk create</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="tserong@suse.com" date="1683806400">- Update to 16.2.13-66-g54799ee0666:
  + (bsc#1199880) mgr: don't dump global config holding gil
  + (bsc#1209621) cephadm: fix NFS haproxy failover if active node disappears
  + (bsc#1210153) mgr/cephadm: fix handling of mgr upgrades with 3 or more mgrs
  + (bsc#1210243, bsc#1210314) ceph-volume: fix regression in activate
  + (bsc#1210719) cephadm: mount host /etc/hosts for daemon containers in podman deployments
  + (bsc#1210784) mgr/dashboard: Fix SSO error: 'str' object has no attribute 'decode'
  + (bsc#1210944) cmake: patch boost source to support python 3.11
  + (bsc#1211090) fix FTBFS on s390x</changelog>
  <changelog author="tserong@suse.com" date="1684929600">- Add "#!BuildConstraint" to spec files for compatibility with _multibuild</changelog>
  <changelog author="tserong@suse.com" date="1687867200">- Remove _constraints file, add README-constraints.txt and pre_checkin.env</changelog>
</package>
<package pkgid="1a303310bc09b06ee162ee5d18a8fdb5ca0dd787c30d46ad177bfc925b2e3c33" name="librbd1" arch="x86_64">
  <version epoch="0" ver="16.2.13.66+g54799ee0666" rel="150400.3.9.2"/>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit
  + (bsc#1187748) When an RBD is mapped, it is attempted to be deployed as an OSD.</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)
  + (bsc#1196046) mgr/cephadm: try to get FQDN for configuration files</changelog>
  <changelog author="tserong@suse.com" date="1658836800">- Update to 16.2.9-538-g9de83fa4064:
  + (bsc#1201604) cephfs-shell: move source to separate subdirectory</changelog>
  <changelog author="tserong@suse.com" date="1665057600">- Update to 16.2.9-539-gea74dd900cd:
  + (bsc#1202292) ceph.spec.in: Add -DFMT_DEPRECATED_OSTREAM to CXXFLAGS</changelog>
  <changelog author="michael.fritch@suse.com" date="1674820800">- Update to 16.2.11-56-gc067055f8f5:
  + (bsc#1199183) osd, tools, kv: non-aggressive, on-line trimming of accumulated dups
  + (bsc#1200262) ceph-volume: fix fast device alloc size on mulitple device
  + (bsc#1200501) cephadm: update monitoring container images
  + (bsc#1200978) mgr/dashboard: prevent alert redirect
  + (bsc#1201797) mgr/volumes: Add subvolumegroup resize cmd
  + (bsc#1201837) mgr/volumes: Fix subvolume discover during upgrade (CVE-2022-0670)
  + (bsc#1201976) monitoring/ceph-mixin: add RGW host to label info
  + (bsc#1202077) mgr/dashboard: enable addition of custom Prometheus alerts
  + (bsc#1203375) python-common: Add 'KB' to supported suffixes in SizeMatcher
  + (bsc#1204430) ceph-crash: drop privleges to run as "ceph" user, rather than root (CVE-2022-3650)
  + (bsc#1205025) rgw: Guard against malformed bucket URLs (CVE-2022-3854)
  + (bsc#1205436) mgr/dashboard: fix rgw connect when using ssl</changelog>
  <changelog author="tserong@suse.com" date="1674820801">- Update to 16.2.11-57-g9be7fb44a33:
  + ceph.spec.in: Replace %usrmerged macro with regular version check
- checkin.sh: default to ses7p branch</changelog>
  <changelog author="tserong@suse.com" date="1675771200">- Update to 16.2.11-58-g38d6afd3b78:
  + test/CMakeLists.txt: move 'APPEND rgw_libs Boost::filesystem' to top level</changelog>
  <changelog author="tserong@suse.com" date="1678449600">- Update to 16.2.11-62-gce6291a3463:
  + (bsc#1201088) fix FTBFS on gcc 13</changelog>
  <changelog author="tserong@suse.com" date="1680004800">- Update to 16.2.11-65-g8b7e6fc0182:
  + (bsc#1201088) test/librados: fix FTBFS on gcc 13
  + (bsc#1208820) mgr/dashboard: allow to pass controls on iscsi disk create</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="tserong@suse.com" date="1683806400">- Update to 16.2.13-66-g54799ee0666:
  + (bsc#1199880) mgr: don't dump global config holding gil
  + (bsc#1209621) cephadm: fix NFS haproxy failover if active node disappears
  + (bsc#1210153) mgr/cephadm: fix handling of mgr upgrades with 3 or more mgrs
  + (bsc#1210243, bsc#1210314) ceph-volume: fix regression in activate
  + (bsc#1210719) cephadm: mount host /etc/hosts for daemon containers in podman deployments
  + (bsc#1210784) mgr/dashboard: Fix SSO error: 'str' object has no attribute 'decode'
  + (bsc#1210944) cmake: patch boost source to support python 3.11
  + (bsc#1211090) fix FTBFS on s390x</changelog>
  <changelog author="tserong@suse.com" date="1684929600">- Add "#!BuildConstraint" to spec files for compatibility with _multibuild</changelog>
  <changelog author="tserong@suse.com" date="1687867200">- Remove _constraints file, add README-constraints.txt and pre_checkin.env</changelog>
</package>
<package pkgid="0fb719c4673a769d49c43533c92e1a31564dbb6b0b38b0eaf32e2cf3626ea8ba" name="libsgutils2-1_47-2" arch="aarch64">
  <version epoch="0" ver="1.47+15.b6898b8" rel="150400.3.11.1"/>
  <changelog author="hare@suse.de" date="1511956800">- Update to svn r730:
  * Move testing utilities to 'testing' directory
  * sg_opcode: check resid and trim response
  * sg_rep_zones: expand --help option
  * sg_mode: Add Out-of-band management control page
  * sg_ses: filer join output on dpage element presence
  * documentation cleanup
- rescan-scsi-bus.sh: Add '--ignore-rev' option
- Supplement SCSI modaliases (bsc#1065212)</changelog>
  <changelog author="hare@suse.de" date="1513598400">- sg_inq: decode standard INQUIRY for CD-ROMs correctly (bsc#1070431)
- rescan-scsi-bus.sh: new option for ignore rev change
- rescan-scsi-bus.sh: Remove white space
- Add 'coreutils' to Requires (bsc#1072744)
- Add 'posttrans' to rpm spec (bsc#1071972)</changelog>
  <changelog author="hare@suse.de" date="1513944000">- sg_inq: check VPD page 0x0 before reading serial number
  (bsc#1067839)
- sg_inq: add option '-o/--only' to skip reading VPD pages
  (bsc#1067839)
- Revert 'postun' rpm spec changes after review</changelog>
  <changelog author="hare@suse.de" date="1518004800">- Update to svn r744:
  * sg_write_x: new command for normal/atomic/orwrite etc
    SCSI WRITE variants
  * sg_ses: add NVMe support
  * sg_inq: decode NVMe controller / NSIDs
- rescan_scsi_bus.sh: Fix manpage for --forcerescan
- 55-scsi-sg3_id.rules: fixes for scsi_id compability (bsc#1079873)
- 55-scsi-sg3_id.rules: run sg_inq for SPC devices (bsc#1079873)</changelog>
  <changelog author="hare@suse.de" date="1518091200">- Merge local patch with git repository
  * Delete sgut-libversioning.diff</changelog>
  <changelog author="hare@suse.de" date="1518177600">- Update to svn r751:
  * NVMe bugfixes
  * sg_seek: new utility
  * sg_stream_ctl: new utility program
- 54-before-scsi-sg3_id.rules: compability rule for systemd
  (bsc#1079873)
- Add dracut.conf to install new rule with dracut</changelog>
  <changelog author="mwilck@suse.com" date="1518436800">- dracut.conf: add whitespace at end of line (bsc#1080562)</changelog>
  <changelog author="hare@suse.de" date="1523016000">- Update to svn r763:
  * More NVMe bugfixes
  * sg_vpd: add device constituents vpd
  * sg_raw: add --raw option
  * sg_turs: add --low option
  * sg_ses: decoding dpage fixes; add --quiet option
- rescan-scsi-bus.sh: Fixup syntax error (bsc#1087008)
- rescan-scsi-bus.sh: Fixes from shellcheck</changelog>
  <changelog author="mwilck@suse.com" date="1553601600">- Spec file:
  * add fc_wwpn_id (bsc#1005063)
  * add lun masking service (bsc#954600)
  * drop BuildRequires on udev
  * replace unversioned "Provides: scsi" with versioned
- Update to version sg3_utils-1.45~803+31.564be3d:
  * New versioning scheme for upstream pre-release:
    1.45 - upstream release target, 803 - upstream svn id,
    +31: SUSE commits on top of svn, 564be3d - git hash
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008)
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212)
  * Add scsi-enable-target-scan.sh (bsc#954600)
- Update to svn r803:
  * sg_opcodes: expand MLU (18-102r0)
  * sg_format: add --dcrt used twice (FOV=1 DCRT=0)
  * rescan-scsi-bus: widen LUN 0 only scanning
  (bsc#1069384)
- Earlier SUSE fixes included in 1.45:
  * rescan-scsi-bus.sh: use LUN wildcard in idlist (bsc#1069384)
  [svn: r795]
  * sg_ses: fixup page decoding (bsc#1077787) [svn: r795]
  * sg_ses: allow to decode raw data instead of reading from a device
  (bsc#1050943) [svn: r795]
- Update to sg3_utils-1.44 [20180912] [svn: r791]
  * rescan-scsi-bus.sh: harden code
  - bump version to 20180615
  - add --ignore-rev to ignore revision change
  * introduce SG3_UTILS_DSENSE environment variable
  * sginfo: don't open /dev/snapshot
  * sg_timestamp: add '--no-timestamp' option
  - add --elapsed and --hex options
  * sg_wr_mode: add --rtd option for RTD bi
  * sg_unmap: add --all=ST,RN[,LA] option
  * sgm_dd, sg_dd: add --dry-run and --verbose options
  * sg_inq+sg_vpd: update Extended inquiry data vpd page
  * sg_ses: add 'hw_reset' and 'sw_reset' to enclosure services
    controller electronics element type (18-047r1)
  * sg_decode sense: add --cdb and --err=ES options
  * sg_format: add --dry-run option
  - extend --wait timeout for &gt; 4TB disks
  * sg_sanitize: add --dry-run option
- Earlier SUSE fixes included in 1.44:
  * sg_inq: decode standard INQUIRY for CD-ROMs correctly
  (bsc#1065448, bsc#1070431) [svn: r742]
  * sg_inq: export all NAA values (bsc#1050767) [svn: r715]
  * Add fc_wwpn_id to generate by-path links for fibrechannel
  (bsc#1005063) (svn@715)
  * sg_vpd: struct opts_t misaligment (bsc#1050943) [svn: r707]</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.47+13.75d23ac:
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option</changelog>
  <changelog author="mwilck@suse.com" date="1697803200">- Update to version 1.47+15.b6898b8:
  * rescan-scsi-bus.sh: remove /tmp/rescan-scsi-mpath-info.txt
  (gh#doug-gilbert/sg3_utils#44)
  * rescan_scsi_bus.sh: fix multipath issue when called with -s and
  without -u (bsc#1215720, bsc#1216355)</changelog>
  <changelog author="mwilck@suse.com" date="1698408000">- Make sure initrd is rebuilt when sg3_utils is updated
  (bsc#1215772)</changelog>
</package>
<package pkgid="4c71a8aeda80ed84c77159a844d555f56d849a8e13dd830fc99115c075db38f1" name="libsgutils2-1_47-2" arch="s390x">
  <version epoch="0" ver="1.47+15.b6898b8" rel="150400.3.11.1"/>
  <changelog author="hare@suse.de" date="1511956800">- Update to svn r730:
  * Move testing utilities to 'testing' directory
  * sg_opcode: check resid and trim response
  * sg_rep_zones: expand --help option
  * sg_mode: Add Out-of-band management control page
  * sg_ses: filer join output on dpage element presence
  * documentation cleanup
- rescan-scsi-bus.sh: Add '--ignore-rev' option
- Supplement SCSI modaliases (bsc#1065212)</changelog>
  <changelog author="hare@suse.de" date="1513598400">- sg_inq: decode standard INQUIRY for CD-ROMs correctly (bsc#1070431)
- rescan-scsi-bus.sh: new option for ignore rev change
- rescan-scsi-bus.sh: Remove white space
- Add 'coreutils' to Requires (bsc#1072744)
- Add 'posttrans' to rpm spec (bsc#1071972)</changelog>
  <changelog author="hare@suse.de" date="1513944000">- sg_inq: check VPD page 0x0 before reading serial number
  (bsc#1067839)
- sg_inq: add option '-o/--only' to skip reading VPD pages
  (bsc#1067839)
- Revert 'postun' rpm spec changes after review</changelog>
  <changelog author="hare@suse.de" date="1518004800">- Update to svn r744:
  * sg_write_x: new command for normal/atomic/orwrite etc
    SCSI WRITE variants
  * sg_ses: add NVMe support
  * sg_inq: decode NVMe controller / NSIDs
- rescan_scsi_bus.sh: Fix manpage for --forcerescan
- 55-scsi-sg3_id.rules: fixes for scsi_id compability (bsc#1079873)
- 55-scsi-sg3_id.rules: run sg_inq for SPC devices (bsc#1079873)</changelog>
  <changelog author="hare@suse.de" date="1518091200">- Merge local patch with git repository
  * Delete sgut-libversioning.diff</changelog>
  <changelog author="hare@suse.de" date="1518177600">- Update to svn r751:
  * NVMe bugfixes
  * sg_seek: new utility
  * sg_stream_ctl: new utility program
- 54-before-scsi-sg3_id.rules: compability rule for systemd
  (bsc#1079873)
- Add dracut.conf to install new rule with dracut</changelog>
  <changelog author="mwilck@suse.com" date="1518436800">- dracut.conf: add whitespace at end of line (bsc#1080562)</changelog>
  <changelog author="hare@suse.de" date="1523016000">- Update to svn r763:
  * More NVMe bugfixes
  * sg_vpd: add device constituents vpd
  * sg_raw: add --raw option
  * sg_turs: add --low option
  * sg_ses: decoding dpage fixes; add --quiet option
- rescan-scsi-bus.sh: Fixup syntax error (bsc#1087008)
- rescan-scsi-bus.sh: Fixes from shellcheck</changelog>
  <changelog author="mwilck@suse.com" date="1553601600">- Spec file:
  * add fc_wwpn_id (bsc#1005063)
  * add lun masking service (bsc#954600)
  * drop BuildRequires on udev
  * replace unversioned "Provides: scsi" with versioned
- Update to version sg3_utils-1.45~803+31.564be3d:
  * New versioning scheme for upstream pre-release:
    1.45 - upstream release target, 803 - upstream svn id,
    +31: SUSE commits on top of svn, 564be3d - git hash
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008)
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212)
  * Add scsi-enable-target-scan.sh (bsc#954600)
- Update to svn r803:
  * sg_opcodes: expand MLU (18-102r0)
  * sg_format: add --dcrt used twice (FOV=1 DCRT=0)
  * rescan-scsi-bus: widen LUN 0 only scanning
  (bsc#1069384)
- Earlier SUSE fixes included in 1.45:
  * rescan-scsi-bus.sh: use LUN wildcard in idlist (bsc#1069384)
  [svn: r795]
  * sg_ses: fixup page decoding (bsc#1077787) [svn: r795]
  * sg_ses: allow to decode raw data instead of reading from a device
  (bsc#1050943) [svn: r795]
- Update to sg3_utils-1.44 [20180912] [svn: r791]
  * rescan-scsi-bus.sh: harden code
  - bump version to 20180615
  - add --ignore-rev to ignore revision change
  * introduce SG3_UTILS_DSENSE environment variable
  * sginfo: don't open /dev/snapshot
  * sg_timestamp: add '--no-timestamp' option
  - add --elapsed and --hex options
  * sg_wr_mode: add --rtd option for RTD bi
  * sg_unmap: add --all=ST,RN[,LA] option
  * sgm_dd, sg_dd: add --dry-run and --verbose options
  * sg_inq+sg_vpd: update Extended inquiry data vpd page
  * sg_ses: add 'hw_reset' and 'sw_reset' to enclosure services
    controller electronics element type (18-047r1)
  * sg_decode sense: add --cdb and --err=ES options
  * sg_format: add --dry-run option
  - extend --wait timeout for &gt; 4TB disks
  * sg_sanitize: add --dry-run option
- Earlier SUSE fixes included in 1.44:
  * sg_inq: decode standard INQUIRY for CD-ROMs correctly
  (bsc#1065448, bsc#1070431) [svn: r742]
  * sg_inq: export all NAA values (bsc#1050767) [svn: r715]
  * Add fc_wwpn_id to generate by-path links for fibrechannel
  (bsc#1005063) (svn@715)
  * sg_vpd: struct opts_t misaligment (bsc#1050943) [svn: r707]</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.47+13.75d23ac:
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option</changelog>
  <changelog author="mwilck@suse.com" date="1697803200">- Update to version 1.47+15.b6898b8:
  * rescan-scsi-bus.sh: remove /tmp/rescan-scsi-mpath-info.txt
  (gh#doug-gilbert/sg3_utils#44)
  * rescan_scsi_bus.sh: fix multipath issue when called with -s and
  without -u (bsc#1215720, bsc#1216355)</changelog>
  <changelog author="mwilck@suse.com" date="1698408000">- Make sure initrd is rebuilt when sg3_utils is updated
  (bsc#1215772)</changelog>
</package>
<package pkgid="23e8f71bd50734a66b1884f918020891b9cd4e6dbd762ade826c7b6c3a1e1f63" name="libsgutils2-1_47-2" arch="x86_64">
  <version epoch="0" ver="1.47+15.b6898b8" rel="150400.3.11.1"/>
  <changelog author="hare@suse.de" date="1511956800">- Update to svn r730:
  * Move testing utilities to 'testing' directory
  * sg_opcode: check resid and trim response
  * sg_rep_zones: expand --help option
  * sg_mode: Add Out-of-band management control page
  * sg_ses: filer join output on dpage element presence
  * documentation cleanup
- rescan-scsi-bus.sh: Add '--ignore-rev' option
- Supplement SCSI modaliases (bsc#1065212)</changelog>
  <changelog author="hare@suse.de" date="1513598400">- sg_inq: decode standard INQUIRY for CD-ROMs correctly (bsc#1070431)
- rescan-scsi-bus.sh: new option for ignore rev change
- rescan-scsi-bus.sh: Remove white space
- Add 'coreutils' to Requires (bsc#1072744)
- Add 'posttrans' to rpm spec (bsc#1071972)</changelog>
  <changelog author="hare@suse.de" date="1513944000">- sg_inq: check VPD page 0x0 before reading serial number
  (bsc#1067839)
- sg_inq: add option '-o/--only' to skip reading VPD pages
  (bsc#1067839)
- Revert 'postun' rpm spec changes after review</changelog>
  <changelog author="hare@suse.de" date="1518004800">- Update to svn r744:
  * sg_write_x: new command for normal/atomic/orwrite etc
    SCSI WRITE variants
  * sg_ses: add NVMe support
  * sg_inq: decode NVMe controller / NSIDs
- rescan_scsi_bus.sh: Fix manpage for --forcerescan
- 55-scsi-sg3_id.rules: fixes for scsi_id compability (bsc#1079873)
- 55-scsi-sg3_id.rules: run sg_inq for SPC devices (bsc#1079873)</changelog>
  <changelog author="hare@suse.de" date="1518091200">- Merge local patch with git repository
  * Delete sgut-libversioning.diff</changelog>
  <changelog author="hare@suse.de" date="1518177600">- Update to svn r751:
  * NVMe bugfixes
  * sg_seek: new utility
  * sg_stream_ctl: new utility program
- 54-before-scsi-sg3_id.rules: compability rule for systemd
  (bsc#1079873)
- Add dracut.conf to install new rule with dracut</changelog>
  <changelog author="mwilck@suse.com" date="1518436800">- dracut.conf: add whitespace at end of line (bsc#1080562)</changelog>
  <changelog author="hare@suse.de" date="1523016000">- Update to svn r763:
  * More NVMe bugfixes
  * sg_vpd: add device constituents vpd
  * sg_raw: add --raw option
  * sg_turs: add --low option
  * sg_ses: decoding dpage fixes; add --quiet option
- rescan-scsi-bus.sh: Fixup syntax error (bsc#1087008)
- rescan-scsi-bus.sh: Fixes from shellcheck</changelog>
  <changelog author="mwilck@suse.com" date="1553601600">- Spec file:
  * add fc_wwpn_id (bsc#1005063)
  * add lun masking service (bsc#954600)
  * drop BuildRequires on udev
  * replace unversioned "Provides: scsi" with versioned
- Update to version sg3_utils-1.45~803+31.564be3d:
  * New versioning scheme for upstream pre-release:
    1.45 - upstream release target, 803 - upstream svn id,
    +31: SUSE commits on top of svn, 564be3d - git hash
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008)
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212)
  * Add scsi-enable-target-scan.sh (bsc#954600)
- Update to svn r803:
  * sg_opcodes: expand MLU (18-102r0)
  * sg_format: add --dcrt used twice (FOV=1 DCRT=0)
  * rescan-scsi-bus: widen LUN 0 only scanning
  (bsc#1069384)
- Earlier SUSE fixes included in 1.45:
  * rescan-scsi-bus.sh: use LUN wildcard in idlist (bsc#1069384)
  [svn: r795]
  * sg_ses: fixup page decoding (bsc#1077787) [svn: r795]
  * sg_ses: allow to decode raw data instead of reading from a device
  (bsc#1050943) [svn: r795]
- Update to sg3_utils-1.44 [20180912] [svn: r791]
  * rescan-scsi-bus.sh: harden code
  - bump version to 20180615
  - add --ignore-rev to ignore revision change
  * introduce SG3_UTILS_DSENSE environment variable
  * sginfo: don't open /dev/snapshot
  * sg_timestamp: add '--no-timestamp' option
  - add --elapsed and --hex options
  * sg_wr_mode: add --rtd option for RTD bi
  * sg_unmap: add --all=ST,RN[,LA] option
  * sgm_dd, sg_dd: add --dry-run and --verbose options
  * sg_inq+sg_vpd: update Extended inquiry data vpd page
  * sg_ses: add 'hw_reset' and 'sw_reset' to enclosure services
    controller electronics element type (18-047r1)
  * sg_decode sense: add --cdb and --err=ES options
  * sg_format: add --dry-run option
  - extend --wait timeout for &gt; 4TB disks
  * sg_sanitize: add --dry-run option
- Earlier SUSE fixes included in 1.44:
  * sg_inq: decode standard INQUIRY for CD-ROMs correctly
  (bsc#1065448, bsc#1070431) [svn: r742]
  * sg_inq: export all NAA values (bsc#1050767) [svn: r715]
  * Add fc_wwpn_id to generate by-path links for fibrechannel
  (bsc#1005063) (svn@715)
  * sg_vpd: struct opts_t misaligment (bsc#1050943) [svn: r707]</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.47+13.75d23ac:
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option</changelog>
  <changelog author="mwilck@suse.com" date="1697803200">- Update to version 1.47+15.b6898b8:
  * rescan-scsi-bus.sh: remove /tmp/rescan-scsi-mpath-info.txt
  (gh#doug-gilbert/sg3_utils#44)
  * rescan_scsi_bus.sh: fix multipath issue when called with -s and
  without -u (bsc#1215720, bsc#1216355)</changelog>
  <changelog author="mwilck@suse.com" date="1698408000">- Make sure initrd is rebuilt when sg3_utils is updated
  (bsc#1215772)</changelog>
</package>
<package pkgid="beabb109de155167f431a46a4ebbb711378dcd327c4a70c81869c3a5ea2bed55" name="libsmartcols1" arch="aarch64">
  <version epoch="0" ver="2.37.4" rel="150500.9.3.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="3b0342c59b4461e33aa92400f094000d3bc20dd25014c798458da4f286290278" name="libsmartcols1" arch="s390x">
  <version epoch="0" ver="2.37.4" rel="150500.9.3.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="38f40107d770b0603b6d33d3041264f2b3fcb8bcbe0cc79615547e99378760d0" name="libsmartcols1" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="150500.9.3.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="23db2391cf1316850aa08f58fd2f67e2b2f86cbba58fd8b8e057f9c80387ff8f" name="libsnmp40" arch="aarch64">
  <version epoch="0" ver="5.9.4" rel="150300.15.11.1"/>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (&gt;=
  4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being
  removed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Format with spec-cleaner
- Drop sle11 support as it fails to build anyway for ages
- Rename python packages to be python-%{name} with obsoletes
  * Use new singlespec macros
  * Add patch converting the py files to python3/2 compat mode
    net-snmp-python3.patch
- Run full autoreconf instead of partial
- Build with threads by building few targets first</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1529323200">- Create /var/agentx via systemd tmpfiles in case of rollback,
  snapshots and transactional updates [bsc#1098032]</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
  <changelog author="abergmann@suse.com" date="1562328000">- Add Lustre filesystem support (bsc#1140341, jsc#SLE-6120).
  Add net-snmp-5.7.3-add-lustre-fs-support.patch
- Add info about the original agent which triggered the trap.
  When the trap is forwarded there was no info about the original
  agent (bsc#1116807).
  Add net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
- Fix missing sysconfig files creation (bsc#1108471).</changelog>
  <changelog author="abergmann@suse.com" date="1639742400">- Make extended MIB read-only (bsc#1174961, CVE-2020-15862).
  Add net-snmp-5.7.3-make-extended-mib-read-only.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640001600">- Fix output for high memTotalReal RAM values (bsc#1152968).
  Add net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640174400">- Fix hrStorage autofs objects timeout problems (bsc#1179699, bsc#1145864).
  Add net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  Add net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
- Fix NSS mounted volumes in hrStorageDescr (bsc#1100146).
  Add net-snmp-5.7.3-recognize-nss-pools-and-nss-volumes-oes.patch
- Fix subagent crash at save_set_var() (bsc#1178021).
  Add net-snmp-5.7.3-subagent-set-response.patch
- Fix subagent data corruption (bsc#1178351, bsc#1179009).
  Add net-snmp-5.7.3-fix-subagent-data-corruption.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640260800">- Fix LFH violation during v3 user creation (bsc#1181591).
  Add net-snmp-5.7.3-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="abergmann@suse.com" date="1646827200">- Decouple snmp-mibs from net-snmp version to allow major version
  upgrade (bsc#1196955).</changelog>
  <changelog author="abergmann@suse.com" date="1665057600">- update to 5.9.3 (bsc#1201103, jsc#SLE-11203):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805 A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809 A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806 Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807 A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808 A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810 A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Change to use systemd service files directly from net-snmp package.
  add:
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
  remove:
  * snmpd.service
  * snmptrapd.service
  * harden_snmpd.service.patch
  * harden_snmptrapd.service.patch
- Refactor and remove obsolete patches to work with version number 5.9.3:
  add:
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  remove:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-add-lustre-fs-support.patch
  * net-snmp-5.7.3-Fix-Makefile.PL.patch
  * net-snmp-5.7.3-modern-rpm-api.patch
  * net-snmp-5.7.3-net-snmp-config-headercheck.patch
  * net-snmp-5.7.3-perl-tk-warning.patch
  * net-snmp-5.7.3-snmpstatus-suppress-output.patch
  * net-snmp-5.7.3-socket-path.patch
  * net-snmp-5.7.3-subagent-set-response.patch
  * net-snmp-5.7.3-testing-empty-arptable.patch
  * net-snmp-5.7.3-velocity-mib.patch
  * net-snmp-5.7.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-pie.patch
  * net-snmp-4.7.2-systemd.patch
  * net-snmp-5.7.3-build-with-openssl-1.1.patch
  * net-snmp-5.7.3-fix-agentx-freezing-on-timeout.patch
  * net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
  * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch
  * net-snmp-5.7.3-fix-subagent-data-corruption.patch
  * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
  * net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  * net-snmp-5.7.3-make-extended-mib-read-only.patch
  * net-snmp-5.7.3-netgroups.patch
  * net-snmp-5.7.3-Remove-U64-typedef.patch
  * net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
  * net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
  * net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch
  * net-snmp-python3.patch</changelog>
  <changelog author="abergmann@suse.com" date="1672920000">- Fixed NULL pointer exception issue when handling ipDefaultTTL or
  pv6IpForwarding (bsc#1205148, CVE-2022-44793, bsc#1205150, CVE-2022-44792).
  add:
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
- Enable AES-192 and AES-256 privacy protocol (bsc#1206828).</changelog>
  <changelog author="abergmann@suse.com" date="1673265600">- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add:
  * net-snmp-5.9.3-harden_snmpd.service.patch
  * net-snmp-5.9.3-harden_snmptrapd.service.patch
  delete:
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch</changelog>
  <changelog author="abergmann@suse.com" date="1697544000">- Update to net-snmp-5.9.4 (bsc#1214364).
  add (rename):
  * net-snmp-5.9.4-add-lustre-fs-support.patch
  * net-snmp-5.9.4-add-netgroups-functionality.patch
  * net-snmp-5.9.4-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.4-fixed-python2-bindings.patch
  * net-snmp-5.9.4-fix-Makefile.PL.patch
  * net-snmp-5.9.4-modern-rpm-api.patch
  * net-snmp-5.9.4-net-snmp-config-headercheck.patch
  * net-snmp-5.9.4-perl-tk-warning.patch
  * net-snmp-5.9.4-pie.patch
  * net-snmp-5.9.4-snmpstatus-suppress-output.patch
  * net-snmp-5.9.4-socket-path.patch
  * net-snmp-5.9.4-subagent-set-response.patch
  * net-snmp-5.9.4-suse-systemd-service-files.patch
  * net-snmp-5.9.4-testing-empty-arptable.patch
  delete (now part of v5.9.4):
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
  delete (rename):
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Removing legacy MIBs used by Velocity Software (jira#PED-6416).
- Re-add support for hostname netgroups that was removed accidentally and
  previously added with FATE#316305 (bsc#1207697).
  '@hostgroup' can be specified for multiple hosts
- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add (rename):
  * net-snmp-5.9.4-harden_snmpd.service.patch
  * net-snmp-5.9.4-harden_snmptrapd.service.patch
  delete (rename):
  * net-snmp-5.9.3-harden_snmpd.service.patch
  * net-snmp-5.9.3-harden_snmptrapd.service.patch</changelog>
</package>
<package pkgid="185457179b6e38ae6b69a25b704d2ef1c4f78934116f4055263f2256ab6ebddf" name="libsnmp40" arch="s390x">
  <version epoch="0" ver="5.9.4" rel="150300.15.11.1"/>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (&gt;=
  4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being
  removed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Format with spec-cleaner
- Drop sle11 support as it fails to build anyway for ages
- Rename python packages to be python-%{name} with obsoletes
  * Use new singlespec macros
  * Add patch converting the py files to python3/2 compat mode
    net-snmp-python3.patch
- Run full autoreconf instead of partial
- Build with threads by building few targets first</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1529323200">- Create /var/agentx via systemd tmpfiles in case of rollback,
  snapshots and transactional updates [bsc#1098032]</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
  <changelog author="abergmann@suse.com" date="1562328000">- Add Lustre filesystem support (bsc#1140341, jsc#SLE-6120).
  Add net-snmp-5.7.3-add-lustre-fs-support.patch
- Add info about the original agent which triggered the trap.
  When the trap is forwarded there was no info about the original
  agent (bsc#1116807).
  Add net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
- Fix missing sysconfig files creation (bsc#1108471).</changelog>
  <changelog author="abergmann@suse.com" date="1639742400">- Make extended MIB read-only (bsc#1174961, CVE-2020-15862).
  Add net-snmp-5.7.3-make-extended-mib-read-only.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640001600">- Fix output for high memTotalReal RAM values (bsc#1152968).
  Add net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640174400">- Fix hrStorage autofs objects timeout problems (bsc#1179699, bsc#1145864).
  Add net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  Add net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
- Fix NSS mounted volumes in hrStorageDescr (bsc#1100146).
  Add net-snmp-5.7.3-recognize-nss-pools-and-nss-volumes-oes.patch
- Fix subagent crash at save_set_var() (bsc#1178021).
  Add net-snmp-5.7.3-subagent-set-response.patch
- Fix subagent data corruption (bsc#1178351, bsc#1179009).
  Add net-snmp-5.7.3-fix-subagent-data-corruption.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640260800">- Fix LFH violation during v3 user creation (bsc#1181591).
  Add net-snmp-5.7.3-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="abergmann@suse.com" date="1646827200">- Decouple snmp-mibs from net-snmp version to allow major version
  upgrade (bsc#1196955).</changelog>
  <changelog author="abergmann@suse.com" date="1665057600">- update to 5.9.3 (bsc#1201103, jsc#SLE-11203):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805 A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809 A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806 Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807 A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808 A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810 A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Change to use systemd service files directly from net-snmp package.
  add:
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
  remove:
  * snmpd.service
  * snmptrapd.service
  * harden_snmpd.service.patch
  * harden_snmptrapd.service.patch
- Refactor and remove obsolete patches to work with version number 5.9.3:
  add:
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  remove:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-add-lustre-fs-support.patch
  * net-snmp-5.7.3-Fix-Makefile.PL.patch
  * net-snmp-5.7.3-modern-rpm-api.patch
  * net-snmp-5.7.3-net-snmp-config-headercheck.patch
  * net-snmp-5.7.3-perl-tk-warning.patch
  * net-snmp-5.7.3-snmpstatus-suppress-output.patch
  * net-snmp-5.7.3-socket-path.patch
  * net-snmp-5.7.3-subagent-set-response.patch
  * net-snmp-5.7.3-testing-empty-arptable.patch
  * net-snmp-5.7.3-velocity-mib.patch
  * net-snmp-5.7.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-pie.patch
  * net-snmp-4.7.2-systemd.patch
  * net-snmp-5.7.3-build-with-openssl-1.1.patch
  * net-snmp-5.7.3-fix-agentx-freezing-on-timeout.patch
  * net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
  * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch
  * net-snmp-5.7.3-fix-subagent-data-corruption.patch
  * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
  * net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  * net-snmp-5.7.3-make-extended-mib-read-only.patch
  * net-snmp-5.7.3-netgroups.patch
  * net-snmp-5.7.3-Remove-U64-typedef.patch
  * net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
  * net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
  * net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch
  * net-snmp-python3.patch</changelog>
  <changelog author="abergmann@suse.com" date="1672920000">- Fixed NULL pointer exception issue when handling ipDefaultTTL or
  pv6IpForwarding (bsc#1205148, CVE-2022-44793, bsc#1205150, CVE-2022-44792).
  add:
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
- Enable AES-192 and AES-256 privacy protocol (bsc#1206828).</changelog>
  <changelog author="abergmann@suse.com" date="1673265600">- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add:
  * net-snmp-5.9.3-harden_snmpd.service.patch
  * net-snmp-5.9.3-harden_snmptrapd.service.patch
  delete:
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch</changelog>
  <changelog author="abergmann@suse.com" date="1697544000">- Update to net-snmp-5.9.4 (bsc#1214364).
  add (rename):
  * net-snmp-5.9.4-add-lustre-fs-support.patch
  * net-snmp-5.9.4-add-netgroups-functionality.patch
  * net-snmp-5.9.4-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.4-fixed-python2-bindings.patch
  * net-snmp-5.9.4-fix-Makefile.PL.patch
  * net-snmp-5.9.4-modern-rpm-api.patch
  * net-snmp-5.9.4-net-snmp-config-headercheck.patch
  * net-snmp-5.9.4-perl-tk-warning.patch
  * net-snmp-5.9.4-pie.patch
  * net-snmp-5.9.4-snmpstatus-suppress-output.patch
  * net-snmp-5.9.4-socket-path.patch
  * net-snmp-5.9.4-subagent-set-response.patch
  * net-snmp-5.9.4-suse-systemd-service-files.patch
  * net-snmp-5.9.4-testing-empty-arptable.patch
  delete (now part of v5.9.4):
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
  delete (rename):
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Removing legacy MIBs used by Velocity Software (jira#PED-6416).
- Re-add support for hostname netgroups that was removed accidentally and
  previously added with FATE#316305 (bsc#1207697).
  '@hostgroup' can be specified for multiple hosts
- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add (rename):
  * net-snmp-5.9.4-harden_snmpd.service.patch
  * net-snmp-5.9.4-harden_snmptrapd.service.patch
  delete (rename):
  * net-snmp-5.9.3-harden_snmpd.service.patch
  * net-snmp-5.9.3-harden_snmptrapd.service.patch</changelog>
</package>
<package pkgid="f68288386bd207c48fde4a6619c4535c03f418ab1eeaa87e9218bc146ffafd90" name="libsnmp40" arch="x86_64">
  <version epoch="0" ver="5.9.4" rel="150300.15.11.1"/>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (&gt;=
  4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being
  removed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Format with spec-cleaner
- Drop sle11 support as it fails to build anyway for ages
- Rename python packages to be python-%{name} with obsoletes
  * Use new singlespec macros
  * Add patch converting the py files to python3/2 compat mode
    net-snmp-python3.patch
- Run full autoreconf instead of partial
- Build with threads by building few targets first</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1529323200">- Create /var/agentx via systemd tmpfiles in case of rollback,
  snapshots and transactional updates [bsc#1098032]</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
  <changelog author="abergmann@suse.com" date="1562328000">- Add Lustre filesystem support (bsc#1140341, jsc#SLE-6120).
  Add net-snmp-5.7.3-add-lustre-fs-support.patch
- Add info about the original agent which triggered the trap.
  When the trap is forwarded there was no info about the original
  agent (bsc#1116807).
  Add net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
- Fix missing sysconfig files creation (bsc#1108471).</changelog>
  <changelog author="abergmann@suse.com" date="1639742400">- Make extended MIB read-only (bsc#1174961, CVE-2020-15862).
  Add net-snmp-5.7.3-make-extended-mib-read-only.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640001600">- Fix output for high memTotalReal RAM values (bsc#1152968).
  Add net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640174400">- Fix hrStorage autofs objects timeout problems (bsc#1179699, bsc#1145864).
  Add net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  Add net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
- Fix NSS mounted volumes in hrStorageDescr (bsc#1100146).
  Add net-snmp-5.7.3-recognize-nss-pools-and-nss-volumes-oes.patch
- Fix subagent crash at save_set_var() (bsc#1178021).
  Add net-snmp-5.7.3-subagent-set-response.patch
- Fix subagent data corruption (bsc#1178351, bsc#1179009).
  Add net-snmp-5.7.3-fix-subagent-data-corruption.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640260800">- Fix LFH violation during v3 user creation (bsc#1181591).
  Add net-snmp-5.7.3-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="abergmann@suse.com" date="1646827200">- Decouple snmp-mibs from net-snmp version to allow major version
  upgrade (bsc#1196955).</changelog>
  <changelog author="abergmann@suse.com" date="1665057600">- update to 5.9.3 (bsc#1201103, jsc#SLE-11203):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805 A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809 A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806 Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807 A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808 A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810 A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Change to use systemd service files directly from net-snmp package.
  add:
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
  remove:
  * snmpd.service
  * snmptrapd.service
  * harden_snmpd.service.patch
  * harden_snmptrapd.service.patch
- Refactor and remove obsolete patches to work with version number 5.9.3:
  add:
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  remove:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-add-lustre-fs-support.patch
  * net-snmp-5.7.3-Fix-Makefile.PL.patch
  * net-snmp-5.7.3-modern-rpm-api.patch
  * net-snmp-5.7.3-net-snmp-config-headercheck.patch
  * net-snmp-5.7.3-perl-tk-warning.patch
  * net-snmp-5.7.3-snmpstatus-suppress-output.patch
  * net-snmp-5.7.3-socket-path.patch
  * net-snmp-5.7.3-subagent-set-response.patch
  * net-snmp-5.7.3-testing-empty-arptable.patch
  * net-snmp-5.7.3-velocity-mib.patch
  * net-snmp-5.7.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-pie.patch
  * net-snmp-4.7.2-systemd.patch
  * net-snmp-5.7.3-build-with-openssl-1.1.patch
  * net-snmp-5.7.3-fix-agentx-freezing-on-timeout.patch
  * net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
  * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch
  * net-snmp-5.7.3-fix-subagent-data-corruption.patch
  * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
  * net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  * net-snmp-5.7.3-make-extended-mib-read-only.patch
  * net-snmp-5.7.3-netgroups.patch
  * net-snmp-5.7.3-Remove-U64-typedef.patch
  * net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
  * net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
  * net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch
  * net-snmp-python3.patch</changelog>
  <changelog author="abergmann@suse.com" date="1672920000">- Fixed NULL pointer exception issue when handling ipDefaultTTL or
  pv6IpForwarding (bsc#1205148, CVE-2022-44793, bsc#1205150, CVE-2022-44792).
  add:
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
- Enable AES-192 and AES-256 privacy protocol (bsc#1206828).</changelog>
  <changelog author="abergmann@suse.com" date="1673265600">- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add:
  * net-snmp-5.9.3-harden_snmpd.service.patch
  * net-snmp-5.9.3-harden_snmptrapd.service.patch
  delete:
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch</changelog>
  <changelog author="abergmann@suse.com" date="1697544000">- Update to net-snmp-5.9.4 (bsc#1214364).
  add (rename):
  * net-snmp-5.9.4-add-lustre-fs-support.patch
  * net-snmp-5.9.4-add-netgroups-functionality.patch
  * net-snmp-5.9.4-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.4-fixed-python2-bindings.patch
  * net-snmp-5.9.4-fix-Makefile.PL.patch
  * net-snmp-5.9.4-modern-rpm-api.patch
  * net-snmp-5.9.4-net-snmp-config-headercheck.patch
  * net-snmp-5.9.4-perl-tk-warning.patch
  * net-snmp-5.9.4-pie.patch
  * net-snmp-5.9.4-snmpstatus-suppress-output.patch
  * net-snmp-5.9.4-socket-path.patch
  * net-snmp-5.9.4-subagent-set-response.patch
  * net-snmp-5.9.4-suse-systemd-service-files.patch
  * net-snmp-5.9.4-testing-empty-arptable.patch
  delete (now part of v5.9.4):
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
  delete (rename):
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Removing legacy MIBs used by Velocity Software (jira#PED-6416).
- Re-add support for hostname netgroups that was removed accidentally and
  previously added with FATE#316305 (bsc#1207697).
  '@hostgroup' can be specified for multiple hosts
- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add (rename):
  * net-snmp-5.9.4-harden_snmpd.service.patch
  * net-snmp-5.9.4-harden_snmptrapd.service.patch
  delete (rename):
  * net-snmp-5.9.3-harden_snmpd.service.patch
  * net-snmp-5.9.3-harden_snmptrapd.service.patch</changelog>
</package>
<package pkgid="36a3221e819a22b23b63a057374b9a3dc4a1ebb74966822add9a25bde62acdb7" name="libsoftokn3" arch="aarch64">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="d1b914581a545fc87ac00a8fe17d7b8afd63ff26e2ddfc51ed1cefc334b7dd64" name="libsoftokn3" arch="s390x">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="055b225311a325d8f5b20fda22237e14b40c64e12e606607b77f316c1a4dc2e0" name="libsoftokn3" arch="x86_64">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="8cc7d7572bd8a0b878e9b42b6f0c55067bc96e2c1c22eb712f157a6ba4a9e1cb" name="libsoftokn3" arch="aarch64">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="a1389297f6c276d335fbbd7e3cb947e5e46efeca64b7efe6503f958e4f92aa34" name="libsoftokn3" arch="s390x">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="04001384cdf5103853f227b4688935e338c3755ecd7c2b564afbd0d0e5970f36" name="libsoftokn3" arch="x86_64">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="cf829c93297e2b56c7ee5c741d6646d665e73d5c613ef85bb14098af5e4602ff" name="libsolv" arch="src">
  <version epoch="0" ver="0.7.27" rel="150400.3.11.2"/>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
</package>
<package pkgid="5e1bdb996ba450c01addfeace7e8cba826c1e3bbdffaee7528ef06de8a4b90dd" name="libsolv" arch="src">
  <version epoch="0" ver="0.7.28" rel="150400.3.16.2"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
</package>
<package pkgid="4f0852d9b9ff48741c3da8d7b44bad8f672de52f5eb3156210b8a4a675e76bb0" name="libsolv-tools" arch="aarch64">
  <version epoch="0" ver="0.7.27" rel="150400.3.11.2"/>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
</package>
<package pkgid="aa4364228ebbb4754410bdf9060636b46c0e26162d70cd97cfef17fcca981fd6" name="libsolv-tools" arch="s390x">
  <version epoch="0" ver="0.7.27" rel="150400.3.11.2"/>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
</package>
<package pkgid="98f58c71f9032133705c17ee474ac35a66a4280de77df4b9ae70f5322e82f534" name="libsolv-tools" arch="x86_64">
  <version epoch="0" ver="0.7.27" rel="150400.3.11.2"/>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
</package>
<package pkgid="c590fc076bd5c11e879b6e7498752ee67a83b5b7994ff20dd142035ccb763885" name="libsolv-tools" arch="aarch64">
  <version epoch="0" ver="0.7.28" rel="150400.3.16.2"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
</package>
<package pkgid="407d260d012f8f84cf1ab51689c7d16a5da553e368fc31f72a4a45dcc7bdbbab" name="libsolv-tools" arch="s390x">
  <version epoch="0" ver="0.7.28" rel="150400.3.16.2"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
</package>
<package pkgid="5ae410f51c1b21a2b7ff385e932f9b9495fa3ead3cd744dc6a91b6b697bea7b8" name="libsolv-tools" arch="x86_64">
  <version epoch="0" ver="0.7.28" rel="150400.3.16.2"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
</package>
<package pkgid="c8f42c3b8cd99fa476f5118dde44f94f9dd3eb325b5c8b5c2799f8386eeb9d3d" name="libsqlite3-0" arch="aarch64">
  <version epoch="0" ver="3.44.0" rel="150000.3.23.1"/>
  <changelog author="astieger@suse.com" date="1523448000">- update to 3.23.1:
  * Fix two problems in the new LEFT JOIN strength reduction
    optimization
  * Fix misbehavior of the FTS5 xBestIndex method
  * Fix a harmless reference to an uninitialized virtual machine
    register
  * Fix the eval.c extension so that it works with PRAGMA
    empty_result_callbacks=ON
  * Fix the generate_series virtual table so that it correctly
    returns no rows if any of its constraints are NULL
  * Performance enhancements in the parser</changelog>
  <changelog author="max@suse.com" date="1552996800">- CVE-2018-20346, bsc#1119687: Upgrade to the most recent version
  to fix a remote code execution vulnerability in FTS3 (Magellan).
- Drop sqlite-fts5-link.patch and do it in the spec file instead.
- Version 3.27.2:
  * Add the VACUUM INTO command
  * Issue an SQLITE_WARNING message on the error log if a
    double-quoted string literal is used
  * Add the remove_diacritics=2 option to FTS3 and FTS5.
  * Add  the SQLITE_PREPARE_NO_VTAB option to sqlite3_prepare_v3().
    Use that option to prevent circular references to shadow tables
    from causing resource leaks.
  * Enhancements to the sqlite3_deserialize() interface
  * Enhancements to the CLI, mostly to support testing and debugging
    of the SQLite library itself
  * Increased robustness against malicious SQL that is run against
    a maliciously corrupted database
- Version 3.26.0:
  * Optimization: When doing an UPDATE on a table with indexes on
    expressions, do not update the expression indexes if they do
    not refer to any of the columns of the table being updated.
  * Allow the xBestIndex() method of virtual table implementations
    to return SQLITE_CONSTRAINT to indicate that the proposed query
    plan is unusable and should not be given further consideration.
  * Added the SQLITE_DBCONFIG_DEFENSIVE option which disables the
    ability to create corrupt database files using ordinary SQL.
  * Added support for read-only shadow tables when the
    SQLITE_DBCONFIG_DEFENSIVE option is enabled.
  * Added the PRAGMA legacy_alter_table command, which if enabled
    causes the ALTER TABLE command to behave like older version of
    SQLite (prior to version 3.25.0) for compatibility.
  * Added PRAGMA table_xinfo that works just like PRAGMA table_info
    except that it also shows hidden columns in virtual tables.
  * Added the explain virtual table as a run-time loadable
    extension.
  * Add a limit counter to the query planner to prevent excessive
    sqlite3_prepare() times for certain pathological SQL inputs.
  * Added support for the sqlite3_normalized_sql() interface, when
    compiling with SQLITE_ENABLE_NORMALIZE.
  * Enhanced triggers so that they can use table-valued functions
    that exist in schemas other than the schema where the trigger
    is defined.
  * Improvements to the ".help" command in the CLI.
  * The SQLITE_HISTORY environment variable, if it exists,
    specifies the name of the command-line editing history file.
  * The --deserialize option associated with opening a new database
    in the CLI cause the database file to be read into memory and
    accessed using the sqlite3_deserialize() API. This simplifies
    running tests on a database without modifying the file on disk.
- Version 3.25.2:
  * Add the PRAGMA legacy_alter_table=ON command that causes the
    "ALTER TABLE RENAME" command to behave as in 3.24.0 and earlier
  * Fix issue with some expressions with windows functions in views
- Version 3.25.1:
  * Avoid false-positive error checks on ALTER TABLE
  * Further ORDER BY LIMIT optimization fixes for window functions
- Version 3.25.0:
  * Add support for window functions
  * Add support for renaming columns within a table
  * Query optimizer improvements
  * slightly better concurrency in multi-threaded environments
  * The ORDER BY LIMIT optimization might have caused an infinite
    loop in the byte code of the prepared statement under very
    obscure circumstances, due to a confluence of minor defects in
    the query optimizer
- Version 3.24.0:
  * Add support for PostgreSQL-style UPSERT
  * Add support for auxiliary columns in r-tree tables
  * Add C-language APIs for discovering SQL keywords used by SQLite
  * Add C-language APIs for dynamic strings based on sqlite3_str
  * Enhance ALTER TABLE so that it recognizes "true" and "false" as
    valid arguments to DEFAULT
  * Add the sorter-reference optimization as a compile-time option
  * Improve the format of the EXPLAIN QUERY PLAN raw output, so that
  it gives better information about the query plan and about the
    relationships between the various components of the plan
  * Added the SQLITE_DBCONFIG_RESET_DATABASE option to the
    sqlite3_db_config() API.
  * Automatically intercept the raw EXPLAIN QUERY PLAN output an
    reformat it into an ASCII-art graph.
  * Lines that begin with "#" and that are not in the middle of an
    SQL statement are interpreted as comments
  * Add the --append option to the ".backup" command
  * Add the ".dbconfig" command
  * various performance improvements
  * various bug fixes</changelog>
  <changelog author="max@suse.com" date="1555502400">- Upgrade to 3.28.0:
  * CVE-2019-9936, bsc#1130326: running fts5 prefix queries inside
    a transaction could trigger a heap-based buffer over-read.
  * CVE-2019-9937, bsc#1130325: interleaving reads and writes in a
    single transaction with an fts5 virtual table will lead to a
    NULL Pointer Dereference.
  * Enhanced window functions
  * Enhanced VACUUM INTO so that it works for read-only databases.
  * New query optimizations.
  * Added the sqlite3_value_frombind() API for determining if the
    argument to an SQL function is from a bound parameter.
  * Security and compatibilities enhancements to fts3_tokenizer().
  * Improved robustness against corrupt database files.</changelog>
  <changelog author="max@suse.com" date="1568116800">- bsc#1150137, CVE-2019-16168, sqlite3-CVE-2019-16168.patch:
  Improper validation of qlite_stat1 sz field leads to division by
  zero.</changelog>
  <changelog author="max@suse.com" date="1625054400">- Sync version 3.36.0 from Factory to implement jsc#SLE-16032.
- Obsoletes sqlite3-CVE-2019-16168.patch.
- The following CVEs have been fixed in upstream releases up to
  this point, but were not mentioned in the change log so far:
  * bsc#1173641, CVE-2020-15358: heap-based buffer overflow in
    multiSelectOrderBy due to mishandling of query-flattener
    optimization
  * bsc#1164719, CVE-2020-9327: NULL pointer dereference and
    segmentation fault because of generated column optimizations in
    isAuxiliaryVtabOperator
  * bsc#1160439, CVE-2019-20218: selectExpander in select.c proceeds
    with WITH stack unwinding even after a parsing error
  * bsc#1160438, CVE-2019-19959: memory-management error via
    ext/misc/zipfile.c involving embedded '\0' input
  * bsc#1160309, CVE-2019-19923: improper handling  of  certain uses
    of SELECT DISTINCT in flattenSubquery may lead to null pointer
    dereference
  * bsc#1159850, CVE-2019-19924: improper error handling in
    sqlite3WindowRewrite()
  * bsc#1159847, CVE-2019-19925: improper handling of NULL pathname
    during an update of a ZIP archive
  * bsc#1159715, CVE-2019-19926: improper handling  of certain
    errors during parsing  multiSelect in select.c
  * bsc#1159491, CVE-2019-19880: exprListAppendList in window.c
    allows attackers to trigger an invalid pointer dereference
  * bsc#1158960, CVE-2019-19603: during handling of CREATE TABLE
    and CREATE VIEW statements, does not consider confusion with
    a shadow table name
  * bsc#1158959, CVE-2019-19646: pragma.c mishandles NOT NULL in an
    integrity_check PRAGMA command in certain cases of generated
    columns
  * bsc#1158958, CVE-2019-19645: alter.c allows attackers to trigger
    infinite recursion via certain types of self-referential views
    in conjunction with ALTER TABLE statements
  * bsc#1158812, CVE-2019-19317: lookupName in resolve.c omits bits
    from the colUsed bitmask in the case of a generated column,
    which allows attackers to cause a denial of service
  * bsc#1157818, CVE-2019-19244: sqlite3,sqlite2,sqlite: The
    function sqlite3Select in select.c allows a crash if a
    sub-select uses both DISTINCT and window functions, and also
    has certain ORDER BY usage
  * bsc#928701, CVE-2015-3415: sqlite3VdbeExec comparison operator
    vulnerability
  * bsc#928700, CVE-2015-3414: sqlite3,sqlite2: dequoting of
    collation-sequence names
  * CVE-2020-13434 boo#1172115: integer overflow in
    sqlite3_str_vappendf
  * CVE-2020-13630 boo#1172234: use-after-free in fts3EvalNextRow
  * CVE-2020-13631 boo#1172236: virtual table allowed to be renamed
    to one of its shadow tables
  * CVE-2020-13632 boo#1172240: NULL pointer dereference via
    crafted matchinfo() query
  * CVE-2020-13435: Malicious SQL statements could have crashed the
    process that is running SQLite (boo#1172091)</changelog>
  <changelog author="max@suse.com" date="1638273600">- SQLite3 3.37.0:
  * STRICT tables provide a prescriptive style of data type
    management, for developers who prefer that kind of thing.
  * When adding columns that contain a CHECK constraint or a
    generated column containing a NOT NULL constraint, the
    ALTER TABLE ADD COLUMN now checks new constraints against
    preexisting rows in the database and will only proceed if no
    constraints are violated.
  * Added the PRAGMA table_list statement.
  * Add the .connection command, allowing the CLI to keep multiple
    database connections open at the same time.
  * Add the --safe command-line option that disables dot-commands
    and SQL statements that might cause side-effects that extend
    beyond the single database file named on the command-line.
  * CLI: Performance improvements when reading SQL statements that
    span many lines.
  * Added the sqlite3_autovacuum_pages() interface.
  * The sqlite3_deserialize() does not and has never worked
    for the TEMP database. That limitation is now noted in the
    documentation.
  * The query planner now omits ORDER BY clauses on subqueries and
    views if removing those clauses does not change the semantics
    of the query.
  * The generate_series table-valued function extension is modified
    so that the first parameter ("START") is now required. This is
    done as a way to demonstrate how to write table-valued
    functions with required parameters. The legacy behavior is
    available using the -DZERO_ARGUMENT_GENERATE_SERIES
    compile-time option.
  * Added new sqlite3_changes64() and sqlite3_total_changes64()
    interfaces.
  * Added the SQLITE_OPEN_EXRESCODE flag option to sqlite3_open_v2().
  * Use less memory to hold the database schema.
  * bsc#1189802, CVE-2021-36690: Fix an issue with the SQLite Expert
    extension when a column has no collating sequence.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641124800">- update to 3.37.1:
  * Fix a bug introduced by the UPSERT enhancements of version
    3.35.0 that can cause incorrect byte-code to be generated for
    some obscure but valid SQL, possibly resulting in a NULL-
    pointer dereference.
  * Fix an OOB read that can occur in FTS5 when reading corrupt
    database files.
  * Improved robustness of the --safe option in the CLI.
  * Other minor fixes to assert() statements and test cases.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641988800">- update to 3.37.2:
  * Fix a bug introduced in version 3.35.0 (2021-03-12) that can
    cause database corruption if a SAVEPOINT is rolled back while
    in PRAGMA temp_store=MEMORY mode, and other changes are made,
    and then the outer transaction commits
  * Fix a long-standing problem with ON DELETE CASCADE and ON
    UPDATE CASCADE in which a cache of the bytecode used to
    implement the cascading change was not being reset following a
    local DDL change</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1645876800">- update to 3.38.0
  * Add the -&gt; and -&gt;&gt; operators for easier processing of JSON
  * The JSON functions are now built-ins
  * Enhancements to date and time functions
  * Rename the printf() SQL function to format() for better
    compatibility, with alias for backwards compatibility.
  * Add the sqlite3_error_offset() interface for helping localize
    an SQL error to a specific character in the input SQL text
  * Enhance the interface to virtual tables
  * CLI columnar output modes are enhanced to correctly handle tabs
    and newlines embedded in text, and add options like "--wrap N",
    "--wordwrap on", and "--quote" to the columnar output modes.
  * Query planner enhancements using a Bloom filter to speed up
    large analytic queries, and a balanced merge tree to evaluate
    UNION or UNION ALL compound SELECT statements that have an
    ORDER BY clause.
  * The ALTER TABLE statement is changed to silently ignores
    entries in the sqlite_schema table that do not parse when
    PRAGMA writable_schema=ON</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1647172800">- update to 3.38.1:
  * Fix problems with the new Bloom filter optimization that might
    cause some obscure queries to get an incorrect answer.
  * Fix the localtime modifier of the date and time functions so
    that it preserves fractional seconds.
  * Fix the sqlite_offset SQL function so that it works correctly
    even in corner cases such as when the argument is a virtual
    column or the column of a view.
  * Fix row value IN operator constraints on virtual tables so that
    they work correctly even if the virtual table implementation
    relies on bytecode to filter rows that do not satisfy the
    constraint.
  * Other minor fixes to assert() statements, test cases, and
    documentation. See the source code timeline for details.
- add upstream patch to run atof1 tests only on x86_64
  sqlite-src-3380100-atof1.patch</changelog>
  <changelog author="max@suse.com" date="1647432000">- Remove obsolete configure flags
- Package the Tcl bindings here again so that we only ship one copy
  of SQLite (bsc#1195773).</changelog>
  <changelog author="max@suse.com" date="1648555200">- update to 3.38.2:
  * Fix a problem with the Bloom filter optimization that might
    cause an incorrect answer when doing a LEFT JOIN with a WHERE
    clause constraint that says that one of the columns on the
    right table of the LEFT JOIN is NULL.
  * Other minor patches.</changelog>
  <changelog author="info@paolostivanin.com" date="1651147200">- update to 3.38.3:
  * Fix a case of the query planner be overly aggressive with
    optimizing automatic-index and Bloom-filter construction,
    using inappropriate ON clause terms to restrict the size of the
    automatic-index or Bloom filter, and resulting in missing rows
    in the output.
  * Other minor patches. See the timeline for details.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1652011200">- update to 3.38.5:
  * Fix a blunder in the CLI of the 3.38.4 release
- includes changes from 3.38.4:
  * fix a byte-code problem in the Bloom filter pull-down
    optimization added by release 3.38.0 in which an error in the
    byte code causes the byte code engine to enter an infinite loop
    when the pull-down optimization encounters a NULL key</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1656676800">- update to 3.39.0:
  * Add (long overdue) support for RIGHT and FULL OUTER JOIN
  * Add new binary comparison operators IS NOT DISTINCT FROM and
    IS DISTINCT FROM that are equivalent to IS and IS NOT,
    respective, for compatibility with PostgreSQL and SQL standards
  * Add a new return code (value "3") from the sqlite3_vtab_distinct()
    interface that indicates a query that has both DISTINCT and
    ORDER BY clauses
  * Added the sqlite3_db_name() interface
  * The unix os interface resolves all symbolic links in database
    filenames to create a canonical name for the database before
    the file is opened
  * Defer materializing views until the materialization is actually
    needed, thus avoiding unnecessary work if the materialization
    turns out to never be used
  * The HAVING clause of a SELECT statement is now allowed on any
    aggregate query, even queries that do not have a GROUP BY
    clause
  * Many microoptimizations collectively reduce CPU cycles by about
    2.3%.
- drop sqlite-src-3380100-atof1.patch, included upstream
- add sqlite-src-3390000-func7-pg-181.patch to skip float precision
  related test failures on 32 bit</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1657886400">- update to 3.39.1:
  * Fix an incorrect result from a query that uses a view that
    contains a compound SELECT in which only one arm contains a
    RIGHT JOIN and where the view is not the first FROM clause term
    of the query that contains the view
  * Fix a long-standing problem with ALTER TABLE RENAME that can
    only arise if the sqlite3_limit(SQLITE_LIMIT_SQL_LENGTH) is set
    to a very small value.
  * Fix a long-standing problem in FTS3 that can only arise when
    compiled with the SQLITE_ENABLE_FTS3_PARENTHESIS compile-time
    option.
  * Fix the initial-prefix optimization for the REGEXP extension so
    that it works correctly even if the prefix contains characters
    that require a 3-byte UTF8 encoding.
  * Enhance the sqlite_stmt virtual table so that it buffers all of
    its output.</changelog>
  <changelog author="max@suse.com" date="1658404800">- update to 3.39.2:
  * Fix a performance regression in the query planner associated
    with rearranging the order of FROM clause terms in the
    presences of a LEFT JOIN.
  * Apply fixes for CVE-2022-35737, Chromium bugs 1343348 and
    1345947, forum post 3607259d3c, and other minor problems
    discovered by internal testing. [boo#1201783]</changelog>
  <changelog author="max@suse.com" date="1662379200">- update to 3.39.3:
  * Use a statement journal on DML statement affecting two or more
    database rows if the statement makes use of a SQL functions
    that might abort.
  * Use a mutex to protect the PRAGMA temp_store_directory and
    PRAGMA data_store_directory statements, even though they are
    decremented and documented as not being threadsafe.</changelog>
  <changelog author="max@suse.com" date="1670932800">- bsc#1206337, CVE-2022-46908, sqlite-CVE-2022-46908.patch:
  relying on --safe for execution of an untrusted CLI script</changelog>
  <changelog author="max@suse.com" date="1700481600">- Sync version 3.44.0 from Factory
  * Fixes bsc#1210660, CVE-2023-2137: Heap buffer overflow
  * sqlite3-rtree-i686.patch: temporary build fix for 32-bit x86.
  * Obsoletes sqlite-CVE-2022-46908.patch
  * Obsoletes sqlite-src-3390000-func7-pg-181.patch</changelog>
</package>
<package pkgid="50c5018e9bf269b5a33e397723ff50e05b51cb3b879f142680c93c228c5aa03b" name="libsqlite3-0" arch="s390x">
  <version epoch="0" ver="3.44.0" rel="150000.3.23.1"/>
  <changelog author="astieger@suse.com" date="1523448000">- update to 3.23.1:
  * Fix two problems in the new LEFT JOIN strength reduction
    optimization
  * Fix misbehavior of the FTS5 xBestIndex method
  * Fix a harmless reference to an uninitialized virtual machine
    register
  * Fix the eval.c extension so that it works with PRAGMA
    empty_result_callbacks=ON
  * Fix the generate_series virtual table so that it correctly
    returns no rows if any of its constraints are NULL
  * Performance enhancements in the parser</changelog>
  <changelog author="max@suse.com" date="1552996800">- CVE-2018-20346, bsc#1119687: Upgrade to the most recent version
  to fix a remote code execution vulnerability in FTS3 (Magellan).
- Drop sqlite-fts5-link.patch and do it in the spec file instead.
- Version 3.27.2:
  * Add the VACUUM INTO command
  * Issue an SQLITE_WARNING message on the error log if a
    double-quoted string literal is used
  * Add the remove_diacritics=2 option to FTS3 and FTS5.
  * Add  the SQLITE_PREPARE_NO_VTAB option to sqlite3_prepare_v3().
    Use that option to prevent circular references to shadow tables
    from causing resource leaks.
  * Enhancements to the sqlite3_deserialize() interface
  * Enhancements to the CLI, mostly to support testing and debugging
    of the SQLite library itself
  * Increased robustness against malicious SQL that is run against
    a maliciously corrupted database
- Version 3.26.0:
  * Optimization: When doing an UPDATE on a table with indexes on
    expressions, do not update the expression indexes if they do
    not refer to any of the columns of the table being updated.
  * Allow the xBestIndex() method of virtual table implementations
    to return SQLITE_CONSTRAINT to indicate that the proposed query
    plan is unusable and should not be given further consideration.
  * Added the SQLITE_DBCONFIG_DEFENSIVE option which disables the
    ability to create corrupt database files using ordinary SQL.
  * Added support for read-only shadow tables when the
    SQLITE_DBCONFIG_DEFENSIVE option is enabled.
  * Added the PRAGMA legacy_alter_table command, which if enabled
    causes the ALTER TABLE command to behave like older version of
    SQLite (prior to version 3.25.0) for compatibility.
  * Added PRAGMA table_xinfo that works just like PRAGMA table_info
    except that it also shows hidden columns in virtual tables.
  * Added the explain virtual table as a run-time loadable
    extension.
  * Add a limit counter to the query planner to prevent excessive
    sqlite3_prepare() times for certain pathological SQL inputs.
  * Added support for the sqlite3_normalized_sql() interface, when
    compiling with SQLITE_ENABLE_NORMALIZE.
  * Enhanced triggers so that they can use table-valued functions
    that exist in schemas other than the schema where the trigger
    is defined.
  * Improvements to the ".help" command in the CLI.
  * The SQLITE_HISTORY environment variable, if it exists,
    specifies the name of the command-line editing history file.
  * The --deserialize option associated with opening a new database
    in the CLI cause the database file to be read into memory and
    accessed using the sqlite3_deserialize() API. This simplifies
    running tests on a database without modifying the file on disk.
- Version 3.25.2:
  * Add the PRAGMA legacy_alter_table=ON command that causes the
    "ALTER TABLE RENAME" command to behave as in 3.24.0 and earlier
  * Fix issue with some expressions with windows functions in views
- Version 3.25.1:
  * Avoid false-positive error checks on ALTER TABLE
  * Further ORDER BY LIMIT optimization fixes for window functions
- Version 3.25.0:
  * Add support for window functions
  * Add support for renaming columns within a table
  * Query optimizer improvements
  * slightly better concurrency in multi-threaded environments
  * The ORDER BY LIMIT optimization might have caused an infinite
    loop in the byte code of the prepared statement under very
    obscure circumstances, due to a confluence of minor defects in
    the query optimizer
- Version 3.24.0:
  * Add support for PostgreSQL-style UPSERT
  * Add support for auxiliary columns in r-tree tables
  * Add C-language APIs for discovering SQL keywords used by SQLite
  * Add C-language APIs for dynamic strings based on sqlite3_str
  * Enhance ALTER TABLE so that it recognizes "true" and "false" as
    valid arguments to DEFAULT
  * Add the sorter-reference optimization as a compile-time option
  * Improve the format of the EXPLAIN QUERY PLAN raw output, so that
  it gives better information about the query plan and about the
    relationships between the various components of the plan
  * Added the SQLITE_DBCONFIG_RESET_DATABASE option to the
    sqlite3_db_config() API.
  * Automatically intercept the raw EXPLAIN QUERY PLAN output an
    reformat it into an ASCII-art graph.
  * Lines that begin with "#" and that are not in the middle of an
    SQL statement are interpreted as comments
  * Add the --append option to the ".backup" command
  * Add the ".dbconfig" command
  * various performance improvements
  * various bug fixes</changelog>
  <changelog author="max@suse.com" date="1555502400">- Upgrade to 3.28.0:
  * CVE-2019-9936, bsc#1130326: running fts5 prefix queries inside
    a transaction could trigger a heap-based buffer over-read.
  * CVE-2019-9937, bsc#1130325: interleaving reads and writes in a
    single transaction with an fts5 virtual table will lead to a
    NULL Pointer Dereference.
  * Enhanced window functions
  * Enhanced VACUUM INTO so that it works for read-only databases.
  * New query optimizations.
  * Added the sqlite3_value_frombind() API for determining if the
    argument to an SQL function is from a bound parameter.
  * Security and compatibilities enhancements to fts3_tokenizer().
  * Improved robustness against corrupt database files.</changelog>
  <changelog author="max@suse.com" date="1568116800">- bsc#1150137, CVE-2019-16168, sqlite3-CVE-2019-16168.patch:
  Improper validation of qlite_stat1 sz field leads to division by
  zero.</changelog>
  <changelog author="max@suse.com" date="1625054400">- Sync version 3.36.0 from Factory to implement jsc#SLE-16032.
- Obsoletes sqlite3-CVE-2019-16168.patch.
- The following CVEs have been fixed in upstream releases up to
  this point, but were not mentioned in the change log so far:
  * bsc#1173641, CVE-2020-15358: heap-based buffer overflow in
    multiSelectOrderBy due to mishandling of query-flattener
    optimization
  * bsc#1164719, CVE-2020-9327: NULL pointer dereference and
    segmentation fault because of generated column optimizations in
    isAuxiliaryVtabOperator
  * bsc#1160439, CVE-2019-20218: selectExpander in select.c proceeds
    with WITH stack unwinding even after a parsing error
  * bsc#1160438, CVE-2019-19959: memory-management error via
    ext/misc/zipfile.c involving embedded '\0' input
  * bsc#1160309, CVE-2019-19923: improper handling  of  certain uses
    of SELECT DISTINCT in flattenSubquery may lead to null pointer
    dereference
  * bsc#1159850, CVE-2019-19924: improper error handling in
    sqlite3WindowRewrite()
  * bsc#1159847, CVE-2019-19925: improper handling of NULL pathname
    during an update of a ZIP archive
  * bsc#1159715, CVE-2019-19926: improper handling  of certain
    errors during parsing  multiSelect in select.c
  * bsc#1159491, CVE-2019-19880: exprListAppendList in window.c
    allows attackers to trigger an invalid pointer dereference
  * bsc#1158960, CVE-2019-19603: during handling of CREATE TABLE
    and CREATE VIEW statements, does not consider confusion with
    a shadow table name
  * bsc#1158959, CVE-2019-19646: pragma.c mishandles NOT NULL in an
    integrity_check PRAGMA command in certain cases of generated
    columns
  * bsc#1158958, CVE-2019-19645: alter.c allows attackers to trigger
    infinite recursion via certain types of self-referential views
    in conjunction with ALTER TABLE statements
  * bsc#1158812, CVE-2019-19317: lookupName in resolve.c omits bits
    from the colUsed bitmask in the case of a generated column,
    which allows attackers to cause a denial of service
  * bsc#1157818, CVE-2019-19244: sqlite3,sqlite2,sqlite: The
    function sqlite3Select in select.c allows a crash if a
    sub-select uses both DISTINCT and window functions, and also
    has certain ORDER BY usage
  * bsc#928701, CVE-2015-3415: sqlite3VdbeExec comparison operator
    vulnerability
  * bsc#928700, CVE-2015-3414: sqlite3,sqlite2: dequoting of
    collation-sequence names
  * CVE-2020-13434 boo#1172115: integer overflow in
    sqlite3_str_vappendf
  * CVE-2020-13630 boo#1172234: use-after-free in fts3EvalNextRow
  * CVE-2020-13631 boo#1172236: virtual table allowed to be renamed
    to one of its shadow tables
  * CVE-2020-13632 boo#1172240: NULL pointer dereference via
    crafted matchinfo() query
  * CVE-2020-13435: Malicious SQL statements could have crashed the
    process that is running SQLite (boo#1172091)</changelog>
  <changelog author="max@suse.com" date="1638273600">- SQLite3 3.37.0:
  * STRICT tables provide a prescriptive style of data type
    management, for developers who prefer that kind of thing.
  * When adding columns that contain a CHECK constraint or a
    generated column containing a NOT NULL constraint, the
    ALTER TABLE ADD COLUMN now checks new constraints against
    preexisting rows in the database and will only proceed if no
    constraints are violated.
  * Added the PRAGMA table_list statement.
  * Add the .connection command, allowing the CLI to keep multiple
    database connections open at the same time.
  * Add the --safe command-line option that disables dot-commands
    and SQL statements that might cause side-effects that extend
    beyond the single database file named on the command-line.
  * CLI: Performance improvements when reading SQL statements that
    span many lines.
  * Added the sqlite3_autovacuum_pages() interface.
  * The sqlite3_deserialize() does not and has never worked
    for the TEMP database. That limitation is now noted in the
    documentation.
  * The query planner now omits ORDER BY clauses on subqueries and
    views if removing those clauses does not change the semantics
    of the query.
  * The generate_series table-valued function extension is modified
    so that the first parameter ("START") is now required. This is
    done as a way to demonstrate how to write table-valued
    functions with required parameters. The legacy behavior is
    available using the -DZERO_ARGUMENT_GENERATE_SERIES
    compile-time option.
  * Added new sqlite3_changes64() and sqlite3_total_changes64()
    interfaces.
  * Added the SQLITE_OPEN_EXRESCODE flag option to sqlite3_open_v2().
  * Use less memory to hold the database schema.
  * bsc#1189802, CVE-2021-36690: Fix an issue with the SQLite Expert
    extension when a column has no collating sequence.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641124800">- update to 3.37.1:
  * Fix a bug introduced by the UPSERT enhancements of version
    3.35.0 that can cause incorrect byte-code to be generated for
    some obscure but valid SQL, possibly resulting in a NULL-
    pointer dereference.
  * Fix an OOB read that can occur in FTS5 when reading corrupt
    database files.
  * Improved robustness of the --safe option in the CLI.
  * Other minor fixes to assert() statements and test cases.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641988800">- update to 3.37.2:
  * Fix a bug introduced in version 3.35.0 (2021-03-12) that can
    cause database corruption if a SAVEPOINT is rolled back while
    in PRAGMA temp_store=MEMORY mode, and other changes are made,
    and then the outer transaction commits
  * Fix a long-standing problem with ON DELETE CASCADE and ON
    UPDATE CASCADE in which a cache of the bytecode used to
    implement the cascading change was not being reset following a
    local DDL change</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1645876800">- update to 3.38.0
  * Add the -&gt; and -&gt;&gt; operators for easier processing of JSON
  * The JSON functions are now built-ins
  * Enhancements to date and time functions
  * Rename the printf() SQL function to format() for better
    compatibility, with alias for backwards compatibility.
  * Add the sqlite3_error_offset() interface for helping localize
    an SQL error to a specific character in the input SQL text
  * Enhance the interface to virtual tables
  * CLI columnar output modes are enhanced to correctly handle tabs
    and newlines embedded in text, and add options like "--wrap N",
    "--wordwrap on", and "--quote" to the columnar output modes.
  * Query planner enhancements using a Bloom filter to speed up
    large analytic queries, and a balanced merge tree to evaluate
    UNION or UNION ALL compound SELECT statements that have an
    ORDER BY clause.
  * The ALTER TABLE statement is changed to silently ignores
    entries in the sqlite_schema table that do not parse when
    PRAGMA writable_schema=ON</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1647172800">- update to 3.38.1:
  * Fix problems with the new Bloom filter optimization that might
    cause some obscure queries to get an incorrect answer.
  * Fix the localtime modifier of the date and time functions so
    that it preserves fractional seconds.
  * Fix the sqlite_offset SQL function so that it works correctly
    even in corner cases such as when the argument is a virtual
    column or the column of a view.
  * Fix row value IN operator constraints on virtual tables so that
    they work correctly even if the virtual table implementation
    relies on bytecode to filter rows that do not satisfy the
    constraint.
  * Other minor fixes to assert() statements, test cases, and
    documentation. See the source code timeline for details.
- add upstream patch to run atof1 tests only on x86_64
  sqlite-src-3380100-atof1.patch</changelog>
  <changelog author="max@suse.com" date="1647432000">- Remove obsolete configure flags
- Package the Tcl bindings here again so that we only ship one copy
  of SQLite (bsc#1195773).</changelog>
  <changelog author="max@suse.com" date="1648555200">- update to 3.38.2:
  * Fix a problem with the Bloom filter optimization that might
    cause an incorrect answer when doing a LEFT JOIN with a WHERE
    clause constraint that says that one of the columns on the
    right table of the LEFT JOIN is NULL.
  * Other minor patches.</changelog>
  <changelog author="info@paolostivanin.com" date="1651147200">- update to 3.38.3:
  * Fix a case of the query planner be overly aggressive with
    optimizing automatic-index and Bloom-filter construction,
    using inappropriate ON clause terms to restrict the size of the
    automatic-index or Bloom filter, and resulting in missing rows
    in the output.
  * Other minor patches. See the timeline for details.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1652011200">- update to 3.38.5:
  * Fix a blunder in the CLI of the 3.38.4 release
- includes changes from 3.38.4:
  * fix a byte-code problem in the Bloom filter pull-down
    optimization added by release 3.38.0 in which an error in the
    byte code causes the byte code engine to enter an infinite loop
    when the pull-down optimization encounters a NULL key</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1656676800">- update to 3.39.0:
  * Add (long overdue) support for RIGHT and FULL OUTER JOIN
  * Add new binary comparison operators IS NOT DISTINCT FROM and
    IS DISTINCT FROM that are equivalent to IS and IS NOT,
    respective, for compatibility with PostgreSQL and SQL standards
  * Add a new return code (value "3") from the sqlite3_vtab_distinct()
    interface that indicates a query that has both DISTINCT and
    ORDER BY clauses
  * Added the sqlite3_db_name() interface
  * The unix os interface resolves all symbolic links in database
    filenames to create a canonical name for the database before
    the file is opened
  * Defer materializing views until the materialization is actually
    needed, thus avoiding unnecessary work if the materialization
    turns out to never be used
  * The HAVING clause of a SELECT statement is now allowed on any
    aggregate query, even queries that do not have a GROUP BY
    clause
  * Many microoptimizations collectively reduce CPU cycles by about
    2.3%.
- drop sqlite-src-3380100-atof1.patch, included upstream
- add sqlite-src-3390000-func7-pg-181.patch to skip float precision
  related test failures on 32 bit</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1657886400">- update to 3.39.1:
  * Fix an incorrect result from a query that uses a view that
    contains a compound SELECT in which only one arm contains a
    RIGHT JOIN and where the view is not the first FROM clause term
    of the query that contains the view
  * Fix a long-standing problem with ALTER TABLE RENAME that can
    only arise if the sqlite3_limit(SQLITE_LIMIT_SQL_LENGTH) is set
    to a very small value.
  * Fix a long-standing problem in FTS3 that can only arise when
    compiled with the SQLITE_ENABLE_FTS3_PARENTHESIS compile-time
    option.
  * Fix the initial-prefix optimization for the REGEXP extension so
    that it works correctly even if the prefix contains characters
    that require a 3-byte UTF8 encoding.
  * Enhance the sqlite_stmt virtual table so that it buffers all of
    its output.</changelog>
  <changelog author="max@suse.com" date="1658404800">- update to 3.39.2:
  * Fix a performance regression in the query planner associated
    with rearranging the order of FROM clause terms in the
    presences of a LEFT JOIN.
  * Apply fixes for CVE-2022-35737, Chromium bugs 1343348 and
    1345947, forum post 3607259d3c, and other minor problems
    discovered by internal testing. [boo#1201783]</changelog>
  <changelog author="max@suse.com" date="1662379200">- update to 3.39.3:
  * Use a statement journal on DML statement affecting two or more
    database rows if the statement makes use of a SQL functions
    that might abort.
  * Use a mutex to protect the PRAGMA temp_store_directory and
    PRAGMA data_store_directory statements, even though they are
    decremented and documented as not being threadsafe.</changelog>
  <changelog author="max@suse.com" date="1670932800">- bsc#1206337, CVE-2022-46908, sqlite-CVE-2022-46908.patch:
  relying on --safe for execution of an untrusted CLI script</changelog>
  <changelog author="max@suse.com" date="1700481600">- Sync version 3.44.0 from Factory
  * Fixes bsc#1210660, CVE-2023-2137: Heap buffer overflow
  * sqlite3-rtree-i686.patch: temporary build fix for 32-bit x86.
  * Obsoletes sqlite-CVE-2022-46908.patch
  * Obsoletes sqlite-src-3390000-func7-pg-181.patch</changelog>
</package>
<package pkgid="58729b4c3252f5a5dd9567356397b0df83c604d8ba8c462ae34821f5e00691fa" name="libsqlite3-0" arch="x86_64">
  <version epoch="0" ver="3.44.0" rel="150000.3.23.1"/>
  <changelog author="astieger@suse.com" date="1523448000">- update to 3.23.1:
  * Fix two problems in the new LEFT JOIN strength reduction
    optimization
  * Fix misbehavior of the FTS5 xBestIndex method
  * Fix a harmless reference to an uninitialized virtual machine
    register
  * Fix the eval.c extension so that it works with PRAGMA
    empty_result_callbacks=ON
  * Fix the generate_series virtual table so that it correctly
    returns no rows if any of its constraints are NULL
  * Performance enhancements in the parser</changelog>
  <changelog author="max@suse.com" date="1552996800">- CVE-2018-20346, bsc#1119687: Upgrade to the most recent version
  to fix a remote code execution vulnerability in FTS3 (Magellan).
- Drop sqlite-fts5-link.patch and do it in the spec file instead.
- Version 3.27.2:
  * Add the VACUUM INTO command
  * Issue an SQLITE_WARNING message on the error log if a
    double-quoted string literal is used
  * Add the remove_diacritics=2 option to FTS3 and FTS5.
  * Add  the SQLITE_PREPARE_NO_VTAB option to sqlite3_prepare_v3().
    Use that option to prevent circular references to shadow tables
    from causing resource leaks.
  * Enhancements to the sqlite3_deserialize() interface
  * Enhancements to the CLI, mostly to support testing and debugging
    of the SQLite library itself
  * Increased robustness against malicious SQL that is run against
    a maliciously corrupted database
- Version 3.26.0:
  * Optimization: When doing an UPDATE on a table with indexes on
    expressions, do not update the expression indexes if they do
    not refer to any of the columns of the table being updated.
  * Allow the xBestIndex() method of virtual table implementations
    to return SQLITE_CONSTRAINT to indicate that the proposed query
    plan is unusable and should not be given further consideration.
  * Added the SQLITE_DBCONFIG_DEFENSIVE option which disables the
    ability to create corrupt database files using ordinary SQL.
  * Added support for read-only shadow tables when the
    SQLITE_DBCONFIG_DEFENSIVE option is enabled.
  * Added the PRAGMA legacy_alter_table command, which if enabled
    causes the ALTER TABLE command to behave like older version of
    SQLite (prior to version 3.25.0) for compatibility.
  * Added PRAGMA table_xinfo that works just like PRAGMA table_info
    except that it also shows hidden columns in virtual tables.
  * Added the explain virtual table as a run-time loadable
    extension.
  * Add a limit counter to the query planner to prevent excessive
    sqlite3_prepare() times for certain pathological SQL inputs.
  * Added support for the sqlite3_normalized_sql() interface, when
    compiling with SQLITE_ENABLE_NORMALIZE.
  * Enhanced triggers so that they can use table-valued functions
    that exist in schemas other than the schema where the trigger
    is defined.
  * Improvements to the ".help" command in the CLI.
  * The SQLITE_HISTORY environment variable, if it exists,
    specifies the name of the command-line editing history file.
  * The --deserialize option associated with opening a new database
    in the CLI cause the database file to be read into memory and
    accessed using the sqlite3_deserialize() API. This simplifies
    running tests on a database without modifying the file on disk.
- Version 3.25.2:
  * Add the PRAGMA legacy_alter_table=ON command that causes the
    "ALTER TABLE RENAME" command to behave as in 3.24.0 and earlier
  * Fix issue with some expressions with windows functions in views
- Version 3.25.1:
  * Avoid false-positive error checks on ALTER TABLE
  * Further ORDER BY LIMIT optimization fixes for window functions
- Version 3.25.0:
  * Add support for window functions
  * Add support for renaming columns within a table
  * Query optimizer improvements
  * slightly better concurrency in multi-threaded environments
  * The ORDER BY LIMIT optimization might have caused an infinite
    loop in the byte code of the prepared statement under very
    obscure circumstances, due to a confluence of minor defects in
    the query optimizer
- Version 3.24.0:
  * Add support for PostgreSQL-style UPSERT
  * Add support for auxiliary columns in r-tree tables
  * Add C-language APIs for discovering SQL keywords used by SQLite
  * Add C-language APIs for dynamic strings based on sqlite3_str
  * Enhance ALTER TABLE so that it recognizes "true" and "false" as
    valid arguments to DEFAULT
  * Add the sorter-reference optimization as a compile-time option
  * Improve the format of the EXPLAIN QUERY PLAN raw output, so that
  it gives better information about the query plan and about the
    relationships between the various components of the plan
  * Added the SQLITE_DBCONFIG_RESET_DATABASE option to the
    sqlite3_db_config() API.
  * Automatically intercept the raw EXPLAIN QUERY PLAN output an
    reformat it into an ASCII-art graph.
  * Lines that begin with "#" and that are not in the middle of an
    SQL statement are interpreted as comments
  * Add the --append option to the ".backup" command
  * Add the ".dbconfig" command
  * various performance improvements
  * various bug fixes</changelog>
  <changelog author="max@suse.com" date="1555502400">- Upgrade to 3.28.0:
  * CVE-2019-9936, bsc#1130326: running fts5 prefix queries inside
    a transaction could trigger a heap-based buffer over-read.
  * CVE-2019-9937, bsc#1130325: interleaving reads and writes in a
    single transaction with an fts5 virtual table will lead to a
    NULL Pointer Dereference.
  * Enhanced window functions
  * Enhanced VACUUM INTO so that it works for read-only databases.
  * New query optimizations.
  * Added the sqlite3_value_frombind() API for determining if the
    argument to an SQL function is from a bound parameter.
  * Security and compatibilities enhancements to fts3_tokenizer().
  * Improved robustness against corrupt database files.</changelog>
  <changelog author="max@suse.com" date="1568116800">- bsc#1150137, CVE-2019-16168, sqlite3-CVE-2019-16168.patch:
  Improper validation of qlite_stat1 sz field leads to division by
  zero.</changelog>
  <changelog author="max@suse.com" date="1625054400">- Sync version 3.36.0 from Factory to implement jsc#SLE-16032.
- Obsoletes sqlite3-CVE-2019-16168.patch.
- The following CVEs have been fixed in upstream releases up to
  this point, but were not mentioned in the change log so far:
  * bsc#1173641, CVE-2020-15358: heap-based buffer overflow in
    multiSelectOrderBy due to mishandling of query-flattener
    optimization
  * bsc#1164719, CVE-2020-9327: NULL pointer dereference and
    segmentation fault because of generated column optimizations in
    isAuxiliaryVtabOperator
  * bsc#1160439, CVE-2019-20218: selectExpander in select.c proceeds
    with WITH stack unwinding even after a parsing error
  * bsc#1160438, CVE-2019-19959: memory-management error via
    ext/misc/zipfile.c involving embedded '\0' input
  * bsc#1160309, CVE-2019-19923: improper handling  of  certain uses
    of SELECT DISTINCT in flattenSubquery may lead to null pointer
    dereference
  * bsc#1159850, CVE-2019-19924: improper error handling in
    sqlite3WindowRewrite()
  * bsc#1159847, CVE-2019-19925: improper handling of NULL pathname
    during an update of a ZIP archive
  * bsc#1159715, CVE-2019-19926: improper handling  of certain
    errors during parsing  multiSelect in select.c
  * bsc#1159491, CVE-2019-19880: exprListAppendList in window.c
    allows attackers to trigger an invalid pointer dereference
  * bsc#1158960, CVE-2019-19603: during handling of CREATE TABLE
    and CREATE VIEW statements, does not consider confusion with
    a shadow table name
  * bsc#1158959, CVE-2019-19646: pragma.c mishandles NOT NULL in an
    integrity_check PRAGMA command in certain cases of generated
    columns
  * bsc#1158958, CVE-2019-19645: alter.c allows attackers to trigger
    infinite recursion via certain types of self-referential views
    in conjunction with ALTER TABLE statements
  * bsc#1158812, CVE-2019-19317: lookupName in resolve.c omits bits
    from the colUsed bitmask in the case of a generated column,
    which allows attackers to cause a denial of service
  * bsc#1157818, CVE-2019-19244: sqlite3,sqlite2,sqlite: The
    function sqlite3Select in select.c allows a crash if a
    sub-select uses both DISTINCT and window functions, and also
    has certain ORDER BY usage
  * bsc#928701, CVE-2015-3415: sqlite3VdbeExec comparison operator
    vulnerability
  * bsc#928700, CVE-2015-3414: sqlite3,sqlite2: dequoting of
    collation-sequence names
  * CVE-2020-13434 boo#1172115: integer overflow in
    sqlite3_str_vappendf
  * CVE-2020-13630 boo#1172234: use-after-free in fts3EvalNextRow
  * CVE-2020-13631 boo#1172236: virtual table allowed to be renamed
    to one of its shadow tables
  * CVE-2020-13632 boo#1172240: NULL pointer dereference via
    crafted matchinfo() query
  * CVE-2020-13435: Malicious SQL statements could have crashed the
    process that is running SQLite (boo#1172091)</changelog>
  <changelog author="max@suse.com" date="1638273600">- SQLite3 3.37.0:
  * STRICT tables provide a prescriptive style of data type
    management, for developers who prefer that kind of thing.
  * When adding columns that contain a CHECK constraint or a
    generated column containing a NOT NULL constraint, the
    ALTER TABLE ADD COLUMN now checks new constraints against
    preexisting rows in the database and will only proceed if no
    constraints are violated.
  * Added the PRAGMA table_list statement.
  * Add the .connection command, allowing the CLI to keep multiple
    database connections open at the same time.
  * Add the --safe command-line option that disables dot-commands
    and SQL statements that might cause side-effects that extend
    beyond the single database file named on the command-line.
  * CLI: Performance improvements when reading SQL statements that
    span many lines.
  * Added the sqlite3_autovacuum_pages() interface.
  * The sqlite3_deserialize() does not and has never worked
    for the TEMP database. That limitation is now noted in the
    documentation.
  * The query planner now omits ORDER BY clauses on subqueries and
    views if removing those clauses does not change the semantics
    of the query.
  * The generate_series table-valued function extension is modified
    so that the first parameter ("START") is now required. This is
    done as a way to demonstrate how to write table-valued
    functions with required parameters. The legacy behavior is
    available using the -DZERO_ARGUMENT_GENERATE_SERIES
    compile-time option.
  * Added new sqlite3_changes64() and sqlite3_total_changes64()
    interfaces.
  * Added the SQLITE_OPEN_EXRESCODE flag option to sqlite3_open_v2().
  * Use less memory to hold the database schema.
  * bsc#1189802, CVE-2021-36690: Fix an issue with the SQLite Expert
    extension when a column has no collating sequence.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641124800">- update to 3.37.1:
  * Fix a bug introduced by the UPSERT enhancements of version
    3.35.0 that can cause incorrect byte-code to be generated for
    some obscure but valid SQL, possibly resulting in a NULL-
    pointer dereference.
  * Fix an OOB read that can occur in FTS5 when reading corrupt
    database files.
  * Improved robustness of the --safe option in the CLI.
  * Other minor fixes to assert() statements and test cases.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641988800">- update to 3.37.2:
  * Fix a bug introduced in version 3.35.0 (2021-03-12) that can
    cause database corruption if a SAVEPOINT is rolled back while
    in PRAGMA temp_store=MEMORY mode, and other changes are made,
    and then the outer transaction commits
  * Fix a long-standing problem with ON DELETE CASCADE and ON
    UPDATE CASCADE in which a cache of the bytecode used to
    implement the cascading change was not being reset following a
    local DDL change</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1645876800">- update to 3.38.0
  * Add the -&gt; and -&gt;&gt; operators for easier processing of JSON
  * The JSON functions are now built-ins
  * Enhancements to date and time functions
  * Rename the printf() SQL function to format() for better
    compatibility, with alias for backwards compatibility.
  * Add the sqlite3_error_offset() interface for helping localize
    an SQL error to a specific character in the input SQL text
  * Enhance the interface to virtual tables
  * CLI columnar output modes are enhanced to correctly handle tabs
    and newlines embedded in text, and add options like "--wrap N",
    "--wordwrap on", and "--quote" to the columnar output modes.
  * Query planner enhancements using a Bloom filter to speed up
    large analytic queries, and a balanced merge tree to evaluate
    UNION or UNION ALL compound SELECT statements that have an
    ORDER BY clause.
  * The ALTER TABLE statement is changed to silently ignores
    entries in the sqlite_schema table that do not parse when
    PRAGMA writable_schema=ON</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1647172800">- update to 3.38.1:
  * Fix problems with the new Bloom filter optimization that might
    cause some obscure queries to get an incorrect answer.
  * Fix the localtime modifier of the date and time functions so
    that it preserves fractional seconds.
  * Fix the sqlite_offset SQL function so that it works correctly
    even in corner cases such as when the argument is a virtual
    column or the column of a view.
  * Fix row value IN operator constraints on virtual tables so that
    they work correctly even if the virtual table implementation
    relies on bytecode to filter rows that do not satisfy the
    constraint.
  * Other minor fixes to assert() statements, test cases, and
    documentation. See the source code timeline for details.
- add upstream patch to run atof1 tests only on x86_64
  sqlite-src-3380100-atof1.patch</changelog>
  <changelog author="max@suse.com" date="1647432000">- Remove obsolete configure flags
- Package the Tcl bindings here again so that we only ship one copy
  of SQLite (bsc#1195773).</changelog>
  <changelog author="max@suse.com" date="1648555200">- update to 3.38.2:
  * Fix a problem with the Bloom filter optimization that might
    cause an incorrect answer when doing a LEFT JOIN with a WHERE
    clause constraint that says that one of the columns on the
    right table of the LEFT JOIN is NULL.
  * Other minor patches.</changelog>
  <changelog author="info@paolostivanin.com" date="1651147200">- update to 3.38.3:
  * Fix a case of the query planner be overly aggressive with
    optimizing automatic-index and Bloom-filter construction,
    using inappropriate ON clause terms to restrict the size of the
    automatic-index or Bloom filter, and resulting in missing rows
    in the output.
  * Other minor patches. See the timeline for details.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1652011200">- update to 3.38.5:
  * Fix a blunder in the CLI of the 3.38.4 release
- includes changes from 3.38.4:
  * fix a byte-code problem in the Bloom filter pull-down
    optimization added by release 3.38.0 in which an error in the
    byte code causes the byte code engine to enter an infinite loop
    when the pull-down optimization encounters a NULL key</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1656676800">- update to 3.39.0:
  * Add (long overdue) support for RIGHT and FULL OUTER JOIN
  * Add new binary comparison operators IS NOT DISTINCT FROM and
    IS DISTINCT FROM that are equivalent to IS and IS NOT,
    respective, for compatibility with PostgreSQL and SQL standards
  * Add a new return code (value "3") from the sqlite3_vtab_distinct()
    interface that indicates a query that has both DISTINCT and
    ORDER BY clauses
  * Added the sqlite3_db_name() interface
  * The unix os interface resolves all symbolic links in database
    filenames to create a canonical name for the database before
    the file is opened
  * Defer materializing views until the materialization is actually
    needed, thus avoiding unnecessary work if the materialization
    turns out to never be used
  * The HAVING clause of a SELECT statement is now allowed on any
    aggregate query, even queries that do not have a GROUP BY
    clause
  * Many microoptimizations collectively reduce CPU cycles by about
    2.3%.
- drop sqlite-src-3380100-atof1.patch, included upstream
- add sqlite-src-3390000-func7-pg-181.patch to skip float precision
  related test failures on 32 bit</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1657886400">- update to 3.39.1:
  * Fix an incorrect result from a query that uses a view that
    contains a compound SELECT in which only one arm contains a
    RIGHT JOIN and where the view is not the first FROM clause term
    of the query that contains the view
  * Fix a long-standing problem with ALTER TABLE RENAME that can
    only arise if the sqlite3_limit(SQLITE_LIMIT_SQL_LENGTH) is set
    to a very small value.
  * Fix a long-standing problem in FTS3 that can only arise when
    compiled with the SQLITE_ENABLE_FTS3_PARENTHESIS compile-time
    option.
  * Fix the initial-prefix optimization for the REGEXP extension so
    that it works correctly even if the prefix contains characters
    that require a 3-byte UTF8 encoding.
  * Enhance the sqlite_stmt virtual table so that it buffers all of
    its output.</changelog>
  <changelog author="max@suse.com" date="1658404800">- update to 3.39.2:
  * Fix a performance regression in the query planner associated
    with rearranging the order of FROM clause terms in the
    presences of a LEFT JOIN.
  * Apply fixes for CVE-2022-35737, Chromium bugs 1343348 and
    1345947, forum post 3607259d3c, and other minor problems
    discovered by internal testing. [boo#1201783]</changelog>
  <changelog author="max@suse.com" date="1662379200">- update to 3.39.3:
  * Use a statement journal on DML statement affecting two or more
    database rows if the statement makes use of a SQL functions
    that might abort.
  * Use a mutex to protect the PRAGMA temp_store_directory and
    PRAGMA data_store_directory statements, even though they are
    decremented and documented as not being threadsafe.</changelog>
  <changelog author="max@suse.com" date="1670932800">- bsc#1206337, CVE-2022-46908, sqlite-CVE-2022-46908.patch:
  relying on --safe for execution of an untrusted CLI script</changelog>
  <changelog author="max@suse.com" date="1700481600">- Sync version 3.44.0 from Factory
  * Fixes bsc#1210660, CVE-2023-2137: Heap buffer overflow
  * sqlite3-rtree-i686.patch: temporary build fix for 32-bit x86.
  * Obsoletes sqlite-CVE-2022-46908.patch
  * Obsoletes sqlite-src-3390000-func7-pg-181.patch</changelog>
</package>
<package pkgid="fbcb7305c6a953eb83e53734a25adb86ca18e63c2a4be99d3071a2fb6e9f5a02" name="libssh" arch="src">
  <version epoch="0" ver="0.9.8" rel="150400.3.3.1"/>
  <changelog author="asn@cryptomilk.org" date="1540814400">- Update to version 0.8.5
  * Added support to get known_hosts locations with ssh_options_get()
  * Fixed preferred algorithm for known hosts negotiations
  * Fixed KEX with some server implementations (e.g. Cisco)
  * Fixed issues with MSVC
  * Fixed keyboard-interactive auth in server mode
    (regression from CVE-2018-10933)
  * Fixed gssapi auth in server mode (regression from CVE-2018-10933)
  * Fixed socket fd handling with proxy command
  * Fixed a memory leak with OpenSSL</changelog>
  <changelog author="asn@cryptomilk.org" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
</package>
<package pkgid="29ab8d3cd43c5643966f137070dd26cfe0d958691e0094a7657b84089a39a4ff" name="libssh-config" arch="aarch64">
  <version epoch="0" ver="0.9.8" rel="150400.3.3.1"/>
  <changelog author="asn@cryptomilk.org" date="1540814400">- Update to version 0.8.5
  * Added support to get known_hosts locations with ssh_options_get()
  * Fixed preferred algorithm for known hosts negotiations
  * Fixed KEX with some server implementations (e.g. Cisco)
  * Fixed issues with MSVC
  * Fixed keyboard-interactive auth in server mode
    (regression from CVE-2018-10933)
  * Fixed gssapi auth in server mode (regression from CVE-2018-10933)
  * Fixed socket fd handling with proxy command
  * Fixed a memory leak with OpenSSL</changelog>
  <changelog author="asn@cryptomilk.org" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
</package>
<package pkgid="d5f8a412f802010d8e896bb6d47bdc69bca79b476ceb90320693209cd3c335c5" name="libssh-config" arch="s390x">
  <version epoch="0" ver="0.9.8" rel="150400.3.3.1"/>
  <changelog author="asn@cryptomilk.org" date="1540814400">- Update to version 0.8.5
  * Added support to get known_hosts locations with ssh_options_get()
  * Fixed preferred algorithm for known hosts negotiations
  * Fixed KEX with some server implementations (e.g. Cisco)
  * Fixed issues with MSVC
  * Fixed keyboard-interactive auth in server mode
    (regression from CVE-2018-10933)
  * Fixed gssapi auth in server mode (regression from CVE-2018-10933)
  * Fixed socket fd handling with proxy command
  * Fixed a memory leak with OpenSSL</changelog>
  <changelog author="asn@cryptomilk.org" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
</package>
<package pkgid="f1015a3707a964cf2e1364920fe8d176d18a73670fc6b9e189df752ed4301cdb" name="libssh-config" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="150400.3.3.1"/>
  <changelog author="asn@cryptomilk.org" date="1540814400">- Update to version 0.8.5
  * Added support to get known_hosts locations with ssh_options_get()
  * Fixed preferred algorithm for known hosts negotiations
  * Fixed KEX with some server implementations (e.g. Cisco)
  * Fixed issues with MSVC
  * Fixed keyboard-interactive auth in server mode
    (regression from CVE-2018-10933)
  * Fixed gssapi auth in server mode (regression from CVE-2018-10933)
  * Fixed socket fd handling with proxy command
  * Fixed a memory leak with OpenSSL</changelog>
  <changelog author="asn@cryptomilk.org" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
</package>
<package pkgid="1f53591e0037846b0a8f935dd0c2ef0a3b60888204ed5037ed38f82bc3449368" name="libssh2-1" arch="aarch64">
  <version epoch="0" ver="1.11.0" rel="150000.4.19.1"/>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
</package>
<package pkgid="eaa68c1cf7161593c0a7bb7e09329652795ad8966935a4c4c1457a5d766469c8" name="libssh2-1" arch="s390x">
  <version epoch="0" ver="1.11.0" rel="150000.4.19.1"/>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
</package>
<package pkgid="291590f6d5e84f8ad50960aa756501984c9fff723159d3533577fcec5735aec6" name="libssh2-1" arch="x86_64">
  <version epoch="0" ver="1.11.0" rel="150000.4.19.1"/>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
</package>
<package pkgid="d50e14381a7e064b8e3751890a541aab546261899f34c6517dd1817d150c4ae8" name="libssh2-1" arch="aarch64">
  <version epoch="0" ver="1.11.0" rel="150000.4.22.1"/>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702987200">- Security fix: [bsc#1218127, CVE-2023-48795]
  * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * Add libssh2_org-CVE-2023-48795.patch</changelog>
</package>
<package pkgid="f87bfd399827ba6d97f6866325ac1e0824179cf1d82fbb096eacb77959d33f25" name="libssh2-1" arch="s390x">
  <version epoch="0" ver="1.11.0" rel="150000.4.22.1"/>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702987200">- Security fix: [bsc#1218127, CVE-2023-48795]
  * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * Add libssh2_org-CVE-2023-48795.patch</changelog>
</package>
<package pkgid="758ca4b281efcc174b9555a0e51e8412cb3e4cc1208e73f082c7013799a3b44f" name="libssh2-1" arch="x86_64">
  <version epoch="0" ver="1.11.0" rel="150000.4.22.1"/>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702987200">- Security fix: [bsc#1218127, CVE-2023-48795]
  * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * Add libssh2_org-CVE-2023-48795.patch</changelog>
</package>
<package pkgid="001cda92ad35a0ffbb129a15d1180d935fcaebfb20790e42e553e0186a0df7cc" name="libssh2-1" arch="aarch64">
  <version epoch="0" ver="1.11.0" rel="150000.4.25.1"/>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702987200">- Security fix: [bsc#1218127, CVE-2023-48795]
  * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * Add libssh2_org-CVE-2023-48795.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1707480000">- Always add the KEX pseudo-methods "ext-info-c" and "kex-strict-c-v00@openssh.com"
  when configuring custom method list. [bsc#1218971, CVE-2023-48795]
  * The strict-kex extension is announced in the list of available
    KEX methods. However, when the default KEX method list is modified
    or replaced, the extension is not added back automatically.
  * Add libssh2_org-CVE-2023-48795-ext.patch</changelog>
</package>
<package pkgid="c302b3f2983b4e6a96062b1a7fdd64b085ba2109845944f8009f52ef16825c83" name="libssh2-1" arch="s390x">
  <version epoch="0" ver="1.11.0" rel="150000.4.25.1"/>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702987200">- Security fix: [bsc#1218127, CVE-2023-48795]
  * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * Add libssh2_org-CVE-2023-48795.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1707480000">- Always add the KEX pseudo-methods "ext-info-c" and "kex-strict-c-v00@openssh.com"
  when configuring custom method list. [bsc#1218971, CVE-2023-48795]
  * The strict-kex extension is announced in the list of available
    KEX methods. However, when the default KEX method list is modified
    or replaced, the extension is not added back automatically.
  * Add libssh2_org-CVE-2023-48795-ext.patch</changelog>
</package>
<package pkgid="3098ac9ee81c3447b0c812780bd731e83450709db8db0fc90ee7bc2f7b7181ec" name="libssh2-1" arch="x86_64">
  <version epoch="0" ver="1.11.0" rel="150000.4.25.1"/>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702987200">- Security fix: [bsc#1218127, CVE-2023-48795]
  * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * Add libssh2_org-CVE-2023-48795.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1707480000">- Always add the KEX pseudo-methods "ext-info-c" and "kex-strict-c-v00@openssh.com"
  when configuring custom method list. [bsc#1218971, CVE-2023-48795]
  * The strict-kex extension is announced in the list of available
    KEX methods. However, when the default KEX method list is modified
    or replaced, the extension is not added back automatically.
  * Add libssh2_org-CVE-2023-48795-ext.patch</changelog>
</package>
<package pkgid="981d9b751518735b9128b870fb6af52aa03cca1da19c5455bc074444bedab6a9" name="libssh2_org" arch="src">
  <version epoch="0" ver="1.11.0" rel="150000.4.19.1"/>
  <changelog author="vcizek@suse.com" date="1357646400">- update to 1.4.3
    compression: add support for zlib@openssh.com
    Bug fixes:
    sftp_read: return error if a too large package arrives
    libssh2_hostkey_hash.3: update the description of return value
    examples: use stderr for messages, stdout for data
    openssl: do not leak memory when handling errors
    improved handling of disabled MD5 algorithm in OpenSSL
    known_hosts: Fail when parsing unknown keys in known_hosts file
    configure: gcrypt doesn't come with pkg-config support
    session_free: wrong variable used for keeping state
    libssh2_userauth_publickey_fromfile_ex.3: mention publickey == NULL
    comp_method_zlib_decomp: handle Z_BUF_ERROR when inflating
    Return LIBSSH2_ERROR_SOCKET_DISCONNECT on EOF when reading banner
    userauth.c: fread() from public key file to correctly detect any errors
    configure.ac: Add option to disable build of the example applications
    Added 'Requires.private:' line to libssh2.pc
    SFTP: filter off incoming "zombie" responses
    gettimeofday: no need for a replacement under cygwin
    SSH_MSG_CHANNEL_REQUEST: default to want_reply
    win32/libssh2_config.h: Remove hardcoded #define LIBSSH2_HAVE_ZLIB
    build error with gcrypt backend
    always do "forced" window updates to avoid corner case stalls
    aes: the init function fails when OpenSSL has AES support
    transport_send: Finish in-progress key exchange before sending data
    channel_write: acknowledge transport errors
    examples/x11.c: Make sure sizeof passed to read operation is correct
    examples/x11.c:,Fix suspicious sizeof usage
    sftp_packet_add: verify the packet before accepting it
    SFTP: preserve the original error code more
    sftp_packet_read: adjust window size as necessary
    Use safer snprintf rather then sprintf in several places
    Define and use LIBSSH2_INVALID_SOCKET instead of INVALID_SOCKET
    sftp_write: cannot return acked data *and* EAGAIN
    sftp_read: avoid data *and* EAGAIN
    libssh2.h: Add missing prototype for libssh2_session_banner_set()
- dropped patches (already in the upstream)
  0004-libssh2.h-Add-missing-prototype-for-libssh2_session_.patch
  0005-Add-symbol-versioning.patch
  0006-missing-libssh2_session_banner_set.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1362052800">- Use AC_CONFIG_HEADERS instead of AM_CONFIG_HEADER, fixes
  build with new automake</changelog>
  <changelog author="boris@steki.net" date="1366804800">- fix building on older kernels and older OS / SLE</changelog>
  <changelog author="mvyskocil@suse.com" date="1372075200">- ignore groff-full to remove factory build cycle
- add groff to build requires to make tests passing</changelog>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
</package>
<package pkgid="2247acddb2c44e3b696240937ca726ef48c8da7a76a9899ee36ec0b5626954a2" name="libssh2_org" arch="src">
  <version epoch="0" ver="1.11.0" rel="150000.4.22.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1362052800">- Use AC_CONFIG_HEADERS instead of AM_CONFIG_HEADER, fixes
  build with new automake</changelog>
  <changelog author="boris@steki.net" date="1366804800">- fix building on older kernels and older OS / SLE</changelog>
  <changelog author="mvyskocil@suse.com" date="1372075200">- ignore groff-full to remove factory build cycle
- add groff to build requires to make tests passing</changelog>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702987200">- Security fix: [bsc#1218127, CVE-2023-48795]
  * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * Add libssh2_org-CVE-2023-48795.patch</changelog>
</package>
<package pkgid="b8d2baca9c57e724aaaed9a16e6deccde799a4774cb5e7454f5d12195ccac049" name="libssh2_org" arch="src">
  <version epoch="0" ver="1.11.0" rel="150000.4.25.1"/>
  <changelog author="boris@steki.net" date="1366804800">- fix building on older kernels and older OS / SLE</changelog>
  <changelog author="mvyskocil@suse.com" date="1372075200">- ignore groff-full to remove factory build cycle
- add groff to build requires to make tests passing</changelog>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702987200">- Security fix: [bsc#1218127, CVE-2023-48795]
  * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * Add libssh2_org-CVE-2023-48795.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1707480000">- Always add the KEX pseudo-methods "ext-info-c" and "kex-strict-c-v00@openssh.com"
  when configuring custom method list. [bsc#1218971, CVE-2023-48795]
  * The strict-kex extension is announced in the list of available
    KEX methods. However, when the default KEX method list is modified
    or replaced, the extension is not added back automatically.
  * Add libssh2_org-CVE-2023-48795-ext.patch</changelog>
</package>
<package pkgid="4f2024ac3c6d8840770a455a20451fe09c7f038ef445132be92304ceb2721da5" name="libssh4" arch="aarch64">
  <version epoch="0" ver="0.9.8" rel="150400.3.3.1"/>
  <changelog author="asn@cryptomilk.org" date="1540814400">- Update to version 0.8.5
  * Added support to get known_hosts locations with ssh_options_get()
  * Fixed preferred algorithm for known hosts negotiations
  * Fixed KEX with some server implementations (e.g. Cisco)
  * Fixed issues with MSVC
  * Fixed keyboard-interactive auth in server mode
    (regression from CVE-2018-10933)
  * Fixed gssapi auth in server mode (regression from CVE-2018-10933)
  * Fixed socket fd handling with proxy command
  * Fixed a memory leak with OpenSSL</changelog>
  <changelog author="asn@cryptomilk.org" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
</package>
<package pkgid="261483db30063e0d3dadf2bfcaea36c9c90aff4d4527a45a3b817eafb1251216" name="libssh4" arch="s390x">
  <version epoch="0" ver="0.9.8" rel="150400.3.3.1"/>
  <changelog author="asn@cryptomilk.org" date="1540814400">- Update to version 0.8.5
  * Added support to get known_hosts locations with ssh_options_get()
  * Fixed preferred algorithm for known hosts negotiations
  * Fixed KEX with some server implementations (e.g. Cisco)
  * Fixed issues with MSVC
  * Fixed keyboard-interactive auth in server mode
    (regression from CVE-2018-10933)
  * Fixed gssapi auth in server mode (regression from CVE-2018-10933)
  * Fixed socket fd handling with proxy command
  * Fixed a memory leak with OpenSSL</changelog>
  <changelog author="asn@cryptomilk.org" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
</package>
<package pkgid="289c06d27de10c601370c13e528f7e810694036655add182547c56cdde2f7379" name="libssh4" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="150400.3.3.1"/>
  <changelog author="asn@cryptomilk.org" date="1540814400">- Update to version 0.8.5
  * Added support to get known_hosts locations with ssh_options_get()
  * Fixed preferred algorithm for known hosts negotiations
  * Fixed KEX with some server implementations (e.g. Cisco)
  * Fixed issues with MSVC
  * Fixed keyboard-interactive auth in server mode
    (regression from CVE-2018-10933)
  * Fixed gssapi auth in server mode (regression from CVE-2018-10933)
  * Fixed socket fd handling with proxy command
  * Fixed a memory leak with OpenSSL</changelog>
  <changelog author="asn@cryptomilk.org" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
</package>
<package pkgid="fd1a36f31ec1a4421e1a3efc20b6db82d8ef1ead828f20ab64114688b696d948" name="libsss_certmap0" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150500.10.11.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
</package>
<package pkgid="9bfbb8c8cd60b0c5e7a158cd0ded7c543afba4dbea7172c24361d22f4d405372" name="libsss_certmap0" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150500.10.11.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
</package>
<package pkgid="5039e37e416c31c0365928588ef85f96eeab8bb9e7af11e91b37ceaa2c070ae3" name="libsss_certmap0" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150500.10.11.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
</package>
<package pkgid="7f52275667889a6f58c7f73a95e7b428f179c1fcc358ebedaf9c8b62eef7ee05" name="libsss_certmap0" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150500.10.14.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="3dc6401175c050e6cbe34f3517643e0a4cb615c8c7759eb56b4ce50923e42c87" name="libsss_certmap0" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150500.10.14.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="e4a2855ba227c2f76615165730e3a124e12a05afdcc047f747cf447451ea46f4" name="libsss_certmap0" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150500.10.14.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="efe936ffc7cce4db20d76cc008f49305b39da45720b82285487eceb31efc2f64" name="libsss_certmap0" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150500.10.6.1"/>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="9796a1e88a9bd72d9c304ced8a7ea7f749e8868dabc3855340e2b07bcb36bfaf" name="libsss_certmap0" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150500.10.6.1"/>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="47cac0ceda4abc2b269e96a93102c75bc74f6bcfa58b3ab72e1db672f40bed06" name="libsss_certmap0" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150500.10.6.1"/>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="8f088bcf789763192ef7c4ddd7da6e413cb97336e18b494d02257007d9889d8c" name="libsss_idmap0" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150500.10.11.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
</package>
<package pkgid="389074f92b1bdf94760554c982f963787467a5108b4b536b6bf5ec0ba8e40c86" name="libsss_idmap0" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150500.10.11.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
</package>
<package pkgid="887ddf58ae0dd20d082dde7aa365f4c299bd1c2adbae9a9c36b445635f5eaa9b" name="libsss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150500.10.11.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
</package>
<package pkgid="7afbbdd91e9cf6fbc87788ed818835c573ba6cefec20a93b2f002ad1b6c01d26" name="libsss_idmap0" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150500.10.14.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="e3196dff9d7c242d3adf4bc72bcd34b7048e3fc4b008d8a45a15b1b27434d393" name="libsss_idmap0" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150500.10.14.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="a0ad12c3a7bc1450dc991e260c8701ef7d44166f5d2c33db6c00b14043b1053c" name="libsss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150500.10.14.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="0a353683f4b68c8702f9895bfb16b4b2e0c393095e27f7df7a3fdd8560f6869e" name="libsss_idmap0" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150500.10.6.1"/>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="455883246011a199f9a6f80b1a44ac3e9fbeeb097f4289e1e7f0bda413d64e04" name="libsss_idmap0" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150500.10.6.1"/>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="9e69c6f7a0cf10a9fd23f46c7a019c79824340fbefd03461a4f8e569d78eeaf5" name="libsss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150500.10.6.1"/>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="298a2390930f1da208225f41ba2f503c77c84b5d3304b80677650cd95499f69c" name="libsss_nss_idmap0" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150500.10.11.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
</package>
<package pkgid="98be9d23614039e621e51ae66bc5486a7f28d42b07e7856d0a62d5cc665dfdce" name="libsss_nss_idmap0" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150500.10.11.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
</package>
<package pkgid="9fa5b94237c7579a2316501e809b79201e72b9a23b226c3f937548750a081eb0" name="libsss_nss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150500.10.11.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
</package>
<package pkgid="7dbfafefe2973456ceb649bbb49b422c9072923a4c7bfb7952aa6180ad80366c" name="libsss_nss_idmap0" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150500.10.14.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="cc4480c7963f279787fd07e2b5d256a99ddb218fd1c7a2135dcf09a2b41691a5" name="libsss_nss_idmap0" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150500.10.14.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="6cb195a82c641b8413139f4e3b68224afc21b534a125c6f6bc7ecda940e0ecf1" name="libsss_nss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150500.10.14.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="721a4fac7c586f4a248a1c8cb5cb90ba47620cdbbae7eecb94e217301bcf1696" name="libsss_nss_idmap0" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150500.10.6.1"/>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="9173f1c32ebc67b6df78454779be2a8b47c1cae69774db8b322c96d085e28994" name="libsss_nss_idmap0" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150500.10.6.1"/>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="910b8a5db27dc7391f970061dee675f810661de7c1f399ac02bcf7af01959603" name="libsss_nss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150500.10.6.1"/>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="bef4355b201cfb6ce68d32843281bde86a0d1a09346eaf3a89a786e7d2acab98" name="libstdc++6" arch="aarch64">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.3.3"/>
  <changelog author="mliska@suse.cz" date="1679659200">- Use --enable-link-serialization rather that --enable-link-mutex,
  the benefit of the former one is that the linker jobs are not
  holding tokens of the make's jobserver.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1679659201">- Add %limit_build for gcc13 to avoid OOM</changelog>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
</package>
<package pkgid="f41cae9fa57f23c34e4f653fe800fbce42ef8d51f9e75944d490677904ee00f2" name="libstdc++6" arch="s390x">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.3.3"/>
  <changelog author="mliska@suse.cz" date="1679659200">- Use --enable-link-serialization rather that --enable-link-mutex,
  the benefit of the former one is that the linker jobs are not
  holding tokens of the make's jobserver.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1679659201">- Add %limit_build for gcc13 to avoid OOM</changelog>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
</package>
<package pkgid="7590b7360d613712900026e0240e94952e484e7af6d76dd3239a935176911f9e" name="libstdc++6" arch="x86_64">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.3.3"/>
  <changelog author="mliska@suse.cz" date="1679659200">- Use --enable-link-serialization rather that --enable-link-mutex,
  the benefit of the former one is that the linker jobs are not
  holding tokens of the make's jobserver.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1679659201">- Add %limit_build for gcc13 to avoid OOM</changelog>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
</package>
<package pkgid="e52aee15913ebcbd655b65c38021d92da48ddd11697d9583e7b34f7466abe671" name="libstdc++6" arch="aarch64">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.6.1"/>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
</package>
<package pkgid="7138fd54816c4a19d3a3498f6049b29e307ad14796c265dc848ed0b86dd19ec5" name="libstdc++6" arch="s390x">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.6.1"/>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
</package>
<package pkgid="a9200cb66263a1c7af89bdb24c54799056fdeeff8dc77d6307a361a1822663e4" name="libstdc++6" arch="x86_64">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.6.1"/>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
</package>
<package pkgid="eb5b5a502916bf9031f59defc16768a3bf73dc59d347cbc48efc4778d2bd21d1" name="libsystemd0" arch="aarch64">
  <version epoch="0" ver="249.16" rel="150400.8.35.5"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="0722bbd672b17ad3e69cb21fb1e3bd3db3f333afddc96b4430cd3b1af312ae49" name="libsystemd0" arch="s390x">
  <version epoch="0" ver="249.16" rel="150400.8.35.5"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="a4edda3110a9a6a68697333345fab4d4590ee56aa28d8d14eb011e3253d30e62" name="libsystemd0" arch="x86_64">
  <version epoch="0" ver="249.16" rel="150400.8.35.5"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="abd12a4046a13b802662bd15d92c45a6dcddfb85464964fcd8208cc2f3c2c517" name="libsystemd0" arch="aarch64">
  <version epoch="0" ver="249.17" rel="150400.8.40.1"/>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction</changelog>
</package>
<package pkgid="5d24c054faa5b6821879d1ccb629334007b9aafb59a1de03d363143c85dab7b1" name="libsystemd0" arch="s390x">
  <version epoch="0" ver="249.17" rel="150400.8.40.1"/>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction</changelog>
</package>
<package pkgid="abcf2c4d08ef5b8dc4cd7b02036ab2fea9aa884baf5fbb1e5da7197831767fc9" name="libsystemd0" arch="x86_64">
  <version epoch="0" ver="249.17" rel="150400.8.40.1"/>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction</changelog>
</package>
<package pkgid="5afc04acdd99ed909e39c29a04d5b83e217343bbbcd5ed0723e6e1854915ec67" name="libtiff5" arch="aarch64">
  <version epoch="0" ver="4.0.9" rel="150000.45.32.1"/>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
</package>
<package pkgid="64b6126bb13cb09f3196073b60bc45731e0b34d4254c2a3909160504fe5c3f4e" name="libtiff5" arch="s390x">
  <version epoch="0" ver="4.0.9" rel="150000.45.32.1"/>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
</package>
<package pkgid="450d9b39625ae067a25bfb8b82f3a18dcf2a0f456e1241e8c3f96dd7d99f197a" name="libtiff5" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="150000.45.32.1"/>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
</package>
<package pkgid="9176dcdecb3c1b72bc2364baa4bb50452fe0df4c10dbe10e834065d027564457" name="libtiff5" arch="aarch64">
  <version epoch="0" ver="4.0.9" rel="150000.45.35.1"/>
  <changelog author="pgajdos@suse.com" date="1542024000">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
</package>
<package pkgid="0c8d64d251804403af8ecf4f8e1fb659e08ad9e13fbbc9ebbd70a377b58776eb" name="libtiff5" arch="s390x">
  <version epoch="0" ver="4.0.9" rel="150000.45.35.1"/>
  <changelog author="pgajdos@suse.com" date="1542024000">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
</package>
<package pkgid="2f1c5b5e2a44f844293b7c508826efb92a3ec8973844905d58d95ae4668b41d6" name="libtiff5" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="150000.45.35.1"/>
  <changelog author="pgajdos@suse.com" date="1542024000">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
</package>
<package pkgid="712447a8c2e6d19449e143d08911890b3af1b4eb46aa352f15b662bdfa1c09ac" name="libtiff5" arch="aarch64">
  <version epoch="0" ver="4.0.9" rel="150000.45.38.1"/>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
</package>
<package pkgid="fa696969eb3b397029da7bc622a2307ac0907043aa949526b08bc39f25666a47" name="libtiff5" arch="s390x">
  <version epoch="0" ver="4.0.9" rel="150000.45.38.1"/>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
</package>
<package pkgid="c7b1e0c1661a396cb24b5ee7822e0ccd74131e9296bd465bbb852d093a28901a" name="libtiff5" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="150000.45.38.1"/>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
</package>
<package pkgid="c0f8341e8e6b626ec382448c5e0b80aaad89ea4b0dd501b319a78606a647eead" name="libtirpc" arch="src">
  <version epoch="0" ver="1.3.4" rel="150300.3.20.1"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
</package>
<package pkgid="85e5265752f2f2926c806d88ad918a4802a192e5fdd7c9863bd9a72b0fe7f3b0" name="libtirpc" arch="src">
  <version epoch="0" ver="1.3.4" rel="150300.3.23.1"/>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
  <changelog author="thomas.blume@suse.com" date="1699272000">- fix sed parsing for libtirpc.pc.in in specfile (boo#1216862)</changelog>
</package>
<package pkgid="84a52092f2f8ac159ec372cff55eeee3d0d04b38a55d1be2b7f235855952e81b" name="libtirpc-netconfig" arch="aarch64">
  <version epoch="0" ver="1.3.4" rel="150300.3.20.1"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
</package>
<package pkgid="a4a30e8e4394655710865b55f575d520e8689b2ac66038378d947c5faf1ec981" name="libtirpc-netconfig" arch="s390x">
  <version epoch="0" ver="1.3.4" rel="150300.3.20.1"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
</package>
<package pkgid="ad01059eba7c87d88d7bf2dc6a808337d690fe15d58d57c2ba10f70e1700f14e" name="libtirpc-netconfig" arch="x86_64">
  <version epoch="0" ver="1.3.4" rel="150300.3.20.1"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
</package>
<package pkgid="0886d8d15afa22ae01a0c5ef492b904eebd30dc9a41464b9b3837db4bd92dab7" name="libtirpc-netconfig" arch="aarch64">
  <version epoch="0" ver="1.3.4" rel="150300.3.23.1"/>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
  <changelog author="thomas.blume@suse.com" date="1699272000">- fix sed parsing for libtirpc.pc.in in specfile (boo#1216862)</changelog>
</package>
<package pkgid="56e02407dd95cc4c492181e59950743d9a1bea57c0153a2c361c91a7537cca66" name="libtirpc-netconfig" arch="s390x">
  <version epoch="0" ver="1.3.4" rel="150300.3.23.1"/>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
  <changelog author="thomas.blume@suse.com" date="1699272000">- fix sed parsing for libtirpc.pc.in in specfile (boo#1216862)</changelog>
</package>
<package pkgid="63350e9e5e3c34343a57bdef59e6cc38b5f6a82668543a21d4312c8ceeeae7e8" name="libtirpc-netconfig" arch="x86_64">
  <version epoch="0" ver="1.3.4" rel="150300.3.23.1"/>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
  <changelog author="thomas.blume@suse.com" date="1699272000">- fix sed parsing for libtirpc.pc.in in specfile (boo#1216862)</changelog>
</package>
<package pkgid="54298f3dd6e231045ef2b7bb0d16ba6fdc40815d6dd80aa3e3e94589ada7213c" name="libtirpc3" arch="aarch64">
  <version epoch="0" ver="1.3.4" rel="150300.3.20.1"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
</package>
<package pkgid="46817297bf97a346b5defa5438579b57e9a9d835dee62b7904ce04d534bd6fc3" name="libtirpc3" arch="s390x">
  <version epoch="0" ver="1.3.4" rel="150300.3.20.1"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
</package>
<package pkgid="8943d7bf9fa0ab95382455410a88b77ad83deedb0de51d80682176b1ffa7db64" name="libtirpc3" arch="x86_64">
  <version epoch="0" ver="1.3.4" rel="150300.3.20.1"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
</package>
<package pkgid="00eee553dbd49a939e21865cd9d65074b06dbaf9aa071cd2ccaa1ba55dceb8b7" name="libtirpc3" arch="aarch64">
  <version epoch="0" ver="1.3.4" rel="150300.3.23.1"/>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
  <changelog author="thomas.blume@suse.com" date="1699272000">- fix sed parsing for libtirpc.pc.in in specfile (boo#1216862)</changelog>
</package>
<package pkgid="84295e15637455ef2bb5613eeb5a113b527d9c884f007fcf8115b7aecd370293" name="libtirpc3" arch="s390x">
  <version epoch="0" ver="1.3.4" rel="150300.3.23.1"/>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
  <changelog author="thomas.blume@suse.com" date="1699272000">- fix sed parsing for libtirpc.pc.in in specfile (boo#1216862)</changelog>
</package>
<package pkgid="e24629a7bd078f4f2fb0a855985ff80b44d77e4e4ad8d441bdb0cbbece0706e3" name="libtirpc3" arch="x86_64">
  <version epoch="0" ver="1.3.4" rel="150300.3.23.1"/>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
  <changelog author="thomas.blume@suse.com" date="1699272000">- fix sed parsing for libtirpc.pc.in in specfile (boo#1216862)</changelog>
</package>
<package pkgid="480885eb4153c28ac793c8cd91e4a23f80799181482cc5d8bf9ca3e5a7e31891" name="libtukit4" arch="aarch64">
  <version epoch="0" ver="4.1.6" rel="150500.3.3.1"/>
  <changelog author="iforster@suse.com" date="1631880000">- Version 3.5.5
  - t-u: Use tukit for SUSEConnect call [bsc#1190574]
    Correctly registers repositories</changelog>
  <changelog author="iforster@suse.com" date="1632398400">- Version 3.5.6
  - tukit: Add S/390 bootloader support [bsc#1189807]
  - t-u: support purge-kernels with t-u patch [bsc#1190788]</changelog>
  <changelog author="iforster@suse.com" date="1634040000">- Version 3.5.7
  Various fixes affecting Salt support:
  - t-u: Don't squash stderr messages into stdout
  - t-u: Correctly handle case when the snapshot has been deleted due to
    using --drop-if-no-change: Don't show reboot messages and avoid an awk
    error message [bsc#1191475]
  - tukit: Make inotify handler less sensitive / ignore more directories
    [bsc#1191475]</changelog>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]
  - Fixed selfupdate
  - Code cleanup</changelog>
  <changelog author="iforster@suse.com" date="1651579200">- Version 4.0.0~rc3
  - Add Snapshot interface
  - Reworked signal handling: All public signals are sent from the
    main thread now, keeping the same sender for everything
  - Implement D-Bus call "Execute" for Transactions
  - Implement interface for listing Snapshots
  - Implement Reboot interface
  - Fix bug when using --continue on old snapshots
  - Fix hypothetical integer overflow in snapshot list [bsc#1196826]
  - Fix wrong sort order in status command
    [gh#openSUSE/transactional-update#80]</changelog>
  <changelog author="iforster@suse.com" date="1652788800">- Version 4.0.0~rc4
  - Fix building with GCC 12
  - Fix stack overflow with very long commands / ids [bsc#1196149]
  - Use separate mount namespace for chroot, allowing overwriting
    the bind mounts from the update environment - this could have
    lead to data loss of the bind mount previously
  - Fix C error and exception handling for snapshots</changelog>
  <changelog author="schubi@suse.com" date="1655812800">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="iforster@suse.com" date="1659441600">- Version 4.0.0
  - Last minute interface change: Changed "List" method of Snapshot D-Bus
    interface to return a map of properties instead of a comma separated
    list of strings; this will allow retrieving the snapshot properties
    even if they contain a comma in their value [boo#1202147]
  - Remove "Snapshot.hpp" as a public API for now - all public
    functionality is part of SnapshotManager.hpp
  - Add header file documentation for SnapshotManager.hpp
  - Add method to delete snapshot
    [gh#openSUSE/transactional-update#52]
  - Allow setting description of snapshot
    [gh#openSUSE/transactional-update#55]
  - create_dirs_from_rpmdb: set SELinux file context of missing directories
    [gh#openSUSE/transactional-update#84], [bsc#1197242]
  - Fix broken logrotate due to typo in config file
    [gh#openSUSE/transactional-update#87]
  - create_dirs_from_rpmdb: Fix handling return code of create_dirs()
    [gh#openSUSE/transactional-update#86]
  - Fix broken "shell" prompt after selfupdate
  - Add documented D-Bus interface definition files
  - Add tukit_sm_get_current and tukit_sm_get_default to C interface
  - Fixed typos</changelog>
  <changelog author="fvogt@suse.com" date="1661169600">- Version 4.0.1
  - create_dirs_from_rpmdb: Just warn if no default SELinux context found
    [gh#openSUSE/transactional-update#88], [bsc#1188215]
  - create_dirs_from_rpmdb: Don't update the rpmdb cookie on failure
    [gh#openSUSE/transactional-update#88]
  - Handle directories owned by multiple packages
    [gh#openSUSE/transactional-update#90], [bsc#1188215]</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration of logrotate configuration to /usr/etc: Saving user
  changed configuration files in /etc and restoring them while
  an RPM update.</changelog>
  <changelog author="iforster@suse.com" date="1664539200">- Version 4.1.0
  - t-u: Add a "setup-kdump" command; implements [jsc#PED-1441]
  - Export TRANSACTIONAL_UPDATE_ROOT (the path to the snapshot) in
    the update environment; implements [jsc#PED-1078]
  - Add support for "notify" reboot method for desktop use
    [gh#openSUSE/transactional-update#93]
  - Fix kdump initrd recreation detection; the check was performed in the
    active snapshot instead of the target snapshot
  - Document register command [bsc#1202900]
  - Avoid unnecessary snapshots for register command [bsc#1202901]
  - Various optimizations for register command
  - Remove bogus error message when triggering reboot
  - Rework /etc overlay documentation in "The Transactional Update Guide"
  - Fix incorrect manpage formatting
  - Remove leftover "salt" reboot method in configuration example file
  - Replace deprecated std::mem_fn with lambdas</changelog>
  <changelog author="iforster@suse.com" date="1674043200">- Version 4.1.1
  - Mount user specific binddirs last: Prevously the internal mounts would
    potentially overwrite user bind mounts [boo#1205011]
  - selinux: Relabel shadowed /var files during update to make sure they
    don't interfere with the update [boo#1205937]
  - Clean up /var/lib/overlay more aggressively [boo#1206947]
  - tukit: Merge /etc overlay into parent if --discard is used together
    with --continue - previously the files were incorrectly always merged
    with the currently running system
  - status: do not execute the status command if experimental
  - Don't delete created mount point dirs any more
  - Small code optimizations</changelog>
  <changelog author="iforster@suse.com" date="1674475200">- Version 4.1.2
  - Don't try to mount user mounts if they don't exist [boo#1207366]</changelog>
  <changelog author="iforster@suse.com" date="1675857600">- Version 4.1.3
  - Suppress SELinux relabelling output in quiet mode
  - Documentation readability improvements</changelog>
  <changelog author="iforster@suse.com" date="1678449600">- Version 4.1.4
  - Workaround for broken Tumbleweed package libfdisk1</changelog>
  <changelog author="iforster@suse.com" date="1696507200">- Version 4.1.6
  - Use permissions of real /etc when creating overlay
    [bsc#1215878]
- Version 4.1.5
  - Add support for configuration file snippets</changelog>
</package>
<package pkgid="8c5293a42ae82f7eef9a68bf467d7199ab286f18cba4ed85576a8b9f6dd44361" name="libtukit4" arch="s390x">
  <version epoch="0" ver="4.1.6" rel="150500.3.3.1"/>
  <changelog author="iforster@suse.com" date="1631880000">- Version 3.5.5
  - t-u: Use tukit for SUSEConnect call [bsc#1190574]
    Correctly registers repositories</changelog>
  <changelog author="iforster@suse.com" date="1632398400">- Version 3.5.6
  - tukit: Add S/390 bootloader support [bsc#1189807]
  - t-u: support purge-kernels with t-u patch [bsc#1190788]</changelog>
  <changelog author="iforster@suse.com" date="1634040000">- Version 3.5.7
  Various fixes affecting Salt support:
  - t-u: Don't squash stderr messages into stdout
  - t-u: Correctly handle case when the snapshot has been deleted due to
    using --drop-if-no-change: Don't show reboot messages and avoid an awk
    error message [bsc#1191475]
  - tukit: Make inotify handler less sensitive / ignore more directories
    [bsc#1191475]</changelog>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]
  - Fixed selfupdate
  - Code cleanup</changelog>
  <changelog author="iforster@suse.com" date="1651579200">- Version 4.0.0~rc3
  - Add Snapshot interface
  - Reworked signal handling: All public signals are sent from the
    main thread now, keeping the same sender for everything
  - Implement D-Bus call "Execute" for Transactions
  - Implement interface for listing Snapshots
  - Implement Reboot interface
  - Fix bug when using --continue on old snapshots
  - Fix hypothetical integer overflow in snapshot list [bsc#1196826]
  - Fix wrong sort order in status command
    [gh#openSUSE/transactional-update#80]</changelog>
  <changelog author="iforster@suse.com" date="1652788800">- Version 4.0.0~rc4
  - Fix building with GCC 12
  - Fix stack overflow with very long commands / ids [bsc#1196149]
  - Use separate mount namespace for chroot, allowing overwriting
    the bind mounts from the update environment - this could have
    lead to data loss of the bind mount previously
  - Fix C error and exception handling for snapshots</changelog>
  <changelog author="schubi@suse.com" date="1655812800">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="iforster@suse.com" date="1659441600">- Version 4.0.0
  - Last minute interface change: Changed "List" method of Snapshot D-Bus
    interface to return a map of properties instead of a comma separated
    list of strings; this will allow retrieving the snapshot properties
    even if they contain a comma in their value [boo#1202147]
  - Remove "Snapshot.hpp" as a public API for now - all public
    functionality is part of SnapshotManager.hpp
  - Add header file documentation for SnapshotManager.hpp
  - Add method to delete snapshot
    [gh#openSUSE/transactional-update#52]
  - Allow setting description of snapshot
    [gh#openSUSE/transactional-update#55]
  - create_dirs_from_rpmdb: set SELinux file context of missing directories
    [gh#openSUSE/transactional-update#84], [bsc#1197242]
  - Fix broken logrotate due to typo in config file
    [gh#openSUSE/transactional-update#87]
  - create_dirs_from_rpmdb: Fix handling return code of create_dirs()
    [gh#openSUSE/transactional-update#86]
  - Fix broken "shell" prompt after selfupdate
  - Add documented D-Bus interface definition files
  - Add tukit_sm_get_current and tukit_sm_get_default to C interface
  - Fixed typos</changelog>
  <changelog author="fvogt@suse.com" date="1661169600">- Version 4.0.1
  - create_dirs_from_rpmdb: Just warn if no default SELinux context found
    [gh#openSUSE/transactional-update#88], [bsc#1188215]
  - create_dirs_from_rpmdb: Don't update the rpmdb cookie on failure
    [gh#openSUSE/transactional-update#88]
  - Handle directories owned by multiple packages
    [gh#openSUSE/transactional-update#90], [bsc#1188215]</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration of logrotate configuration to /usr/etc: Saving user
  changed configuration files in /etc and restoring them while
  an RPM update.</changelog>
  <changelog author="iforster@suse.com" date="1664539200">- Version 4.1.0
  - t-u: Add a "setup-kdump" command; implements [jsc#PED-1441]
  - Export TRANSACTIONAL_UPDATE_ROOT (the path to the snapshot) in
    the update environment; implements [jsc#PED-1078]
  - Add support for "notify" reboot method for desktop use
    [gh#openSUSE/transactional-update#93]
  - Fix kdump initrd recreation detection; the check was performed in the
    active snapshot instead of the target snapshot
  - Document register command [bsc#1202900]
  - Avoid unnecessary snapshots for register command [bsc#1202901]
  - Various optimizations for register command
  - Remove bogus error message when triggering reboot
  - Rework /etc overlay documentation in "The Transactional Update Guide"
  - Fix incorrect manpage formatting
  - Remove leftover "salt" reboot method in configuration example file
  - Replace deprecated std::mem_fn with lambdas</changelog>
  <changelog author="iforster@suse.com" date="1674043200">- Version 4.1.1
  - Mount user specific binddirs last: Prevously the internal mounts would
    potentially overwrite user bind mounts [boo#1205011]
  - selinux: Relabel shadowed /var files during update to make sure they
    don't interfere with the update [boo#1205937]
  - Clean up /var/lib/overlay more aggressively [boo#1206947]
  - tukit: Merge /etc overlay into parent if --discard is used together
    with --continue - previously the files were incorrectly always merged
    with the currently running system
  - status: do not execute the status command if experimental
  - Don't delete created mount point dirs any more
  - Small code optimizations</changelog>
  <changelog author="iforster@suse.com" date="1674475200">- Version 4.1.2
  - Don't try to mount user mounts if they don't exist [boo#1207366]</changelog>
  <changelog author="iforster@suse.com" date="1675857600">- Version 4.1.3
  - Suppress SELinux relabelling output in quiet mode
  - Documentation readability improvements</changelog>
  <changelog author="iforster@suse.com" date="1678449600">- Version 4.1.4
  - Workaround for broken Tumbleweed package libfdisk1</changelog>
  <changelog author="iforster@suse.com" date="1696507200">- Version 4.1.6
  - Use permissions of real /etc when creating overlay
    [bsc#1215878]
- Version 4.1.5
  - Add support for configuration file snippets</changelog>
</package>
<package pkgid="02f5f76df9a6b719fd417dd0b56aa6bd840c2262b9c40ff9724ba8efc32af28f" name="libtukit4" arch="x86_64">
  <version epoch="0" ver="4.1.6" rel="150500.3.3.1"/>
  <changelog author="iforster@suse.com" date="1631880000">- Version 3.5.5
  - t-u: Use tukit for SUSEConnect call [bsc#1190574]
    Correctly registers repositories</changelog>
  <changelog author="iforster@suse.com" date="1632398400">- Version 3.5.6
  - tukit: Add S/390 bootloader support [bsc#1189807]
  - t-u: support purge-kernels with t-u patch [bsc#1190788]</changelog>
  <changelog author="iforster@suse.com" date="1634040000">- Version 3.5.7
  Various fixes affecting Salt support:
  - t-u: Don't squash stderr messages into stdout
  - t-u: Correctly handle case when the snapshot has been deleted due to
    using --drop-if-no-change: Don't show reboot messages and avoid an awk
    error message [bsc#1191475]
  - tukit: Make inotify handler less sensitive / ignore more directories
    [bsc#1191475]</changelog>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]
  - Fixed selfupdate
  - Code cleanup</changelog>
  <changelog author="iforster@suse.com" date="1651579200">- Version 4.0.0~rc3
  - Add Snapshot interface
  - Reworked signal handling: All public signals are sent from the
    main thread now, keeping the same sender for everything
  - Implement D-Bus call "Execute" for Transactions
  - Implement interface for listing Snapshots
  - Implement Reboot interface
  - Fix bug when using --continue on old snapshots
  - Fix hypothetical integer overflow in snapshot list [bsc#1196826]
  - Fix wrong sort order in status command
    [gh#openSUSE/transactional-update#80]</changelog>
  <changelog author="iforster@suse.com" date="1652788800">- Version 4.0.0~rc4
  - Fix building with GCC 12
  - Fix stack overflow with very long commands / ids [bsc#1196149]
  - Use separate mount namespace for chroot, allowing overwriting
    the bind mounts from the update environment - this could have
    lead to data loss of the bind mount previously
  - Fix C error and exception handling for snapshots</changelog>
  <changelog author="schubi@suse.com" date="1655812800">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="iforster@suse.com" date="1659441600">- Version 4.0.0
  - Last minute interface change: Changed "List" method of Snapshot D-Bus
    interface to return a map of properties instead of a comma separated
    list of strings; this will allow retrieving the snapshot properties
    even if they contain a comma in their value [boo#1202147]
  - Remove "Snapshot.hpp" as a public API for now - all public
    functionality is part of SnapshotManager.hpp
  - Add header file documentation for SnapshotManager.hpp
  - Add method to delete snapshot
    [gh#openSUSE/transactional-update#52]
  - Allow setting description of snapshot
    [gh#openSUSE/transactional-update#55]
  - create_dirs_from_rpmdb: set SELinux file context of missing directories
    [gh#openSUSE/transactional-update#84], [bsc#1197242]
  - Fix broken logrotate due to typo in config file
    [gh#openSUSE/transactional-update#87]
  - create_dirs_from_rpmdb: Fix handling return code of create_dirs()
    [gh#openSUSE/transactional-update#86]
  - Fix broken "shell" prompt after selfupdate
  - Add documented D-Bus interface definition files
  - Add tukit_sm_get_current and tukit_sm_get_default to C interface
  - Fixed typos</changelog>
  <changelog author="fvogt@suse.com" date="1661169600">- Version 4.0.1
  - create_dirs_from_rpmdb: Just warn if no default SELinux context found
    [gh#openSUSE/transactional-update#88], [bsc#1188215]
  - create_dirs_from_rpmdb: Don't update the rpmdb cookie on failure
    [gh#openSUSE/transactional-update#88]
  - Handle directories owned by multiple packages
    [gh#openSUSE/transactional-update#90], [bsc#1188215]</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration of logrotate configuration to /usr/etc: Saving user
  changed configuration files in /etc and restoring them while
  an RPM update.</changelog>
  <changelog author="iforster@suse.com" date="1664539200">- Version 4.1.0
  - t-u: Add a "setup-kdump" command; implements [jsc#PED-1441]
  - Export TRANSACTIONAL_UPDATE_ROOT (the path to the snapshot) in
    the update environment; implements [jsc#PED-1078]
  - Add support for "notify" reboot method for desktop use
    [gh#openSUSE/transactional-update#93]
  - Fix kdump initrd recreation detection; the check was performed in the
    active snapshot instead of the target snapshot
  - Document register command [bsc#1202900]
  - Avoid unnecessary snapshots for register command [bsc#1202901]
  - Various optimizations for register command
  - Remove bogus error message when triggering reboot
  - Rework /etc overlay documentation in "The Transactional Update Guide"
  - Fix incorrect manpage formatting
  - Remove leftover "salt" reboot method in configuration example file
  - Replace deprecated std::mem_fn with lambdas</changelog>
  <changelog author="iforster@suse.com" date="1674043200">- Version 4.1.1
  - Mount user specific binddirs last: Prevously the internal mounts would
    potentially overwrite user bind mounts [boo#1205011]
  - selinux: Relabel shadowed /var files during update to make sure they
    don't interfere with the update [boo#1205937]
  - Clean up /var/lib/overlay more aggressively [boo#1206947]
  - tukit: Merge /etc overlay into parent if --discard is used together
    with --continue - previously the files were incorrectly always merged
    with the currently running system
  - status: do not execute the status command if experimental
  - Don't delete created mount point dirs any more
  - Small code optimizations</changelog>
  <changelog author="iforster@suse.com" date="1674475200">- Version 4.1.2
  - Don't try to mount user mounts if they don't exist [boo#1207366]</changelog>
  <changelog author="iforster@suse.com" date="1675857600">- Version 4.1.3
  - Suppress SELinux relabelling output in quiet mode
  - Documentation readability improvements</changelog>
  <changelog author="iforster@suse.com" date="1678449600">- Version 4.1.4
  - Workaround for broken Tumbleweed package libfdisk1</changelog>
  <changelog author="iforster@suse.com" date="1696507200">- Version 4.1.6
  - Use permissions of real /etc when creating overlay
    [bsc#1215878]
- Version 4.1.5
  - Add support for configuration file snippets</changelog>
</package>
<package pkgid="af8747e655a384e2fd7d9e675e235750912f501480d7ea7726708be9ed11157f" name="libudev1" arch="aarch64">
  <version epoch="0" ver="249.16" rel="150400.8.35.5"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="18b4de885b310def0440b80b07d8ee6628e245802592dc53b408932426b0c5fc" name="libudev1" arch="s390x">
  <version epoch="0" ver="249.16" rel="150400.8.35.5"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="1db8dd870505c71d262eb13bda138c73e84585ceecc37c755d9ef67509437b75" name="libudev1" arch="x86_64">
  <version epoch="0" ver="249.16" rel="150400.8.35.5"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="28dea0857e8244382b4e4ba1fab4b279df1c0788abe8b228b7a82251b8e29893" name="libudev1" arch="aarch64">
  <version epoch="0" ver="249.17" rel="150400.8.40.1"/>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction</changelog>
</package>
<package pkgid="d38046f5a9da8ddcf1cb08ad2ed17a23f0f85f4584a321c7a6282a42090e24ef" name="libudev1" arch="s390x">
  <version epoch="0" ver="249.17" rel="150400.8.40.1"/>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction</changelog>
</package>
<package pkgid="05102979a5899659a78401cfe18c48416b2e0ea72d09a6e3c3876bccbaa2a86c" name="libudev1" arch="x86_64">
  <version epoch="0" ver="249.17" rel="150400.8.40.1"/>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction</changelog>
</package>
<package pkgid="98aa6eccc5f504e14786d2ee4213820a60b3f699b25e59ab45e2d034dea88958" name="libuuid1" arch="aarch64">
  <version epoch="0" ver="2.37.4" rel="150500.9.3.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="a45aca585535e2ddb4bcc36e94a7c19fa4622c2c0d35a728c790c1e39d5658d8" name="libuuid1" arch="s390x">
  <version epoch="0" ver="2.37.4" rel="150500.9.3.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="670c9a66b2fbf62490997ceabcf754c71e845b679f7c749ddd8e03d16d3114af" name="libuuid1" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="150500.9.3.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="186b8689f8d2e24fb4d1d91c149a37954771a2605cb96ffae4472882563476f2" name="libvmtools0" arch="x86_64">
  <version epoch="0" ver="12.3.0" rel="150300.40.1"/>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- limit to protobuf &lt; 22 for now until build failures have been fixed</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
</package>
<package pkgid="31dd6658df7ec95b4f49f7cbf77ed659f01bc7af0f4227a78399c40831498359" name="libvmtools0" arch="x86_64">
  <version epoch="0" ver="12.3.0" rel="150300.43.1"/>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- limit to protobuf &lt; 22 for now until build failures have been fixed</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
</package>
<package pkgid="96941eca5837a0b52c68353985dd0833c86a12289dd3e650b8fa5c8b4da88e1c" name="libvmtools0" arch="x86_64">
  <version epoch="0" ver="12.3.5" rel="150300.46.1"/>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- limit to protobuf &lt; 22 for now until build failures have been fixed</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
</package>
<package pkgid="6c4f68f84040cea619795a144acbc09a9ad0a8ccfdf64a2151293b02855f5bff" name="libxcrypt" arch="src">
  <version epoch="0" ver="4.4.15" rel="150300.4.7.1"/>
  <changelog author="schwab@suse.de" date="1525867200">- ABI compatible replacement for libcypt from glibc</changelog>
  <changelog author="schwab@suse.de" date="1527076800">- Update to libxcrypt 4.0.1</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- Update to libxcrypt 4.1.0
  * Fix spelling of SUSE.
  * Lower the minimum required automake version to 1.14.
  * Fix build with USE_SWAPCONTEXT turned off.
  * Extend --enable-weak-hashes configure option to accept optional
    "glibc" parameter.
  * Fix the leak of obtained random bytes.
  * Check expected output strings for deterministic methods.
  * Fix memory leak in crypt_sha1_rn.
  * Fix read of random bytes out of bounds in gensalt_sha1_rn.
  * Make it possible to disable individual hashes at configure time.
  * Make salt validation pickier.
  * Replace crypt-sunmd5.c with BSD-licensed cleanroom reimplementation.
  * Make crypt_gensalt for $sha1 deterministic.
  * Fix incorrect output-size computation in crypt_sha1_rn.
  * Add docs for SHA1, MD5/Sun, NTHASH.
  * Introduce CRYPT_GENSALT_IMPLEMENTS_* feature test macros.
  * Install libcrypt.pc symlink along with libxcrypt.pc.
  * Extend --enable-obsolete-api configure option.
  * Extend overall test coverage.</changelog>
  <changelog author="jengelh@inai.de" date="1533556800">- Fix RPM groups for Factory.</changelog>
  <changelog author="schwab@suse.de" date="1533729600">- Add conflicts with glibc-devel &lt; 2.28</changelog>
  <changelog author="schwab@suse.de" date="1539086400">- Set compatibility level to suse</changelog>
  <changelog author="mliska@suse.cz" date="1550145600">- Update to version 4.4.3:
  * Add libxcrypt.so, libxcrypt.a and xcrypt.h.
  * Add new man3 manual pages.</changelog>
  <changelog author="schwab@suse.de" date="1550577600">- format-overflow.patch: Fix -Werror=format-overflow</changelog>
  <changelog author="mliska@suse.cz" date="1561032000">- Disable LTO due to symbol versioning (boo#1138833).</changelog>
  <changelog author="schwab@suse.de" date="1575720000">- Update to version 4.4.10
  * Fix alignment problem for GOST 34.11 (Streebog) in gost-yestcrypt.
  * The crypt_* functions will now all fail and set errno to ERANGE if
    their 'phrase' argument is longer than CRYPT_MAX_PASSPHRASE_SIZE
    characters (this is currently 512)
  * The NT hashing method no longer truncates passphrases at 128
    characters; Windows does not do this.
- format-overflow.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1576152000">- gcc10.patch: fix build with gcc10 (bsc#1158192)</changelog>
  <changelog author="schwab@suse.de" date="1579694400">- Update to version 4.4.11
  * Fixes for GCC v10.x
  * Change how the known-answer tests are parallelized
- gcc10.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1580385600">- Update to version 4.4.12
  * Another fix for GCC v10.x, which occurs on s390 architectures only.</changelog>
  <changelog author="schwab@suse.de" date="1583150400">- Update to version 4.4.15
  * The compatibility symbols crypt_gensalt_r, xcrypt, xcrypt_r,
    xcrypt_gensalt, and xcrypt_gensalt_r are deprecated further
  * Speed up ka-sunmd5 by skipping most of the test phrases
- Package README.md and TODO.md (bsc#1165389)</changelog>
  <changelog author="schwab@suse.de" date="1598961600">- Add compatibility provides for SLE15</changelog>
  <changelog author="dmueller@suse.com" date="1612612800">- add compatibility provides for Step 15 as well (bsc#1181571)</changelog>
  <changelog author="pgajdos@suse.com" date="1702382400">- fix variable name for datamember in 'struct crypt_data' [bsc#1215496]
- added patches
  fix https://github.com/besser82/libxcrypt/commit/b212d601549a0fc84cbbcaf21b931f903787d7e2
  + libxcrypt-man-fix-variable-name.patch</changelog>
</package>
<package pkgid="4549acde4fe2154fd01709cf3995614c28bcb07035a20b2663c75776749a32ed" name="libxcrypt-devel" arch="aarch64">
  <version epoch="0" ver="4.4.15" rel="150300.4.7.1"/>
  <changelog author="schwab@suse.de" date="1525867200">- ABI compatible replacement for libcypt from glibc</changelog>
  <changelog author="schwab@suse.de" date="1527076800">- Update to libxcrypt 4.0.1</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- Update to libxcrypt 4.1.0
  * Fix spelling of SUSE.
  * Lower the minimum required automake version to 1.14.
  * Fix build with USE_SWAPCONTEXT turned off.
  * Extend --enable-weak-hashes configure option to accept optional
    "glibc" parameter.
  * Fix the leak of obtained random bytes.
  * Check expected output strings for deterministic methods.
  * Fix memory leak in crypt_sha1_rn.
  * Fix read of random bytes out of bounds in gensalt_sha1_rn.
  * Make it possible to disable individual hashes at configure time.
  * Make salt validation pickier.
  * Replace crypt-sunmd5.c with BSD-licensed cleanroom reimplementation.
  * Make crypt_gensalt for $sha1 deterministic.
  * Fix incorrect output-size computation in crypt_sha1_rn.
  * Add docs for SHA1, MD5/Sun, NTHASH.
  * Introduce CRYPT_GENSALT_IMPLEMENTS_* feature test macros.
  * Install libcrypt.pc symlink along with libxcrypt.pc.
  * Extend --enable-obsolete-api configure option.
  * Extend overall test coverage.</changelog>
  <changelog author="jengelh@inai.de" date="1533556800">- Fix RPM groups for Factory.</changelog>
  <changelog author="schwab@suse.de" date="1533729600">- Add conflicts with glibc-devel &lt; 2.28</changelog>
  <changelog author="schwab@suse.de" date="1539086400">- Set compatibility level to suse</changelog>
  <changelog author="mliska@suse.cz" date="1550145600">- Update to version 4.4.3:
  * Add libxcrypt.so, libxcrypt.a and xcrypt.h.
  * Add new man3 manual pages.</changelog>
  <changelog author="schwab@suse.de" date="1550577600">- format-overflow.patch: Fix -Werror=format-overflow</changelog>
  <changelog author="mliska@suse.cz" date="1561032000">- Disable LTO due to symbol versioning (boo#1138833).</changelog>
  <changelog author="schwab@suse.de" date="1575720000">- Update to version 4.4.10
  * Fix alignment problem for GOST 34.11 (Streebog) in gost-yestcrypt.
  * The crypt_* functions will now all fail and set errno to ERANGE if
    their 'phrase' argument is longer than CRYPT_MAX_PASSPHRASE_SIZE
    characters (this is currently 512)
  * The NT hashing method no longer truncates passphrases at 128
    characters; Windows does not do this.
- format-overflow.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1576152000">- gcc10.patch: fix build with gcc10 (bsc#1158192)</changelog>
  <changelog author="schwab@suse.de" date="1579694400">- Update to version 4.4.11
  * Fixes for GCC v10.x
  * Change how the known-answer tests are parallelized
- gcc10.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1580385600">- Update to version 4.4.12
  * Another fix for GCC v10.x, which occurs on s390 architectures only.</changelog>
  <changelog author="schwab@suse.de" date="1583150400">- Update to version 4.4.15
  * The compatibility symbols crypt_gensalt_r, xcrypt, xcrypt_r,
    xcrypt_gensalt, and xcrypt_gensalt_r are deprecated further
  * Speed up ka-sunmd5 by skipping most of the test phrases
- Package README.md and TODO.md (bsc#1165389)</changelog>
  <changelog author="schwab@suse.de" date="1598961600">- Add compatibility provides for SLE15</changelog>
  <changelog author="dmueller@suse.com" date="1612612800">- add compatibility provides for Step 15 as well (bsc#1181571)</changelog>
  <changelog author="pgajdos@suse.com" date="1702382400">- fix variable name for datamember in 'struct crypt_data' [bsc#1215496]
- added patches
  fix https://github.com/besser82/libxcrypt/commit/b212d601549a0fc84cbbcaf21b931f903787d7e2
  + libxcrypt-man-fix-variable-name.patch</changelog>
</package>
<package pkgid="da5fff4ba50f79949492f7938735a3883eea5b92309d42d582239e61882b562f" name="libxcrypt-devel" arch="s390x">
  <version epoch="0" ver="4.4.15" rel="150300.4.7.1"/>
  <changelog author="schwab@suse.de" date="1525867200">- ABI compatible replacement for libcypt from glibc</changelog>
  <changelog author="schwab@suse.de" date="1527076800">- Update to libxcrypt 4.0.1</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- Update to libxcrypt 4.1.0
  * Fix spelling of SUSE.
  * Lower the minimum required automake version to 1.14.
  * Fix build with USE_SWAPCONTEXT turned off.
  * Extend --enable-weak-hashes configure option to accept optional
    "glibc" parameter.
  * Fix the leak of obtained random bytes.
  * Check expected output strings for deterministic methods.
  * Fix memory leak in crypt_sha1_rn.
  * Fix read of random bytes out of bounds in gensalt_sha1_rn.
  * Make it possible to disable individual hashes at configure time.
  * Make salt validation pickier.
  * Replace crypt-sunmd5.c with BSD-licensed cleanroom reimplementation.
  * Make crypt_gensalt for $sha1 deterministic.
  * Fix incorrect output-size computation in crypt_sha1_rn.
  * Add docs for SHA1, MD5/Sun, NTHASH.
  * Introduce CRYPT_GENSALT_IMPLEMENTS_* feature test macros.
  * Install libcrypt.pc symlink along with libxcrypt.pc.
  * Extend --enable-obsolete-api configure option.
  * Extend overall test coverage.</changelog>
  <changelog author="jengelh@inai.de" date="1533556800">- Fix RPM groups for Factory.</changelog>
  <changelog author="schwab@suse.de" date="1533729600">- Add conflicts with glibc-devel &lt; 2.28</changelog>
  <changelog author="schwab@suse.de" date="1539086400">- Set compatibility level to suse</changelog>
  <changelog author="mliska@suse.cz" date="1550145600">- Update to version 4.4.3:
  * Add libxcrypt.so, libxcrypt.a and xcrypt.h.
  * Add new man3 manual pages.</changelog>
  <changelog author="schwab@suse.de" date="1550577600">- format-overflow.patch: Fix -Werror=format-overflow</changelog>
  <changelog author="mliska@suse.cz" date="1561032000">- Disable LTO due to symbol versioning (boo#1138833).</changelog>
  <changelog author="schwab@suse.de" date="1575720000">- Update to version 4.4.10
  * Fix alignment problem for GOST 34.11 (Streebog) in gost-yestcrypt.
  * The crypt_* functions will now all fail and set errno to ERANGE if
    their 'phrase' argument is longer than CRYPT_MAX_PASSPHRASE_SIZE
    characters (this is currently 512)
  * The NT hashing method no longer truncates passphrases at 128
    characters; Windows does not do this.
- format-overflow.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1576152000">- gcc10.patch: fix build with gcc10 (bsc#1158192)</changelog>
  <changelog author="schwab@suse.de" date="1579694400">- Update to version 4.4.11
  * Fixes for GCC v10.x
  * Change how the known-answer tests are parallelized
- gcc10.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1580385600">- Update to version 4.4.12
  * Another fix for GCC v10.x, which occurs on s390 architectures only.</changelog>
  <changelog author="schwab@suse.de" date="1583150400">- Update to version 4.4.15
  * The compatibility symbols crypt_gensalt_r, xcrypt, xcrypt_r,
    xcrypt_gensalt, and xcrypt_gensalt_r are deprecated further
  * Speed up ka-sunmd5 by skipping most of the test phrases
- Package README.md and TODO.md (bsc#1165389)</changelog>
  <changelog author="schwab@suse.de" date="1598961600">- Add compatibility provides for SLE15</changelog>
  <changelog author="dmueller@suse.com" date="1612612800">- add compatibility provides for Step 15 as well (bsc#1181571)</changelog>
  <changelog author="pgajdos@suse.com" date="1702382400">- fix variable name for datamember in 'struct crypt_data' [bsc#1215496]
- added patches
  fix https://github.com/besser82/libxcrypt/commit/b212d601549a0fc84cbbcaf21b931f903787d7e2
  + libxcrypt-man-fix-variable-name.patch</changelog>
</package>
<package pkgid="b1753a8f7588c795cb5ba9cae4fcfa7230ce315ba1fab64a77f5aefdb62ead08" name="libxcrypt-devel" arch="x86_64">
  <version epoch="0" ver="4.4.15" rel="150300.4.7.1"/>
  <changelog author="schwab@suse.de" date="1525867200">- ABI compatible replacement for libcypt from glibc</changelog>
  <changelog author="schwab@suse.de" date="1527076800">- Update to libxcrypt 4.0.1</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- Update to libxcrypt 4.1.0
  * Fix spelling of SUSE.
  * Lower the minimum required automake version to 1.14.
  * Fix build with USE_SWAPCONTEXT turned off.
  * Extend --enable-weak-hashes configure option to accept optional
    "glibc" parameter.
  * Fix the leak of obtained random bytes.
  * Check expected output strings for deterministic methods.
  * Fix memory leak in crypt_sha1_rn.
  * Fix read of random bytes out of bounds in gensalt_sha1_rn.
  * Make it possible to disable individual hashes at configure time.
  * Make salt validation pickier.
  * Replace crypt-sunmd5.c with BSD-licensed cleanroom reimplementation.
  * Make crypt_gensalt for $sha1 deterministic.
  * Fix incorrect output-size computation in crypt_sha1_rn.
  * Add docs for SHA1, MD5/Sun, NTHASH.
  * Introduce CRYPT_GENSALT_IMPLEMENTS_* feature test macros.
  * Install libcrypt.pc symlink along with libxcrypt.pc.
  * Extend --enable-obsolete-api configure option.
  * Extend overall test coverage.</changelog>
  <changelog author="jengelh@inai.de" date="1533556800">- Fix RPM groups for Factory.</changelog>
  <changelog author="schwab@suse.de" date="1533729600">- Add conflicts with glibc-devel &lt; 2.28</changelog>
  <changelog author="schwab@suse.de" date="1539086400">- Set compatibility level to suse</changelog>
  <changelog author="mliska@suse.cz" date="1550145600">- Update to version 4.4.3:
  * Add libxcrypt.so, libxcrypt.a and xcrypt.h.
  * Add new man3 manual pages.</changelog>
  <changelog author="schwab@suse.de" date="1550577600">- format-overflow.patch: Fix -Werror=format-overflow</changelog>
  <changelog author="mliska@suse.cz" date="1561032000">- Disable LTO due to symbol versioning (boo#1138833).</changelog>
  <changelog author="schwab@suse.de" date="1575720000">- Update to version 4.4.10
  * Fix alignment problem for GOST 34.11 (Streebog) in gost-yestcrypt.
  * The crypt_* functions will now all fail and set errno to ERANGE if
    their 'phrase' argument is longer than CRYPT_MAX_PASSPHRASE_SIZE
    characters (this is currently 512)
  * The NT hashing method no longer truncates passphrases at 128
    characters; Windows does not do this.
- format-overflow.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1576152000">- gcc10.patch: fix build with gcc10 (bsc#1158192)</changelog>
  <changelog author="schwab@suse.de" date="1579694400">- Update to version 4.4.11
  * Fixes for GCC v10.x
  * Change how the known-answer tests are parallelized
- gcc10.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1580385600">- Update to version 4.4.12
  * Another fix for GCC v10.x, which occurs on s390 architectures only.</changelog>
  <changelog author="schwab@suse.de" date="1583150400">- Update to version 4.4.15
  * The compatibility symbols crypt_gensalt_r, xcrypt, xcrypt_r,
    xcrypt_gensalt, and xcrypt_gensalt_r are deprecated further
  * Speed up ka-sunmd5 by skipping most of the test phrases
- Package README.md and TODO.md (bsc#1165389)</changelog>
  <changelog author="schwab@suse.de" date="1598961600">- Add compatibility provides for SLE15</changelog>
  <changelog author="dmueller@suse.com" date="1612612800">- add compatibility provides for Step 15 as well (bsc#1181571)</changelog>
  <changelog author="pgajdos@suse.com" date="1702382400">- fix variable name for datamember in 'struct crypt_data' [bsc#1215496]
- added patches
  fix https://github.com/besser82/libxcrypt/commit/b212d601549a0fc84cbbcaf21b931f903787d7e2
  + libxcrypt-man-fix-variable-name.patch</changelog>
</package>
<package pkgid="46b12512ae31a7a7f40da659b180c44f97f9ca6178f6406e2aa897ccc6ee500a" name="libxkbcommon" arch="src">
  <version epoch="0" ver="1.3.0" rel="150400.3.2.2"/>
  <changelog author="jengelh@inai.de" date="1478865600">- Update to new upstream release 0.7.0
  * Added support for different "modes" of calculating consumed
    modifiers. The existing mode, based on the XKB standard, has
    proven to be unintuitive in various shortcut implementations.
  * A new mode, based on the calculation used by the GTK toolkit,
    is added. This mode is less eager to declare a modifier as
    consumed.</changelog>
  <changelog author="jengelh@inai.de" date="1484740800">- Update to new upstream release 0.7.1
  * Fixed various reported problems when the current locale is
    tr_TR.UTF-8.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 0.7.2
  * Added new keysym definitions from xproto.
  * New APIs: XKB_KEY_XF86Keyboard, XKB_KEY_XF86WWAN,
    XKB_KEY_XF86RFKill, XKB_KEY_XF86AudioPreset.</changelog>
  <changelog author="jayvdb@gmail.com" date="1508414400">- Allow building x11 subpackage on any distribution</changelog>
  <changelog author="jengelh@inai.de" date="1513339200">- Update to new upstream release 0.8.0
  * Added xkb_keysym_to_{upper,lower} to perform case-conversion
    directly on keysyms. This is useful in some odd cases, but
    working with the Unicode representations should be preferred
    when possible.
  * Added Unicode conversion rules for the signifblank and
    permille keysyms.
  * Fixed a bug in the parsing of XKB key type definitions where
    the number of levels were determined by the number of level
  * names*. Keymaps which omit level names were hence
    miscompiled. This regressed in version 0.4.3. Keymaps from
    xkeyboard-config were not affected since they don't omit
    level names.</changelog>
  <changelog author="jengelh@inai.de" date="1533643200">- Update to new upstream release 0.8.2 (boo#1105832)
  * Fix a few NULL-dereferences, out-of-bounds access and undefined
    behavior in the XKB text format parser.
  * CVEs fixed:     CVE-2018-15853, CVE-2018-15854, CVE-2018-15855,
    CVE-2018-15856, CVE-2018-15857, CVE-2018-15858, CVE-2018-15859,
    CVE-2018-15861, CVE-2018-15862, CVE-2018-15863, CVE-2018-15864
- run make check</changelog>
  <changelog author="jengelh@inai.de" date="1549627200">- Update to new upstream release 0.8.3
  * New APIs: XKB_KEY_XF86MonBrightnessCycle,
    XKB_KEY_XF86RotationLockToggle.</changelog>
  <changelog author="jengelh@inai.de" date="1550836800">- Update to new upstream release 0.8.4
  * Only changes to the build procedure.</changelog>
  <changelog author="jengelh@inai.de" date="1571572800">- Update to release 0.9.0
  * Move ~/.xkb to before XKB_CONFIG_ROOT. This enables the user
    to have full control of the keymap definitions, instead of
    only augmenting them.</changelog>
  <changelog author="jengelh@inai.de" date="1571659200">- Update to release 0.9.1
  * Fix context creation failing when run in privileged processes
    as defined by `secure_getenv(3)`, e.g. GDM.</changelog>
  <changelog author="jengelh@inai.de" date="1579435200">- Update to release 0.10.0
  * Fix quadratic complexity in the XKB file parser.
  * Add $XDG_CONFIG_HOME/xkb to the default search path. If
    $XDG_CONFIG_HOME is not set, $HOME/.config/xkb is used. If
    $HOME is not set, the path is not added. The XDG path is
    looked up before the existing default search path $HOME/.xkb.
  * Add support for include statements in XKB rules files.
  * Fix bug where the merge mode only applied to the first vmod
    in a "virtual_modifiers" statement.
  * Reject interpret modifier predicate with more than one value.
  * Correctly handle capitalization of the ssharp keysym.</changelog>
  <changelog author="jengelh@inai.de" date="1599393600">- Update to release 1.0.0
  * Now it is possible to add custom layouts and options at the
    system (/etc) and user (~/.config) level, at least when
    libxkbcommon is in use.
  * libxkbregistry is a C library that lists available XKB
    models, layouts and variants for a given ruleset. This is a
    separate library (.so/.pc files) and aimed at tools that
    provide a listing of available keyboard layouts to the user.
  * Add an `xkbcli` command-line utility.</changelog>
  <changelog author="jengelh@inai.de" date="1599912000">- Update to release 1.0.1
  * Make the table output of `xkbcli how-to-type` aligned.</changelog>
  <changelog author="jengelh@inai.de" date="1605873600">- Update to release 1.0.2
  * Fix a bug where a keysym that cannot be resolved in a keymap
    gets compiled to a garbage keysym. Now it is set to
    XKB_KEY_NoSymbol instead.
  * Improve the speed of xkb_x11_keymap_new_from_device() on
    repeated calls in the same xkb_context().</changelog>
  <changelog author="jengelh@inai.de" date="1606132800">- Update to release 1.0.3
  * Fix (hopefully) a segfault in xkb_x11_keymap_new_from_device()
    in some unclear situation (bug introduced in 1.0.2).
  * Fix keymaps created with xkb_x11_keymap_new_from_device() do
    not have level names (bug introduced in 0.8.0).</changelog>
  <changelog author="dimstar@opensuse.org" date="1611144000">- Fix dependency of libxkbregistry-devel: the devel package must
  require the library libxkbregistry0.</changelog>
  <changelog author="jengelh@inai.de" date="1614859200">- Update to release 1.1.0
  * Update keysym definitions to latest xorgproto. In particular,
    this adds many special keysyms corresponding to Linux evdev
    keycodes.
  * New XKB_KEY_* definitions.</changelog>
  <changelog author="jengelh@inai.de" date="1617451200">- Update to release 1.2.0
  * `xkb_x11_keymap_new_from_device()` is much faster. It now
    performs only 2 roundtrips to the X server, instead of dozens
    (in first-time calls).
  * Case-sensitive `xkb_keysym_from_name()` is much faster.
  * Keysym names of the form `0x12AB` and `U12AB` are parsed more
    strictly.
  * Compose files now have a size limit (65535 internal nodes).
  * Compose table loading (`xkb_compose_table_new_from_locale()`
    and similar) is much faster.</changelog>
  <changelog author="jengelh@inai.de" date="1618401600">- Update to release 1.2.1 [boo#1184688]
  * Fix `xkb_x11_keymap_new_from_device()` failing when the
    keymap contains key types with missing level names, like the
    one used by the `numpad:mac` option in xkeyboard-config.
    (Regressed in 1.2.0.)</changelog>
  <changelog author="jengelh@inai.de" date="1619870400">- Update to release 1.3.0
  * `xkbcli list` was changed to output YAML instead of a
    custom format.
  * Fix segmentation fault in case-insensitive
    `xkb_keysym_from_name` for certain values like the empty
    string.</changelog>
</package>
<package pkgid="0fdf15a9cae691e18859552ab45780c29fec5e3152a39ae8d02b0a02b1181f18" name="libxkbcommon" arch="src">
  <version epoch="0" ver="1.3.0" rel="150400.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1484740800">- Update to new upstream release 0.7.1
  * Fixed various reported problems when the current locale is
    tr_TR.UTF-8.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 0.7.2
  * Added new keysym definitions from xproto.
  * New APIs: XKB_KEY_XF86Keyboard, XKB_KEY_XF86WWAN,
    XKB_KEY_XF86RFKill, XKB_KEY_XF86AudioPreset.</changelog>
  <changelog author="jayvdb@gmail.com" date="1508414400">- Allow building x11 subpackage on any distribution</changelog>
  <changelog author="jengelh@inai.de" date="1513339200">- Update to new upstream release 0.8.0
  * Added xkb_keysym_to_{upper,lower} to perform case-conversion
    directly on keysyms. This is useful in some odd cases, but
    working with the Unicode representations should be preferred
    when possible.
  * Added Unicode conversion rules for the signifblank and
    permille keysyms.
  * Fixed a bug in the parsing of XKB key type definitions where
    the number of levels were determined by the number of level
  * names*. Keymaps which omit level names were hence
    miscompiled. This regressed in version 0.4.3. Keymaps from
    xkeyboard-config were not affected since they don't omit
    level names.</changelog>
  <changelog author="jengelh@inai.de" date="1533643200">- Update to new upstream release 0.8.2 (boo#1105832)
  * Fix a few NULL-dereferences, out-of-bounds access and undefined
    behavior in the XKB text format parser.
  * CVEs fixed:     CVE-2018-15853, CVE-2018-15854, CVE-2018-15855,
    CVE-2018-15856, CVE-2018-15857, CVE-2018-15858, CVE-2018-15859,
    CVE-2018-15861, CVE-2018-15862, CVE-2018-15863, CVE-2018-15864
- run make check</changelog>
  <changelog author="jengelh@inai.de" date="1549627200">- Update to new upstream release 0.8.3
  * New APIs: XKB_KEY_XF86MonBrightnessCycle,
    XKB_KEY_XF86RotationLockToggle.</changelog>
  <changelog author="jengelh@inai.de" date="1550836800">- Update to new upstream release 0.8.4
  * Only changes to the build procedure.</changelog>
  <changelog author="jengelh@inai.de" date="1571572800">- Update to release 0.9.0
  * Move ~/.xkb to before XKB_CONFIG_ROOT. This enables the user
    to have full control of the keymap definitions, instead of
    only augmenting them.</changelog>
  <changelog author="jengelh@inai.de" date="1571659200">- Update to release 0.9.1
  * Fix context creation failing when run in privileged processes
    as defined by `secure_getenv(3)`, e.g. GDM.</changelog>
  <changelog author="jengelh@inai.de" date="1579435200">- Update to release 0.10.0
  * Fix quadratic complexity in the XKB file parser.
  * Add $XDG_CONFIG_HOME/xkb to the default search path. If
    $XDG_CONFIG_HOME is not set, $HOME/.config/xkb is used. If
    $HOME is not set, the path is not added. The XDG path is
    looked up before the existing default search path $HOME/.xkb.
  * Add support for include statements in XKB rules files.
  * Fix bug where the merge mode only applied to the first vmod
    in a "virtual_modifiers" statement.
  * Reject interpret modifier predicate with more than one value.
  * Correctly handle capitalization of the ssharp keysym.</changelog>
  <changelog author="jengelh@inai.de" date="1599393600">- Update to release 1.0.0
  * Now it is possible to add custom layouts and options at the
    system (/etc) and user (~/.config) level, at least when
    libxkbcommon is in use.
  * libxkbregistry is a C library that lists available XKB
    models, layouts and variants for a given ruleset. This is a
    separate library (.so/.pc files) and aimed at tools that
    provide a listing of available keyboard layouts to the user.
  * Add an `xkbcli` command-line utility.</changelog>
  <changelog author="jengelh@inai.de" date="1599912000">- Update to release 1.0.1
  * Make the table output of `xkbcli how-to-type` aligned.</changelog>
  <changelog author="jengelh@inai.de" date="1605873600">- Update to release 1.0.2
  * Fix a bug where a keysym that cannot be resolved in a keymap
    gets compiled to a garbage keysym. Now it is set to
    XKB_KEY_NoSymbol instead.
  * Improve the speed of xkb_x11_keymap_new_from_device() on
    repeated calls in the same xkb_context().</changelog>
  <changelog author="jengelh@inai.de" date="1606132800">- Update to release 1.0.3
  * Fix (hopefully) a segfault in xkb_x11_keymap_new_from_device()
    in some unclear situation (bug introduced in 1.0.2).
  * Fix keymaps created with xkb_x11_keymap_new_from_device() do
    not have level names (bug introduced in 0.8.0).</changelog>
  <changelog author="dimstar@opensuse.org" date="1611144000">- Fix dependency of libxkbregistry-devel: the devel package must
  require the library libxkbregistry0.</changelog>
  <changelog author="jengelh@inai.de" date="1614859200">- Update to release 1.1.0
  * Update keysym definitions to latest xorgproto. In particular,
    this adds many special keysyms corresponding to Linux evdev
    keycodes.
  * New XKB_KEY_* definitions.</changelog>
  <changelog author="jengelh@inai.de" date="1617451200">- Update to release 1.2.0
  * `xkb_x11_keymap_new_from_device()` is much faster. It now
    performs only 2 roundtrips to the X server, instead of dozens
    (in first-time calls).
  * Case-sensitive `xkb_keysym_from_name()` is much faster.
  * Keysym names of the form `0x12AB` and `U12AB` are parsed more
    strictly.
  * Compose files now have a size limit (65535 internal nodes).
  * Compose table loading (`xkb_compose_table_new_from_locale()`
    and similar) is much faster.</changelog>
  <changelog author="jengelh@inai.de" date="1618401600">- Update to release 1.2.1 [boo#1184688]
  * Fix `xkb_x11_keymap_new_from_device()` failing when the
    keymap contains key types with missing level names, like the
    one used by the `numpad:mac` option in xkeyboard-config.
    (Regressed in 1.2.0.)</changelog>
  <changelog author="jengelh@inai.de" date="1619870400">- Update to release 1.3.0
  * `xkbcli list` was changed to output YAML instead of a
    custom format.
  * Fix segmentation fault in case-insensitive
    `xkb_keysym_from_name` for certain values like the empty
    string.</changelog>
  <changelog author="meissner@suse.com" date="1704801600">- enable 32bit libxkbregistry0 and libxkbregistry0-devel
  for use by Wine. (bsc#1218639)</changelog>
</package>
<package pkgid="5dbabe85ad7b95c1ce1d29187fc1389d38960858444e3511e6f18620ae034cbb" name="libxkbcommon0" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="150400.3.2.2"/>
  <changelog author="jengelh@inai.de" date="1478865600">- Update to new upstream release 0.7.0
  * Added support for different "modes" of calculating consumed
    modifiers. The existing mode, based on the XKB standard, has
    proven to be unintuitive in various shortcut implementations.
  * A new mode, based on the calculation used by the GTK toolkit,
    is added. This mode is less eager to declare a modifier as
    consumed.</changelog>
  <changelog author="jengelh@inai.de" date="1484740800">- Update to new upstream release 0.7.1
  * Fixed various reported problems when the current locale is
    tr_TR.UTF-8.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 0.7.2
  * Added new keysym definitions from xproto.
  * New APIs: XKB_KEY_XF86Keyboard, XKB_KEY_XF86WWAN,
    XKB_KEY_XF86RFKill, XKB_KEY_XF86AudioPreset.</changelog>
  <changelog author="jayvdb@gmail.com" date="1508414400">- Allow building x11 subpackage on any distribution</changelog>
  <changelog author="jengelh@inai.de" date="1513339200">- Update to new upstream release 0.8.0
  * Added xkb_keysym_to_{upper,lower} to perform case-conversion
    directly on keysyms. This is useful in some odd cases, but
    working with the Unicode representations should be preferred
    when possible.
  * Added Unicode conversion rules for the signifblank and
    permille keysyms.
  * Fixed a bug in the parsing of XKB key type definitions where
    the number of levels were determined by the number of level
  * names*. Keymaps which omit level names were hence
    miscompiled. This regressed in version 0.4.3. Keymaps from
    xkeyboard-config were not affected since they don't omit
    level names.</changelog>
  <changelog author="jengelh@inai.de" date="1533643200">- Update to new upstream release 0.8.2 (boo#1105832)
  * Fix a few NULL-dereferences, out-of-bounds access and undefined
    behavior in the XKB text format parser.
  * CVEs fixed:     CVE-2018-15853, CVE-2018-15854, CVE-2018-15855,
    CVE-2018-15856, CVE-2018-15857, CVE-2018-15858, CVE-2018-15859,
    CVE-2018-15861, CVE-2018-15862, CVE-2018-15863, CVE-2018-15864
- run make check</changelog>
  <changelog author="jengelh@inai.de" date="1549627200">- Update to new upstream release 0.8.3
  * New APIs: XKB_KEY_XF86MonBrightnessCycle,
    XKB_KEY_XF86RotationLockToggle.</changelog>
  <changelog author="jengelh@inai.de" date="1550836800">- Update to new upstream release 0.8.4
  * Only changes to the build procedure.</changelog>
  <changelog author="jengelh@inai.de" date="1571572800">- Update to release 0.9.0
  * Move ~/.xkb to before XKB_CONFIG_ROOT. This enables the user
    to have full control of the keymap definitions, instead of
    only augmenting them.</changelog>
  <changelog author="jengelh@inai.de" date="1571659200">- Update to release 0.9.1
  * Fix context creation failing when run in privileged processes
    as defined by `secure_getenv(3)`, e.g. GDM.</changelog>
  <changelog author="jengelh@inai.de" date="1579435200">- Update to release 0.10.0
  * Fix quadratic complexity in the XKB file parser.
  * Add $XDG_CONFIG_HOME/xkb to the default search path. If
    $XDG_CONFIG_HOME is not set, $HOME/.config/xkb is used. If
    $HOME is not set, the path is not added. The XDG path is
    looked up before the existing default search path $HOME/.xkb.
  * Add support for include statements in XKB rules files.
  * Fix bug where the merge mode only applied to the first vmod
    in a "virtual_modifiers" statement.
  * Reject interpret modifier predicate with more than one value.
  * Correctly handle capitalization of the ssharp keysym.</changelog>
  <changelog author="jengelh@inai.de" date="1599393600">- Update to release 1.0.0
  * Now it is possible to add custom layouts and options at the
    system (/etc) and user (~/.config) level, at least when
    libxkbcommon is in use.
  * libxkbregistry is a C library that lists available XKB
    models, layouts and variants for a given ruleset. This is a
    separate library (.so/.pc files) and aimed at tools that
    provide a listing of available keyboard layouts to the user.
  * Add an `xkbcli` command-line utility.</changelog>
  <changelog author="jengelh@inai.de" date="1599912000">- Update to release 1.0.1
  * Make the table output of `xkbcli how-to-type` aligned.</changelog>
  <changelog author="jengelh@inai.de" date="1605873600">- Update to release 1.0.2
  * Fix a bug where a keysym that cannot be resolved in a keymap
    gets compiled to a garbage keysym. Now it is set to
    XKB_KEY_NoSymbol instead.
  * Improve the speed of xkb_x11_keymap_new_from_device() on
    repeated calls in the same xkb_context().</changelog>
  <changelog author="jengelh@inai.de" date="1606132800">- Update to release 1.0.3
  * Fix (hopefully) a segfault in xkb_x11_keymap_new_from_device()
    in some unclear situation (bug introduced in 1.0.2).
  * Fix keymaps created with xkb_x11_keymap_new_from_device() do
    not have level names (bug introduced in 0.8.0).</changelog>
  <changelog author="dimstar@opensuse.org" date="1611144000">- Fix dependency of libxkbregistry-devel: the devel package must
  require the library libxkbregistry0.</changelog>
  <changelog author="jengelh@inai.de" date="1614859200">- Update to release 1.1.0
  * Update keysym definitions to latest xorgproto. In particular,
    this adds many special keysyms corresponding to Linux evdev
    keycodes.
  * New XKB_KEY_* definitions.</changelog>
  <changelog author="jengelh@inai.de" date="1617451200">- Update to release 1.2.0
  * `xkb_x11_keymap_new_from_device()` is much faster. It now
    performs only 2 roundtrips to the X server, instead of dozens
    (in first-time calls).
  * Case-sensitive `xkb_keysym_from_name()` is much faster.
  * Keysym names of the form `0x12AB` and `U12AB` are parsed more
    strictly.
  * Compose files now have a size limit (65535 internal nodes).
  * Compose table loading (`xkb_compose_table_new_from_locale()`
    and similar) is much faster.</changelog>
  <changelog author="jengelh@inai.de" date="1618401600">- Update to release 1.2.1 [boo#1184688]
  * Fix `xkb_x11_keymap_new_from_device()` failing when the
    keymap contains key types with missing level names, like the
    one used by the `numpad:mac` option in xkeyboard-config.
    (Regressed in 1.2.0.)</changelog>
  <changelog author="jengelh@inai.de" date="1619870400">- Update to release 1.3.0
  * `xkbcli list` was changed to output YAML instead of a
    custom format.
  * Fix segmentation fault in case-insensitive
    `xkb_keysym_from_name` for certain values like the empty
    string.</changelog>
</package>
<package pkgid="1abe6db607b61999611b997cda238ff062a43c9afc9bbef10320e3ebd4398f3d" name="libxkbcommon0" arch="s390x">
  <version epoch="0" ver="1.3.0" rel="150400.3.2.2"/>
  <changelog author="jengelh@inai.de" date="1478865600">- Update to new upstream release 0.7.0
  * Added support for different "modes" of calculating consumed
    modifiers. The existing mode, based on the XKB standard, has
    proven to be unintuitive in various shortcut implementations.
  * A new mode, based on the calculation used by the GTK toolkit,
    is added. This mode is less eager to declare a modifier as
    consumed.</changelog>
  <changelog author="jengelh@inai.de" date="1484740800">- Update to new upstream release 0.7.1
  * Fixed various reported problems when the current locale is
    tr_TR.UTF-8.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 0.7.2
  * Added new keysym definitions from xproto.
  * New APIs: XKB_KEY_XF86Keyboard, XKB_KEY_XF86WWAN,
    XKB_KEY_XF86RFKill, XKB_KEY_XF86AudioPreset.</changelog>
  <changelog author="jayvdb@gmail.com" date="1508414400">- Allow building x11 subpackage on any distribution</changelog>
  <changelog author="jengelh@inai.de" date="1513339200">- Update to new upstream release 0.8.0
  * Added xkb_keysym_to_{upper,lower} to perform case-conversion
    directly on keysyms. This is useful in some odd cases, but
    working with the Unicode representations should be preferred
    when possible.
  * Added Unicode conversion rules for the signifblank and
    permille keysyms.
  * Fixed a bug in the parsing of XKB key type definitions where
    the number of levels were determined by the number of level
  * names*. Keymaps which omit level names were hence
    miscompiled. This regressed in version 0.4.3. Keymaps from
    xkeyboard-config were not affected since they don't omit
    level names.</changelog>
  <changelog author="jengelh@inai.de" date="1533643200">- Update to new upstream release 0.8.2 (boo#1105832)
  * Fix a few NULL-dereferences, out-of-bounds access and undefined
    behavior in the XKB text format parser.
  * CVEs fixed:     CVE-2018-15853, CVE-2018-15854, CVE-2018-15855,
    CVE-2018-15856, CVE-2018-15857, CVE-2018-15858, CVE-2018-15859,
    CVE-2018-15861, CVE-2018-15862, CVE-2018-15863, CVE-2018-15864
- run make check</changelog>
  <changelog author="jengelh@inai.de" date="1549627200">- Update to new upstream release 0.8.3
  * New APIs: XKB_KEY_XF86MonBrightnessCycle,
    XKB_KEY_XF86RotationLockToggle.</changelog>
  <changelog author="jengelh@inai.de" date="1550836800">- Update to new upstream release 0.8.4
  * Only changes to the build procedure.</changelog>
  <changelog author="jengelh@inai.de" date="1571572800">- Update to release 0.9.0
  * Move ~/.xkb to before XKB_CONFIG_ROOT. This enables the user
    to have full control of the keymap definitions, instead of
    only augmenting them.</changelog>
  <changelog author="jengelh@inai.de" date="1571659200">- Update to release 0.9.1
  * Fix context creation failing when run in privileged processes
    as defined by `secure_getenv(3)`, e.g. GDM.</changelog>
  <changelog author="jengelh@inai.de" date="1579435200">- Update to release 0.10.0
  * Fix quadratic complexity in the XKB file parser.
  * Add $XDG_CONFIG_HOME/xkb to the default search path. If
    $XDG_CONFIG_HOME is not set, $HOME/.config/xkb is used. If
    $HOME is not set, the path is not added. The XDG path is
    looked up before the existing default search path $HOME/.xkb.
  * Add support for include statements in XKB rules files.
  * Fix bug where the merge mode only applied to the first vmod
    in a "virtual_modifiers" statement.
  * Reject interpret modifier predicate with more than one value.
  * Correctly handle capitalization of the ssharp keysym.</changelog>
  <changelog author="jengelh@inai.de" date="1599393600">- Update to release 1.0.0
  * Now it is possible to add custom layouts and options at the
    system (/etc) and user (~/.config) level, at least when
    libxkbcommon is in use.
  * libxkbregistry is a C library that lists available XKB
    models, layouts and variants for a given ruleset. This is a
    separate library (.so/.pc files) and aimed at tools that
    provide a listing of available keyboard layouts to the user.
  * Add an `xkbcli` command-line utility.</changelog>
  <changelog author="jengelh@inai.de" date="1599912000">- Update to release 1.0.1
  * Make the table output of `xkbcli how-to-type` aligned.</changelog>
  <changelog author="jengelh@inai.de" date="1605873600">- Update to release 1.0.2
  * Fix a bug where a keysym that cannot be resolved in a keymap
    gets compiled to a garbage keysym. Now it is set to
    XKB_KEY_NoSymbol instead.
  * Improve the speed of xkb_x11_keymap_new_from_device() on
    repeated calls in the same xkb_context().</changelog>
  <changelog author="jengelh@inai.de" date="1606132800">- Update to release 1.0.3
  * Fix (hopefully) a segfault in xkb_x11_keymap_new_from_device()
    in some unclear situation (bug introduced in 1.0.2).
  * Fix keymaps created with xkb_x11_keymap_new_from_device() do
    not have level names (bug introduced in 0.8.0).</changelog>
  <changelog author="dimstar@opensuse.org" date="1611144000">- Fix dependency of libxkbregistry-devel: the devel package must
  require the library libxkbregistry0.</changelog>
  <changelog author="jengelh@inai.de" date="1614859200">- Update to release 1.1.0
  * Update keysym definitions to latest xorgproto. In particular,
    this adds many special keysyms corresponding to Linux evdev
    keycodes.
  * New XKB_KEY_* definitions.</changelog>
  <changelog author="jengelh@inai.de" date="1617451200">- Update to release 1.2.0
  * `xkb_x11_keymap_new_from_device()` is much faster. It now
    performs only 2 roundtrips to the X server, instead of dozens
    (in first-time calls).
  * Case-sensitive `xkb_keysym_from_name()` is much faster.
  * Keysym names of the form `0x12AB` and `U12AB` are parsed more
    strictly.
  * Compose files now have a size limit (65535 internal nodes).
  * Compose table loading (`xkb_compose_table_new_from_locale()`
    and similar) is much faster.</changelog>
  <changelog author="jengelh@inai.de" date="1618401600">- Update to release 1.2.1 [boo#1184688]
  * Fix `xkb_x11_keymap_new_from_device()` failing when the
    keymap contains key types with missing level names, like the
    one used by the `numpad:mac` option in xkeyboard-config.
    (Regressed in 1.2.0.)</changelog>
  <changelog author="jengelh@inai.de" date="1619870400">- Update to release 1.3.0
  * `xkbcli list` was changed to output YAML instead of a
    custom format.
  * Fix segmentation fault in case-insensitive
    `xkb_keysym_from_name` for certain values like the empty
    string.</changelog>
</package>
<package pkgid="c3792c33b70e3dd9afb6f0859c60cd62f148a9492f1dd78bc412d4e49b72de61" name="libxkbcommon0" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="150400.3.2.2"/>
  <changelog author="jengelh@inai.de" date="1478865600">- Update to new upstream release 0.7.0
  * Added support for different "modes" of calculating consumed
    modifiers. The existing mode, based on the XKB standard, has
    proven to be unintuitive in various shortcut implementations.
  * A new mode, based on the calculation used by the GTK toolkit,
    is added. This mode is less eager to declare a modifier as
    consumed.</changelog>
  <changelog author="jengelh@inai.de" date="1484740800">- Update to new upstream release 0.7.1
  * Fixed various reported problems when the current locale is
    tr_TR.UTF-8.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 0.7.2
  * Added new keysym definitions from xproto.
  * New APIs: XKB_KEY_XF86Keyboard, XKB_KEY_XF86WWAN,
    XKB_KEY_XF86RFKill, XKB_KEY_XF86AudioPreset.</changelog>
  <changelog author="jayvdb@gmail.com" date="1508414400">- Allow building x11 subpackage on any distribution</changelog>
  <changelog author="jengelh@inai.de" date="1513339200">- Update to new upstream release 0.8.0
  * Added xkb_keysym_to_{upper,lower} to perform case-conversion
    directly on keysyms. This is useful in some odd cases, but
    working with the Unicode representations should be preferred
    when possible.
  * Added Unicode conversion rules for the signifblank and
    permille keysyms.
  * Fixed a bug in the parsing of XKB key type definitions where
    the number of levels were determined by the number of level
  * names*. Keymaps which omit level names were hence
    miscompiled. This regressed in version 0.4.3. Keymaps from
    xkeyboard-config were not affected since they don't omit
    level names.</changelog>
  <changelog author="jengelh@inai.de" date="1533643200">- Update to new upstream release 0.8.2 (boo#1105832)
  * Fix a few NULL-dereferences, out-of-bounds access and undefined
    behavior in the XKB text format parser.
  * CVEs fixed:     CVE-2018-15853, CVE-2018-15854, CVE-2018-15855,
    CVE-2018-15856, CVE-2018-15857, CVE-2018-15858, CVE-2018-15859,
    CVE-2018-15861, CVE-2018-15862, CVE-2018-15863, CVE-2018-15864
- run make check</changelog>
  <changelog author="jengelh@inai.de" date="1549627200">- Update to new upstream release 0.8.3
  * New APIs: XKB_KEY_XF86MonBrightnessCycle,
    XKB_KEY_XF86RotationLockToggle.</changelog>
  <changelog author="jengelh@inai.de" date="1550836800">- Update to new upstream release 0.8.4
  * Only changes to the build procedure.</changelog>
  <changelog author="jengelh@inai.de" date="1571572800">- Update to release 0.9.0
  * Move ~/.xkb to before XKB_CONFIG_ROOT. This enables the user
    to have full control of the keymap definitions, instead of
    only augmenting them.</changelog>
  <changelog author="jengelh@inai.de" date="1571659200">- Update to release 0.9.1
  * Fix context creation failing when run in privileged processes
    as defined by `secure_getenv(3)`, e.g. GDM.</changelog>
  <changelog author="jengelh@inai.de" date="1579435200">- Update to release 0.10.0
  * Fix quadratic complexity in the XKB file parser.
  * Add $XDG_CONFIG_HOME/xkb to the default search path. If
    $XDG_CONFIG_HOME is not set, $HOME/.config/xkb is used. If
    $HOME is not set, the path is not added. The XDG path is
    looked up before the existing default search path $HOME/.xkb.
  * Add support for include statements in XKB rules files.
  * Fix bug where the merge mode only applied to the first vmod
    in a "virtual_modifiers" statement.
  * Reject interpret modifier predicate with more than one value.
  * Correctly handle capitalization of the ssharp keysym.</changelog>
  <changelog author="jengelh@inai.de" date="1599393600">- Update to release 1.0.0
  * Now it is possible to add custom layouts and options at the
    system (/etc) and user (~/.config) level, at least when
    libxkbcommon is in use.
  * libxkbregistry is a C library that lists available XKB
    models, layouts and variants for a given ruleset. This is a
    separate library (.so/.pc files) and aimed at tools that
    provide a listing of available keyboard layouts to the user.
  * Add an `xkbcli` command-line utility.</changelog>
  <changelog author="jengelh@inai.de" date="1599912000">- Update to release 1.0.1
  * Make the table output of `xkbcli how-to-type` aligned.</changelog>
  <changelog author="jengelh@inai.de" date="1605873600">- Update to release 1.0.2
  * Fix a bug where a keysym that cannot be resolved in a keymap
    gets compiled to a garbage keysym. Now it is set to
    XKB_KEY_NoSymbol instead.
  * Improve the speed of xkb_x11_keymap_new_from_device() on
    repeated calls in the same xkb_context().</changelog>
  <changelog author="jengelh@inai.de" date="1606132800">- Update to release 1.0.3
  * Fix (hopefully) a segfault in xkb_x11_keymap_new_from_device()
    in some unclear situation (bug introduced in 1.0.2).
  * Fix keymaps created with xkb_x11_keymap_new_from_device() do
    not have level names (bug introduced in 0.8.0).</changelog>
  <changelog author="dimstar@opensuse.org" date="1611144000">- Fix dependency of libxkbregistry-devel: the devel package must
  require the library libxkbregistry0.</changelog>
  <changelog author="jengelh@inai.de" date="1614859200">- Update to release 1.1.0
  * Update keysym definitions to latest xorgproto. In particular,
    this adds many special keysyms corresponding to Linux evdev
    keycodes.
  * New XKB_KEY_* definitions.</changelog>
  <changelog author="jengelh@inai.de" date="1617451200">- Update to release 1.2.0
  * `xkb_x11_keymap_new_from_device()` is much faster. It now
    performs only 2 roundtrips to the X server, instead of dozens
    (in first-time calls).
  * Case-sensitive `xkb_keysym_from_name()` is much faster.
  * Keysym names of the form `0x12AB` and `U12AB` are parsed more
    strictly.
  * Compose files now have a size limit (65535 internal nodes).
  * Compose table loading (`xkb_compose_table_new_from_locale()`
    and similar) is much faster.</changelog>
  <changelog author="jengelh@inai.de" date="1618401600">- Update to release 1.2.1 [boo#1184688]
  * Fix `xkb_x11_keymap_new_from_device()` failing when the
    keymap contains key types with missing level names, like the
    one used by the `numpad:mac` option in xkeyboard-config.
    (Regressed in 1.2.0.)</changelog>
  <changelog author="jengelh@inai.de" date="1619870400">- Update to release 1.3.0
  * `xkbcli list` was changed to output YAML instead of a
    custom format.
  * Fix segmentation fault in case-insensitive
    `xkb_keysym_from_name` for certain values like the empty
    string.</changelog>
</package>
<package pkgid="aea0fadbafdb37aecf888d7a9beb54f54258e8f5eba864b6b70d5e1ccb034dc2" name="libxkbcommon0" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="150400.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1484740800">- Update to new upstream release 0.7.1
  * Fixed various reported problems when the current locale is
    tr_TR.UTF-8.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 0.7.2
  * Added new keysym definitions from xproto.
  * New APIs: XKB_KEY_XF86Keyboard, XKB_KEY_XF86WWAN,
    XKB_KEY_XF86RFKill, XKB_KEY_XF86AudioPreset.</changelog>
  <changelog author="jayvdb@gmail.com" date="1508414400">- Allow building x11 subpackage on any distribution</changelog>
  <changelog author="jengelh@inai.de" date="1513339200">- Update to new upstream release 0.8.0
  * Added xkb_keysym_to_{upper,lower} to perform case-conversion
    directly on keysyms. This is useful in some odd cases, but
    working with the Unicode representations should be preferred
    when possible.
  * Added Unicode conversion rules for the signifblank and
    permille keysyms.
  * Fixed a bug in the parsing of XKB key type definitions where
    the number of levels were determined by the number of level
  * names*. Keymaps which omit level names were hence
    miscompiled. This regressed in version 0.4.3. Keymaps from
    xkeyboard-config were not affected since they don't omit
    level names.</changelog>
  <changelog author="jengelh@inai.de" date="1533643200">- Update to new upstream release 0.8.2 (boo#1105832)
  * Fix a few NULL-dereferences, out-of-bounds access and undefined
    behavior in the XKB text format parser.
  * CVEs fixed:     CVE-2018-15853, CVE-2018-15854, CVE-2018-15855,
    CVE-2018-15856, CVE-2018-15857, CVE-2018-15858, CVE-2018-15859,
    CVE-2018-15861, CVE-2018-15862, CVE-2018-15863, CVE-2018-15864
- run make check</changelog>
  <changelog author="jengelh@inai.de" date="1549627200">- Update to new upstream release 0.8.3
  * New APIs: XKB_KEY_XF86MonBrightnessCycle,
    XKB_KEY_XF86RotationLockToggle.</changelog>
  <changelog author="jengelh@inai.de" date="1550836800">- Update to new upstream release 0.8.4
  * Only changes to the build procedure.</changelog>
  <changelog author="jengelh@inai.de" date="1571572800">- Update to release 0.9.0
  * Move ~/.xkb to before XKB_CONFIG_ROOT. This enables the user
    to have full control of the keymap definitions, instead of
    only augmenting them.</changelog>
  <changelog author="jengelh@inai.de" date="1571659200">- Update to release 0.9.1
  * Fix context creation failing when run in privileged processes
    as defined by `secure_getenv(3)`, e.g. GDM.</changelog>
  <changelog author="jengelh@inai.de" date="1579435200">- Update to release 0.10.0
  * Fix quadratic complexity in the XKB file parser.
  * Add $XDG_CONFIG_HOME/xkb to the default search path. If
    $XDG_CONFIG_HOME is not set, $HOME/.config/xkb is used. If
    $HOME is not set, the path is not added. The XDG path is
    looked up before the existing default search path $HOME/.xkb.
  * Add support for include statements in XKB rules files.
  * Fix bug where the merge mode only applied to the first vmod
    in a "virtual_modifiers" statement.
  * Reject interpret modifier predicate with more than one value.
  * Correctly handle capitalization of the ssharp keysym.</changelog>
  <changelog author="jengelh@inai.de" date="1599393600">- Update to release 1.0.0
  * Now it is possible to add custom layouts and options at the
    system (/etc) and user (~/.config) level, at least when
    libxkbcommon is in use.
  * libxkbregistry is a C library that lists available XKB
    models, layouts and variants for a given ruleset. This is a
    separate library (.so/.pc files) and aimed at tools that
    provide a listing of available keyboard layouts to the user.
  * Add an `xkbcli` command-line utility.</changelog>
  <changelog author="jengelh@inai.de" date="1599912000">- Update to release 1.0.1
  * Make the table output of `xkbcli how-to-type` aligned.</changelog>
  <changelog author="jengelh@inai.de" date="1605873600">- Update to release 1.0.2
  * Fix a bug where a keysym that cannot be resolved in a keymap
    gets compiled to a garbage keysym. Now it is set to
    XKB_KEY_NoSymbol instead.
  * Improve the speed of xkb_x11_keymap_new_from_device() on
    repeated calls in the same xkb_context().</changelog>
  <changelog author="jengelh@inai.de" date="1606132800">- Update to release 1.0.3
  * Fix (hopefully) a segfault in xkb_x11_keymap_new_from_device()
    in some unclear situation (bug introduced in 1.0.2).
  * Fix keymaps created with xkb_x11_keymap_new_from_device() do
    not have level names (bug introduced in 0.8.0).</changelog>
  <changelog author="dimstar@opensuse.org" date="1611144000">- Fix dependency of libxkbregistry-devel: the devel package must
  require the library libxkbregistry0.</changelog>
  <changelog author="jengelh@inai.de" date="1614859200">- Update to release 1.1.0
  * Update keysym definitions to latest xorgproto. In particular,
    this adds many special keysyms corresponding to Linux evdev
    keycodes.
  * New XKB_KEY_* definitions.</changelog>
  <changelog author="jengelh@inai.de" date="1617451200">- Update to release 1.2.0
  * `xkb_x11_keymap_new_from_device()` is much faster. It now
    performs only 2 roundtrips to the X server, instead of dozens
    (in first-time calls).
  * Case-sensitive `xkb_keysym_from_name()` is much faster.
  * Keysym names of the form `0x12AB` and `U12AB` are parsed more
    strictly.
  * Compose files now have a size limit (65535 internal nodes).
  * Compose table loading (`xkb_compose_table_new_from_locale()`
    and similar) is much faster.</changelog>
  <changelog author="jengelh@inai.de" date="1618401600">- Update to release 1.2.1 [boo#1184688]
  * Fix `xkb_x11_keymap_new_from_device()` failing when the
    keymap contains key types with missing level names, like the
    one used by the `numpad:mac` option in xkeyboard-config.
    (Regressed in 1.2.0.)</changelog>
  <changelog author="jengelh@inai.de" date="1619870400">- Update to release 1.3.0
  * `xkbcli list` was changed to output YAML instead of a
    custom format.
  * Fix segmentation fault in case-insensitive
    `xkb_keysym_from_name` for certain values like the empty
    string.</changelog>
  <changelog author="meissner@suse.com" date="1704801600">- enable 32bit libxkbregistry0 and libxkbregistry0-devel
  for use by Wine. (bsc#1218639)</changelog>
</package>
<package pkgid="c7dcd6970c885878f400d77ca82f281e1d03762494b6ae835319226e698671f9" name="libxkbcommon0" arch="s390x">
  <version epoch="0" ver="1.3.0" rel="150400.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1484740800">- Update to new upstream release 0.7.1
  * Fixed various reported problems when the current locale is
    tr_TR.UTF-8.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 0.7.2
  * Added new keysym definitions from xproto.
  * New APIs: XKB_KEY_XF86Keyboard, XKB_KEY_XF86WWAN,
    XKB_KEY_XF86RFKill, XKB_KEY_XF86AudioPreset.</changelog>
  <changelog author="jayvdb@gmail.com" date="1508414400">- Allow building x11 subpackage on any distribution</changelog>
  <changelog author="jengelh@inai.de" date="1513339200">- Update to new upstream release 0.8.0
  * Added xkb_keysym_to_{upper,lower} to perform case-conversion
    directly on keysyms. This is useful in some odd cases, but
    working with the Unicode representations should be preferred
    when possible.
  * Added Unicode conversion rules for the signifblank and
    permille keysyms.
  * Fixed a bug in the parsing of XKB key type definitions where
    the number of levels were determined by the number of level
  * names*. Keymaps which omit level names were hence
    miscompiled. This regressed in version 0.4.3. Keymaps from
    xkeyboard-config were not affected since they don't omit
    level names.</changelog>
  <changelog author="jengelh@inai.de" date="1533643200">- Update to new upstream release 0.8.2 (boo#1105832)
  * Fix a few NULL-dereferences, out-of-bounds access and undefined
    behavior in the XKB text format parser.
  * CVEs fixed:     CVE-2018-15853, CVE-2018-15854, CVE-2018-15855,
    CVE-2018-15856, CVE-2018-15857, CVE-2018-15858, CVE-2018-15859,
    CVE-2018-15861, CVE-2018-15862, CVE-2018-15863, CVE-2018-15864
- run make check</changelog>
  <changelog author="jengelh@inai.de" date="1549627200">- Update to new upstream release 0.8.3
  * New APIs: XKB_KEY_XF86MonBrightnessCycle,
    XKB_KEY_XF86RotationLockToggle.</changelog>
  <changelog author="jengelh@inai.de" date="1550836800">- Update to new upstream release 0.8.4
  * Only changes to the build procedure.</changelog>
  <changelog author="jengelh@inai.de" date="1571572800">- Update to release 0.9.0
  * Move ~/.xkb to before XKB_CONFIG_ROOT. This enables the user
    to have full control of the keymap definitions, instead of
    only augmenting them.</changelog>
  <changelog author="jengelh@inai.de" date="1571659200">- Update to release 0.9.1
  * Fix context creation failing when run in privileged processes
    as defined by `secure_getenv(3)`, e.g. GDM.</changelog>
  <changelog author="jengelh@inai.de" date="1579435200">- Update to release 0.10.0
  * Fix quadratic complexity in the XKB file parser.
  * Add $XDG_CONFIG_HOME/xkb to the default search path. If
    $XDG_CONFIG_HOME is not set, $HOME/.config/xkb is used. If
    $HOME is not set, the path is not added. The XDG path is
    looked up before the existing default search path $HOME/.xkb.
  * Add support for include statements in XKB rules files.
  * Fix bug where the merge mode only applied to the first vmod
    in a "virtual_modifiers" statement.
  * Reject interpret modifier predicate with more than one value.
  * Correctly handle capitalization of the ssharp keysym.</changelog>
  <changelog author="jengelh@inai.de" date="1599393600">- Update to release 1.0.0
  * Now it is possible to add custom layouts and options at the
    system (/etc) and user (~/.config) level, at least when
    libxkbcommon is in use.
  * libxkbregistry is a C library that lists available XKB
    models, layouts and variants for a given ruleset. This is a
    separate library (.so/.pc files) and aimed at tools that
    provide a listing of available keyboard layouts to the user.
  * Add an `xkbcli` command-line utility.</changelog>
  <changelog author="jengelh@inai.de" date="1599912000">- Update to release 1.0.1
  * Make the table output of `xkbcli how-to-type` aligned.</changelog>
  <changelog author="jengelh@inai.de" date="1605873600">- Update to release 1.0.2
  * Fix a bug where a keysym that cannot be resolved in a keymap
    gets compiled to a garbage keysym. Now it is set to
    XKB_KEY_NoSymbol instead.
  * Improve the speed of xkb_x11_keymap_new_from_device() on
    repeated calls in the same xkb_context().</changelog>
  <changelog author="jengelh@inai.de" date="1606132800">- Update to release 1.0.3
  * Fix (hopefully) a segfault in xkb_x11_keymap_new_from_device()
    in some unclear situation (bug introduced in 1.0.2).
  * Fix keymaps created with xkb_x11_keymap_new_from_device() do
    not have level names (bug introduced in 0.8.0).</changelog>
  <changelog author="dimstar@opensuse.org" date="1611144000">- Fix dependency of libxkbregistry-devel: the devel package must
  require the library libxkbregistry0.</changelog>
  <changelog author="jengelh@inai.de" date="1614859200">- Update to release 1.1.0
  * Update keysym definitions to latest xorgproto. In particular,
    this adds many special keysyms corresponding to Linux evdev
    keycodes.
  * New XKB_KEY_* definitions.</changelog>
  <changelog author="jengelh@inai.de" date="1617451200">- Update to release 1.2.0
  * `xkb_x11_keymap_new_from_device()` is much faster. It now
    performs only 2 roundtrips to the X server, instead of dozens
    (in first-time calls).
  * Case-sensitive `xkb_keysym_from_name()` is much faster.
  * Keysym names of the form `0x12AB` and `U12AB` are parsed more
    strictly.
  * Compose files now have a size limit (65535 internal nodes).
  * Compose table loading (`xkb_compose_table_new_from_locale()`
    and similar) is much faster.</changelog>
  <changelog author="jengelh@inai.de" date="1618401600">- Update to release 1.2.1 [boo#1184688]
  * Fix `xkb_x11_keymap_new_from_device()` failing when the
    keymap contains key types with missing level names, like the
    one used by the `numpad:mac` option in xkeyboard-config.
    (Regressed in 1.2.0.)</changelog>
  <changelog author="jengelh@inai.de" date="1619870400">- Update to release 1.3.0
  * `xkbcli list` was changed to output YAML instead of a
    custom format.
  * Fix segmentation fault in case-insensitive
    `xkb_keysym_from_name` for certain values like the empty
    string.</changelog>
  <changelog author="meissner@suse.com" date="1704801600">- enable 32bit libxkbregistry0 and libxkbregistry0-devel
  for use by Wine. (bsc#1218639)</changelog>
</package>
<package pkgid="10d866df199515d20d7e65f582e510d6384a7fa299bb0e86a7bbdf4f716a2636" name="libxkbcommon0" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="150400.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1484740800">- Update to new upstream release 0.7.1
  * Fixed various reported problems when the current locale is
    tr_TR.UTF-8.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 0.7.2
  * Added new keysym definitions from xproto.
  * New APIs: XKB_KEY_XF86Keyboard, XKB_KEY_XF86WWAN,
    XKB_KEY_XF86RFKill, XKB_KEY_XF86AudioPreset.</changelog>
  <changelog author="jayvdb@gmail.com" date="1508414400">- Allow building x11 subpackage on any distribution</changelog>
  <changelog author="jengelh@inai.de" date="1513339200">- Update to new upstream release 0.8.0
  * Added xkb_keysym_to_{upper,lower} to perform case-conversion
    directly on keysyms. This is useful in some odd cases, but
    working with the Unicode representations should be preferred
    when possible.
  * Added Unicode conversion rules for the signifblank and
    permille keysyms.
  * Fixed a bug in the parsing of XKB key type definitions where
    the number of levels were determined by the number of level
  * names*. Keymaps which omit level names were hence
    miscompiled. This regressed in version 0.4.3. Keymaps from
    xkeyboard-config were not affected since they don't omit
    level names.</changelog>
  <changelog author="jengelh@inai.de" date="1533643200">- Update to new upstream release 0.8.2 (boo#1105832)
  * Fix a few NULL-dereferences, out-of-bounds access and undefined
    behavior in the XKB text format parser.
  * CVEs fixed:     CVE-2018-15853, CVE-2018-15854, CVE-2018-15855,
    CVE-2018-15856, CVE-2018-15857, CVE-2018-15858, CVE-2018-15859,
    CVE-2018-15861, CVE-2018-15862, CVE-2018-15863, CVE-2018-15864
- run make check</changelog>
  <changelog author="jengelh@inai.de" date="1549627200">- Update to new upstream release 0.8.3
  * New APIs: XKB_KEY_XF86MonBrightnessCycle,
    XKB_KEY_XF86RotationLockToggle.</changelog>
  <changelog author="jengelh@inai.de" date="1550836800">- Update to new upstream release 0.8.4
  * Only changes to the build procedure.</changelog>
  <changelog author="jengelh@inai.de" date="1571572800">- Update to release 0.9.0
  * Move ~/.xkb to before XKB_CONFIG_ROOT. This enables the user
    to have full control of the keymap definitions, instead of
    only augmenting them.</changelog>
  <changelog author="jengelh@inai.de" date="1571659200">- Update to release 0.9.1
  * Fix context creation failing when run in privileged processes
    as defined by `secure_getenv(3)`, e.g. GDM.</changelog>
  <changelog author="jengelh@inai.de" date="1579435200">- Update to release 0.10.0
  * Fix quadratic complexity in the XKB file parser.
  * Add $XDG_CONFIG_HOME/xkb to the default search path. If
    $XDG_CONFIG_HOME is not set, $HOME/.config/xkb is used. If
    $HOME is not set, the path is not added. The XDG path is
    looked up before the existing default search path $HOME/.xkb.
  * Add support for include statements in XKB rules files.
  * Fix bug where the merge mode only applied to the first vmod
    in a "virtual_modifiers" statement.
  * Reject interpret modifier predicate with more than one value.
  * Correctly handle capitalization of the ssharp keysym.</changelog>
  <changelog author="jengelh@inai.de" date="1599393600">- Update to release 1.0.0
  * Now it is possible to add custom layouts and options at the
    system (/etc) and user (~/.config) level, at least when
    libxkbcommon is in use.
  * libxkbregistry is a C library that lists available XKB
    models, layouts and variants for a given ruleset. This is a
    separate library (.so/.pc files) and aimed at tools that
    provide a listing of available keyboard layouts to the user.
  * Add an `xkbcli` command-line utility.</changelog>
  <changelog author="jengelh@inai.de" date="1599912000">- Update to release 1.0.1
  * Make the table output of `xkbcli how-to-type` aligned.</changelog>
  <changelog author="jengelh@inai.de" date="1605873600">- Update to release 1.0.2
  * Fix a bug where a keysym that cannot be resolved in a keymap
    gets compiled to a garbage keysym. Now it is set to
    XKB_KEY_NoSymbol instead.
  * Improve the speed of xkb_x11_keymap_new_from_device() on
    repeated calls in the same xkb_context().</changelog>
  <changelog author="jengelh@inai.de" date="1606132800">- Update to release 1.0.3
  * Fix (hopefully) a segfault in xkb_x11_keymap_new_from_device()
    in some unclear situation (bug introduced in 1.0.2).
  * Fix keymaps created with xkb_x11_keymap_new_from_device() do
    not have level names (bug introduced in 0.8.0).</changelog>
  <changelog author="dimstar@opensuse.org" date="1611144000">- Fix dependency of libxkbregistry-devel: the devel package must
  require the library libxkbregistry0.</changelog>
  <changelog author="jengelh@inai.de" date="1614859200">- Update to release 1.1.0
  * Update keysym definitions to latest xorgproto. In particular,
    this adds many special keysyms corresponding to Linux evdev
    keycodes.
  * New XKB_KEY_* definitions.</changelog>
  <changelog author="jengelh@inai.de" date="1617451200">- Update to release 1.2.0
  * `xkb_x11_keymap_new_from_device()` is much faster. It now
    performs only 2 roundtrips to the X server, instead of dozens
    (in first-time calls).
  * Case-sensitive `xkb_keysym_from_name()` is much faster.
  * Keysym names of the form `0x12AB` and `U12AB` are parsed more
    strictly.
  * Compose files now have a size limit (65535 internal nodes).
  * Compose table loading (`xkb_compose_table_new_from_locale()`
    and similar) is much faster.</changelog>
  <changelog author="jengelh@inai.de" date="1618401600">- Update to release 1.2.1 [boo#1184688]
  * Fix `xkb_x11_keymap_new_from_device()` failing when the
    keymap contains key types with missing level names, like the
    one used by the `numpad:mac` option in xkeyboard-config.
    (Regressed in 1.2.0.)</changelog>
  <changelog author="jengelh@inai.de" date="1619870400">- Update to release 1.3.0
  * `xkbcli list` was changed to output YAML instead of a
    custom format.
  * Fix segmentation fault in case-insensitive
    `xkb_keysym_from_name` for certain values like the empty
    string.</changelog>
  <changelog author="meissner@suse.com" date="1704801600">- enable 32bit libxkbregistry0 and libxkbregistry0-devel
  for use by Wine. (bsc#1218639)</changelog>
</package>
<package pkgid="0c91b2e89515263fcaa7dc2e72d6b2e6c6e5ccb0326df8edbf48c0d63057343b" name="libxml2-2" arch="aarch64">
  <version epoch="0" ver="2.10.3" rel="150500.5.11.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
</package>
<package pkgid="2884ed99015948606084418d3156297025c045276c851dcb6b7a4b543d28b5c4" name="libxml2-2" arch="s390x">
  <version epoch="0" ver="2.10.3" rel="150500.5.11.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
</package>
<package pkgid="c0fdc5f56ea25c96ee6889b04677364b89deafaea5b7181c1022f3e45a07890a" name="libxml2-2" arch="x86_64">
  <version epoch="0" ver="2.10.3" rel="150500.5.11.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
</package>
<package pkgid="0968ae12f249434479971d795dfc965939f7a0c131161483b9b28090576e6fef" name="libxml2-2" arch="aarch64">
  <version epoch="0" ver="2.10.3" rel="150500.5.14.1"/>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
</package>
<package pkgid="4e02a9846f10b52b2c93742ec013a62b5848c089bcda5f285205f1374e51fe38" name="libxml2-2" arch="s390x">
  <version epoch="0" ver="2.10.3" rel="150500.5.14.1"/>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
</package>
<package pkgid="56637a1b406c68da030032da1191a063bf56df7fd4f99ec2ae4ec6431bf1ee4f" name="libxml2-2" arch="x86_64">
  <version epoch="0" ver="2.10.3" rel="150500.5.14.1"/>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
</package>
<package pkgid="59a9be44f564c5e93b42c3a29e0618a25393e6f383a912e714f45c1f5a094b07" name="libxml2-2" arch="aarch64">
  <version epoch="0" ver="2.10.3" rel="150500.5.8.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
</package>
<package pkgid="50ddcae1dfb04e293832cdc86b5fca3a46844e8b7138dd75301e4d2568483f67" name="libxml2-2" arch="s390x">
  <version epoch="0" ver="2.10.3" rel="150500.5.8.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
</package>
<package pkgid="70facfd37535d56a8e679991d4fe67aa121c021e141a7caa6917552267128cbe" name="libxml2-2" arch="x86_64">
  <version epoch="0" ver="2.10.3" rel="150500.5.8.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
</package>
<package pkgid="ad95b97af04a26e311e343b2f8dcc8d329e2aafe14df0d748b24688bf199154b" name="libxml2" arch="src">
  <version epoch="0" ver="2.10.3" rel="150500.5.11.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
</package>
<package pkgid="a98cfe63b5009bcb969b8e97f4041c58f32a8a30bcb423cf171d2fb05d4b26e1" name="libxml2" arch="src">
  <version epoch="0" ver="2.10.3" rel="150500.5.14.1"/>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
</package>
<package pkgid="ffd8d5656c2b78a95469549b0cc01d61e7d1a63d1206d6cbb45d3082cb3ef213" name="libxml2" arch="src">
  <version epoch="0" ver="2.10.3" rel="150500.5.8.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
</package>
<package pkgid="1aae8eed628ed6224a200c2c7da4a37a6ae6e5345c3fd525e63579b06f3fcfd6" name="libxml2-python" arch="src">
  <version epoch="0" ver="2.10.3" rel="150500.5.11.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
</package>
<package pkgid="226915cc9bf251265bb05ccc6d0aa828c5568e2a0de0b1c191c7517fab711f9f" name="libxml2-python" arch="src">
  <version epoch="0" ver="2.10.3" rel="150500.5.14.1"/>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
</package>
<package pkgid="4406294c2f62774b3284d209b7f042376fa688cd98676a0fbfdf8b0916839176" name="libxml2-python" arch="src">
  <version epoch="0" ver="2.10.3" rel="150500.5.8.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
</package>
<package pkgid="987b2f4b80670ef720c6386b856383811bb2cbd5c45e42264d02e9936bd182b3" name="libxml2-tools" arch="aarch64">
  <version epoch="0" ver="2.10.3" rel="150500.5.11.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
</package>
<package pkgid="69473c66dab9a1c8b8c6b48eb8a7fc3effe3eaf50eddc6780bb69a3a9c5ed50c" name="libxml2-tools" arch="s390x">
  <version epoch="0" ver="2.10.3" rel="150500.5.11.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
</package>
<package pkgid="916a6abd219a4d89a555e2b31d0e348d8da66a933bc65552a698b45f55ee057d" name="libxml2-tools" arch="x86_64">
  <version epoch="0" ver="2.10.3" rel="150500.5.11.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
</package>
<package pkgid="bf8fcc91d80c3a62ce8704296e0ed7f1e7b79b32916ec4fcf56ba4d4dbbc7f44" name="libxml2-tools" arch="aarch64">
  <version epoch="0" ver="2.10.3" rel="150500.5.14.1"/>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
</package>
<package pkgid="5738c5a85d18ee1cf87d9a047de4206c413907c9b843fb3f62b0620d6aa4c2ea" name="libxml2-tools" arch="s390x">
  <version epoch="0" ver="2.10.3" rel="150500.5.14.1"/>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
</package>
<package pkgid="2410c324f0203d3c5e69efd7173fd7ca4c1a637df510ef2a7aca930482584b21" name="libxml2-tools" arch="x86_64">
  <version epoch="0" ver="2.10.3" rel="150500.5.14.1"/>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
</package>
<package pkgid="23947581059509d63efdc0b4d02cea96b7138df001da75975851808d2fa3feb9" name="libxml2-tools" arch="aarch64">
  <version epoch="0" ver="2.10.3" rel="150500.5.8.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
</package>
<package pkgid="15c31ebe3fafec8acd22f039d7085dd6a99c9196a09574f727bfb19bb9cf98de" name="libxml2-tools" arch="s390x">
  <version epoch="0" ver="2.10.3" rel="150500.5.8.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
</package>
<package pkgid="6d24eb7dab0a50a06f6aa87316876b30efa9ad1ce5974452ae985e303557cfdd" name="libxml2-tools" arch="x86_64">
  <version epoch="0" ver="2.10.3" rel="150500.5.8.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
</package>
<package pkgid="9d2620141b82d98836a7ebc163a797fd8c956cc7955915f53f8e3c664b921b49" name="libz1" arch="aarch64">
  <version epoch="0" ver="1.2.13" rel="150500.4.3.1"/>
  <changelog author="brogers@suse.com" date="1562846400">- Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum
  conform to usage
  bsc#1141059</changelog>
  <changelog author="tchvatal@suse.com" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1571659200">- Add SUSE specific patch to fix bsc#1138793, we simply don't want
  to test if the app was linked with exactly same version of zlib
  like the one that is present on the runtime:
  * zlib-no-version-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1572350400">- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Update 410.patch to contain latest fixes from IBM bsc#1166260
  * The build behaviour changed</changelog>
  <changelog author="lidong.zhong@suse.com" date="1596715200">- Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1598529600">- Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776</changelog>
  <changelog author="tchvatal@suse.com" date="1598616000">- Add patch to fix compression level switching
  bsc#1175811 bsc#1175830 bsc#1175831
  * zlib-compression-switching.patch</changelog>
  <changelog author="coolo@suse.com" date="1600257600">- Provide a testsuite subpackage to run post-build validation</changelog>
  <changelog author="lnussel@suse.de" date="1603886400">- install to /usr (boo#1029961)</changelog>
  <changelog author="ali.abdallah@suse.com" date="1604923200">- Fix hw compression on z15 bsc#1176201
- Add zlib-s390x-z15-fix-hw-compression.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1647000000">- Don't install (internal) crypt.h header in minizip
  * minizip-dont-install-crypt-header.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648209600">- Fix memory corruption on deflate, bsc#1197459
  * bsc1197459.patch - CVE-2018-25032
- Update 410.patch
  * Remove included patches:
    bsc1174551-fxi-imcomplete-raw-streams.patch
    zlib-compression-switching.patch
    zlib-s390x-z15-fix-hw-compression.patch
- Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch</changelog>
  <changelog author="meissner@suse.com" date="1656763200">- switch to https urls</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661256000">- Update to 1.2.12:
  * A lot of bug fixes
  * Improve speed of crc32 functions
  * Use ARM crc32 instructions if the ARM architecture has them
  For the complete changes, see ChangeLog
- Fixes CVE-2022-37434,  heap-based buffer over-read or buffer overflow in
  inflate.c via a large gzip header extra field
  (CVE-2022-37434, bsc#1202175)
- Added patches:
  * zlib-1.2.11-covscan-issues-rhel9.patch
  * zlib-1.2.11-covscan-issues.patch
  * zlib-1.2.12-s390-vectorize-crc32.patch
  * zlib-1.2.12-optimized-crc32-power8.patch
  * zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.12-fix-configure.patch
  * zlib-1.2.12-correct-inputs-provided-to-crc-func.patch
  * zlib-1.2.12-fix-CVE-2022-37434.patch
  * zlib-1.2.5-minizip-fixuncrypt.patch
- Removed patches:
  * bsc1197459.patch (upstreamed)
  * zlib-power8-fate325307.patch
    (replaced by zlib-1.2.12-optimized-crc32-power8.patch)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
    (replaced by zlib-1.2.12-IBM-Z-hw-accelrated-deflate-s390x.patch)
  * 410.patch
    (replaced by zlib-1.2.12-IBM-Z-hw-accelrated-deflate-s390x.patch)
- Refreshed patches:
  * zlib-format.patch
  * zlib-no-version-check.patch
- Disable profiling since it breaks tests
- Update zlib-rpmlintrc</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Add Power8 optimizations:
  * zlib-1.2.12-add-optimized-slide_hash-for-power.patch
  * zlib-1.2.12-add-vectorized-longest_match-for-power.patch
  * zlib-1.2.12-adler32-vector-optimizations-for-power.patch
  * zlib-1.2.12-fix-invalid-memory-access-on-ppc-and-ppc64.patch
- Update zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch</changelog>
  <changelog author="dmueller@suse.com" date="1670760000">- build zlib with optflags again</changelog>
  <changelog author="danilo.spinella@suse.com" date="1674129600">- Update to 1.13:
  * Fix configure issue that discarded provided CC definition
  * Correct incorrect inputs provided to the CRC functions
  * Repair prototypes and exporting of new CRC functions
  * Fix inflateBack to detect invalid input with distances too far
  * Have infback() deliver all of the available output up to any error
  * Fix a bug when getting a gzip header extra field with inflate()
  * Fix bug in block type selection when Z_FIXED used
  * Tighten deflateBound bounds
  * Remove deleted assembler code references
  * Various portability and appearance improvements
- Added patches:
  * zlib-1.2.13-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.13-fix-bug-deflateBound.patch
  * zlib-1.2.13-optimized-s390.patch
- Refreshed patches:
  * zlib-1.2.12-add-optimized-slide_hash-for-power.patch
  * zlib-1.2.12-add-vectorized-longest_match-for-power.patch
  * zlib-1.2.12-s390-vectorize-crc32.patch
- Removed patches:
  * zlib-1.2.12-fix-configure.patch
  * zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.12-optimized-crc32-power8.patch
  * zlib-1.2.12-correct-inputs-provided-to-crc-func.patch
  * zlib-1.2.12-fix-CVE-2022-37434.patch
  * zlib-1.2.11-optimized-s390.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1683201600">- Fix deflateBound() before deflateInit(), bsc#1210593, bsc#1211005
  bsc1210593.patch</changelog>
  <changelog author="oss@danyspin97.org" date="1697716800">- Fix CVE-2023-45853, integer overflow and resultant heap-based buffer
  overflow in zipOpenNewFileInZip4_6, bsc#1216378
  * CVE-2023-45853.patch</changelog>
</package>
<package pkgid="703487f8a21a5828e12fa1837e68e74baa38f0f029addf317a17be6f3b248aa4" name="libz1" arch="s390x">
  <version epoch="0" ver="1.2.13" rel="150500.4.3.1"/>
  <changelog author="brogers@suse.com" date="1562846400">- Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum
  conform to usage
  bsc#1141059</changelog>
  <changelog author="tchvatal@suse.com" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1571659200">- Add SUSE specific patch to fix bsc#1138793, we simply don't want
  to test if the app was linked with exactly same version of zlib
  like the one that is present on the runtime:
  * zlib-no-version-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1572350400">- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Update 410.patch to contain latest fixes from IBM bsc#1166260
  * The build behaviour changed</changelog>
  <changelog author="lidong.zhong@suse.com" date="1596715200">- Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1598529600">- Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776</changelog>
  <changelog author="tchvatal@suse.com" date="1598616000">- Add patch to fix compression level switching
  bsc#1175811 bsc#1175830 bsc#1175831
  * zlib-compression-switching.patch</changelog>
  <changelog author="coolo@suse.com" date="1600257600">- Provide a testsuite subpackage to run post-build validation</changelog>
  <changelog author="lnussel@suse.de" date="1603886400">- install to /usr (boo#1029961)</changelog>
  <changelog author="ali.abdallah@suse.com" date="1604923200">- Fix hw compression on z15 bsc#1176201
- Add zlib-s390x-z15-fix-hw-compression.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1647000000">- Don't install (internal) crypt.h header in minizip
  * minizip-dont-install-crypt-header.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648209600">- Fix memory corruption on deflate, bsc#1197459
  * bsc1197459.patch - CVE-2018-25032
- Update 410.patch
  * Remove included patches:
    bsc1174551-fxi-imcomplete-raw-streams.patch
    zlib-compression-switching.patch
    zlib-s390x-z15-fix-hw-compression.patch
- Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch</changelog>
  <changelog author="meissner@suse.com" date="1656763200">- switch to https urls</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661256000">- Update to 1.2.12:
  * A lot of bug fixes
  * Improve speed of crc32 functions
  * Use ARM crc32 instructions if the ARM architecture has them
  For the complete changes, see ChangeLog
- Fixes CVE-2022-37434,  heap-based buffer over-read or buffer overflow in
  inflate.c via a large gzip header extra field
  (CVE-2022-37434, bsc#1202175)
- Added patches:
  * zlib-1.2.11-covscan-issues-rhel9.patch
  * zlib-1.2.11-covscan-issues.patch
  * zlib-1.2.12-s390-vectorize-crc32.patch
  * zlib-1.2.12-optimized-crc32-power8.patch
  * zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.12-fix-configure.patch
  * zlib-1.2.12-correct-inputs-provided-to-crc-func.patch
  * zlib-1.2.12-fix-CVE-2022-37434.patch
  * zlib-1.2.5-minizip-fixuncrypt.patch
- Removed patches:
  * bsc1197459.patch (upstreamed)
  * zlib-power8-fate325307.patch
    (replaced by zlib-1.2.12-optimized-crc32-power8.patch)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
    (replaced by zlib-1.2.12-IBM-Z-hw-accelrated-deflate-s390x.patch)
  * 410.patch
    (replaced by zlib-1.2.12-IBM-Z-hw-accelrated-deflate-s390x.patch)
- Refreshed patches:
  * zlib-format.patch
  * zlib-no-version-check.patch
- Disable profiling since it breaks tests
- Update zlib-rpmlintrc</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Add Power8 optimizations:
  * zlib-1.2.12-add-optimized-slide_hash-for-power.patch
  * zlib-1.2.12-add-vectorized-longest_match-for-power.patch
  * zlib-1.2.12-adler32-vector-optimizations-for-power.patch
  * zlib-1.2.12-fix-invalid-memory-access-on-ppc-and-ppc64.patch
- Update zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch</changelog>
  <changelog author="dmueller@suse.com" date="1670760000">- build zlib with optflags again</changelog>
  <changelog author="danilo.spinella@suse.com" date="1674129600">- Update to 1.13:
  * Fix configure issue that discarded provided CC definition
  * Correct incorrect inputs provided to the CRC functions
  * Repair prototypes and exporting of new CRC functions
  * Fix inflateBack to detect invalid input with distances too far
  * Have infback() deliver all of the available output up to any error
  * Fix a bug when getting a gzip header extra field with inflate()
  * Fix bug in block type selection when Z_FIXED used
  * Tighten deflateBound bounds
  * Remove deleted assembler code references
  * Various portability and appearance improvements
- Added patches:
  * zlib-1.2.13-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.13-fix-bug-deflateBound.patch
  * zlib-1.2.13-optimized-s390.patch
- Refreshed patches:
  * zlib-1.2.12-add-optimized-slide_hash-for-power.patch
  * zlib-1.2.12-add-vectorized-longest_match-for-power.patch
  * zlib-1.2.12-s390-vectorize-crc32.patch
- Removed patches:
  * zlib-1.2.12-fix-configure.patch
  * zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.12-optimized-crc32-power8.patch
  * zlib-1.2.12-correct-inputs-provided-to-crc-func.patch
  * zlib-1.2.12-fix-CVE-2022-37434.patch
  * zlib-1.2.11-optimized-s390.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1683201600">- Fix deflateBound() before deflateInit(), bsc#1210593, bsc#1211005
  bsc1210593.patch</changelog>
  <changelog author="oss@danyspin97.org" date="1697716800">- Fix CVE-2023-45853, integer overflow and resultant heap-based buffer
  overflow in zipOpenNewFileInZip4_6, bsc#1216378
  * CVE-2023-45853.patch</changelog>
</package>
<package pkgid="1f273509bd76f485a289e23791a3d9c5fec7b982fe91f59000d191d40375840d" name="libz1" arch="x86_64">
  <version epoch="0" ver="1.2.13" rel="150500.4.3.1"/>
  <changelog author="brogers@suse.com" date="1562846400">- Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum
  conform to usage
  bsc#1141059</changelog>
  <changelog author="tchvatal@suse.com" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1571659200">- Add SUSE specific patch to fix bsc#1138793, we simply don't want
  to test if the app was linked with exactly same version of zlib
  like the one that is present on the runtime:
  * zlib-no-version-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1572350400">- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Update 410.patch to contain latest fixes from IBM bsc#1166260
  * The build behaviour changed</changelog>
  <changelog author="lidong.zhong@suse.com" date="1596715200">- Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1598529600">- Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776</changelog>
  <changelog author="tchvatal@suse.com" date="1598616000">- Add patch to fix compression level switching
  bsc#1175811 bsc#1175830 bsc#1175831
  * zlib-compression-switching.patch</changelog>
  <changelog author="coolo@suse.com" date="1600257600">- Provide a testsuite subpackage to run post-build validation</changelog>
  <changelog author="lnussel@suse.de" date="1603886400">- install to /usr (boo#1029961)</changelog>
  <changelog author="ali.abdallah@suse.com" date="1604923200">- Fix hw compression on z15 bsc#1176201
- Add zlib-s390x-z15-fix-hw-compression.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1647000000">- Don't install (internal) crypt.h header in minizip
  * minizip-dont-install-crypt-header.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648209600">- Fix memory corruption on deflate, bsc#1197459
  * bsc1197459.patch - CVE-2018-25032
- Update 410.patch
  * Remove included patches:
    bsc1174551-fxi-imcomplete-raw-streams.patch
    zlib-compression-switching.patch
    zlib-s390x-z15-fix-hw-compression.patch
- Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch</changelog>
  <changelog author="meissner@suse.com" date="1656763200">- switch to https urls</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661256000">- Update to 1.2.12:
  * A lot of bug fixes
  * Improve speed of crc32 functions
  * Use ARM crc32 instructions if the ARM architecture has them
  For the complete changes, see ChangeLog
- Fixes CVE-2022-37434,  heap-based buffer over-read or buffer overflow in
  inflate.c via a large gzip header extra field
  (CVE-2022-37434, bsc#1202175)
- Added patches:
  * zlib-1.2.11-covscan-issues-rhel9.patch
  * zlib-1.2.11-covscan-issues.patch
  * zlib-1.2.12-s390-vectorize-crc32.patch
  * zlib-1.2.12-optimized-crc32-power8.patch
  * zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.12-fix-configure.patch
  * zlib-1.2.12-correct-inputs-provided-to-crc-func.patch
  * zlib-1.2.12-fix-CVE-2022-37434.patch
  * zlib-1.2.5-minizip-fixuncrypt.patch
- Removed patches:
  * bsc1197459.patch (upstreamed)
  * zlib-power8-fate325307.patch
    (replaced by zlib-1.2.12-optimized-crc32-power8.patch)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
    (replaced by zlib-1.2.12-IBM-Z-hw-accelrated-deflate-s390x.patch)
  * 410.patch
    (replaced by zlib-1.2.12-IBM-Z-hw-accelrated-deflate-s390x.patch)
- Refreshed patches:
  * zlib-format.patch
  * zlib-no-version-check.patch
- Disable profiling since it breaks tests
- Update zlib-rpmlintrc</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Add Power8 optimizations:
  * zlib-1.2.12-add-optimized-slide_hash-for-power.patch
  * zlib-1.2.12-add-vectorized-longest_match-for-power.patch
  * zlib-1.2.12-adler32-vector-optimizations-for-power.patch
  * zlib-1.2.12-fix-invalid-memory-access-on-ppc-and-ppc64.patch
- Update zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch</changelog>
  <changelog author="dmueller@suse.com" date="1670760000">- build zlib with optflags again</changelog>
  <changelog author="danilo.spinella@suse.com" date="1674129600">- Update to 1.13:
  * Fix configure issue that discarded provided CC definition
  * Correct incorrect inputs provided to the CRC functions
  * Repair prototypes and exporting of new CRC functions
  * Fix inflateBack to detect invalid input with distances too far
  * Have infback() deliver all of the available output up to any error
  * Fix a bug when getting a gzip header extra field with inflate()
  * Fix bug in block type selection when Z_FIXED used
  * Tighten deflateBound bounds
  * Remove deleted assembler code references
  * Various portability and appearance improvements
- Added patches:
  * zlib-1.2.13-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.13-fix-bug-deflateBound.patch
  * zlib-1.2.13-optimized-s390.patch
- Refreshed patches:
  * zlib-1.2.12-add-optimized-slide_hash-for-power.patch
  * zlib-1.2.12-add-vectorized-longest_match-for-power.patch
  * zlib-1.2.12-s390-vectorize-crc32.patch
- Removed patches:
  * zlib-1.2.12-fix-configure.patch
  * zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.12-optimized-crc32-power8.patch
  * zlib-1.2.12-correct-inputs-provided-to-crc-func.patch
  * zlib-1.2.12-fix-CVE-2022-37434.patch
  * zlib-1.2.11-optimized-s390.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1683201600">- Fix deflateBound() before deflateInit(), bsc#1210593, bsc#1211005
  bsc1210593.patch</changelog>
  <changelog author="oss@danyspin97.org" date="1697716800">- Fix CVE-2023-45853, integer overflow and resultant heap-based buffer
  overflow in zipOpenNewFileInZip4_6, bsc#1216378
  * CVE-2023-45853.patch</changelog>
</package>
<package pkgid="b1e1194a07b15def9ad047df1c35b5b696e0cda319c9bf8a2734e2c06530d060" name="libzck1" arch="aarch64">
  <version epoch="0" ver="1.1.16" rel="150400.3.7.1"/>
  <changelog author="ngompa13@gmail.com" date="1530792000">- Initial packaging based on Mageia package</changelog>
  <changelog author="ngompa13@gmail.com" date="1531828800">- Update to 0.7.6
  + SHA-512 and SHA-512/128 support
  + New default chunk checksum type SHA-512/128
  + Automatic chunking moved into libzck and is now default
  + New option to disable automatic chunking
  + Bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Do not manually specify dependencies which are automatically
  generated
- Make requirements of devel package less strict</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222400">- Rebase to 0.9.11
  + Fix small bug where creating a zck_dl context fails when zck
    context is NULL
  + Fix security bugs found by Coverity
  + Fix test failures for zstd &lt;= 1.3.4
  + Add gen_xml_dictionary to libexecdir with zck_ prefix
  + Fix intermittent bug where auto-chunking wasn't deterministic
  + ABI (but not API change) - Use bool from stdbool.h
  + Allow specification of output file in zck
  + Set minimum and maximum chunk sizes for both automatic and
    manual chunking
  + New error handling functions
  + File format changes
  + API changes
- Make requirements between subpackages stricter to avoid issues
  due to inter-subpackage ABI/API changes</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222401">- Bump meson build dependency to match meson.build requirement</changelog>
  <changelog author="aloisio@gmx.com" date="1540814400">- Update to version 0.9.13
  * Add read support for zchunk files with optional flags
  * Fix tests for zstd-1.3.6</changelog>
  <changelog author="ngompa13@gmail.com" date="1545048000">- Update to version 0.9.17
  + Turn off some tests for big-endian architectures since zstd
    isn't deterministic on them
  + Add zck_gen_zdict binary to generate optimal zdict for a zchunk file
  + Add functions to API to simplify extracting a single chunk
  + Change default zstd compression to 9 for a 6x speed increase in
    compression speed for a 5% increase in compression size
  + Switch from optional flags to more robust optional elements
  + Sanity check hex hashes passed in as an option</changelog>
  <changelog author="ngompa13@gmail.com" date="1548244800">- Update to version 1.0.2
  + Use hash table for finding identical chunks, speeding up process
    considerably
  + Add test case to verify that identical chunk checking is working</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331200">- Backport patch from upstream to fix bugs discovered by Coverity
  + Add patch: 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331201">- Update to version 1.0.3
  + Fix some small bugs found by Coverity
  + Fix memory leak and off-by-one errors
- Drop patches part of 1.0.3 release
  + 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1554033600">- Update to version 1.1.0
  + Fix multipart boundary bug when dealing with lighttpd servers
  + Optimize chunk matching while downloading, significantly reducing CPU usage</changelog>
  <changelog author="mpluskal@suse.com" date="1576670400">- Update to version 1.1.4:
  * Simplify regex for detecting part header info
  * Fix coverity warnings
  * Open files with permissions 0666 and let umask(2) do its job.
  * Multipart boundary field can be quoted.</changelog>
  <changelog author="ngompa13@gmail.com" date="1579435200">- Update to version 1.1.5
  + Handle write errors correctly</changelog>
  <changelog author="dimstar@opensuse.org" date="1609761600">- Add d2eae512bee09a4047cfe586de12f644d73b0736.patch: Fix build
  with zstd 1.4.7+.</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 1.1.9
  * Handle zstd 1.4.7+
  * Update documentation
  * unzck: require a *.zck extension
  * General bug fixes
- Dropped upstream merged
  d2eae512bee09a4047cfe586de12f644d73b0736.patch
- Add fix-test-argp.patch: Fix argp detection</changelog>
  <changelog author="rpm@fthiessen.de" date="1620043200">- Update to version 1.1.11
  * Fix memory leak of zck-&gt;prep_digest
  * Fix argp detection
  * Handle certain rare web servers that don't start with \r\n
- Drop upstream merged fix-test-argp.patch</changelog>
  <changelog author="ismail@i10z.com" date="1621080000">- Update to version 1.1.12
  * Update testsuite for zstd 1.5</changelog>
  <changelog author="ismail@i10z.com" date="1621598400">- Update to version 1.1.14
  * Final fixes for zstd 1.5 support</changelog>
  <changelog author="rpm@fthiessen.de" date="1624536000">- Update to version 1.1.16
  * Fix major bug when compressing with dictionary</changelog>
  <changelog author="ali.abdallah@suse.com" date="1697716800">- Fix CVE-2023-46228, bsc#1216268
  * Handle overflow errors in malformed zchunk files.
- Added patch:
  * CVE-2023-46228.patch</changelog>
</package>
<package pkgid="3bf8a4ae69befc7ff94157d51adbc143d93c11e12ee56fcde8c7929f0d06850e" name="libzck1" arch="s390x">
  <version epoch="0" ver="1.1.16" rel="150400.3.7.1"/>
  <changelog author="ngompa13@gmail.com" date="1530792000">- Initial packaging based on Mageia package</changelog>
  <changelog author="ngompa13@gmail.com" date="1531828800">- Update to 0.7.6
  + SHA-512 and SHA-512/128 support
  + New default chunk checksum type SHA-512/128
  + Automatic chunking moved into libzck and is now default
  + New option to disable automatic chunking
  + Bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Do not manually specify dependencies which are automatically
  generated
- Make requirements of devel package less strict</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222400">- Rebase to 0.9.11
  + Fix small bug where creating a zck_dl context fails when zck
    context is NULL
  + Fix security bugs found by Coverity
  + Fix test failures for zstd &lt;= 1.3.4
  + Add gen_xml_dictionary to libexecdir with zck_ prefix
  + Fix intermittent bug where auto-chunking wasn't deterministic
  + ABI (but not API change) - Use bool from stdbool.h
  + Allow specification of output file in zck
  + Set minimum and maximum chunk sizes for both automatic and
    manual chunking
  + New error handling functions
  + File format changes
  + API changes
- Make requirements between subpackages stricter to avoid issues
  due to inter-subpackage ABI/API changes</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222401">- Bump meson build dependency to match meson.build requirement</changelog>
  <changelog author="aloisio@gmx.com" date="1540814400">- Update to version 0.9.13
  * Add read support for zchunk files with optional flags
  * Fix tests for zstd-1.3.6</changelog>
  <changelog author="ngompa13@gmail.com" date="1545048000">- Update to version 0.9.17
  + Turn off some tests for big-endian architectures since zstd
    isn't deterministic on them
  + Add zck_gen_zdict binary to generate optimal zdict for a zchunk file
  + Add functions to API to simplify extracting a single chunk
  + Change default zstd compression to 9 for a 6x speed increase in
    compression speed for a 5% increase in compression size
  + Switch from optional flags to more robust optional elements
  + Sanity check hex hashes passed in as an option</changelog>
  <changelog author="ngompa13@gmail.com" date="1548244800">- Update to version 1.0.2
  + Use hash table for finding identical chunks, speeding up process
    considerably
  + Add test case to verify that identical chunk checking is working</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331200">- Backport patch from upstream to fix bugs discovered by Coverity
  + Add patch: 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331201">- Update to version 1.0.3
  + Fix some small bugs found by Coverity
  + Fix memory leak and off-by-one errors
- Drop patches part of 1.0.3 release
  + 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1554033600">- Update to version 1.1.0
  + Fix multipart boundary bug when dealing with lighttpd servers
  + Optimize chunk matching while downloading, significantly reducing CPU usage</changelog>
  <changelog author="mpluskal@suse.com" date="1576670400">- Update to version 1.1.4:
  * Simplify regex for detecting part header info
  * Fix coverity warnings
  * Open files with permissions 0666 and let umask(2) do its job.
  * Multipart boundary field can be quoted.</changelog>
  <changelog author="ngompa13@gmail.com" date="1579435200">- Update to version 1.1.5
  + Handle write errors correctly</changelog>
  <changelog author="dimstar@opensuse.org" date="1609761600">- Add d2eae512bee09a4047cfe586de12f644d73b0736.patch: Fix build
  with zstd 1.4.7+.</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 1.1.9
  * Handle zstd 1.4.7+
  * Update documentation
  * unzck: require a *.zck extension
  * General bug fixes
- Dropped upstream merged
  d2eae512bee09a4047cfe586de12f644d73b0736.patch
- Add fix-test-argp.patch: Fix argp detection</changelog>
  <changelog author="rpm@fthiessen.de" date="1620043200">- Update to version 1.1.11
  * Fix memory leak of zck-&gt;prep_digest
  * Fix argp detection
  * Handle certain rare web servers that don't start with \r\n
- Drop upstream merged fix-test-argp.patch</changelog>
  <changelog author="ismail@i10z.com" date="1621080000">- Update to version 1.1.12
  * Update testsuite for zstd 1.5</changelog>
  <changelog author="ismail@i10z.com" date="1621598400">- Update to version 1.1.14
  * Final fixes for zstd 1.5 support</changelog>
  <changelog author="rpm@fthiessen.de" date="1624536000">- Update to version 1.1.16
  * Fix major bug when compressing with dictionary</changelog>
  <changelog author="ali.abdallah@suse.com" date="1697716800">- Fix CVE-2023-46228, bsc#1216268
  * Handle overflow errors in malformed zchunk files.
- Added patch:
  * CVE-2023-46228.patch</changelog>
</package>
<package pkgid="2bcb4da09db4f7ce96345a1b6c7226d417f5983857b16eec0f529ad325299de5" name="libzck1" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="150400.3.7.1"/>
  <changelog author="ngompa13@gmail.com" date="1530792000">- Initial packaging based on Mageia package</changelog>
  <changelog author="ngompa13@gmail.com" date="1531828800">- Update to 0.7.6
  + SHA-512 and SHA-512/128 support
  + New default chunk checksum type SHA-512/128
  + Automatic chunking moved into libzck and is now default
  + New option to disable automatic chunking
  + Bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Do not manually specify dependencies which are automatically
  generated
- Make requirements of devel package less strict</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222400">- Rebase to 0.9.11
  + Fix small bug where creating a zck_dl context fails when zck
    context is NULL
  + Fix security bugs found by Coverity
  + Fix test failures for zstd &lt;= 1.3.4
  + Add gen_xml_dictionary to libexecdir with zck_ prefix
  + Fix intermittent bug where auto-chunking wasn't deterministic
  + ABI (but not API change) - Use bool from stdbool.h
  + Allow specification of output file in zck
  + Set minimum and maximum chunk sizes for both automatic and
    manual chunking
  + New error handling functions
  + File format changes
  + API changes
- Make requirements between subpackages stricter to avoid issues
  due to inter-subpackage ABI/API changes</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222401">- Bump meson build dependency to match meson.build requirement</changelog>
  <changelog author="aloisio@gmx.com" date="1540814400">- Update to version 0.9.13
  * Add read support for zchunk files with optional flags
  * Fix tests for zstd-1.3.6</changelog>
  <changelog author="ngompa13@gmail.com" date="1545048000">- Update to version 0.9.17
  + Turn off some tests for big-endian architectures since zstd
    isn't deterministic on them
  + Add zck_gen_zdict binary to generate optimal zdict for a zchunk file
  + Add functions to API to simplify extracting a single chunk
  + Change default zstd compression to 9 for a 6x speed increase in
    compression speed for a 5% increase in compression size
  + Switch from optional flags to more robust optional elements
  + Sanity check hex hashes passed in as an option</changelog>
  <changelog author="ngompa13@gmail.com" date="1548244800">- Update to version 1.0.2
  + Use hash table for finding identical chunks, speeding up process
    considerably
  + Add test case to verify that identical chunk checking is working</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331200">- Backport patch from upstream to fix bugs discovered by Coverity
  + Add patch: 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331201">- Update to version 1.0.3
  + Fix some small bugs found by Coverity
  + Fix memory leak and off-by-one errors
- Drop patches part of 1.0.3 release
  + 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1554033600">- Update to version 1.1.0
  + Fix multipart boundary bug when dealing with lighttpd servers
  + Optimize chunk matching while downloading, significantly reducing CPU usage</changelog>
  <changelog author="mpluskal@suse.com" date="1576670400">- Update to version 1.1.4:
  * Simplify regex for detecting part header info
  * Fix coverity warnings
  * Open files with permissions 0666 and let umask(2) do its job.
  * Multipart boundary field can be quoted.</changelog>
  <changelog author="ngompa13@gmail.com" date="1579435200">- Update to version 1.1.5
  + Handle write errors correctly</changelog>
  <changelog author="dimstar@opensuse.org" date="1609761600">- Add d2eae512bee09a4047cfe586de12f644d73b0736.patch: Fix build
  with zstd 1.4.7+.</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 1.1.9
  * Handle zstd 1.4.7+
  * Update documentation
  * unzck: require a *.zck extension
  * General bug fixes
- Dropped upstream merged
  d2eae512bee09a4047cfe586de12f644d73b0736.patch
- Add fix-test-argp.patch: Fix argp detection</changelog>
  <changelog author="rpm@fthiessen.de" date="1620043200">- Update to version 1.1.11
  * Fix memory leak of zck-&gt;prep_digest
  * Fix argp detection
  * Handle certain rare web servers that don't start with \r\n
- Drop upstream merged fix-test-argp.patch</changelog>
  <changelog author="ismail@i10z.com" date="1621080000">- Update to version 1.1.12
  * Update testsuite for zstd 1.5</changelog>
  <changelog author="ismail@i10z.com" date="1621598400">- Update to version 1.1.14
  * Final fixes for zstd 1.5 support</changelog>
  <changelog author="rpm@fthiessen.de" date="1624536000">- Update to version 1.1.16
  * Fix major bug when compressing with dictionary</changelog>
  <changelog author="ali.abdallah@suse.com" date="1697716800">- Fix CVE-2023-46228, bsc#1216268
  * Handle overflow errors in malformed zchunk files.
- Added patch:
  * CVE-2023-46228.patch</changelog>
</package>
<package pkgid="0a2dda9365101da0fddf9380e9b041b09705cbab8434ca42b84bec9bb9a4e933" name="libzypp" arch="aarch64">
  <version epoch="0" ver="17.31.22" rel="150400.3.43.1"/>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
</package>
<package pkgid="85caf8c38b1a3a921e6541f72fd5c314e5c5a8eb4a1df1bcfdc91af71bd93fef" name="libzypp" arch="s390x">
  <version epoch="0" ver="17.31.22" rel="150400.3.43.1"/>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
</package>
<package pkgid="8b49afae239983438bd38763e487d0440d1d1a511d5265588be0e71b4db74d36" name="libzypp" arch="src">
  <version epoch="0" ver="17.31.22" rel="150400.3.43.1"/>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
</package>
<package pkgid="b02fdd271fa5facd65451534b2a1775e52537f26f368f4014a44b58a0d3b49e6" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.31.22" rel="150400.3.43.1"/>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
</package>
<package pkgid="4f1cbb991ba722f5f616bef4fbc019fe32be449e32b0f08269d51c2257ad64ac" name="libzypp" arch="aarch64">
  <version epoch="0" ver="17.31.27" rel="150400.3.49.1"/>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
</package>
<package pkgid="50d714e255864e27e828688f1f97e4178d04c199a9e1f726623c32b716cc3229" name="libzypp" arch="s390x">
  <version epoch="0" ver="17.31.27" rel="150400.3.49.1"/>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
</package>
<package pkgid="036cad81d2ccad0b755ee6906a7961b8c352db9447c2c3369a38cc35d8b5eced" name="libzypp" arch="src">
  <version epoch="0" ver="17.31.27" rel="150400.3.49.1"/>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
</package>
<package pkgid="42006bd229abae16ede14f5a60032f33924c10f30bc4619289e632b7502fcbf8" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.31.27" rel="150400.3.49.1"/>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
</package>
<package pkgid="c92b51adbbd0e515d91a61e30211a8c6ed1ef4591742db08375aa8c6990da349" name="libzypp" arch="aarch64">
  <version epoch="0" ver="17.31.31" rel="150400.3.52.2"/>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
  <changelog author="ma@suse.de" date="1704801600">- Fix to build with libxml 2.12.x (fixes #505)
- version 17.31.28 (22)</changelog>
  <changelog author="ma@suse.de" date="1706011200">- CheckAccessDeleted: fix running_in_container detection
  (bsc#1218782)
- Detect CURLOPT_REDIR_PROTOCOLS_STR availability at runtime
  (bsc#1218831)
- Make Wakeup class EINTR safe.
- Add a way to cancel media operations on shutdown
  (openSUSE/zypper#522)
  This patch adds a mechanism to signal libzypp that a shutdown was
  requested, usually when CTRL+C was pressed by the user. Currently
  only the media backend will utilize this, but can be extended to
  all code paths that use g_poll() to wait for events.
- Manually poll fds for curl in MediaCurl.
  Using curl_easy_perform does not give us the required control on
  when we want to cancel a download. Switching to the MultiCurl
  implementation with a external poll() event loop will give us
  much more freedom and helps us to improve our Ctrl+C handling.
- Move reusable curl poll code to curlhelper.h.
- version 17.31.29 (22)</changelog>
  <changelog author="ma@suse.de" date="1707220800">- applydeltaprm: Create target directory if it does not exist
  (bsc#1219442)
- Add ProblemSolution::skipsPatchesOnly (for openSUSE/zypper#514)
- Fix problems with EINTR in ExternalDataSource::getline (fixes
  bsc#1215698)
- version 17.31.30 (22)</changelog>
  <changelog author="ma@suse.de" date="1707307200">- tui: allow to access the underlying ostream of out::Info.
- Add MLSep: Helper to produce not-NL-terminated multi line
  output.
- version 17.31.31 (22)</changelog>
</package>
<package pkgid="ceb75ba8dba04ca7fd2317e35b45dd7365056e25e26039e56a74fb36bedb5e58" name="libzypp" arch="s390x">
  <version epoch="0" ver="17.31.31" rel="150400.3.52.2"/>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
  <changelog author="ma@suse.de" date="1704801600">- Fix to build with libxml 2.12.x (fixes #505)
- version 17.31.28 (22)</changelog>
  <changelog author="ma@suse.de" date="1706011200">- CheckAccessDeleted: fix running_in_container detection
  (bsc#1218782)
- Detect CURLOPT_REDIR_PROTOCOLS_STR availability at runtime
  (bsc#1218831)
- Make Wakeup class EINTR safe.
- Add a way to cancel media operations on shutdown
  (openSUSE/zypper#522)
  This patch adds a mechanism to signal libzypp that a shutdown was
  requested, usually when CTRL+C was pressed by the user. Currently
  only the media backend will utilize this, but can be extended to
  all code paths that use g_poll() to wait for events.
- Manually poll fds for curl in MediaCurl.
  Using curl_easy_perform does not give us the required control on
  when we want to cancel a download. Switching to the MultiCurl
  implementation with a external poll() event loop will give us
  much more freedom and helps us to improve our Ctrl+C handling.
- Move reusable curl poll code to curlhelper.h.
- version 17.31.29 (22)</changelog>
  <changelog author="ma@suse.de" date="1707220800">- applydeltaprm: Create target directory if it does not exist
  (bsc#1219442)
- Add ProblemSolution::skipsPatchesOnly (for openSUSE/zypper#514)
- Fix problems with EINTR in ExternalDataSource::getline (fixes
  bsc#1215698)
- version 17.31.30 (22)</changelog>
  <changelog author="ma@suse.de" date="1707307200">- tui: allow to access the underlying ostream of out::Info.
- Add MLSep: Helper to produce not-NL-terminated multi line
  output.
- version 17.31.31 (22)</changelog>
</package>
<package pkgid="910953ec6f4146a5b98e2622a5590ec8c1e6139c56dfad8d37d45525eb0a0b48" name="libzypp" arch="src">
  <version epoch="0" ver="17.31.31" rel="150400.3.52.2"/>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
  <changelog author="ma@suse.de" date="1704801600">- Fix to build with libxml 2.12.x (fixes #505)
- version 17.31.28 (22)</changelog>
  <changelog author="ma@suse.de" date="1706011200">- CheckAccessDeleted: fix running_in_container detection
  (bsc#1218782)
- Detect CURLOPT_REDIR_PROTOCOLS_STR availability at runtime
  (bsc#1218831)
- Make Wakeup class EINTR safe.
- Add a way to cancel media operations on shutdown
  (openSUSE/zypper#522)
  This patch adds a mechanism to signal libzypp that a shutdown was
  requested, usually when CTRL+C was pressed by the user. Currently
  only the media backend will utilize this, but can be extended to
  all code paths that use g_poll() to wait for events.
- Manually poll fds for curl in MediaCurl.
  Using curl_easy_perform does not give us the required control on
  when we want to cancel a download. Switching to the MultiCurl
  implementation with a external poll() event loop will give us
  much more freedom and helps us to improve our Ctrl+C handling.
- Move reusable curl poll code to curlhelper.h.
- version 17.31.29 (22)</changelog>
  <changelog author="ma@suse.de" date="1707220800">- applydeltaprm: Create target directory if it does not exist
  (bsc#1219442)
- Add ProblemSolution::skipsPatchesOnly (for openSUSE/zypper#514)
- Fix problems with EINTR in ExternalDataSource::getline (fixes
  bsc#1215698)
- version 17.31.30 (22)</changelog>
  <changelog author="ma@suse.de" date="1707307200">- tui: allow to access the underlying ostream of out::Info.
- Add MLSep: Helper to produce not-NL-terminated multi line
  output.
- version 17.31.31 (22)</changelog>
</package>
<package pkgid="b0236be039516713673c03c2ff3c3e0435b28046484d08cfceb7df26b097a4e8" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.31.31" rel="150400.3.52.2"/>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
  <changelog author="ma@suse.de" date="1704801600">- Fix to build with libxml 2.12.x (fixes #505)
- version 17.31.28 (22)</changelog>
  <changelog author="ma@suse.de" date="1706011200">- CheckAccessDeleted: fix running_in_container detection
  (bsc#1218782)
- Detect CURLOPT_REDIR_PROTOCOLS_STR availability at runtime
  (bsc#1218831)
- Make Wakeup class EINTR safe.
- Add a way to cancel media operations on shutdown
  (openSUSE/zypper#522)
  This patch adds a mechanism to signal libzypp that a shutdown was
  requested, usually when CTRL+C was pressed by the user. Currently
  only the media backend will utilize this, but can be extended to
  all code paths that use g_poll() to wait for events.
- Manually poll fds for curl in MediaCurl.
  Using curl_easy_perform does not give us the required control on
  when we want to cancel a download. Switching to the MultiCurl
  implementation with a external poll() event loop will give us
  much more freedom and helps us to improve our Ctrl+C handling.
- Move reusable curl poll code to curlhelper.h.
- version 17.31.29 (22)</changelog>
  <changelog author="ma@suse.de" date="1707220800">- applydeltaprm: Create target directory if it does not exist
  (bsc#1219442)
- Add ProblemSolution::skipsPatchesOnly (for openSUSE/zypper#514)
- Fix problems with EINTR in ExternalDataSource::getline (fixes
  bsc#1215698)
- version 17.31.30 (22)</changelog>
  <changelog author="ma@suse.de" date="1707307200">- tui: allow to access the underlying ostream of out::Info.
- Add MLSep: Helper to produce not-NL-terminated multi line
  output.
- version 17.31.31 (22)</changelog>
</package>
<package pkgid="d900497a6d2eb7cd07671e0c70968419493dad87b51d94fb13995b7204adcf8c" name="llvm15" arch="src">
  <version epoch="0" ver="15.0.7" rel="150500.4.4.1"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1653739200">- Update to version 14.0.4.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Don't use gold for linking anymore: on s390x we use ld.bfd with
  LLVMgold.so, on ppc64 we disable ThinLTO for now.
- Using ld.bfd on s390x exposed an issue with the existing
  llvm_build_tablegen_component_as_shared_library.patch: linking
  llvm-tblgen with libLLVM.so means we also have to link libraries
  used for that (like LLVMTableGenGlobalISel) with libLLVM.so.
- Rewrite summary and description for llvm-gold to point out that
  it can also be used with ld.bfd, recommend with binutils.
- Prefer RPM macros over shell scripting, so that we can better
  inspect the build script with substitutions in place.
- More memory for stage 1 build jobs due to recent OOMs.
- Add %_libclang_sonum RPM macro to llvm-devel, since that might
  now diverge from %_llvm_sonum.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1655380800">- Update to version 14.0.5.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1656936000">- Update to version 14.0.6.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1660046400">- Add llvm-glibc-2-36.patch in order to address boo#1202215.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660132800">- Add WebAssembly support for all architectures.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660392000">- Use black RPM macro magic to deduplicate binary lists. This
  should have no effect on the generated RPM but shaves ~400 lines
  off the specfile and hopefully makes future maintenance easier.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661256000">- Don't declare python3-clang as noarch: Python packages are
  installed into %{_libdir}.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661515200">- Add llvm-lifetime-for-rust.patch to have Rust memory management
  functions considered as lifetime markers. This should aid dead
  store elimination to dynamically allocated memory in Rust code.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662206400">- Make sure we keep -DNDEBUG. At some point %{optflags} must have
  lost it, perhaps because CMake usually adds it on top. So when
  overriding CMAKE_{C,CXX}_FLAGS_RELWITHDEBINFO, we make sure to
  take over the other flags. We drop LLVM_ENABLE_ASSERTIONS=OFF,
  because that's the default anyway and hasn't helped here.
- Add llvm-scev-fix-isImpliedViaMerge.patch: fixes a miscompilation
  caused by mixing up values of the current and previous iteration.
  (See gh#llvm/llvm-project#56242.)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662465600">- Update to version 15.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/15.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools:
  - llvm-debuginfod: Provides debug info to remote hosts.
  - llvm-dwarfutil: Can copy and manipulate debug info.
  - llvm-remark-size-diff: Compute diff between remark files.
  * New Clang tools:
  - clang-offload-packager: Bundle multiple objects into single
    fat binaries including offload code.
  - clang-pseudo: Approximate heuristic parser for C++.
- Rebase patches:
  * check-no-llvm-exegesis.patch
  * link-clang-tools-extra-shared.patch
  * lld-default-sha1.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Drop patches that have landed upstream:
  * clang-repl-private-deps.patch
  * llvm-glibc-2-36.patch
  * llvm-scev-fix-isImpliedViaMerge.patch
- Drop llvm-lifetime-for-rust.patch: this is now solved via
  attributes and LLVM doesn't need a hardcoded list of allocation
  functions anymore.
- Add llvm-link-atomic.patch to fix build on ppc.
- Add libcxx-test-library-path.patch to fix libc++ tests failing
  without RUNPATH on libc++.so.
- Add libcxxabi-fix-armv7-test.patch to fix tests on armv7l.
- Thanks to Andreas Schwab for most of the rebasing!</changelog>
  <changelog author="schwab@suse.de" date="1662984000">- Use correct LLVM_HOST_TRIPLE for riscv64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663761600">- Always drop -gnu from triple for consistency. Patch a test that
  was looking for -linux- in clang-test-xfail-gnuless-triple.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Update to version 15.0.1.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1664884800">- Update to version 15.0.2.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1666872000">- Update to version 15.0.3.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Add llvm-armv7-fix-vector-compare-with-zero-lowering.patch: Fix
  lowering of non-canonical vector comparison with zero on armv7,
  preventing a crash (boo#1204267, gh#llvm/llvm-project#58514).
- Add lldb-swig-4.1.0-build-fix.patch: Fix build with Swig 4.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1667736000">- Update to version 15.0.4.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1668600000">- Update to version 15.0.5.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Remove obsolete lldb-swig-4.1.0-build-fix.patch.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1670155200">- Update to version 15.0.6.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1673697600">- Update to version 15.0.7.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Build stage 2 with -fno-plt on x86_64: since building with
  - Wl,-z,now the PLT stubs are basically dead code, so eliminating
  the indirection reduces the number of branches and improves code
  locality for the quite frequent cross-DSO calls.
- Add llvm-workaround-superfluous-branches.patch: hints LLVM to
  eliminate branches until gh#llvm/llvm-project#28804 is solved.</changelog>
  <changelog author="dmueller@suse.com" date="1678363200">- update constraints to exclude workers with very slow CPU</changelog>
</package>
<package pkgid="344789cad0ad3ddc4fa65ac58d19070b2649c8de7d212c91b5533a0ef463a773" name="lvm2" arch="aarch64">
  <version epoch="0" ver="2.03.22" rel="150500.7.9.1"/>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6753)
  - device-mapper version upgrade to 1.02.196
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="6ae596f919c553ec24c8a269b57fe8b26d7643fe0ff0e67e7a3e96ee978faf32" name="lvm2" arch="s390x">
  <version epoch="0" ver="2.03.22" rel="150500.7.9.1"/>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6753)
  - device-mapper version upgrade to 1.02.196
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="32bf6f4b57db787a8b02f30cfa3a42193b06b2d832d8ff499c1c30db190cd85e" name="lvm2" arch="src">
  <version epoch="0" ver="2.03.22" rel="150500.7.9.1"/>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6753)
  - device-mapper version upgrade to 1.02.196
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="c0c43e0117b563fe29661e8ba4d010138e180d3a264e3eb8a3427bc376a7b812" name="lvm2" arch="x86_64">
  <version epoch="0" ver="2.03.22" rel="150500.7.9.1"/>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6753)
  - device-mapper version upgrade to 1.02.196
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="036dfeca1f6bcba3d0a853baae39a727186b5d7d8a3d896391ae92d806915158" name="lvm2-device-mapper" arch="src">
  <version epoch="0" ver="2.03.22" rel="150500.7.9.1"/>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6753)
  - device-mapper version upgrade to 1.02.196
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="4e5b62452261b37195d6a546199f6323c16a5b090b7d94e2e69ebd978119aaea" name="mozilla-nss" arch="aarch64">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="13cddbec19683e7a0463c93acd2abec5ee64d38ee838132f35bf3cf2f933955a" name="mozilla-nss" arch="s390x">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="b5fbb6853db3b304f7195fbdaef951f9bc9654ccfa24938f1ed00551cbe328da" name="mozilla-nss" arch="src">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="734dee4f068ee71c3867eda71cc54fe68c324d3ca5e4bc4f88b41ba2ec07cbf0" name="mozilla-nss" arch="x86_64">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="c2a5074ea910ab968b41944d1445a593a85edc37ed9b15f8e594aaae6e99406d" name="mozilla-nss" arch="aarch64">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="85fe6c331a5b76426a8f0f86c9494d2f2d821173328e2b44551103171b7a95ae" name="mozilla-nss" arch="s390x">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="a9863b53baef761067394d4e91165389dce7de4f8dd6096fcd3af076aac865e0" name="mozilla-nss" arch="src">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="6b41ef95c3870c859c30c5ff3a8db289784e11fb70c0d4b2672a3e6fad628302" name="mozilla-nss" arch="x86_64">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="ce15d7ac1a68cee85ab04605a93859daefc1ee445f0d344a17ca9f9663b43703" name="mozilla-nss-certs" arch="aarch64">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="924088bf2bfd35aea140bcae535bc5a78f6745f0ea33117d3b15003c1ad639bf" name="mozilla-nss-certs" arch="s390x">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="9e627f73d2c0eb233b257788dace10e1b6f39a86446a36d0bf1fe9092df1012e" name="mozilla-nss-certs" arch="x86_64">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="50739c02ab9524f7e81991faadbda03a7d9652080c0ad6e6d2fa82901d58f40d" name="mozilla-nss-certs" arch="aarch64">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="e9c0d36f4d6360996e305c9068ec471e7fbaa41c32342d1857b7d3dbb92f9293" name="mozilla-nss-certs" arch="s390x">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="dccbb825df0e2b6617c0e7d76c5df798ae09fe12c907565b788a60c76323b349" name="mozilla-nss-certs" arch="x86_64">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="4d47dd714da4adb3f865ee6bc13e3eba32909100fd1f93a27b6e9e373ebcac4f" name="mozilla-nss-tools" arch="aarch64">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="6898c7b9fe2de81dc997b39a284cac4ed99efc5a8b8946cc12b8fb2fa9311667" name="mozilla-nss-tools" arch="s390x">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="8130fdcb7d02f252d85df1aaee55b14b6207b4dcfc47fc9c420c4ca2a6413b4f" name="mozilla-nss-tools" arch="x86_64">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="0b25966b12b9f99193d3813857220347290e0297a540e8b422e9a4f98a7d2074" name="mozilla-nss-tools" arch="aarch64">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="8fb06e82223557aabbde132b254c41aa1cef11cb37dd90484d2bb72ed1f74b85" name="mozilla-nss-tools" arch="s390x">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="a47214615a7e7bcf25d3ad4d086a9b5a2dc53898142712d53a5a96f76681cf33" name="mozilla-nss-tools" arch="x86_64">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="10b04ce5eb749d80e859123613597626a7964984ba9c53e9cda3c551fbd05cb1" name="multipath-tools" arch="aarch64">
  <version epoch="0" ver="0.9.4+77+suse.1f7a63b" rel="150500.3.6.1"/>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1662206400">- Update to version 0.9.0+134+suse.dbf2e2d:
  * Add multipathc command under GPL3.0, and split off libmpathutil
    (bsc#1202616)
  * Fix command completion in interactive mode (bsc#1201483)
  * multipathd: fix use-after-free in handle_path_wwid_change()
    (bsc#1201483)
  * Improve startup time for very large multipath.conf (bsc#1200523)
  * Avoid checker blocking event handling for huge number of devices
    (boo#1203085)
  * Cleanup sysfs accessors in libmultipath
  * Minor upstream bug fixes
  * Spelling fixes
  * Documentation: add ALUA info to README.md, delete README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1662552000">- Update to version 0.9.1+48+suse.9c6c435:
  * Upstream version update
  * kpartx_id: remove bashism
  * Doc: add multipathc.8 manual page</changelog>
  <changelog author="mwilck@suse.com" date="1662724800">- Update to version 0.9.1+52+suse.be8809e:
  * Code-identical to 0.9.1+48+suse.9c6c435 (merge in git repo
    to preserve history; fix revision in _service file).</changelog>
  <changelog author="mwilck@suse.com" date="1666612800">- Update to version 0.9.2+57+suse.cf3c1e9:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * Upstream bug fixes and hwtable updates
- Drop recompress.service, it just slows down build</changelog>
  <changelog author="mwilck@suse.com" date="1666785600">- Update to version 0.9.2+59+suse.ac8942d:
  * Fix segfault in "multipath -t" command (boo#1204731)</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 0.9.4+68+suse.98559ea:
  * libmultipath: bump ABI version to 18.0.0
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * libmultipath: don't leak memory on invalid strings  (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * minor bugfixes
  * hwtable fixes
  * Build system rework
  * spec file: adapt make command line to changes in build system
  * spec file: use make -Orecurse (better readable output)
  * spec file: use verbose build</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.4+71+suse.c648a77:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.4+73+suse.a5414a6:
  * libmultipath: ignore nvme devices if nvme native multipath is enabled
    (bsc#1212854)
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)
    Note: this changes user-visible behavior. multipathd will not
    grab any nvme devices for dm-multipath if nvme native multipathing
    is on (which is the default on SLE and openSUSE).</changelog>
  <changelog author="mwilck@suse.com" date="1704456000">- Update to version 0.9.4+77+suse.1f7a63b:
  * fix ANA prioritizer enablement logic (bsc#1218326)</changelog>
</package>
<package pkgid="1a264f2d8f5989311b33e956628c39194a4ed88b5013ab4a612d87f5306b05ae" name="multipath-tools" arch="s390x">
  <version epoch="0" ver="0.9.4+77+suse.1f7a63b" rel="150500.3.6.1"/>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1662206400">- Update to version 0.9.0+134+suse.dbf2e2d:
  * Add multipathc command under GPL3.0, and split off libmpathutil
    (bsc#1202616)
  * Fix command completion in interactive mode (bsc#1201483)
  * multipathd: fix use-after-free in handle_path_wwid_change()
    (bsc#1201483)
  * Improve startup time for very large multipath.conf (bsc#1200523)
  * Avoid checker blocking event handling for huge number of devices
    (boo#1203085)
  * Cleanup sysfs accessors in libmultipath
  * Minor upstream bug fixes
  * Spelling fixes
  * Documentation: add ALUA info to README.md, delete README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1662552000">- Update to version 0.9.1+48+suse.9c6c435:
  * Upstream version update
  * kpartx_id: remove bashism
  * Doc: add multipathc.8 manual page</changelog>
  <changelog author="mwilck@suse.com" date="1662724800">- Update to version 0.9.1+52+suse.be8809e:
  * Code-identical to 0.9.1+48+suse.9c6c435 (merge in git repo
    to preserve history; fix revision in _service file).</changelog>
  <changelog author="mwilck@suse.com" date="1666612800">- Update to version 0.9.2+57+suse.cf3c1e9:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * Upstream bug fixes and hwtable updates
- Drop recompress.service, it just slows down build</changelog>
  <changelog author="mwilck@suse.com" date="1666785600">- Update to version 0.9.2+59+suse.ac8942d:
  * Fix segfault in "multipath -t" command (boo#1204731)</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 0.9.4+68+suse.98559ea:
  * libmultipath: bump ABI version to 18.0.0
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * libmultipath: don't leak memory on invalid strings  (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * minor bugfixes
  * hwtable fixes
  * Build system rework
  * spec file: adapt make command line to changes in build system
  * spec file: use make -Orecurse (better readable output)
  * spec file: use verbose build</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.4+71+suse.c648a77:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.4+73+suse.a5414a6:
  * libmultipath: ignore nvme devices if nvme native multipath is enabled
    (bsc#1212854)
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)
    Note: this changes user-visible behavior. multipathd will not
    grab any nvme devices for dm-multipath if nvme native multipathing
    is on (which is the default on SLE and openSUSE).</changelog>
  <changelog author="mwilck@suse.com" date="1704456000">- Update to version 0.9.4+77+suse.1f7a63b:
  * fix ANA prioritizer enablement logic (bsc#1218326)</changelog>
</package>
<package pkgid="32969686217f82d8f85f149f69045a4cff38fd6f7ddec9ee9f6c01d210be877f" name="multipath-tools" arch="src">
  <version epoch="0" ver="0.9.4+77+suse.1f7a63b" rel="150500.3.6.1"/>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1662206400">- Update to version 0.9.0+134+suse.dbf2e2d:
  * Add multipathc command under GPL3.0, and split off libmpathutil
    (bsc#1202616)
  * Fix command completion in interactive mode (bsc#1201483)
  * multipathd: fix use-after-free in handle_path_wwid_change()
    (bsc#1201483)
  * Improve startup time for very large multipath.conf (bsc#1200523)
  * Avoid checker blocking event handling for huge number of devices
    (boo#1203085)
  * Cleanup sysfs accessors in libmultipath
  * Minor upstream bug fixes
  * Spelling fixes
  * Documentation: add ALUA info to README.md, delete README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1662552000">- Update to version 0.9.1+48+suse.9c6c435:
  * Upstream version update
  * kpartx_id: remove bashism
  * Doc: add multipathc.8 manual page</changelog>
  <changelog author="mwilck@suse.com" date="1662724800">- Update to version 0.9.1+52+suse.be8809e:
  * Code-identical to 0.9.1+48+suse.9c6c435 (merge in git repo
    to preserve history; fix revision in _service file).</changelog>
  <changelog author="mwilck@suse.com" date="1666612800">- Update to version 0.9.2+57+suse.cf3c1e9:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * Upstream bug fixes and hwtable updates
- Drop recompress.service, it just slows down build</changelog>
  <changelog author="mwilck@suse.com" date="1666785600">- Update to version 0.9.2+59+suse.ac8942d:
  * Fix segfault in "multipath -t" command (boo#1204731)</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 0.9.4+68+suse.98559ea:
  * libmultipath: bump ABI version to 18.0.0
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * libmultipath: don't leak memory on invalid strings  (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * minor bugfixes
  * hwtable fixes
  * Build system rework
  * spec file: adapt make command line to changes in build system
  * spec file: use make -Orecurse (better readable output)
  * spec file: use verbose build</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.4+71+suse.c648a77:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.4+73+suse.a5414a6:
  * libmultipath: ignore nvme devices if nvme native multipath is enabled
    (bsc#1212854)
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)
    Note: this changes user-visible behavior. multipathd will not
    grab any nvme devices for dm-multipath if nvme native multipathing
    is on (which is the default on SLE and openSUSE).</changelog>
  <changelog author="mwilck@suse.com" date="1704456000">- Update to version 0.9.4+77+suse.1f7a63b:
  * fix ANA prioritizer enablement logic (bsc#1218326)</changelog>
</package>
<package pkgid="b2e62bbca21bf8d2894108059cae93ea8ce4d35ce32b03af065d4928b9915bc3" name="multipath-tools" arch="x86_64">
  <version epoch="0" ver="0.9.4+77+suse.1f7a63b" rel="150500.3.6.1"/>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1662206400">- Update to version 0.9.0+134+suse.dbf2e2d:
  * Add multipathc command under GPL3.0, and split off libmpathutil
    (bsc#1202616)
  * Fix command completion in interactive mode (bsc#1201483)
  * multipathd: fix use-after-free in handle_path_wwid_change()
    (bsc#1201483)
  * Improve startup time for very large multipath.conf (bsc#1200523)
  * Avoid checker blocking event handling for huge number of devices
    (boo#1203085)
  * Cleanup sysfs accessors in libmultipath
  * Minor upstream bug fixes
  * Spelling fixes
  * Documentation: add ALUA info to README.md, delete README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1662552000">- Update to version 0.9.1+48+suse.9c6c435:
  * Upstream version update
  * kpartx_id: remove bashism
  * Doc: add multipathc.8 manual page</changelog>
  <changelog author="mwilck@suse.com" date="1662724800">- Update to version 0.9.1+52+suse.be8809e:
  * Code-identical to 0.9.1+48+suse.9c6c435 (merge in git repo
    to preserve history; fix revision in _service file).</changelog>
  <changelog author="mwilck@suse.com" date="1666612800">- Update to version 0.9.2+57+suse.cf3c1e9:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * Upstream bug fixes and hwtable updates
- Drop recompress.service, it just slows down build</changelog>
  <changelog author="mwilck@suse.com" date="1666785600">- Update to version 0.9.2+59+suse.ac8942d:
  * Fix segfault in "multipath -t" command (boo#1204731)</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 0.9.4+68+suse.98559ea:
  * libmultipath: bump ABI version to 18.0.0
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * libmultipath: don't leak memory on invalid strings  (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * minor bugfixes
  * hwtable fixes
  * Build system rework
  * spec file: adapt make command line to changes in build system
  * spec file: use make -Orecurse (better readable output)
  * spec file: use verbose build</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.4+71+suse.c648a77:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.4+73+suse.a5414a6:
  * libmultipath: ignore nvme devices if nvme native multipath is enabled
    (bsc#1212854)
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)
    Note: this changes user-visible behavior. multipathd will not
    grab any nvme devices for dm-multipath if nvme native multipathing
    is on (which is the default on SLE and openSUSE).</changelog>
  <changelog author="mwilck@suse.com" date="1704456000">- Update to version 0.9.4+77+suse.1f7a63b:
  * fix ANA prioritizer enablement logic (bsc#1218326)</changelog>
</package>
<package pkgid="f1f1364c29e2dcc1c937e595c481bbfe774d04ee26a5235d91b131a4cbc603ae" name="ncurses" arch="src">
  <version epoch="0" ver="6.1" rel="150000.5.20.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()</changelog>
</package>
<package pkgid="ac6b5c74af595ad9574537bf9faf099b818bfe49b373c70df5c759c77b931709" name="ncurses-utils" arch="aarch64">
  <version epoch="0" ver="6.1" rel="150000.5.20.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()</changelog>
</package>
<package pkgid="0ba032772d126efbe854da109a007d5fd98a439f2ae17b0c59d86dda63b03ed2" name="ncurses-utils" arch="s390x">
  <version epoch="0" ver="6.1" rel="150000.5.20.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()</changelog>
</package>
<package pkgid="eeb9c73ea845c95a76025a8bb6c086d1fbd2bc224543ede9549e4c89a71d17bf" name="ncurses-utils" arch="x86_64">
  <version epoch="0" ver="6.1" rel="150000.5.20.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()</changelog>
</package>
<package pkgid="1b56b7810bf06f0cbb0e01098bcc57ad5877890d43fcc977422eaff2a4435938" name="net-snmp" arch="src">
  <version epoch="0" ver="5.9.4" rel="150300.15.11.1"/>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (&gt;=
  4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being
  removed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Format with spec-cleaner
- Drop sle11 support as it fails to build anyway for ages
- Rename python packages to be python-%{name} with obsoletes
  * Use new singlespec macros
  * Add patch converting the py files to python3/2 compat mode
    net-snmp-python3.patch
- Run full autoreconf instead of partial
- Build with threads by building few targets first</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1529323200">- Create /var/agentx via systemd tmpfiles in case of rollback,
  snapshots and transactional updates [bsc#1098032]</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
  <changelog author="abergmann@suse.com" date="1562328000">- Add Lustre filesystem support (bsc#1140341, jsc#SLE-6120).
  Add net-snmp-5.7.3-add-lustre-fs-support.patch
- Add info about the original agent which triggered the trap.
  When the trap is forwarded there was no info about the original
  agent (bsc#1116807).
  Add net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
- Fix missing sysconfig files creation (bsc#1108471).</changelog>
  <changelog author="abergmann@suse.com" date="1639742400">- Make extended MIB read-only (bsc#1174961, CVE-2020-15862).
  Add net-snmp-5.7.3-make-extended-mib-read-only.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640001600">- Fix output for high memTotalReal RAM values (bsc#1152968).
  Add net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640174400">- Fix hrStorage autofs objects timeout problems (bsc#1179699, bsc#1145864).
  Add net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  Add net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
- Fix NSS mounted volumes in hrStorageDescr (bsc#1100146).
  Add net-snmp-5.7.3-recognize-nss-pools-and-nss-volumes-oes.patch
- Fix subagent crash at save_set_var() (bsc#1178021).
  Add net-snmp-5.7.3-subagent-set-response.patch
- Fix subagent data corruption (bsc#1178351, bsc#1179009).
  Add net-snmp-5.7.3-fix-subagent-data-corruption.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640260800">- Fix LFH violation during v3 user creation (bsc#1181591).
  Add net-snmp-5.7.3-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="abergmann@suse.com" date="1646827200">- Decouple snmp-mibs from net-snmp version to allow major version
  upgrade (bsc#1196955).</changelog>
  <changelog author="abergmann@suse.com" date="1665057600">- update to 5.9.3 (bsc#1201103, jsc#SLE-11203):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805 A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809 A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806 Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807 A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808 A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810 A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Change to use systemd service files directly from net-snmp package.
  add:
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
  remove:
  * snmpd.service
  * snmptrapd.service
  * harden_snmpd.service.patch
  * harden_snmptrapd.service.patch
- Refactor and remove obsolete patches to work with version number 5.9.3:
  add:
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  remove:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-add-lustre-fs-support.patch
  * net-snmp-5.7.3-Fix-Makefile.PL.patch
  * net-snmp-5.7.3-modern-rpm-api.patch
  * net-snmp-5.7.3-net-snmp-config-headercheck.patch
  * net-snmp-5.7.3-perl-tk-warning.patch
  * net-snmp-5.7.3-snmpstatus-suppress-output.patch
  * net-snmp-5.7.3-socket-path.patch
  * net-snmp-5.7.3-subagent-set-response.patch
  * net-snmp-5.7.3-testing-empty-arptable.patch
  * net-snmp-5.7.3-velocity-mib.patch
  * net-snmp-5.7.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-pie.patch
  * net-snmp-4.7.2-systemd.patch
  * net-snmp-5.7.3-build-with-openssl-1.1.patch
  * net-snmp-5.7.3-fix-agentx-freezing-on-timeout.patch
  * net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
  * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch
  * net-snmp-5.7.3-fix-subagent-data-corruption.patch
  * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
  * net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  * net-snmp-5.7.3-make-extended-mib-read-only.patch
  * net-snmp-5.7.3-netgroups.patch
  * net-snmp-5.7.3-Remove-U64-typedef.patch
  * net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
  * net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
  * net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch
  * net-snmp-python3.patch</changelog>
  <changelog author="abergmann@suse.com" date="1672920000">- Fixed NULL pointer exception issue when handling ipDefaultTTL or
  pv6IpForwarding (bsc#1205148, CVE-2022-44793, bsc#1205150, CVE-2022-44792).
  add:
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
- Enable AES-192 and AES-256 privacy protocol (bsc#1206828).</changelog>
  <changelog author="abergmann@suse.com" date="1673265600">- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add:
  * net-snmp-5.9.3-harden_snmpd.service.patch
  * net-snmp-5.9.3-harden_snmptrapd.service.patch
  delete:
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch</changelog>
  <changelog author="abergmann@suse.com" date="1697544000">- Update to net-snmp-5.9.4 (bsc#1214364).
  add (rename):
  * net-snmp-5.9.4-add-lustre-fs-support.patch
  * net-snmp-5.9.4-add-netgroups-functionality.patch
  * net-snmp-5.9.4-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.4-fixed-python2-bindings.patch
  * net-snmp-5.9.4-fix-Makefile.PL.patch
  * net-snmp-5.9.4-modern-rpm-api.patch
  * net-snmp-5.9.4-net-snmp-config-headercheck.patch
  * net-snmp-5.9.4-perl-tk-warning.patch
  * net-snmp-5.9.4-pie.patch
  * net-snmp-5.9.4-snmpstatus-suppress-output.patch
  * net-snmp-5.9.4-socket-path.patch
  * net-snmp-5.9.4-subagent-set-response.patch
  * net-snmp-5.9.4-suse-systemd-service-files.patch
  * net-snmp-5.9.4-testing-empty-arptable.patch
  delete (now part of v5.9.4):
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
  delete (rename):
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Removing legacy MIBs used by Velocity Software (jira#PED-6416).
- Re-add support for hostname netgroups that was removed accidentally and
  previously added with FATE#316305 (bsc#1207697).
  '@hostgroup' can be specified for multiple hosts
- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add (rename):
  * net-snmp-5.9.4-harden_snmpd.service.patch
  * net-snmp-5.9.4-harden_snmptrapd.service.patch
  delete (rename):
  * net-snmp-5.9.3-harden_snmpd.service.patch
  * net-snmp-5.9.3-harden_snmptrapd.service.patch</changelog>
</package>
<package pkgid="cb90987f02fe5cc521bf1bd43f502fd77761d24b8f4d9e275a7d5e33d598e12a" name="netcfg" arch="noarch">
  <version epoch="0" ver="11.6" rel="150000.3.6.1"/>
  <changelog author="tchvatal@suse.com" date="1417435200">- Drop the scriptlet for the netgroup handling. It was caused by
  the aaa_base -&gt; netcfg move, which I guess after 12 years is moot</changelog>
  <changelog author="tchvatal@suse.com" date="1417435201">- Remove the socket check from the defaultdomain checker as it was
  always false and thus not needed
  - Add comment explaining the reason for the code</changelog>
  <changelog author="tchvatal@suse.com" date="1417435202">- Redo the HOSTNAME -&gt; hostname migration to support smallest
  possible step. Thus ensuring the migration is done just once and
  finished:
  [#] HOSTNAME migration supported scenarios [bnc#858908]:
  [#] /etc/HOSTNAME -&gt; /etc/hostname content preservation.
  [#] If hostname and HOSTNAME both exist HOSTNAME wins.
  [#] Nothing apart from content of the document is preserved
- Solves bnc#858908 and bnc#899506 while moves bnc#887039 to
  unsupported scenarios.</changelog>
  <changelog author="tchvatal@suse.com" date="1417435203">- Spec-cleanify the previous commit.</changelog>
  <changelog author="tchvatal@suse.com" date="1418817600">- Keep the condition posix as it is shorter :)</changelog>
  <changelog author="tchvatal@suse.com" date="1418817601">- Try different approach to fix failing migration from 13.1.
  This one is from locilka</changelog>
  <changelog author="tchvatal@suse.com" date="1434024000">- Keep /etc/hostname empty and %ghost it. bnc#934056</changelog>
  <changelog author="tchvatal@suse.com" date="1438689600">- Do not ghost the empty /etc/hostname to not break installationimages
  pkg.</changelog>
  <changelog author="tchvatal@suse.com" date="1440504000">- Do not actually replace the hostname if user already has something
  in there. Thanks to Takashi Iwai for spotting this</changelog>
  <changelog author="tchvatal@suse.com" date="1451995200">- Repack services.bz2 with latest from upstream and adjust the script
  to not add all the names+emails at the bottom bnc#959693</changelog>
  <changelog author="tchvatal@suse.com" date="1488888000">- Update script to generage services to use UTF8 by default bsc#1028305
- Update the services list with latest content</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1519300801">- Include /etc/ethertypes to resolve a conflict between
  security:netfilter/ebtables and security:netfilter/iptables-nft. This
  ethertypes version comes from iptables, because it contains an additional
  entry over the ebtables one. Increased minor version to allow a suitable
  Requires statement in ebtables/iptables. FATE#320520</changelog>
  <changelog author="pgajdos@suse.com" date="1629720000">- add submissions port number [bsc#1189683]
- modified patches
  % services-suse.diff</changelog>
  <changelog author="martin.schreiner@suse.com" date="1704110400">- Add krb-prop entry, fix for bsc#1211886.</changelog>
</package>
<package pkgid="373593fd2d4943cac515bc99e0bcbcccf57e50d0ed9ffa004b3c28131253839a" name="netcfg" arch="src">
  <version epoch="0" ver="11.6" rel="150000.3.6.1"/>
  <changelog author="pgajdos@suse.com" date="1391688000">- added helper scripts and doc for creating services file to
  Sources</changelog>
  <changelog author="pgajdos@suse.com" date="1401883200">- HOSTNAME renamed to hostname [bnc#858908]</changelog>
  <changelog author="pgajdos@suse.com" date="1402488000">- move /etc/HOSTNAME to /etc/hostname during update</changelog>
  <changelog author="pgajdos@suse.com" date="1406289600">- resolve some update scenarios [bnc#883999], [bnc#886443] (private)
  with regard to /etc/HOSTNAME -&gt; /etc/hostname change</changelog>
  <changelog author="pgajdos@suse.com" date="1412251200">- fix %pre scriptlet [bnc#899506] (thanks to mls for the fix)</changelog>
  <changelog author="tchvatal@suse.com" date="1417435200">- Drop the scriptlet for the netgroup handling. It was caused by
  the aaa_base -&gt; netcfg move, which I guess after 12 years is moot</changelog>
  <changelog author="tchvatal@suse.com" date="1417435201">- Remove the socket check from the defaultdomain checker as it was
  always false and thus not needed
  - Add comment explaining the reason for the code</changelog>
  <changelog author="tchvatal@suse.com" date="1417435202">- Redo the HOSTNAME -&gt; hostname migration to support smallest
  possible step. Thus ensuring the migration is done just once and
  finished:
  [#] HOSTNAME migration supported scenarios [bnc#858908]:
  [#] /etc/HOSTNAME -&gt; /etc/hostname content preservation.
  [#] If hostname and HOSTNAME both exist HOSTNAME wins.
  [#] Nothing apart from content of the document is preserved
- Solves bnc#858908 and bnc#899506 while moves bnc#887039 to
  unsupported scenarios.</changelog>
  <changelog author="tchvatal@suse.com" date="1417435203">- Spec-cleanify the previous commit.</changelog>
  <changelog author="tchvatal@suse.com" date="1418817600">- Keep the condition posix as it is shorter :)</changelog>
  <changelog author="tchvatal@suse.com" date="1418817601">- Try different approach to fix failing migration from 13.1.
  This one is from locilka</changelog>
  <changelog author="tchvatal@suse.com" date="1434024000">- Keep /etc/hostname empty and %ghost it. bnc#934056</changelog>
  <changelog author="tchvatal@suse.com" date="1438689600">- Do not ghost the empty /etc/hostname to not break installationimages
  pkg.</changelog>
  <changelog author="tchvatal@suse.com" date="1440504000">- Do not actually replace the hostname if user already has something
  in there. Thanks to Takashi Iwai for spotting this</changelog>
  <changelog author="tchvatal@suse.com" date="1451995200">- Repack services.bz2 with latest from upstream and adjust the script
  to not add all the names+emails at the bottom bnc#959693</changelog>
  <changelog author="tchvatal@suse.com" date="1488888000">- Update script to generage services to use UTF8 by default bsc#1028305
- Update the services list with latest content</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1519300801">- Include /etc/ethertypes to resolve a conflict between
  security:netfilter/ebtables and security:netfilter/iptables-nft. This
  ethertypes version comes from iptables, because it contains an additional
  entry over the ebtables one. Increased minor version to allow a suitable
  Requires statement in ebtables/iptables. FATE#320520</changelog>
  <changelog author="pgajdos@suse.com" date="1629720000">- add submissions port number [bsc#1189683]
- modified patches
  % services-suse.diff</changelog>
  <changelog author="martin.schreiner@suse.com" date="1704110400">- Add krb-prop entry, fix for bsc#1211886.</changelog>
</package>
<package pkgid="4aff597cefc9da2305a4a4b57ac9458b9fe6c84a284c20e3ebf915acd0c731da" name="nfs-client" arch="aarch64">
  <version epoch="0" ver="2.1.1" rel="150500.22.3.1"/>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
  <changelog author="nfbrown@suse.com" date="1680091200">- Add 0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0029-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be set in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="nfbrown@suse.com" date="1686052800">- Add 0030-systemd-use-correct-modprobe-d-directory
  SLE15-SP5 an earlier don't use /usr/lib/modprobe.d
  (bsc#1200710)
- Add 0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
  Avoid unhelpful warning if rpcsec_gss_krb5.ko not installed</changelog>
  <changelog author="nfbrown@suse.com" date="1687867200">- Add 0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Inconsistencies in /etc/exports shouldn't be fatal.
  (bsc#1212594)</changelog>
</package>
<package pkgid="b708a92f85866ac4e3e9be335ec6c4c30524f324ff9fb62dcaac7ef7ace52c67" name="nfs-client" arch="s390x">
  <version epoch="0" ver="2.1.1" rel="150500.22.3.1"/>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
  <changelog author="nfbrown@suse.com" date="1680091200">- Add 0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0029-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be set in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="nfbrown@suse.com" date="1686052800">- Add 0030-systemd-use-correct-modprobe-d-directory
  SLE15-SP5 an earlier don't use /usr/lib/modprobe.d
  (bsc#1200710)
- Add 0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
  Avoid unhelpful warning if rpcsec_gss_krb5.ko not installed</changelog>
  <changelog author="nfbrown@suse.com" date="1687867200">- Add 0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Inconsistencies in /etc/exports shouldn't be fatal.
  (bsc#1212594)</changelog>
</package>
<package pkgid="4bde9e6d6934aa3d28c5d16309bffae675e6ad48f98285d9fac2ebd7c6685ec5" name="nfs-client" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="150500.22.3.1"/>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
  <changelog author="nfbrown@suse.com" date="1680091200">- Add 0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0029-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be set in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="nfbrown@suse.com" date="1686052800">- Add 0030-systemd-use-correct-modprobe-d-directory
  SLE15-SP5 an earlier don't use /usr/lib/modprobe.d
  (bsc#1200710)
- Add 0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
  Avoid unhelpful warning if rpcsec_gss_krb5.ko not installed</changelog>
  <changelog author="nfbrown@suse.com" date="1687867200">- Add 0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Inconsistencies in /etc/exports shouldn't be fatal.
  (bsc#1212594)</changelog>
</package>
<package pkgid="f6ddd3f48b416ef7a9cd78b0c4063a45367d1afb6b5d0ab9397d1ef0b389fd9c" name="nfs-kernel-server" arch="aarch64">
  <version epoch="0" ver="2.1.1" rel="150500.22.3.1"/>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
  <changelog author="nfbrown@suse.com" date="1680091200">- Add 0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0029-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be set in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="nfbrown@suse.com" date="1686052800">- Add 0030-systemd-use-correct-modprobe-d-directory
  SLE15-SP5 an earlier don't use /usr/lib/modprobe.d
  (bsc#1200710)
- Add 0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
  Avoid unhelpful warning if rpcsec_gss_krb5.ko not installed</changelog>
  <changelog author="nfbrown@suse.com" date="1687867200">- Add 0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Inconsistencies in /etc/exports shouldn't be fatal.
  (bsc#1212594)</changelog>
</package>
<package pkgid="92789ee536199f5fc6b6667083fb8e98c6bf8ecabc791e3bfc6bff2bc1fc5382" name="nfs-kernel-server" arch="s390x">
  <version epoch="0" ver="2.1.1" rel="150500.22.3.1"/>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
  <changelog author="nfbrown@suse.com" date="1680091200">- Add 0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0029-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be set in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="nfbrown@suse.com" date="1686052800">- Add 0030-systemd-use-correct-modprobe-d-directory
  SLE15-SP5 an earlier don't use /usr/lib/modprobe.d
  (bsc#1200710)
- Add 0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
  Avoid unhelpful warning if rpcsec_gss_krb5.ko not installed</changelog>
  <changelog author="nfbrown@suse.com" date="1687867200">- Add 0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Inconsistencies in /etc/exports shouldn't be fatal.
  (bsc#1212594)</changelog>
</package>
<package pkgid="961612894aac14ca813daa362af927139fb7d64bfd030b3222643c26eee488cb" name="nfs-kernel-server" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="150500.22.3.1"/>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
  <changelog author="nfbrown@suse.com" date="1680091200">- Add 0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0029-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be set in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="nfbrown@suse.com" date="1686052800">- Add 0030-systemd-use-correct-modprobe-d-directory
  SLE15-SP5 an earlier don't use /usr/lib/modprobe.d
  (bsc#1200710)
- Add 0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
  Avoid unhelpful warning if rpcsec_gss_krb5.ko not installed</changelog>
  <changelog author="nfbrown@suse.com" date="1687867200">- Add 0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Inconsistencies in /etc/exports shouldn't be fatal.
  (bsc#1212594)</changelog>
</package>
<package pkgid="5c6d59c5bc22a115a911b2ac8c357fe59d0021215f482c2a6c1cf3dffe7aae8f" name="nfs-utils" arch="src">
  <version epoch="0" ver="2.1.1" rel="150500.22.3.1"/>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
  <changelog author="nfbrown@suse.com" date="1680091200">- Add 0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0029-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be set in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="nfbrown@suse.com" date="1686052800">- Add 0030-systemd-use-correct-modprobe-d-directory
  SLE15-SP5 an earlier don't use /usr/lib/modprobe.d
  (bsc#1200710)
- Add 0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
  Avoid unhelpful warning if rpcsec_gss_krb5.ko not installed</changelog>
  <changelog author="nfbrown@suse.com" date="1687867200">- Add 0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Inconsistencies in /etc/exports shouldn't be fatal.
  (bsc#1212594)</changelog>
</package>
<package pkgid="9a698f8dcc67d8b37293a5bfa9420cd3c27d50af72a108e51187cfb6819fa746" name="nghttp2" arch="src">
  <version epoch="0" ver="1.40.0" rel="150200.12.1"/>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513
  “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1697716800">- security update
- added patches
  fix CVE-2023-44487 [bsc#1216123], HTTP/2 Rapid Reset Attack
  + nghttp2-CVE-2023-44487.patch</changelog>
</package>
<package pkgid="fc44b45cd1919a729d4eb44ecb31d35175e57fdf0525e12669acfe067950da11" name="nghttp2" arch="src">
  <version epoch="0" ver="1.40.0" rel="150200.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513
  “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
</package>
<package pkgid="4426943c4e7723d495369e8b5c8250aaa349bba3be17903290a090e6ef74015e" name="nvidia-open-driver-G06-signed" arch="src">
  <version epoch="0" ver="535.129.03" rel="150500.3.13.1"/>
  <changelog author="sndirsch@suse.com" date="1675080000">- no longer use %hardcode_pci_list macro on TW, since the issue
  with generating wrong PCI ID modaliases for Supplements
  has been fixed now in pesign-obs-integration package for TW
  (boo#1207520)</changelog>
  <changelog author="sndirsch@suse.com" date="1675857600">- Update to version 525.89.02</changelog>
  <changelog author="sndirsch@suse.com" date="1676030400">- no longer use %hardcode_pci_list macro on sle15/Leap15, since the
  issue with generating wrong PCI ID modaliases for Supplements
  has been fixed meanwhile also in pesign-obs-integration package
  for sle15/Leap15 (boo#1207520)</changelog>
  <changelog author="sndirsch@suse.com" date="1680177600">- Update to version 525.105.17</changelog>
  <changelog author="sndirsch@suse.com" date="1682424000">-  Update to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- Update to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- Update to version 535.54.03</changelog>
  <changelog author="sndirsch@suse.com" date="1686916800">- _constraints: reserve 4GB of disk space for building in the hope
  that this will be also sufficient when building for sle15-sp5</changelog>
  <changelog author="sndirsch@suse.com" date="1686916801">- _constraints: 4GB wasn't enough; trying 8GB now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- Update to version 535.86.05</changelog>
  <changelog author="lnussel@suse.com" date="1690200000">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- require one-time renamed package kernel-firmware-nvidia-gspx-G06
  from now on (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- Update to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1693915200">- kmp-post.sh/kmp-postun.sh:
  * add/remove nosimplefb=1 kernel option in order to fix Linux
    console also on sle15-sp6/Leap 15.6 kernel, which will come
    with simpledrm support</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- Update to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1696248000">- preamble: added conflict to nvidia-gfxG05-kmp to prevent users
  from accidently installing conflicting proprietary kernelspace
  drivers from CUDA repository</changelog>
  <changelog author="sndirsch@suse.com" date="1697025600">- disabled build of nvidia-peermem module; it's no longer needed
  and never worked anyway (it was only a stub) [boo#1211892]</changelog>
  <changelog author="eich@suse.com" date="1697025601">- Add a devel package so other modules can be built against this
  one. [jira#PED-4964]</changelog>
  <changelog author="sndirsch@suse.com" date="1697544000">- cleanup: get rid of possibiliy to hardcode pci list; it's no
  longer required anyway; secureboot signing has been fixed ...
- removed pci-table.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- Update to version 535.129.03</changelog>
</package>
<package pkgid="991939d171d07e353ed22dd17bbf02ed51e1da78d0c385b12372071e75300417" name="nvidia-open-driver-G06-signed" arch="src">
  <version epoch="0" ver="545.29.02" rel="150500.3.18.1"/>
  <changelog author="sndirsch@suse.com" date="1682424000">-  Update to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- Update to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- Update to version 535.54.03</changelog>
  <changelog author="sndirsch@suse.com" date="1686916800">- _constraints: reserve 4GB of disk space for building in the hope
  that this will be also sufficient when building for sle15-sp5</changelog>
  <changelog author="sndirsch@suse.com" date="1686916801">- _constraints: 4GB wasn't enough; trying 8GB now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- Update to version 535.86.05</changelog>
  <changelog author="lnussel@suse.com" date="1690200000">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- require one-time renamed package kernel-firmware-nvidia-gspx-G06
  from now on (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- Update to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1693915200">- kmp-post.sh/kmp-postun.sh:
  * add/remove nosimplefb=1 kernel option in order to fix Linux
    console also on sle15-sp6/Leap 15.6 kernel, which will come
    with simpledrm support</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- Update to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1696248000">- preamble: added conflict to nvidia-gfxG05-kmp to prevent users
  from accidently installing conflicting proprietary kernelspace
  drivers from CUDA repository</changelog>
  <changelog author="sndirsch@suse.com" date="1697025600">- disabled build of nvidia-peermem module; it's no longer needed
  and never worked anyway (it was only a stub) [boo#1211892]</changelog>
  <changelog author="eich@suse.com" date="1697025601">- Add a devel package so other modules can be built against this
  one. [jira#PED-4964]</changelog>
  <changelog author="sndirsch@suse.com" date="1697544000">- cleanup: get rid of possibiliy to hardcode pci list; it's no
  longer required anyway; secureboot signing has been fixed ...
- removed pci-table.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- Update to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699012800">- cleanup; sle12 no longer supported</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- Update to 545.29.02
- added fbdev=1 option for nvidia-drm module, which gives us a proper
  framebuffer console now ...
- nosimplefb kernel option no longer needed with usage of nvidia-drm's
  fbdev=1 option
- nvidia's NVreg_OpenRmEnableUnsupportedGpus=1 option no longer
  needed; GeForce and Workstation GPUs now officially supported
- support added for H100/H800 GPUs (Hopper)</changelog>
  <changelog author="sndirsch@suse.com" date="1700568000">- use different modprobe.d config file to resolve conflict with
  older driver package (boo#1217370); overwrite
  NVreg_OpenRMEnableSupporteGpus driver option setting (disable it),
  since letting it enabled is supposed to break booting (boo#1215981,
  comment#23)</changelog>
  <changelog author="sndirsch@suse.com" date="1700654400">- no longer try to overwrite NVreg_OpenRMEnableSupporteGpus driver
  option setting; apparently it's ignored by the driver (boo#1215981,
  comment#26)</changelog>
</package>
<package pkgid="f060d0f2c30be49e9e6fb88ffd38e185873152513fe0121f3447084635f86918" name="nvidia-open-driver-G06-signed" arch="src">
  <version epoch="0" ver="545.29.06" rel="150500.3.21.5"/>
  <changelog author="sndirsch@suse.com" date="1686830400">- Update to version 535.54.03</changelog>
  <changelog author="sndirsch@suse.com" date="1686916800">- _constraints: reserve 4GB of disk space for building in the hope
  that this will be also sufficient when building for sle15-sp5</changelog>
  <changelog author="sndirsch@suse.com" date="1686916801">- _constraints: 4GB wasn't enough; trying 8GB now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- Update to version 535.86.05</changelog>
  <changelog author="lnussel@suse.com" date="1690200000">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- require one-time renamed package kernel-firmware-nvidia-gspx-G06
  from now on (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- Update to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1693915200">- kmp-post.sh/kmp-postun.sh:
  * add/remove nosimplefb=1 kernel option in order to fix Linux
    console also on sle15-sp6/Leap 15.6 kernel, which will come
    with simpledrm support</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- Update to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1696248000">- preamble: added conflict to nvidia-gfxG05-kmp to prevent users
  from accidently installing conflicting proprietary kernelspace
  drivers from CUDA repository</changelog>
  <changelog author="sndirsch@suse.com" date="1697025600">- disabled build of nvidia-peermem module; it's no longer needed
  and never worked anyway (it was only a stub) [boo#1211892]</changelog>
  <changelog author="eich@suse.com" date="1697025601">- Add a devel package so other modules can be built against this
  one. [jira#PED-4964]</changelog>
  <changelog author="sndirsch@suse.com" date="1697544000">- cleanup: get rid of possibiliy to hardcode pci list; it's no
  longer required anyway; secureboot signing has been fixed ...
- removed pci-table.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- Update to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699012800">- cleanup; sle12 no longer supported</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- Update to 545.29.02
- added fbdev=1 option for nvidia-drm module, which gives us a proper
  framebuffer console now ...
- nosimplefb kernel option no longer needed with usage of nvidia-drm's
  fbdev=1 option
- nvidia's NVreg_OpenRmEnableUnsupportedGpus=1 option no longer
  needed; GeForce and Workstation GPUs now officially supported
- support added for H100/H800 GPUs (Hopper)</changelog>
  <changelog author="sndirsch@suse.com" date="1700568000">- use different modprobe.d config file to resolve conflict with
  older driver package (boo#1217370); overwrite
  NVreg_OpenRmEnableUnsupportedGpus driver option setting (disable it),
  since letting it enabled is supposed to break booting (boo#1215981,
  comment#23)</changelog>
  <changelog author="sndirsch@suse.com" date="1700654400">- no longer try to overwrite NVreg_OpenRmEnableUnsupportedGpus driver
  option setting; apparently it's ignored by the driver (boo#1215981,
  comment#26)</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- Update to 545.29.06</changelog>
  <changelog author="sndirsch@suse.com" date="1701777600">- fix typo in changelog:
  * NVreg_OpenRMEnableSupporteGpus -&gt; NVreg_OpenRmEnableUnsupportedGpus
    (boo#1215981, comment#33)</changelog>
</package>
<package pkgid="f4f3a029ad4ceba5eb295824cff3a55eb25dfa6da65c5e5000128f4d1665dcaa" name="nvidia-open-driver-G06-signed-kmp-default" arch="aarch64">
  <version epoch="0" ver="535.129.03_k5.14.21_150500.55.31" rel="150500.3.13.1"/>
  <changelog author="sndirsch@suse.com" date="1675080000">- no longer use %hardcode_pci_list macro on TW, since the issue
  with generating wrong PCI ID modaliases for Supplements
  has been fixed now in pesign-obs-integration package for TW
  (boo#1207520)</changelog>
  <changelog author="sndirsch@suse.com" date="1675857600">- Update to version 525.89.02</changelog>
  <changelog author="sndirsch@suse.com" date="1676030400">- no longer use %hardcode_pci_list macro on sle15/Leap15, since the
  issue with generating wrong PCI ID modaliases for Supplements
  has been fixed meanwhile also in pesign-obs-integration package
  for sle15/Leap15 (boo#1207520)</changelog>
  <changelog author="sndirsch@suse.com" date="1680177600">- Update to version 525.105.17</changelog>
  <changelog author="sndirsch@suse.com" date="1682424000">-  Update to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- Update to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- Update to version 535.54.03</changelog>
  <changelog author="sndirsch@suse.com" date="1686916800">- _constraints: reserve 4GB of disk space for building in the hope
  that this will be also sufficient when building for sle15-sp5</changelog>
  <changelog author="sndirsch@suse.com" date="1686916801">- _constraints: 4GB wasn't enough; trying 8GB now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- Update to version 535.86.05</changelog>
  <changelog author="lnussel@suse.com" date="1690200000">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- require one-time renamed package kernel-firmware-nvidia-gspx-G06
  from now on (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- Update to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1693915200">- kmp-post.sh/kmp-postun.sh:
  * add/remove nosimplefb=1 kernel option in order to fix Linux
    console also on sle15-sp6/Leap 15.6 kernel, which will come
    with simpledrm support</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- Update to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1696248000">- preamble: added conflict to nvidia-gfxG05-kmp to prevent users
  from accidently installing conflicting proprietary kernelspace
  drivers from CUDA repository</changelog>
  <changelog author="sndirsch@suse.com" date="1697025600">- disabled build of nvidia-peermem module; it's no longer needed
  and never worked anyway (it was only a stub) [boo#1211892]</changelog>
  <changelog author="eich@suse.com" date="1697025601">- Add a devel package so other modules can be built against this
  one. [jira#PED-4964]</changelog>
  <changelog author="sndirsch@suse.com" date="1697544000">- cleanup: get rid of possibiliy to hardcode pci list; it's no
  longer required anyway; secureboot signing has been fixed ...
- removed pci-table.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- Update to version 535.129.03</changelog>
</package>
<package pkgid="aaab2a83472a74258611b862b9d4b8db9804fe3947de8de280b1485afd565110" name="nvidia-open-driver-G06-signed-kmp-default" arch="x86_64">
  <version epoch="0" ver="535.129.03_k5.14.21_150500.55.31" rel="150500.3.13.1"/>
  <changelog author="sndirsch@suse.com" date="1675080000">- no longer use %hardcode_pci_list macro on TW, since the issue
  with generating wrong PCI ID modaliases for Supplements
  has been fixed now in pesign-obs-integration package for TW
  (boo#1207520)</changelog>
  <changelog author="sndirsch@suse.com" date="1675857600">- Update to version 525.89.02</changelog>
  <changelog author="sndirsch@suse.com" date="1676030400">- no longer use %hardcode_pci_list macro on sle15/Leap15, since the
  issue with generating wrong PCI ID modaliases for Supplements
  has been fixed meanwhile also in pesign-obs-integration package
  for sle15/Leap15 (boo#1207520)</changelog>
  <changelog author="sndirsch@suse.com" date="1680177600">- Update to version 525.105.17</changelog>
  <changelog author="sndirsch@suse.com" date="1682424000">-  Update to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- Update to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- Update to version 535.54.03</changelog>
  <changelog author="sndirsch@suse.com" date="1686916800">- _constraints: reserve 4GB of disk space for building in the hope
  that this will be also sufficient when building for sle15-sp5</changelog>
  <changelog author="sndirsch@suse.com" date="1686916801">- _constraints: 4GB wasn't enough; trying 8GB now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- Update to version 535.86.05</changelog>
  <changelog author="lnussel@suse.com" date="1690200000">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- require one-time renamed package kernel-firmware-nvidia-gspx-G06
  from now on (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- Update to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1693915200">- kmp-post.sh/kmp-postun.sh:
  * add/remove nosimplefb=1 kernel option in order to fix Linux
    console also on sle15-sp6/Leap 15.6 kernel, which will come
    with simpledrm support</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- Update to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1696248000">- preamble: added conflict to nvidia-gfxG05-kmp to prevent users
  from accidently installing conflicting proprietary kernelspace
  drivers from CUDA repository</changelog>
  <changelog author="sndirsch@suse.com" date="1697025600">- disabled build of nvidia-peermem module; it's no longer needed
  and never worked anyway (it was only a stub) [boo#1211892]</changelog>
  <changelog author="eich@suse.com" date="1697025601">- Add a devel package so other modules can be built against this
  one. [jira#PED-4964]</changelog>
  <changelog author="sndirsch@suse.com" date="1697544000">- cleanup: get rid of possibiliy to hardcode pci list; it's no
  longer required anyway; secureboot signing has been fixed ...
- removed pci-table.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- Update to version 535.129.03</changelog>
</package>
<package pkgid="93efb3a94bb57aca741bf8db499730dce60a304785cb8c97d549a2552ddc105b" name="nvidia-open-driver-G06-signed-kmp-default" arch="aarch64">
  <version epoch="0" ver="545.29.02_k5.14.21_150500.55.36" rel="150500.3.18.1"/>
  <changelog author="sndirsch@suse.com" date="1682424000">-  Update to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- Update to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- Update to version 535.54.03</changelog>
  <changelog author="sndirsch@suse.com" date="1686916800">- _constraints: reserve 4GB of disk space for building in the hope
  that this will be also sufficient when building for sle15-sp5</changelog>
  <changelog author="sndirsch@suse.com" date="1686916801">- _constraints: 4GB wasn't enough; trying 8GB now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- Update to version 535.86.05</changelog>
  <changelog author="lnussel@suse.com" date="1690200000">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- require one-time renamed package kernel-firmware-nvidia-gspx-G06
  from now on (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- Update to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1693915200">- kmp-post.sh/kmp-postun.sh:
  * add/remove nosimplefb=1 kernel option in order to fix Linux
    console also on sle15-sp6/Leap 15.6 kernel, which will come
    with simpledrm support</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- Update to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1696248000">- preamble: added conflict to nvidia-gfxG05-kmp to prevent users
  from accidently installing conflicting proprietary kernelspace
  drivers from CUDA repository</changelog>
  <changelog author="sndirsch@suse.com" date="1697025600">- disabled build of nvidia-peermem module; it's no longer needed
  and never worked anyway (it was only a stub) [boo#1211892]</changelog>
  <changelog author="eich@suse.com" date="1697025601">- Add a devel package so other modules can be built against this
  one. [jira#PED-4964]</changelog>
  <changelog author="sndirsch@suse.com" date="1697544000">- cleanup: get rid of possibiliy to hardcode pci list; it's no
  longer required anyway; secureboot signing has been fixed ...
- removed pci-table.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- Update to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699012800">- cleanup; sle12 no longer supported</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- Update to 545.29.02
- added fbdev=1 option for nvidia-drm module, which gives us a proper
  framebuffer console now ...
- nosimplefb kernel option no longer needed with usage of nvidia-drm's
  fbdev=1 option
- nvidia's NVreg_OpenRmEnableUnsupportedGpus=1 option no longer
  needed; GeForce and Workstation GPUs now officially supported
- support added for H100/H800 GPUs (Hopper)</changelog>
  <changelog author="sndirsch@suse.com" date="1700568000">- use different modprobe.d config file to resolve conflict with
  older driver package (boo#1217370); overwrite
  NVreg_OpenRMEnableSupporteGpus driver option setting (disable it),
  since letting it enabled is supposed to break booting (boo#1215981,
  comment#23)</changelog>
  <changelog author="sndirsch@suse.com" date="1700654400">- no longer try to overwrite NVreg_OpenRMEnableSupporteGpus driver
  option setting; apparently it's ignored by the driver (boo#1215981,
  comment#26)</changelog>
</package>
<package pkgid="7add42f98d9865c7bb023d6be024a441fddada9b7159604f37228bdef9cfe58c" name="nvidia-open-driver-G06-signed-kmp-default" arch="x86_64">
  <version epoch="0" ver="545.29.02_k5.14.21_150500.55.36" rel="150500.3.18.1"/>
  <changelog author="sndirsch@suse.com" date="1682424000">-  Update to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- Update to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- Update to version 535.54.03</changelog>
  <changelog author="sndirsch@suse.com" date="1686916800">- _constraints: reserve 4GB of disk space for building in the hope
  that this will be also sufficient when building for sle15-sp5</changelog>
  <changelog author="sndirsch@suse.com" date="1686916801">- _constraints: 4GB wasn't enough; trying 8GB now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- Update to version 535.86.05</changelog>
  <changelog author="lnussel@suse.com" date="1690200000">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- require one-time renamed package kernel-firmware-nvidia-gspx-G06
  from now on (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- Update to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1693915200">- kmp-post.sh/kmp-postun.sh:
  * add/remove nosimplefb=1 kernel option in order to fix Linux
    console also on sle15-sp6/Leap 15.6 kernel, which will come
    with simpledrm support</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- Update to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1696248000">- preamble: added conflict to nvidia-gfxG05-kmp to prevent users
  from accidently installing conflicting proprietary kernelspace
  drivers from CUDA repository</changelog>
  <changelog author="sndirsch@suse.com" date="1697025600">- disabled build of nvidia-peermem module; it's no longer needed
  and never worked anyway (it was only a stub) [boo#1211892]</changelog>
  <changelog author="eich@suse.com" date="1697025601">- Add a devel package so other modules can be built against this
  one. [jira#PED-4964]</changelog>
  <changelog author="sndirsch@suse.com" date="1697544000">- cleanup: get rid of possibiliy to hardcode pci list; it's no
  longer required anyway; secureboot signing has been fixed ...
- removed pci-table.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- Update to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699012800">- cleanup; sle12 no longer supported</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- Update to 545.29.02
- added fbdev=1 option for nvidia-drm module, which gives us a proper
  framebuffer console now ...
- nosimplefb kernel option no longer needed with usage of nvidia-drm's
  fbdev=1 option
- nvidia's NVreg_OpenRmEnableUnsupportedGpus=1 option no longer
  needed; GeForce and Workstation GPUs now officially supported
- support added for H100/H800 GPUs (Hopper)</changelog>
  <changelog author="sndirsch@suse.com" date="1700568000">- use different modprobe.d config file to resolve conflict with
  older driver package (boo#1217370); overwrite
  NVreg_OpenRMEnableSupporteGpus driver option setting (disable it),
  since letting it enabled is supposed to break booting (boo#1215981,
  comment#23)</changelog>
  <changelog author="sndirsch@suse.com" date="1700654400">- no longer try to overwrite NVreg_OpenRMEnableSupporteGpus driver
  option setting; apparently it's ignored by the driver (boo#1215981,
  comment#26)</changelog>
</package>
<package pkgid="523a84388592b78360549d7e727c5e58aa9194c6f26333f9fe502814b1885bf5" name="nvidia-open-driver-G06-signed-kmp-default" arch="aarch64">
  <version epoch="0" ver="545.29.06_k5.14.21_150500.55.39" rel="150500.3.21.5"/>
  <changelog author="sndirsch@suse.com" date="1686830400">- Update to version 535.54.03</changelog>
  <changelog author="sndirsch@suse.com" date="1686916800">- _constraints: reserve 4GB of disk space for building in the hope
  that this will be also sufficient when building for sle15-sp5</changelog>
  <changelog author="sndirsch@suse.com" date="1686916801">- _constraints: 4GB wasn't enough; trying 8GB now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- Update to version 535.86.05</changelog>
  <changelog author="lnussel@suse.com" date="1690200000">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- require one-time renamed package kernel-firmware-nvidia-gspx-G06
  from now on (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- Update to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1693915200">- kmp-post.sh/kmp-postun.sh:
  * add/remove nosimplefb=1 kernel option in order to fix Linux
    console also on sle15-sp6/Leap 15.6 kernel, which will come
    with simpledrm support</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- Update to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1696248000">- preamble: added conflict to nvidia-gfxG05-kmp to prevent users
  from accidently installing conflicting proprietary kernelspace
  drivers from CUDA repository</changelog>
  <changelog author="sndirsch@suse.com" date="1697025600">- disabled build of nvidia-peermem module; it's no longer needed
  and never worked anyway (it was only a stub) [boo#1211892]</changelog>
  <changelog author="eich@suse.com" date="1697025601">- Add a devel package so other modules can be built against this
  one. [jira#PED-4964]</changelog>
  <changelog author="sndirsch@suse.com" date="1697544000">- cleanup: get rid of possibiliy to hardcode pci list; it's no
  longer required anyway; secureboot signing has been fixed ...
- removed pci-table.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- Update to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699012800">- cleanup; sle12 no longer supported</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- Update to 545.29.02
- added fbdev=1 option for nvidia-drm module, which gives us a proper
  framebuffer console now ...
- nosimplefb kernel option no longer needed with usage of nvidia-drm's
  fbdev=1 option
- nvidia's NVreg_OpenRmEnableUnsupportedGpus=1 option no longer
  needed; GeForce and Workstation GPUs now officially supported
- support added for H100/H800 GPUs (Hopper)</changelog>
  <changelog author="sndirsch@suse.com" date="1700568000">- use different modprobe.d config file to resolve conflict with
  older driver package (boo#1217370); overwrite
  NVreg_OpenRmEnableUnsupportedGpus driver option setting (disable it),
  since letting it enabled is supposed to break booting (boo#1215981,
  comment#23)</changelog>
  <changelog author="sndirsch@suse.com" date="1700654400">- no longer try to overwrite NVreg_OpenRmEnableUnsupportedGpus driver
  option setting; apparently it's ignored by the driver (boo#1215981,
  comment#26)</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- Update to 545.29.06</changelog>
  <changelog author="sndirsch@suse.com" date="1701777600">- fix typo in changelog:
  * NVreg_OpenRMEnableSupporteGpus -&gt; NVreg_OpenRmEnableUnsupportedGpus
    (boo#1215981, comment#33)</changelog>
</package>
<package pkgid="3ac59cf7a64ad075122794a6f148ccfbf9545dd678a12fe4cbf3b15ff0fd75f1" name="nvidia-open-driver-G06-signed-kmp-default" arch="x86_64">
  <version epoch="0" ver="545.29.06_k5.14.21_150500.55.39" rel="150500.3.21.5"/>
  <changelog author="sndirsch@suse.com" date="1686830400">- Update to version 535.54.03</changelog>
  <changelog author="sndirsch@suse.com" date="1686916800">- _constraints: reserve 4GB of disk space for building in the hope
  that this will be also sufficient when building for sle15-sp5</changelog>
  <changelog author="sndirsch@suse.com" date="1686916801">- _constraints: 4GB wasn't enough; trying 8GB now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- Update to version 535.86.05</changelog>
  <changelog author="lnussel@suse.com" date="1690200000">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- require one-time renamed package kernel-firmware-nvidia-gspx-G06
  from now on (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- Update to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1693915200">- kmp-post.sh/kmp-postun.sh:
  * add/remove nosimplefb=1 kernel option in order to fix Linux
    console also on sle15-sp6/Leap 15.6 kernel, which will come
    with simpledrm support</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- Update to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1696248000">- preamble: added conflict to nvidia-gfxG05-kmp to prevent users
  from accidently installing conflicting proprietary kernelspace
  drivers from CUDA repository</changelog>
  <changelog author="sndirsch@suse.com" date="1697025600">- disabled build of nvidia-peermem module; it's no longer needed
  and never worked anyway (it was only a stub) [boo#1211892]</changelog>
  <changelog author="eich@suse.com" date="1697025601">- Add a devel package so other modules can be built against this
  one. [jira#PED-4964]</changelog>
  <changelog author="sndirsch@suse.com" date="1697544000">- cleanup: get rid of possibiliy to hardcode pci list; it's no
  longer required anyway; secureboot signing has been fixed ...
- removed pci-table.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- Update to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699012800">- cleanup; sle12 no longer supported</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- Update to 545.29.02
- added fbdev=1 option for nvidia-drm module, which gives us a proper
  framebuffer console now ...
- nosimplefb kernel option no longer needed with usage of nvidia-drm's
  fbdev=1 option
- nvidia's NVreg_OpenRmEnableUnsupportedGpus=1 option no longer
  needed; GeForce and Workstation GPUs now officially supported
- support added for H100/H800 GPUs (Hopper)</changelog>
  <changelog author="sndirsch@suse.com" date="1700568000">- use different modprobe.d config file to resolve conflict with
  older driver package (boo#1217370); overwrite
  NVreg_OpenRmEnableUnsupportedGpus driver option setting (disable it),
  since letting it enabled is supposed to break booting (boo#1215981,
  comment#23)</changelog>
  <changelog author="sndirsch@suse.com" date="1700654400">- no longer try to overwrite NVreg_OpenRmEnableUnsupportedGpus driver
  option setting; apparently it's ignored by the driver (boo#1215981,
  comment#26)</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- Update to 545.29.06</changelog>
  <changelog author="sndirsch@suse.com" date="1701777600">- fix typo in changelog:
  * NVreg_OpenRMEnableSupporteGpus -&gt; NVreg_OpenRmEnableUnsupportedGpus
    (boo#1215981, comment#33)</changelog>
</package>
<package pkgid="3e56afb4d345d0a6c07e35329500effb8bd155af029257044a99e334677f44f9" name="nvme-cli" arch="aarch64">
  <version epoch="0" ver="2.4+25.g367eb9" rel="150500.4.9.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.
- Fix version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1 (jsc#ped-553):
  * Added parsing for Solidigm telemetry observable data.
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * add item ddr_ecc_err_cnt in smart-log-add
  * build and install fixes/improvements
  * build: Add minimum build requirement on libnvme
  * build: Drop dependency on libuuid
  * build: Extend release script to support micro version releases
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * build: Update release version rules
  * build: Update version before regenerating docs
  * completions: Add show-topology tab completion
  * documentation fixes
  * fabrics: Avoid nvme_scan_ctrl when disconnecting
  * fabrics: Honor JSON config file in connect-all command
  * fabrics: Remove dhchap-ctrl-secret from discover/connect-all
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * meson: we don't need a c++ compiler
  * new solidigm plugin
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme-print: sanitize the get-feature async event config output
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Do not print error message in collect_effects_log helper
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Set default rae value for nvme_get_nsid_log users
  * nvme: Simplify ns list identify
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: drop unused fd argument
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/solidigm: fix return value on format parse failure
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/wdc: prevent duplicate close on NVMe device
  * plugins/wdc: remove fd argument from print functions
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * print: Fix nvme_id_uuid_list
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * various fixes reported by coverity
  * version reporting includes library version
  * wdc:  OCP Log page updates and fixes
  * wrapper: Add weak nvme_init_copy_range_f1 symbol
  * wrapper: Call library version of nvme_init_copy_range_f1
  * wrapper: Update SPDIX license
  * zns.c: report zones should be started after retrieved zone
- Drop upsreamp patches
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 2.2.1+3.gd028407:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Add %check section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- spec file: fix "check" section (bsc#1207686)
- add "Provides: nvmeof-boot-support = 0.1"</changelog>
  <changelog author="daniel.wagner@suse.com" date="1684929600">- Update to version v2.4 (jsc#PED-553 jsc#PED-3884)
  - Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
  - Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
  - Build documentation to be up to date
  - Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
  - Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
  - Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
  - Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services
  - Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
  - remove 0100-harden_nvmf-connect@.service.patch
- Added compat commands for nbft back
- Changed default behavior of connect-all to match with old nbft
  behavior
- Replaced old nbft implementation with upstream one
- Rebuild documentation on package update
- Set version-tag so that version are correctly reported
- Fix connect nbft regressions (bsc#1209905)
  * fabrics: fix argc in show_nbft_compat_cmd()
- Fix auto connect conditions (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Fix auto boot for NBFT connections (bsc#1211647)
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 2.4+24.ga1ee20:
  * nvme-print-stdout: Do not show non reachable ns in namespace topology (bsc#1212598)
  * nvme-print-stdout: List only ctrls which are part of ns bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts bsc#1212598)
  * ccan: Add htable, strset and dependencies bsc#1212598)
  * ccan: Remove unused documentation bsc#1212598)
  * nvme-print: fix counter while looping through uuid_list (bsc#bsc#1212598)
  * nvme-print: Show subsystem iopolicy (bsc#1124564)</changelog>
  <changelog author="dwagner@suse.de" date="1693915200">- Update to version 2.4+25.g367eb9:
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)</changelog>
</package>
<package pkgid="a8ec7bfe1eb51e2b1ae97558ee9863fbad1e0030b96b104ba254b0b4104434f2" name="nvme-cli" arch="s390x">
  <version epoch="0" ver="2.4+25.g367eb9" rel="150500.4.9.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.
- Fix version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1 (jsc#ped-553):
  * Added parsing for Solidigm telemetry observable data.
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * add item ddr_ecc_err_cnt in smart-log-add
  * build and install fixes/improvements
  * build: Add minimum build requirement on libnvme
  * build: Drop dependency on libuuid
  * build: Extend release script to support micro version releases
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * build: Update release version rules
  * build: Update version before regenerating docs
  * completions: Add show-topology tab completion
  * documentation fixes
  * fabrics: Avoid nvme_scan_ctrl when disconnecting
  * fabrics: Honor JSON config file in connect-all command
  * fabrics: Remove dhchap-ctrl-secret from discover/connect-all
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * meson: we don't need a c++ compiler
  * new solidigm plugin
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme-print: sanitize the get-feature async event config output
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Do not print error message in collect_effects_log helper
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Set default rae value for nvme_get_nsid_log users
  * nvme: Simplify ns list identify
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: drop unused fd argument
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/solidigm: fix return value on format parse failure
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/wdc: prevent duplicate close on NVMe device
  * plugins/wdc: remove fd argument from print functions
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * print: Fix nvme_id_uuid_list
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * various fixes reported by coverity
  * version reporting includes library version
  * wdc:  OCP Log page updates and fixes
  * wrapper: Add weak nvme_init_copy_range_f1 symbol
  * wrapper: Call library version of nvme_init_copy_range_f1
  * wrapper: Update SPDIX license
  * zns.c: report zones should be started after retrieved zone
- Drop upsreamp patches
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 2.2.1+3.gd028407:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Add %check section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- spec file: fix "check" section (bsc#1207686)
- add "Provides: nvmeof-boot-support = 0.1"</changelog>
  <changelog author="daniel.wagner@suse.com" date="1684929600">- Update to version v2.4 (jsc#PED-553 jsc#PED-3884)
  - Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
  - Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
  - Build documentation to be up to date
  - Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
  - Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
  - Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
  - Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services
  - Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
  - remove 0100-harden_nvmf-connect@.service.patch
- Added compat commands for nbft back
- Changed default behavior of connect-all to match with old nbft
  behavior
- Replaced old nbft implementation with upstream one
- Rebuild documentation on package update
- Set version-tag so that version are correctly reported
- Fix connect nbft regressions (bsc#1209905)
  * fabrics: fix argc in show_nbft_compat_cmd()
- Fix auto connect conditions (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Fix auto boot for NBFT connections (bsc#1211647)
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 2.4+24.ga1ee20:
  * nvme-print-stdout: Do not show non reachable ns in namespace topology (bsc#1212598)
  * nvme-print-stdout: List only ctrls which are part of ns bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts bsc#1212598)
  * ccan: Add htable, strset and dependencies bsc#1212598)
  * ccan: Remove unused documentation bsc#1212598)
  * nvme-print: fix counter while looping through uuid_list (bsc#bsc#1212598)
  * nvme-print: Show subsystem iopolicy (bsc#1124564)</changelog>
  <changelog author="dwagner@suse.de" date="1693915200">- Update to version 2.4+25.g367eb9:
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)</changelog>
</package>
<package pkgid="2ae828163a748d48a77c98dbcb2663b19ea0cea430b9d3a4ec66c96d868ae075" name="nvme-cli" arch="src">
  <version epoch="0" ver="2.4+25.g367eb9" rel="150500.4.9.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.
- Fix version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1 (jsc#ped-553):
  * Added parsing for Solidigm telemetry observable data.
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * add item ddr_ecc_err_cnt in smart-log-add
  * build and install fixes/improvements
  * build: Add minimum build requirement on libnvme
  * build: Drop dependency on libuuid
  * build: Extend release script to support micro version releases
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * build: Update release version rules
  * build: Update version before regenerating docs
  * completions: Add show-topology tab completion
  * documentation fixes
  * fabrics: Avoid nvme_scan_ctrl when disconnecting
  * fabrics: Honor JSON config file in connect-all command
  * fabrics: Remove dhchap-ctrl-secret from discover/connect-all
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * meson: we don't need a c++ compiler
  * new solidigm plugin
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme-print: sanitize the get-feature async event config output
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Do not print error message in collect_effects_log helper
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Set default rae value for nvme_get_nsid_log users
  * nvme: Simplify ns list identify
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: drop unused fd argument
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/solidigm: fix return value on format parse failure
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/wdc: prevent duplicate close on NVMe device
  * plugins/wdc: remove fd argument from print functions
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * print: Fix nvme_id_uuid_list
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * various fixes reported by coverity
  * version reporting includes library version
  * wdc:  OCP Log page updates and fixes
  * wrapper: Add weak nvme_init_copy_range_f1 symbol
  * wrapper: Call library version of nvme_init_copy_range_f1
  * wrapper: Update SPDIX license
  * zns.c: report zones should be started after retrieved zone
- Drop upsreamp patches
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 2.2.1+3.gd028407:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Add %check section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- spec file: fix "check" section (bsc#1207686)
- add "Provides: nvmeof-boot-support = 0.1"</changelog>
  <changelog author="daniel.wagner@suse.com" date="1684929600">- Update to version v2.4 (jsc#PED-553 jsc#PED-3884)
  - Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
  - Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
  - Build documentation to be up to date
  - Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
  - Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
  - Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
  - Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services
  - Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
  - remove 0100-harden_nvmf-connect@.service.patch
- Added compat commands for nbft back
- Changed default behavior of connect-all to match with old nbft
  behavior
- Replaced old nbft implementation with upstream one
- Rebuild documentation on package update
- Set version-tag so that version are correctly reported
- Fix connect nbft regressions (bsc#1209905)
  * fabrics: fix argc in show_nbft_compat_cmd()
- Fix auto connect conditions (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Fix auto boot for NBFT connections (bsc#1211647)
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 2.4+24.ga1ee20:
  * nvme-print-stdout: Do not show non reachable ns in namespace topology (bsc#1212598)
  * nvme-print-stdout: List only ctrls which are part of ns bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts bsc#1212598)
  * ccan: Add htable, strset and dependencies bsc#1212598)
  * ccan: Remove unused documentation bsc#1212598)
  * nvme-print: fix counter while looping through uuid_list (bsc#bsc#1212598)
  * nvme-print: Show subsystem iopolicy (bsc#1124564)</changelog>
  <changelog author="dwagner@suse.de" date="1693915200">- Update to version 2.4+25.g367eb9:
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)</changelog>
</package>
<package pkgid="2a6bcdbf7e415805dd2c35e683b9873b73bdc4f48b155b2374b7005798b19269" name="nvme-cli" arch="x86_64">
  <version epoch="0" ver="2.4+25.g367eb9" rel="150500.4.9.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.
- Fix version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1 (jsc#ped-553):
  * Added parsing for Solidigm telemetry observable data.
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * add item ddr_ecc_err_cnt in smart-log-add
  * build and install fixes/improvements
  * build: Add minimum build requirement on libnvme
  * build: Drop dependency on libuuid
  * build: Extend release script to support micro version releases
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * build: Update release version rules
  * build: Update version before regenerating docs
  * completions: Add show-topology tab completion
  * documentation fixes
  * fabrics: Avoid nvme_scan_ctrl when disconnecting
  * fabrics: Honor JSON config file in connect-all command
  * fabrics: Remove dhchap-ctrl-secret from discover/connect-all
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * meson: we don't need a c++ compiler
  * new solidigm plugin
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme-print: sanitize the get-feature async event config output
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Do not print error message in collect_effects_log helper
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Set default rae value for nvme_get_nsid_log users
  * nvme: Simplify ns list identify
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: drop unused fd argument
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/solidigm: fix return value on format parse failure
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/wdc: prevent duplicate close on NVMe device
  * plugins/wdc: remove fd argument from print functions
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * print: Fix nvme_id_uuid_list
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * various fixes reported by coverity
  * version reporting includes library version
  * wdc:  OCP Log page updates and fixes
  * wrapper: Add weak nvme_init_copy_range_f1 symbol
  * wrapper: Call library version of nvme_init_copy_range_f1
  * wrapper: Update SPDIX license
  * zns.c: report zones should be started after retrieved zone
- Drop upsreamp patches
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 2.2.1+3.gd028407:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Add %check section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- spec file: fix "check" section (bsc#1207686)
- add "Provides: nvmeof-boot-support = 0.1"</changelog>
  <changelog author="daniel.wagner@suse.com" date="1684929600">- Update to version v2.4 (jsc#PED-553 jsc#PED-3884)
  - Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
  - Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
  - Build documentation to be up to date
  - Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
  - Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
  - Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
  - Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services
  - Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
  - remove 0100-harden_nvmf-connect@.service.patch
- Added compat commands for nbft back
- Changed default behavior of connect-all to match with old nbft
  behavior
- Replaced old nbft implementation with upstream one
- Rebuild documentation on package update
- Set version-tag so that version are correctly reported
- Fix connect nbft regressions (bsc#1209905)
  * fabrics: fix argc in show_nbft_compat_cmd()
- Fix auto connect conditions (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Fix auto boot for NBFT connections (bsc#1211647)
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 2.4+24.ga1ee20:
  * nvme-print-stdout: Do not show non reachable ns in namespace topology (bsc#1212598)
  * nvme-print-stdout: List only ctrls which are part of ns bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts bsc#1212598)
  * ccan: Add htable, strset and dependencies bsc#1212598)
  * ccan: Remove unused documentation bsc#1212598)
  * nvme-print: fix counter while looping through uuid_list (bsc#bsc#1212598)
  * nvme-print: Show subsystem iopolicy (bsc#1124564)</changelog>
  <changelog author="dwagner@suse.de" date="1693915200">- Update to version 2.4+25.g367eb9:
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)</changelog>
</package>
<package pkgid="e39bc8ad0eb1204b6dc659f13c3a2b0dd7750fef64fe79e57c3620727021a1f1" name="nvme-cli" arch="aarch64">
  <version epoch="0" ver="2.4+31.gf7ec09" rel="150500.4.12.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1 (jsc#ped-553):
  * Added parsing for Solidigm telemetry observable data.
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * add item ddr_ecc_err_cnt in smart-log-add
  * build and install fixes/improvements
  * build: Add minimum build requirement on libnvme
  * build: Drop dependency on libuuid
  * build: Extend release script to support micro version releases
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * build: Update release version rules
  * build: Update version before regenerating docs
  * completions: Add show-topology tab completion
  * documentation fixes
  * fabrics: Avoid nvme_scan_ctrl when disconnecting
  * fabrics: Honor JSON config file in connect-all command
  * fabrics: Remove dhchap-ctrl-secret from discover/connect-all
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * meson: we don't need a c++ compiler
  * new solidigm plugin
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme-print: sanitize the get-feature async event config output
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Do not print error message in collect_effects_log helper
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Set default rae value for nvme_get_nsid_log users
  * nvme: Simplify ns list identify
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: drop unused fd argument
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/solidigm: fix return value on format parse failure
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/wdc: prevent duplicate close on NVMe device
  * plugins/wdc: remove fd argument from print functions
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * print: Fix nvme_id_uuid_list
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * various fixes reported by coverity
  * version reporting includes library version
  * wdc:  OCP Log page updates and fixes
  * wrapper: Add weak nvme_init_copy_range_f1 symbol
  * wrapper: Call library version of nvme_init_copy_range_f1
  * wrapper: Update SPDIX license
  * zns.c: report zones should be started after retrieved zone
- Drop upsreamp patches
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 2.2.1+3.gd028407:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Add %check section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- spec file: fix "check" section (bsc#1207686)
- add "Provides: nvmeof-boot-support = 0.1"</changelog>
  <changelog author="daniel.wagner@suse.com" date="1684929600">- Update to version v2.4 (jsc#PED-553 jsc#PED-3884)
  - Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
  - Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
  - Build documentation to be up to date
  - Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
  - Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
  - Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
  - Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services
  - Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
  - remove 0100-harden_nvmf-connect@.service.patch
- Added compat commands for nbft back
- Changed default behavior of connect-all to match with old nbft
  behavior
- Replaced old nbft implementation with upstream one
- Rebuild documentation on package update
- Set version-tag so that version are correctly reported
- Fix connect nbft regressions (bsc#1209905)
  * fabrics: fix argc in show_nbft_compat_cmd()
- Fix auto connect conditions (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Fix auto boot for NBFT connections (bsc#1211647)
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 2.4+24.ga1ee20:
  * nvme-print-stdout: Do not show non reachable ns in namespace topology (bsc#1212598)
  * nvme-print-stdout: List only ctrls which are part of ns bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts bsc#1212598)
  * ccan: Add htable, strset and dependencies bsc#1212598)
  * ccan: Remove unused documentation bsc#1212598)
  * nvme-print: fix counter while looping through uuid_list (bsc#bsc#1212598)
  * nvme-print: Show subsystem iopolicy (bsc#1124564)</changelog>
  <changelog author="dwagner@suse.de" date="1693915200">- Update to version 2.4+25.g367eb9:
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)</changelog>
  <changelog author="dwagner@suse.de" date="1699012800">- Update to version 2.4+31.gf7ec09:
  * udev-rules: rename netapp udev rule (bsc#1215994)
  * udev-rules: set ctrl_loss_tmo to -1 for ONTAP NVMe/TCP (bsc#1215994)
  * udev-rule: apply round-robin iopolicy on i/o subsystems alone (bsc#1215994)
  * fabrics: For TCP/RDMA, compare IP addresses with nvme_ipaddrs_eq() (bsc#1213768)
  * fabrics: lookup_discovery_ctrl() must look under host and not root (bsc#1213768)
  * fabrics: only look for matching ctrl on same host (bsc#1213768)</changelog>
</package>
<package pkgid="e7ca75214eefcd88f5e2dae78a8c9ed58bd4e6ff08953b6e6c2d0d6bf02cdedb" name="nvme-cli" arch="s390x">
  <version epoch="0" ver="2.4+31.gf7ec09" rel="150500.4.12.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1 (jsc#ped-553):
  * Added parsing for Solidigm telemetry observable data.
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * add item ddr_ecc_err_cnt in smart-log-add
  * build and install fixes/improvements
  * build: Add minimum build requirement on libnvme
  * build: Drop dependency on libuuid
  * build: Extend release script to support micro version releases
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * build: Update release version rules
  * build: Update version before regenerating docs
  * completions: Add show-topology tab completion
  * documentation fixes
  * fabrics: Avoid nvme_scan_ctrl when disconnecting
  * fabrics: Honor JSON config file in connect-all command
  * fabrics: Remove dhchap-ctrl-secret from discover/connect-all
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * meson: we don't need a c++ compiler
  * new solidigm plugin
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme-print: sanitize the get-feature async event config output
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Do not print error message in collect_effects_log helper
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Set default rae value for nvme_get_nsid_log users
  * nvme: Simplify ns list identify
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: drop unused fd argument
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/solidigm: fix return value on format parse failure
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/wdc: prevent duplicate close on NVMe device
  * plugins/wdc: remove fd argument from print functions
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * print: Fix nvme_id_uuid_list
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * various fixes reported by coverity
  * version reporting includes library version
  * wdc:  OCP Log page updates and fixes
  * wrapper: Add weak nvme_init_copy_range_f1 symbol
  * wrapper: Call library version of nvme_init_copy_range_f1
  * wrapper: Update SPDIX license
  * zns.c: report zones should be started after retrieved zone
- Drop upsreamp patches
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 2.2.1+3.gd028407:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Add %check section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- spec file: fix "check" section (bsc#1207686)
- add "Provides: nvmeof-boot-support = 0.1"</changelog>
  <changelog author="daniel.wagner@suse.com" date="1684929600">- Update to version v2.4 (jsc#PED-553 jsc#PED-3884)
  - Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
  - Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
  - Build documentation to be up to date
  - Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
  - Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
  - Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
  - Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services
  - Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
  - remove 0100-harden_nvmf-connect@.service.patch
- Added compat commands for nbft back
- Changed default behavior of connect-all to match with old nbft
  behavior
- Replaced old nbft implementation with upstream one
- Rebuild documentation on package update
- Set version-tag so that version are correctly reported
- Fix connect nbft regressions (bsc#1209905)
  * fabrics: fix argc in show_nbft_compat_cmd()
- Fix auto connect conditions (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Fix auto boot for NBFT connections (bsc#1211647)
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 2.4+24.ga1ee20:
  * nvme-print-stdout: Do not show non reachable ns in namespace topology (bsc#1212598)
  * nvme-print-stdout: List only ctrls which are part of ns bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts bsc#1212598)
  * ccan: Add htable, strset and dependencies bsc#1212598)
  * ccan: Remove unused documentation bsc#1212598)
  * nvme-print: fix counter while looping through uuid_list (bsc#bsc#1212598)
  * nvme-print: Show subsystem iopolicy (bsc#1124564)</changelog>
  <changelog author="dwagner@suse.de" date="1693915200">- Update to version 2.4+25.g367eb9:
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)</changelog>
  <changelog author="dwagner@suse.de" date="1699012800">- Update to version 2.4+31.gf7ec09:
  * udev-rules: rename netapp udev rule (bsc#1215994)
  * udev-rules: set ctrl_loss_tmo to -1 for ONTAP NVMe/TCP (bsc#1215994)
  * udev-rule: apply round-robin iopolicy on i/o subsystems alone (bsc#1215994)
  * fabrics: For TCP/RDMA, compare IP addresses with nvme_ipaddrs_eq() (bsc#1213768)
  * fabrics: lookup_discovery_ctrl() must look under host and not root (bsc#1213768)
  * fabrics: only look for matching ctrl on same host (bsc#1213768)</changelog>
</package>
<package pkgid="314c8a3fac25805ed051f9ee3db2431a2e773dcd09903afe9f317519e63c45a6" name="nvme-cli" arch="src">
  <version epoch="0" ver="2.4+31.gf7ec09" rel="150500.4.12.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1 (jsc#ped-553):
  * Added parsing for Solidigm telemetry observable data.
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * add item ddr_ecc_err_cnt in smart-log-add
  * build and install fixes/improvements
  * build: Add minimum build requirement on libnvme
  * build: Drop dependency on libuuid
  * build: Extend release script to support micro version releases
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * build: Update release version rules
  * build: Update version before regenerating docs
  * completions: Add show-topology tab completion
  * documentation fixes
  * fabrics: Avoid nvme_scan_ctrl when disconnecting
  * fabrics: Honor JSON config file in connect-all command
  * fabrics: Remove dhchap-ctrl-secret from discover/connect-all
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * meson: we don't need a c++ compiler
  * new solidigm plugin
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme-print: sanitize the get-feature async event config output
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Do not print error message in collect_effects_log helper
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Set default rae value for nvme_get_nsid_log users
  * nvme: Simplify ns list identify
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: drop unused fd argument
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/solidigm: fix return value on format parse failure
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/wdc: prevent duplicate close on NVMe device
  * plugins/wdc: remove fd argument from print functions
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * print: Fix nvme_id_uuid_list
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * various fixes reported by coverity
  * version reporting includes library version
  * wdc:  OCP Log page updates and fixes
  * wrapper: Add weak nvme_init_copy_range_f1 symbol
  * wrapper: Call library version of nvme_init_copy_range_f1
  * wrapper: Update SPDIX license
  * zns.c: report zones should be started after retrieved zone
- Drop upsreamp patches
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 2.2.1+3.gd028407:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Add %check section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- spec file: fix "check" section (bsc#1207686)
- add "Provides: nvmeof-boot-support = 0.1"</changelog>
  <changelog author="daniel.wagner@suse.com" date="1684929600">- Update to version v2.4 (jsc#PED-553 jsc#PED-3884)
  - Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
  - Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
  - Build documentation to be up to date
  - Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
  - Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
  - Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
  - Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services
  - Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
  - remove 0100-harden_nvmf-connect@.service.patch
- Added compat commands for nbft back
- Changed default behavior of connect-all to match with old nbft
  behavior
- Replaced old nbft implementation with upstream one
- Rebuild documentation on package update
- Set version-tag so that version are correctly reported
- Fix connect nbft regressions (bsc#1209905)
  * fabrics: fix argc in show_nbft_compat_cmd()
- Fix auto connect conditions (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Fix auto boot for NBFT connections (bsc#1211647)
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 2.4+24.ga1ee20:
  * nvme-print-stdout: Do not show non reachable ns in namespace topology (bsc#1212598)
  * nvme-print-stdout: List only ctrls which are part of ns bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts bsc#1212598)
  * ccan: Add htable, strset and dependencies bsc#1212598)
  * ccan: Remove unused documentation bsc#1212598)
  * nvme-print: fix counter while looping through uuid_list (bsc#bsc#1212598)
  * nvme-print: Show subsystem iopolicy (bsc#1124564)</changelog>
  <changelog author="dwagner@suse.de" date="1693915200">- Update to version 2.4+25.g367eb9:
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)</changelog>
  <changelog author="dwagner@suse.de" date="1699012800">- Update to version 2.4+31.gf7ec09:
  * udev-rules: rename netapp udev rule (bsc#1215994)
  * udev-rules: set ctrl_loss_tmo to -1 for ONTAP NVMe/TCP (bsc#1215994)
  * udev-rule: apply round-robin iopolicy on i/o subsystems alone (bsc#1215994)
  * fabrics: For TCP/RDMA, compare IP addresses with nvme_ipaddrs_eq() (bsc#1213768)
  * fabrics: lookup_discovery_ctrl() must look under host and not root (bsc#1213768)
  * fabrics: only look for matching ctrl on same host (bsc#1213768)</changelog>
</package>
<package pkgid="fa97e32b7c7b9f60b914b039de7a58eadecfaba844273102cb414131b2e649c2" name="nvme-cli" arch="x86_64">
  <version epoch="0" ver="2.4+31.gf7ec09" rel="150500.4.12.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1 (jsc#ped-553):
  * Added parsing for Solidigm telemetry observable data.
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * add item ddr_ecc_err_cnt in smart-log-add
  * build and install fixes/improvements
  * build: Add minimum build requirement on libnvme
  * build: Drop dependency on libuuid
  * build: Extend release script to support micro version releases
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * build: Update release version rules
  * build: Update version before regenerating docs
  * completions: Add show-topology tab completion
  * documentation fixes
  * fabrics: Avoid nvme_scan_ctrl when disconnecting
  * fabrics: Honor JSON config file in connect-all command
  * fabrics: Remove dhchap-ctrl-secret from discover/connect-all
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * meson: we don't need a c++ compiler
  * new solidigm plugin
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme-print: sanitize the get-feature async event config output
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Do not print error message in collect_effects_log helper
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Set default rae value for nvme_get_nsid_log users
  * nvme: Simplify ns list identify
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: drop unused fd argument
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/solidigm: fix return value on format parse failure
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/wdc: prevent duplicate close on NVMe device
  * plugins/wdc: remove fd argument from print functions
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * print: Fix nvme_id_uuid_list
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * various fixes reported by coverity
  * version reporting includes library version
  * wdc:  OCP Log page updates and fixes
  * wrapper: Add weak nvme_init_copy_range_f1 symbol
  * wrapper: Call library version of nvme_init_copy_range_f1
  * wrapper: Update SPDIX license
  * zns.c: report zones should be started after retrieved zone
- Drop upsreamp patches
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 2.2.1+3.gd028407:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Add %check section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- spec file: fix "check" section (bsc#1207686)
- add "Provides: nvmeof-boot-support = 0.1"</changelog>
  <changelog author="daniel.wagner@suse.com" date="1684929600">- Update to version v2.4 (jsc#PED-553 jsc#PED-3884)
  - Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
  - Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
  - Build documentation to be up to date
  - Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
  - Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
  - Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
  - Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services
  - Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
  - remove 0100-harden_nvmf-connect@.service.patch
- Added compat commands for nbft back
- Changed default behavior of connect-all to match with old nbft
  behavior
- Replaced old nbft implementation with upstream one
- Rebuild documentation on package update
- Set version-tag so that version are correctly reported
- Fix connect nbft regressions (bsc#1209905)
  * fabrics: fix argc in show_nbft_compat_cmd()
- Fix auto connect conditions (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Fix auto boot for NBFT connections (bsc#1211647)
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 2.4+24.ga1ee20:
  * nvme-print-stdout: Do not show non reachable ns in namespace topology (bsc#1212598)
  * nvme-print-stdout: List only ctrls which are part of ns bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts bsc#1212598)
  * ccan: Add htable, strset and dependencies bsc#1212598)
  * ccan: Remove unused documentation bsc#1212598)
  * nvme-print: fix counter while looping through uuid_list (bsc#bsc#1212598)
  * nvme-print: Show subsystem iopolicy (bsc#1124564)</changelog>
  <changelog author="dwagner@suse.de" date="1693915200">- Update to version 2.4+25.g367eb9:
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)</changelog>
  <changelog author="dwagner@suse.de" date="1699012800">- Update to version 2.4+31.gf7ec09:
  * udev-rules: rename netapp udev rule (bsc#1215994)
  * udev-rules: set ctrl_loss_tmo to -1 for ONTAP NVMe/TCP (bsc#1215994)
  * udev-rule: apply round-robin iopolicy on i/o subsystems alone (bsc#1215994)
  * fabrics: For TCP/RDMA, compare IP addresses with nvme_ipaddrs_eq() (bsc#1213768)
  * fabrics: lookup_discovery_ctrl() must look under host and not root (bsc#1213768)
  * fabrics: only look for matching ctrl on same host (bsc#1213768)</changelog>
</package>
<package pkgid="409d892ce467410bced8c04d25721b8a5135a2293d08acd8ba1b4f7fc4e7175a" name="open-iscsi" arch="aarch64">
  <version epoch="0" ver="2.1.9" rel="150500.46.3.1"/>
  <changelog author="lduncan@suse.com" date="1635163200">- Fix the usr-merge changes (bsc#1192013). This includes catching
  all the places that /sbin was still used directly, as well as
  making the SPEC file build using /usr/sbin for openSUSE but
  still use /sbin for SLE, for now.</changelog>
  <changelog author="lduncan@suse.com" date="1636632000">- Merged latest upstream. Mostly cleanup, but includes a fix for
  iscsi-init.service when trying to write to the root volume too
  early (bsc#1192568), as well as an upstream fix for possible
  deadlock when dealing with sysfs.</changelog>
  <changelog author="lduncan@suse.com" date="1644840000">- Updated to latest upstream 2.1.6 as 2.1.6-suse, which contains
  bug fixes and cleanups. See the Changelog for more details.</changelog>
  <changelog author="lduncan@suse.com" date="1646481600">- Update to latest upstream, including test cleanup, minor
  bug fixes (cosmetic), and fixing iscsi-init (bsc#1195656).</changelog>
  <changelog author="lduncan@suse.com" date="1649246400">- Updated to latest upstream, including bug fixes and cleanups.
  Changes included:
  * add handling name/value pairs for firmware login (bsc#1196113),
    including man page update for same
  * Fix bug where some package parts were installed using
    DESTDIR twice
  * general build cleanup (in prep for removing DB files from
    /etc/iscsi some day soon)
  Also, now delivering a "package config" file for libopeniscsiusr.</changelog>
  <changelog author="lduncan@suse.com" date="1651838400">- Updated to latest upstream version, tagged 2.1.7. Changes
  included:
  * updated/fixed test script
  * updated build system
  * several bug fixes, including one for bsc#1199264</changelog>
  <changelog author="lduncan@suse.com" date="1652097600">- Update to latest upstream, including:
  * Added 'distclean' to Makefile targets
  * Ensure Makefile '.PHONY' targets set up correctly
  * fix an iscsid logout bug generating a false error
    and cleanup logout error messages</changelog>
  <changelog author="lduncan@suse.com" date="1652443200">- Set initiatorname in %post (at end of install), for cases
  where root is read-only at startup time (bsc#1198457)</changelog>
  <changelog author="lduncan@suse.com" date="1655467200">- For Tumbleweed, moved logrotate files from user-specific
  directory /etc/logrotate.d to vendor-specific
  /usr/etc/logrotate.d
  (for Stefan Schubert &lt;schubi@suse.com&gt;)</changelog>
  <changelog author="lduncan@suse.com" date="1657108800">- Modify SPEC file so systemd unit files are mode 644 (not 755)
  (bsc#1200570)</changelog>
  <changelog author="lduncan@suse.com" date="1664193600">- Update to upstream version 2.1.8, which includes some bug fixes,
  and adds the ability to build using meson. The SPEC file was
  updated to use meson.
  Also, some files have moved:
  * the "lock" file has moved from /etc/iscsi to /var/lock/iscsi
  * the "database files" have moved from /etc/iscsi to
    /var/lib/iscsi</changelog>
  <changelog author="lduncan@suse.com" date="1668600000">- Updated to latest upstream. Changes:
  * iscsid/iscsiuio: fix OOM adjustment (github issue #377)</changelog>
  <changelog author="lduncan@suse.com" date="1670414400">- Moving DB files from /etc/iscsi/* to /var/lib/iscsi/* for
  SLE-15-SP5 and forward, as is done in Tumbleweed.
- Added /etc/iscsi/README.DB-files-moved, and added SPEC file
  changes to support this, including a post-install script to
  move the DB files, only installed if DB files are moved.
- Renamed shared library from libopeniscsiusr0_2_0 to
  libopeniscsiusr0, to correctly match SONAME in library.</changelog>
  <changelog author="lduncan@suse.com" date="1671451200">- Updated SPEC file dependencies for libopeniscsiusr to avoid
  conflicting package installation.</changelog>
  <changelog author="lduncan@suse.com" date="1671624000">- Update iscsid.service so it starts iscsid.socket, if needed
  (bsc#1206132).</changelog>
  <changelog author="lduncan@suse.com" date="1677326400">- Build system: meson builds were ignoring optflags, and other
  passed in compiler options.</changelog>
  <changelog author="lduncan@suse.com" date="1681732800">- Remove "--strip" in SPEC file for meson build, so that
  debuginfo is generated. (from mwilck) (bsc#1210536)</changelog>
  <changelog author="lduncan@suse.com" date="1686830400">- Upgrade to upstream version 2.1.9 with tag "2.1.9-suse"
  (bsc#1210514), replacing open-iscsi-2.1.8-suse.tar.bz2 with
  open-iscsi-2.1.9-suse.tar.bz2, and resetting
  open-iscsi-SUSE-latest.diff.bz2. A summary from the ChangeLog
  file:
  * Fix discoveryd compiler warning
  * Sync iscsi_if.h with kernel
  * Handle old DB records correctly
  * Make IQN configuration for iscsi-iname
  * remove OFFLOAD_BOOT_SUPPORTED, which is always true
  * Use UUID for IPC, not "root"
  * do not support SHA3 for libressl
  * build meson cleanups, including changing default DB home
  * Updated README about NOPs
  * Remove "BindTo" in systemd service file
  * Some iscsiuio fixes, including licensing and memory leaks
    (bsc#1210514)
  * Small netlink fixes
  * Fix OOM adjustment
  * Some error recovery fixes
  * Some spelling fixes</changelog>
  <changelog author="lduncan@suse.com" date="1687262400">- Fix iscsiuio build version by updating iscsiuio/meson.build
  and RPM SPEC file (bsc#1210514), updating
  open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1698235200">- Updated to latest upstream, which includes (bsc#1210514):
  * several fixes to harden iscsiuio, including:
  - logging now uses syslog
  - shutdown now waits for helper threads to complete
  - netlink socket cleanup
  * some minor bug fixes, some helping builds on musl
  This updates iscsiuio version to 0.7.8.8.
  This updates open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="b1760cc08916986596504e81ffa31cb8b39e3bfa7be7ab40a20f48d20c88f0b9" name="open-iscsi" arch="s390x">
  <version epoch="0" ver="2.1.9" rel="150500.46.3.1"/>
  <changelog author="lduncan@suse.com" date="1635163200">- Fix the usr-merge changes (bsc#1192013). This includes catching
  all the places that /sbin was still used directly, as well as
  making the SPEC file build using /usr/sbin for openSUSE but
  still use /sbin for SLE, for now.</changelog>
  <changelog author="lduncan@suse.com" date="1636632000">- Merged latest upstream. Mostly cleanup, but includes a fix for
  iscsi-init.service when trying to write to the root volume too
  early (bsc#1192568), as well as an upstream fix for possible
  deadlock when dealing with sysfs.</changelog>
  <changelog author="lduncan@suse.com" date="1644840000">- Updated to latest upstream 2.1.6 as 2.1.6-suse, which contains
  bug fixes and cleanups. See the Changelog for more details.</changelog>
  <changelog author="lduncan@suse.com" date="1646481600">- Update to latest upstream, including test cleanup, minor
  bug fixes (cosmetic), and fixing iscsi-init (bsc#1195656).</changelog>
  <changelog author="lduncan@suse.com" date="1649246400">- Updated to latest upstream, including bug fixes and cleanups.
  Changes included:
  * add handling name/value pairs for firmware login (bsc#1196113),
    including man page update for same
  * Fix bug where some package parts were installed using
    DESTDIR twice
  * general build cleanup (in prep for removing DB files from
    /etc/iscsi some day soon)
  Also, now delivering a "package config" file for libopeniscsiusr.</changelog>
  <changelog author="lduncan@suse.com" date="1651838400">- Updated to latest upstream version, tagged 2.1.7. Changes
  included:
  * updated/fixed test script
  * updated build system
  * several bug fixes, including one for bsc#1199264</changelog>
  <changelog author="lduncan@suse.com" date="1652097600">- Update to latest upstream, including:
  * Added 'distclean' to Makefile targets
  * Ensure Makefile '.PHONY' targets set up correctly
  * fix an iscsid logout bug generating a false error
    and cleanup logout error messages</changelog>
  <changelog author="lduncan@suse.com" date="1652443200">- Set initiatorname in %post (at end of install), for cases
  where root is read-only at startup time (bsc#1198457)</changelog>
  <changelog author="lduncan@suse.com" date="1655467200">- For Tumbleweed, moved logrotate files from user-specific
  directory /etc/logrotate.d to vendor-specific
  /usr/etc/logrotate.d
  (for Stefan Schubert &lt;schubi@suse.com&gt;)</changelog>
  <changelog author="lduncan@suse.com" date="1657108800">- Modify SPEC file so systemd unit files are mode 644 (not 755)
  (bsc#1200570)</changelog>
  <changelog author="lduncan@suse.com" date="1664193600">- Update to upstream version 2.1.8, which includes some bug fixes,
  and adds the ability to build using meson. The SPEC file was
  updated to use meson.
  Also, some files have moved:
  * the "lock" file has moved from /etc/iscsi to /var/lock/iscsi
  * the "database files" have moved from /etc/iscsi to
    /var/lib/iscsi</changelog>
  <changelog author="lduncan@suse.com" date="1668600000">- Updated to latest upstream. Changes:
  * iscsid/iscsiuio: fix OOM adjustment (github issue #377)</changelog>
  <changelog author="lduncan@suse.com" date="1670414400">- Moving DB files from /etc/iscsi/* to /var/lib/iscsi/* for
  SLE-15-SP5 and forward, as is done in Tumbleweed.
- Added /etc/iscsi/README.DB-files-moved, and added SPEC file
  changes to support this, including a post-install script to
  move the DB files, only installed if DB files are moved.
- Renamed shared library from libopeniscsiusr0_2_0 to
  libopeniscsiusr0, to correctly match SONAME in library.</changelog>
  <changelog author="lduncan@suse.com" date="1671451200">- Updated SPEC file dependencies for libopeniscsiusr to avoid
  conflicting package installation.</changelog>
  <changelog author="lduncan@suse.com" date="1671624000">- Update iscsid.service so it starts iscsid.socket, if needed
  (bsc#1206132).</changelog>
  <changelog author="lduncan@suse.com" date="1677326400">- Build system: meson builds were ignoring optflags, and other
  passed in compiler options.</changelog>
  <changelog author="lduncan@suse.com" date="1681732800">- Remove "--strip" in SPEC file for meson build, so that
  debuginfo is generated. (from mwilck) (bsc#1210536)</changelog>
  <changelog author="lduncan@suse.com" date="1686830400">- Upgrade to upstream version 2.1.9 with tag "2.1.9-suse"
  (bsc#1210514), replacing open-iscsi-2.1.8-suse.tar.bz2 with
  open-iscsi-2.1.9-suse.tar.bz2, and resetting
  open-iscsi-SUSE-latest.diff.bz2. A summary from the ChangeLog
  file:
  * Fix discoveryd compiler warning
  * Sync iscsi_if.h with kernel
  * Handle old DB records correctly
  * Make IQN configuration for iscsi-iname
  * remove OFFLOAD_BOOT_SUPPORTED, which is always true
  * Use UUID for IPC, not "root"
  * do not support SHA3 for libressl
  * build meson cleanups, including changing default DB home
  * Updated README about NOPs
  * Remove "BindTo" in systemd service file
  * Some iscsiuio fixes, including licensing and memory leaks
    (bsc#1210514)
  * Small netlink fixes
  * Fix OOM adjustment
  * Some error recovery fixes
  * Some spelling fixes</changelog>
  <changelog author="lduncan@suse.com" date="1687262400">- Fix iscsiuio build version by updating iscsiuio/meson.build
  and RPM SPEC file (bsc#1210514), updating
  open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1698235200">- Updated to latest upstream, which includes (bsc#1210514):
  * several fixes to harden iscsiuio, including:
  - logging now uses syslog
  - shutdown now waits for helper threads to complete
  - netlink socket cleanup
  * some minor bug fixes, some helping builds on musl
  This updates iscsiuio version to 0.7.8.8.
  This updates open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="73ca81c5cae7602cde7267e52c28ffb7fb7480ba9215a8c4a24a87645c152d63" name="open-iscsi" arch="src">
  <version epoch="0" ver="2.1.9" rel="150500.46.3.1"/>
  <changelog author="lduncan@suse.com" date="1635163200">- Fix the usr-merge changes (bsc#1192013). This includes catching
  all the places that /sbin was still used directly, as well as
  making the SPEC file build using /usr/sbin for openSUSE but
  still use /sbin for SLE, for now.</changelog>
  <changelog author="lduncan@suse.com" date="1636632000">- Merged latest upstream. Mostly cleanup, but includes a fix for
  iscsi-init.service when trying to write to the root volume too
  early (bsc#1192568), as well as an upstream fix for possible
  deadlock when dealing with sysfs.</changelog>
  <changelog author="lduncan@suse.com" date="1644840000">- Updated to latest upstream 2.1.6 as 2.1.6-suse, which contains
  bug fixes and cleanups. See the Changelog for more details.</changelog>
  <changelog author="lduncan@suse.com" date="1646481600">- Update to latest upstream, including test cleanup, minor
  bug fixes (cosmetic), and fixing iscsi-init (bsc#1195656).</changelog>
  <changelog author="lduncan@suse.com" date="1649246400">- Updated to latest upstream, including bug fixes and cleanups.
  Changes included:
  * add handling name/value pairs for firmware login (bsc#1196113),
    including man page update for same
  * Fix bug where some package parts were installed using
    DESTDIR twice
  * general build cleanup (in prep for removing DB files from
    /etc/iscsi some day soon)
  Also, now delivering a "package config" file for libopeniscsiusr.</changelog>
  <changelog author="lduncan@suse.com" date="1651838400">- Updated to latest upstream version, tagged 2.1.7. Changes
  included:
  * updated/fixed test script
  * updated build system
  * several bug fixes, including one for bsc#1199264</changelog>
  <changelog author="lduncan@suse.com" date="1652097600">- Update to latest upstream, including:
  * Added 'distclean' to Makefile targets
  * Ensure Makefile '.PHONY' targets set up correctly
  * fix an iscsid logout bug generating a false error
    and cleanup logout error messages</changelog>
  <changelog author="lduncan@suse.com" date="1652443200">- Set initiatorname in %post (at end of install), for cases
  where root is read-only at startup time (bsc#1198457)</changelog>
  <changelog author="lduncan@suse.com" date="1655467200">- For Tumbleweed, moved logrotate files from user-specific
  directory /etc/logrotate.d to vendor-specific
  /usr/etc/logrotate.d
  (for Stefan Schubert &lt;schubi@suse.com&gt;)</changelog>
  <changelog author="lduncan@suse.com" date="1657108800">- Modify SPEC file so systemd unit files are mode 644 (not 755)
  (bsc#1200570)</changelog>
  <changelog author="lduncan@suse.com" date="1664193600">- Update to upstream version 2.1.8, which includes some bug fixes,
  and adds the ability to build using meson. The SPEC file was
  updated to use meson.
  Also, some files have moved:
  * the "lock" file has moved from /etc/iscsi to /var/lock/iscsi
  * the "database files" have moved from /etc/iscsi to
    /var/lib/iscsi</changelog>
  <changelog author="lduncan@suse.com" date="1668600000">- Updated to latest upstream. Changes:
  * iscsid/iscsiuio: fix OOM adjustment (github issue #377)</changelog>
  <changelog author="lduncan@suse.com" date="1670414400">- Moving DB files from /etc/iscsi/* to /var/lib/iscsi/* for
  SLE-15-SP5 and forward, as is done in Tumbleweed.
- Added /etc/iscsi/README.DB-files-moved, and added SPEC file
  changes to support this, including a post-install script to
  move the DB files, only installed if DB files are moved.
- Renamed shared library from libopeniscsiusr0_2_0 to
  libopeniscsiusr0, to correctly match SONAME in library.</changelog>
  <changelog author="lduncan@suse.com" date="1671451200">- Updated SPEC file dependencies for libopeniscsiusr to avoid
  conflicting package installation.</changelog>
  <changelog author="lduncan@suse.com" date="1671624000">- Update iscsid.service so it starts iscsid.socket, if needed
  (bsc#1206132).</changelog>
  <changelog author="lduncan@suse.com" date="1677326400">- Build system: meson builds were ignoring optflags, and other
  passed in compiler options.</changelog>
  <changelog author="lduncan@suse.com" date="1681732800">- Remove "--strip" in SPEC file for meson build, so that
  debuginfo is generated. (from mwilck) (bsc#1210536)</changelog>
  <changelog author="lduncan@suse.com" date="1686830400">- Upgrade to upstream version 2.1.9 with tag "2.1.9-suse"
  (bsc#1210514), replacing open-iscsi-2.1.8-suse.tar.bz2 with
  open-iscsi-2.1.9-suse.tar.bz2, and resetting
  open-iscsi-SUSE-latest.diff.bz2. A summary from the ChangeLog
  file:
  * Fix discoveryd compiler warning
  * Sync iscsi_if.h with kernel
  * Handle old DB records correctly
  * Make IQN configuration for iscsi-iname
  * remove OFFLOAD_BOOT_SUPPORTED, which is always true
  * Use UUID for IPC, not "root"
  * do not support SHA3 for libressl
  * build meson cleanups, including changing default DB home
  * Updated README about NOPs
  * Remove "BindTo" in systemd service file
  * Some iscsiuio fixes, including licensing and memory leaks
    (bsc#1210514)
  * Small netlink fixes
  * Fix OOM adjustment
  * Some error recovery fixes
  * Some spelling fixes</changelog>
  <changelog author="lduncan@suse.com" date="1687262400">- Fix iscsiuio build version by updating iscsiuio/meson.build
  and RPM SPEC file (bsc#1210514), updating
  open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1698235200">- Updated to latest upstream, which includes (bsc#1210514):
  * several fixes to harden iscsiuio, including:
  - logging now uses syslog
  - shutdown now waits for helper threads to complete
  - netlink socket cleanup
  * some minor bug fixes, some helping builds on musl
  This updates iscsiuio version to 0.7.8.8.
  This updates open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="2b83243cca6dce2e04054a29d8d194fb9ff5f46ca249dac99fbedb7f61065aff" name="open-iscsi" arch="x86_64">
  <version epoch="0" ver="2.1.9" rel="150500.46.3.1"/>
  <changelog author="lduncan@suse.com" date="1635163200">- Fix the usr-merge changes (bsc#1192013). This includes catching
  all the places that /sbin was still used directly, as well as
  making the SPEC file build using /usr/sbin for openSUSE but
  still use /sbin for SLE, for now.</changelog>
  <changelog author="lduncan@suse.com" date="1636632000">- Merged latest upstream. Mostly cleanup, but includes a fix for
  iscsi-init.service when trying to write to the root volume too
  early (bsc#1192568), as well as an upstream fix for possible
  deadlock when dealing with sysfs.</changelog>
  <changelog author="lduncan@suse.com" date="1644840000">- Updated to latest upstream 2.1.6 as 2.1.6-suse, which contains
  bug fixes and cleanups. See the Changelog for more details.</changelog>
  <changelog author="lduncan@suse.com" date="1646481600">- Update to latest upstream, including test cleanup, minor
  bug fixes (cosmetic), and fixing iscsi-init (bsc#1195656).</changelog>
  <changelog author="lduncan@suse.com" date="1649246400">- Updated to latest upstream, including bug fixes and cleanups.
  Changes included:
  * add handling name/value pairs for firmware login (bsc#1196113),
    including man page update for same
  * Fix bug where some package parts were installed using
    DESTDIR twice
  * general build cleanup (in prep for removing DB files from
    /etc/iscsi some day soon)
  Also, now delivering a "package config" file for libopeniscsiusr.</changelog>
  <changelog author="lduncan@suse.com" date="1651838400">- Updated to latest upstream version, tagged 2.1.7. Changes
  included:
  * updated/fixed test script
  * updated build system
  * several bug fixes, including one for bsc#1199264</changelog>
  <changelog author="lduncan@suse.com" date="1652097600">- Update to latest upstream, including:
  * Added 'distclean' to Makefile targets
  * Ensure Makefile '.PHONY' targets set up correctly
  * fix an iscsid logout bug generating a false error
    and cleanup logout error messages</changelog>
  <changelog author="lduncan@suse.com" date="1652443200">- Set initiatorname in %post (at end of install), for cases
  where root is read-only at startup time (bsc#1198457)</changelog>
  <changelog author="lduncan@suse.com" date="1655467200">- For Tumbleweed, moved logrotate files from user-specific
  directory /etc/logrotate.d to vendor-specific
  /usr/etc/logrotate.d
  (for Stefan Schubert &lt;schubi@suse.com&gt;)</changelog>
  <changelog author="lduncan@suse.com" date="1657108800">- Modify SPEC file so systemd unit files are mode 644 (not 755)
  (bsc#1200570)</changelog>
  <changelog author="lduncan@suse.com" date="1664193600">- Update to upstream version 2.1.8, which includes some bug fixes,
  and adds the ability to build using meson. The SPEC file was
  updated to use meson.
  Also, some files have moved:
  * the "lock" file has moved from /etc/iscsi to /var/lock/iscsi
  * the "database files" have moved from /etc/iscsi to
    /var/lib/iscsi</changelog>
  <changelog author="lduncan@suse.com" date="1668600000">- Updated to latest upstream. Changes:
  * iscsid/iscsiuio: fix OOM adjustment (github issue #377)</changelog>
  <changelog author="lduncan@suse.com" date="1670414400">- Moving DB files from /etc/iscsi/* to /var/lib/iscsi/* for
  SLE-15-SP5 and forward, as is done in Tumbleweed.
- Added /etc/iscsi/README.DB-files-moved, and added SPEC file
  changes to support this, including a post-install script to
  move the DB files, only installed if DB files are moved.
- Renamed shared library from libopeniscsiusr0_2_0 to
  libopeniscsiusr0, to correctly match SONAME in library.</changelog>
  <changelog author="lduncan@suse.com" date="1671451200">- Updated SPEC file dependencies for libopeniscsiusr to avoid
  conflicting package installation.</changelog>
  <changelog author="lduncan@suse.com" date="1671624000">- Update iscsid.service so it starts iscsid.socket, if needed
  (bsc#1206132).</changelog>
  <changelog author="lduncan@suse.com" date="1677326400">- Build system: meson builds were ignoring optflags, and other
  passed in compiler options.</changelog>
  <changelog author="lduncan@suse.com" date="1681732800">- Remove "--strip" in SPEC file for meson build, so that
  debuginfo is generated. (from mwilck) (bsc#1210536)</changelog>
  <changelog author="lduncan@suse.com" date="1686830400">- Upgrade to upstream version 2.1.9 with tag "2.1.9-suse"
  (bsc#1210514), replacing open-iscsi-2.1.8-suse.tar.bz2 with
  open-iscsi-2.1.9-suse.tar.bz2, and resetting
  open-iscsi-SUSE-latest.diff.bz2. A summary from the ChangeLog
  file:
  * Fix discoveryd compiler warning
  * Sync iscsi_if.h with kernel
  * Handle old DB records correctly
  * Make IQN configuration for iscsi-iname
  * remove OFFLOAD_BOOT_SUPPORTED, which is always true
  * Use UUID for IPC, not "root"
  * do not support SHA3 for libressl
  * build meson cleanups, including changing default DB home
  * Updated README about NOPs
  * Remove "BindTo" in systemd service file
  * Some iscsiuio fixes, including licensing and memory leaks
    (bsc#1210514)
  * Small netlink fixes
  * Fix OOM adjustment
  * Some error recovery fixes
  * Some spelling fixes</changelog>
  <changelog author="lduncan@suse.com" date="1687262400">- Fix iscsiuio build version by updating iscsiuio/meson.build
  and RPM SPEC file (bsc#1210514), updating
  open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1698235200">- Updated to latest upstream, which includes (bsc#1210514):
  * several fixes to harden iscsiuio, including:
  - logging now uses syslog
  - shutdown now waits for helper threads to complete
  - netlink socket cleanup
  * some minor bug fixes, some helping builds on musl
  This updates iscsiuio version to 0.7.8.8.
  This updates open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="9e7597f36a0b6d1367e6413b7fbd71bd02fc03002bd4e90a07b33142f5fb15d9" name="open-lldp" arch="aarch64">
  <version epoch="0" ver="1.1+77.75e83b6" rel="150500.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1488283200">- Don't use full URL as source, as the tarball does not exist at
  that location.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Fix calling of fillup_only: it knows no -i parameter.</changelog>
  <changelog author="hare@suse.de" date="1547121600">- Update to git commit cb81e9541b5 (FATE#326034,bug#1104011)
  * 8021qaz: Remove unused variable
  * 8021qaz: Honor willing value from config file
  * lldpad: Support DSCP selectors in APP TLV's
  * Fix application tlv display
  * basman_clif: print the OID properly
  * ecp22: deinit l2_packet_data before freeing ecp22
  * DCB set state operation return value check
  * memleak on received TLVs from modules
  * Use interface index instead of name in libconfig
  * Fix 'is_valid_mac' to include mcast mac address
  * lldpad: Fix segfault in lldptool
  * Fixup disabling PG
  + open-lldp-v1.0.1+56.cb81e95.tar.xz
- Remove superseded files
  - open-lldp-1.0.1.tar.gz
  - open-lldp-git-update.patch.bz2
  - open-lldp-gcc5.patch
  - 0001-l2_linux_packet-correctly-process-return-value-of-ge.patch
  - 0002-lldpad-Only-set-Tx-adminStatus-if-interface-is-not-m.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mliska@suse.cz" date="1552996800">- Add gcc9-fix-werror.patch in order to fix bsc#1128299.
- Adjust project URL as we're using the Intel's fork.</changelog>
  <changelog author="mliska@suse.cz" date="1557403200">- Disable -Werror (boo#1128299) and remove gcc9-fix-werror.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1557835200">- Add disable-werror.patch.</changelog>
  <changelog author="hare@suse.com" date="1574164800">- Update to version v1.0.1+95.3168e11:
  * Test with newer GCC 8 and 9 versions
  * RPM build is broken, so skip
  * Place the tarball in the right place
  * A tarball needs to be built after bootstrap.sh for use with RPM
  * Added missing steps for building an RPM
  * Finish off with testing building the RPM
  * Test package installation as well
  * Test under multiple GCC releases
  * Drop requirement for Travis CI testing with Clang
  * Support checking build with Travis CI
  * vdp-netlink: account for sizes properly
  * qbg: avoid warning for extra parens
  * qbg: port name is always a valid pointer
  * dcbx-nl: drop run_cmd
  * ecp: allow for failure to create
  * lldp_util: allow for null ifa_addr element
  * lldpad: Do not enable port if already enabled
  * Silent -Werror=address-of-packed-member warnings.
  * Come up with STRNCPY_TERMINATED (#25).
  * vdptool: fixed compile error for getline()
  * Fix #23 by off by one strncpy value.
  * 8021qaz: Block lldptool set operations if read only mode is on
  * 8021qaz: Add read only option for 8021qaz module
  * lldp: Allow lldptool to modify optional TLV's content
  * 8021qaz: Print dscp2prio map
  * autoconf: Add systemd support in configure.ac
  * rpm-spec: Add vdp22 man files to lldpad.spec.in</changelog>
  <changelog author="hare@suse.com" date="1574164801">- Update to version v1.0.1+102.4c7fcc3:
  * l2_packet: Guard ETH_P_LLDP define (edit: fixes bsc#1156545)
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd directly:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="mliska@suse.cz" date="1586174400">- Use -fcommon in order to fix boo#1160407.</changelog>
  <changelog author="hare@suse.de" date="1596542400">- Update to version v1.0.1+63.f977e67 (bsc#1171284,bsc#1170745,bsc#1153520):
  * lldp/rx.c: Reset state machine variable in process_delete_info()
  * lldp: do not call 'assert' in rxProcessFrame()
  * ecp: allow for failure to create
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="lduncan@suse.com" date="1599220800">- Moved sources from github.com/intel to github/openSUSE
  * upgrading to version v1.0.1+110.6009075a9fcc
  - merged in latest upstream (no API changes)</changelog>
  <changelog author="lduncan@suse.com" date="1599393600">- Update to version v1.0.1+69.e8f522565f5a to removed commpiler
  and rpmlint complaints:
  * Fix bash-completion dir: don't use /etc
  * Fix compiler issue with strcpy(): use memcpy
  * Fix compiler complaint argument type mismatch.
  * Fix compiler complaint declaration vs function.
  * Fix compiler complaint copying to packed member.
  * add 'lldpad.socket' to the '%service_*' macros in the SPEC
    file</changelog>
  <changelog author="lduncan@suse.com" date="1604923200">- Update to version v1.1+15.ef8495548d04, by merging
  upstream version 1.1 + latest, including:
  * Fix merge error: remove bogus line
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  This removed the need for the patch disable-werror.patch.</changelog>
  <changelog author="lduncan@suse.com" date="1607601600">- Update to version v1.1+18.0e969d0edcc4:
  * event_iface: only set rcv buf size if too small (bsc#1175570)</changelog>
  <changelog author="lduncan@suse.com" date="1610107200">- Update to version v1.1+36.e926f7172b96:
  * tx: rename variable
  * event_iface: only set rcv buf size if too small (bsc#1175570)
  * tx: when operating in rx-only mode don't send a port shutdown pdu
  * Update .travis.yml
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  * autoconf: convenience to setup asan and ubsan
  * Post 1.1 release</changelog>
  <changelog author="lduncan@suse.com" date="1632139200">- Update to version v1.1+44.0f781b4162d3:
  * agent: reset frame status on message delete
  * Avoiding null pointer dereference</changelog>
  <changelog author="lduncan@suse.com" date="1666785600">- Update to version v1.1+58.8ca361bab766:
  * clif: Include string.h for mem* function prototypes
  * basman: use return address when pulling address
  * Revert "Use interface index instead of name in libconfig"
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
  <changelog author="tabraham@suse.com" date="1704974400">- Update to version latest Intel upstream (v1.1+77.75e83b6fb98e, jsc#PED-6852):
  * lldpad: dcbx: prevent null dereference in dcbx_free_data (bsc#1212749)
  * dcbx: Fix use-after-free
  * dcbx: Fix NULL pointer dereference
  * dcbx: Fix leak when receiving legacy TLVs with mismatched mode
  * lldp: Reject frames with duplicate TLVs
  * dcbx: Free manifest in rchange callback
  * dcbx: Avoid memory leak if ifup is called twice
  * ctrl_iface: Fix a memory leak in ctrl_iface_deinit
  * lldp: Avoid sending uninitialized data
  * lldptool: fix null pointer deference
  * Revert "Use interface index instead of name in libconfig"
  * Avoiding null pointer dereference
  * agent: reset frame status on message delete
  * basman: use return address when pulling address
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
</package>
<package pkgid="e89ea265c2fc9767f95eedd0994741300bd023aeba7f51751b824642cc2e86cd" name="open-lldp" arch="s390x">
  <version epoch="0" ver="1.1+77.75e83b6" rel="150500.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1488283200">- Don't use full URL as source, as the tarball does not exist at
  that location.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Fix calling of fillup_only: it knows no -i parameter.</changelog>
  <changelog author="hare@suse.de" date="1547121600">- Update to git commit cb81e9541b5 (FATE#326034,bug#1104011)
  * 8021qaz: Remove unused variable
  * 8021qaz: Honor willing value from config file
  * lldpad: Support DSCP selectors in APP TLV's
  * Fix application tlv display
  * basman_clif: print the OID properly
  * ecp22: deinit l2_packet_data before freeing ecp22
  * DCB set state operation return value check
  * memleak on received TLVs from modules
  * Use interface index instead of name in libconfig
  * Fix 'is_valid_mac' to include mcast mac address
  * lldpad: Fix segfault in lldptool
  * Fixup disabling PG
  + open-lldp-v1.0.1+56.cb81e95.tar.xz
- Remove superseded files
  - open-lldp-1.0.1.tar.gz
  - open-lldp-git-update.patch.bz2
  - open-lldp-gcc5.patch
  - 0001-l2_linux_packet-correctly-process-return-value-of-ge.patch
  - 0002-lldpad-Only-set-Tx-adminStatus-if-interface-is-not-m.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mliska@suse.cz" date="1552996800">- Add gcc9-fix-werror.patch in order to fix bsc#1128299.
- Adjust project URL as we're using the Intel's fork.</changelog>
  <changelog author="mliska@suse.cz" date="1557403200">- Disable -Werror (boo#1128299) and remove gcc9-fix-werror.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1557835200">- Add disable-werror.patch.</changelog>
  <changelog author="hare@suse.com" date="1574164800">- Update to version v1.0.1+95.3168e11:
  * Test with newer GCC 8 and 9 versions
  * RPM build is broken, so skip
  * Place the tarball in the right place
  * A tarball needs to be built after bootstrap.sh for use with RPM
  * Added missing steps for building an RPM
  * Finish off with testing building the RPM
  * Test package installation as well
  * Test under multiple GCC releases
  * Drop requirement for Travis CI testing with Clang
  * Support checking build with Travis CI
  * vdp-netlink: account for sizes properly
  * qbg: avoid warning for extra parens
  * qbg: port name is always a valid pointer
  * dcbx-nl: drop run_cmd
  * ecp: allow for failure to create
  * lldp_util: allow for null ifa_addr element
  * lldpad: Do not enable port if already enabled
  * Silent -Werror=address-of-packed-member warnings.
  * Come up with STRNCPY_TERMINATED (#25).
  * vdptool: fixed compile error for getline()
  * Fix #23 by off by one strncpy value.
  * 8021qaz: Block lldptool set operations if read only mode is on
  * 8021qaz: Add read only option for 8021qaz module
  * lldp: Allow lldptool to modify optional TLV's content
  * 8021qaz: Print dscp2prio map
  * autoconf: Add systemd support in configure.ac
  * rpm-spec: Add vdp22 man files to lldpad.spec.in</changelog>
  <changelog author="hare@suse.com" date="1574164801">- Update to version v1.0.1+102.4c7fcc3:
  * l2_packet: Guard ETH_P_LLDP define (edit: fixes bsc#1156545)
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd directly:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="mliska@suse.cz" date="1586174400">- Use -fcommon in order to fix boo#1160407.</changelog>
  <changelog author="hare@suse.de" date="1596542400">- Update to version v1.0.1+63.f977e67 (bsc#1171284,bsc#1170745,bsc#1153520):
  * lldp/rx.c: Reset state machine variable in process_delete_info()
  * lldp: do not call 'assert' in rxProcessFrame()
  * ecp: allow for failure to create
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="lduncan@suse.com" date="1599220800">- Moved sources from github.com/intel to github/openSUSE
  * upgrading to version v1.0.1+110.6009075a9fcc
  - merged in latest upstream (no API changes)</changelog>
  <changelog author="lduncan@suse.com" date="1599393600">- Update to version v1.0.1+69.e8f522565f5a to removed commpiler
  and rpmlint complaints:
  * Fix bash-completion dir: don't use /etc
  * Fix compiler issue with strcpy(): use memcpy
  * Fix compiler complaint argument type mismatch.
  * Fix compiler complaint declaration vs function.
  * Fix compiler complaint copying to packed member.
  * add 'lldpad.socket' to the '%service_*' macros in the SPEC
    file</changelog>
  <changelog author="lduncan@suse.com" date="1604923200">- Update to version v1.1+15.ef8495548d04, by merging
  upstream version 1.1 + latest, including:
  * Fix merge error: remove bogus line
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  This removed the need for the patch disable-werror.patch.</changelog>
  <changelog author="lduncan@suse.com" date="1607601600">- Update to version v1.1+18.0e969d0edcc4:
  * event_iface: only set rcv buf size if too small (bsc#1175570)</changelog>
  <changelog author="lduncan@suse.com" date="1610107200">- Update to version v1.1+36.e926f7172b96:
  * tx: rename variable
  * event_iface: only set rcv buf size if too small (bsc#1175570)
  * tx: when operating in rx-only mode don't send a port shutdown pdu
  * Update .travis.yml
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  * autoconf: convenience to setup asan and ubsan
  * Post 1.1 release</changelog>
  <changelog author="lduncan@suse.com" date="1632139200">- Update to version v1.1+44.0f781b4162d3:
  * agent: reset frame status on message delete
  * Avoiding null pointer dereference</changelog>
  <changelog author="lduncan@suse.com" date="1666785600">- Update to version v1.1+58.8ca361bab766:
  * clif: Include string.h for mem* function prototypes
  * basman: use return address when pulling address
  * Revert "Use interface index instead of name in libconfig"
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
  <changelog author="tabraham@suse.com" date="1704974400">- Update to version latest Intel upstream (v1.1+77.75e83b6fb98e, jsc#PED-6852):
  * lldpad: dcbx: prevent null dereference in dcbx_free_data (bsc#1212749)
  * dcbx: Fix use-after-free
  * dcbx: Fix NULL pointer dereference
  * dcbx: Fix leak when receiving legacy TLVs with mismatched mode
  * lldp: Reject frames with duplicate TLVs
  * dcbx: Free manifest in rchange callback
  * dcbx: Avoid memory leak if ifup is called twice
  * ctrl_iface: Fix a memory leak in ctrl_iface_deinit
  * lldp: Avoid sending uninitialized data
  * lldptool: fix null pointer deference
  * Revert "Use interface index instead of name in libconfig"
  * Avoiding null pointer dereference
  * agent: reset frame status on message delete
  * basman: use return address when pulling address
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
</package>
<package pkgid="5026cd59f1a783e3a933cac83e955b3c76c65059cf576035e5eaa5610338d03d" name="open-lldp" arch="src">
  <version epoch="0" ver="1.1+77.75e83b6" rel="150500.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1488283200">- Don't use full URL as source, as the tarball does not exist at
  that location.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Fix calling of fillup_only: it knows no -i parameter.</changelog>
  <changelog author="hare@suse.de" date="1547121600">- Update to git commit cb81e9541b5 (FATE#326034,bug#1104011)
  * 8021qaz: Remove unused variable
  * 8021qaz: Honor willing value from config file
  * lldpad: Support DSCP selectors in APP TLV's
  * Fix application tlv display
  * basman_clif: print the OID properly
  * ecp22: deinit l2_packet_data before freeing ecp22
  * DCB set state operation return value check
  * memleak on received TLVs from modules
  * Use interface index instead of name in libconfig
  * Fix 'is_valid_mac' to include mcast mac address
  * lldpad: Fix segfault in lldptool
  * Fixup disabling PG
  + open-lldp-v1.0.1+56.cb81e95.tar.xz
- Remove superseded files
  - open-lldp-1.0.1.tar.gz
  - open-lldp-git-update.patch.bz2
  - open-lldp-gcc5.patch
  - 0001-l2_linux_packet-correctly-process-return-value-of-ge.patch
  - 0002-lldpad-Only-set-Tx-adminStatus-if-interface-is-not-m.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mliska@suse.cz" date="1552996800">- Add gcc9-fix-werror.patch in order to fix bsc#1128299.
- Adjust project URL as we're using the Intel's fork.</changelog>
  <changelog author="mliska@suse.cz" date="1557403200">- Disable -Werror (boo#1128299) and remove gcc9-fix-werror.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1557835200">- Add disable-werror.patch.</changelog>
  <changelog author="hare@suse.com" date="1574164800">- Update to version v1.0.1+95.3168e11:
  * Test with newer GCC 8 and 9 versions
  * RPM build is broken, so skip
  * Place the tarball in the right place
  * A tarball needs to be built after bootstrap.sh for use with RPM
  * Added missing steps for building an RPM
  * Finish off with testing building the RPM
  * Test package installation as well
  * Test under multiple GCC releases
  * Drop requirement for Travis CI testing with Clang
  * Support checking build with Travis CI
  * vdp-netlink: account for sizes properly
  * qbg: avoid warning for extra parens
  * qbg: port name is always a valid pointer
  * dcbx-nl: drop run_cmd
  * ecp: allow for failure to create
  * lldp_util: allow for null ifa_addr element
  * lldpad: Do not enable port if already enabled
  * Silent -Werror=address-of-packed-member warnings.
  * Come up with STRNCPY_TERMINATED (#25).
  * vdptool: fixed compile error for getline()
  * Fix #23 by off by one strncpy value.
  * 8021qaz: Block lldptool set operations if read only mode is on
  * 8021qaz: Add read only option for 8021qaz module
  * lldp: Allow lldptool to modify optional TLV's content
  * 8021qaz: Print dscp2prio map
  * autoconf: Add systemd support in configure.ac
  * rpm-spec: Add vdp22 man files to lldpad.spec.in</changelog>
  <changelog author="hare@suse.com" date="1574164801">- Update to version v1.0.1+102.4c7fcc3:
  * l2_packet: Guard ETH_P_LLDP define (edit: fixes bsc#1156545)
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd directly:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="mliska@suse.cz" date="1586174400">- Use -fcommon in order to fix boo#1160407.</changelog>
  <changelog author="hare@suse.de" date="1596542400">- Update to version v1.0.1+63.f977e67 (bsc#1171284,bsc#1170745,bsc#1153520):
  * lldp/rx.c: Reset state machine variable in process_delete_info()
  * lldp: do not call 'assert' in rxProcessFrame()
  * ecp: allow for failure to create
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="lduncan@suse.com" date="1599220800">- Moved sources from github.com/intel to github/openSUSE
  * upgrading to version v1.0.1+110.6009075a9fcc
  - merged in latest upstream (no API changes)</changelog>
  <changelog author="lduncan@suse.com" date="1599393600">- Update to version v1.0.1+69.e8f522565f5a to removed commpiler
  and rpmlint complaints:
  * Fix bash-completion dir: don't use /etc
  * Fix compiler issue with strcpy(): use memcpy
  * Fix compiler complaint argument type mismatch.
  * Fix compiler complaint declaration vs function.
  * Fix compiler complaint copying to packed member.
  * add 'lldpad.socket' to the '%service_*' macros in the SPEC
    file</changelog>
  <changelog author="lduncan@suse.com" date="1604923200">- Update to version v1.1+15.ef8495548d04, by merging
  upstream version 1.1 + latest, including:
  * Fix merge error: remove bogus line
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  This removed the need for the patch disable-werror.patch.</changelog>
  <changelog author="lduncan@suse.com" date="1607601600">- Update to version v1.1+18.0e969d0edcc4:
  * event_iface: only set rcv buf size if too small (bsc#1175570)</changelog>
  <changelog author="lduncan@suse.com" date="1610107200">- Update to version v1.1+36.e926f7172b96:
  * tx: rename variable
  * event_iface: only set rcv buf size if too small (bsc#1175570)
  * tx: when operating in rx-only mode don't send a port shutdown pdu
  * Update .travis.yml
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  * autoconf: convenience to setup asan and ubsan
  * Post 1.1 release</changelog>
  <changelog author="lduncan@suse.com" date="1632139200">- Update to version v1.1+44.0f781b4162d3:
  * agent: reset frame status on message delete
  * Avoiding null pointer dereference</changelog>
  <changelog author="lduncan@suse.com" date="1666785600">- Update to version v1.1+58.8ca361bab766:
  * clif: Include string.h for mem* function prototypes
  * basman: use return address when pulling address
  * Revert "Use interface index instead of name in libconfig"
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
  <changelog author="tabraham@suse.com" date="1704974400">- Update to version latest Intel upstream (v1.1+77.75e83b6fb98e, jsc#PED-6852):
  * lldpad: dcbx: prevent null dereference in dcbx_free_data (bsc#1212749)
  * dcbx: Fix use-after-free
  * dcbx: Fix NULL pointer dereference
  * dcbx: Fix leak when receiving legacy TLVs with mismatched mode
  * lldp: Reject frames with duplicate TLVs
  * dcbx: Free manifest in rchange callback
  * dcbx: Avoid memory leak if ifup is called twice
  * ctrl_iface: Fix a memory leak in ctrl_iface_deinit
  * lldp: Avoid sending uninitialized data
  * lldptool: fix null pointer deference
  * Revert "Use interface index instead of name in libconfig"
  * Avoiding null pointer dereference
  * agent: reset frame status on message delete
  * basman: use return address when pulling address
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
</package>
<package pkgid="b64499e008cb73ff1a5cd1c9ccf087266fb0d73b0c73abad24d2f4b3454a4ce3" name="open-lldp" arch="x86_64">
  <version epoch="0" ver="1.1+77.75e83b6" rel="150500.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1488283200">- Don't use full URL as source, as the tarball does not exist at
  that location.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Fix calling of fillup_only: it knows no -i parameter.</changelog>
  <changelog author="hare@suse.de" date="1547121600">- Update to git commit cb81e9541b5 (FATE#326034,bug#1104011)
  * 8021qaz: Remove unused variable
  * 8021qaz: Honor willing value from config file
  * lldpad: Support DSCP selectors in APP TLV's
  * Fix application tlv display
  * basman_clif: print the OID properly
  * ecp22: deinit l2_packet_data before freeing ecp22
  * DCB set state operation return value check
  * memleak on received TLVs from modules
  * Use interface index instead of name in libconfig
  * Fix 'is_valid_mac' to include mcast mac address
  * lldpad: Fix segfault in lldptool
  * Fixup disabling PG
  + open-lldp-v1.0.1+56.cb81e95.tar.xz
- Remove superseded files
  - open-lldp-1.0.1.tar.gz
  - open-lldp-git-update.patch.bz2
  - open-lldp-gcc5.patch
  - 0001-l2_linux_packet-correctly-process-return-value-of-ge.patch
  - 0002-lldpad-Only-set-Tx-adminStatus-if-interface-is-not-m.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mliska@suse.cz" date="1552996800">- Add gcc9-fix-werror.patch in order to fix bsc#1128299.
- Adjust project URL as we're using the Intel's fork.</changelog>
  <changelog author="mliska@suse.cz" date="1557403200">- Disable -Werror (boo#1128299) and remove gcc9-fix-werror.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1557835200">- Add disable-werror.patch.</changelog>
  <changelog author="hare@suse.com" date="1574164800">- Update to version v1.0.1+95.3168e11:
  * Test with newer GCC 8 and 9 versions
  * RPM build is broken, so skip
  * Place the tarball in the right place
  * A tarball needs to be built after bootstrap.sh for use with RPM
  * Added missing steps for building an RPM
  * Finish off with testing building the RPM
  * Test package installation as well
  * Test under multiple GCC releases
  * Drop requirement for Travis CI testing with Clang
  * Support checking build with Travis CI
  * vdp-netlink: account for sizes properly
  * qbg: avoid warning for extra parens
  * qbg: port name is always a valid pointer
  * dcbx-nl: drop run_cmd
  * ecp: allow for failure to create
  * lldp_util: allow for null ifa_addr element
  * lldpad: Do not enable port if already enabled
  * Silent -Werror=address-of-packed-member warnings.
  * Come up with STRNCPY_TERMINATED (#25).
  * vdptool: fixed compile error for getline()
  * Fix #23 by off by one strncpy value.
  * 8021qaz: Block lldptool set operations if read only mode is on
  * 8021qaz: Add read only option for 8021qaz module
  * lldp: Allow lldptool to modify optional TLV's content
  * 8021qaz: Print dscp2prio map
  * autoconf: Add systemd support in configure.ac
  * rpm-spec: Add vdp22 man files to lldpad.spec.in</changelog>
  <changelog author="hare@suse.com" date="1574164801">- Update to version v1.0.1+102.4c7fcc3:
  * l2_packet: Guard ETH_P_LLDP define (edit: fixes bsc#1156545)
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd directly:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="mliska@suse.cz" date="1586174400">- Use -fcommon in order to fix boo#1160407.</changelog>
  <changelog author="hare@suse.de" date="1596542400">- Update to version v1.0.1+63.f977e67 (bsc#1171284,bsc#1170745,bsc#1153520):
  * lldp/rx.c: Reset state machine variable in process_delete_info()
  * lldp: do not call 'assert' in rxProcessFrame()
  * ecp: allow for failure to create
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="lduncan@suse.com" date="1599220800">- Moved sources from github.com/intel to github/openSUSE
  * upgrading to version v1.0.1+110.6009075a9fcc
  - merged in latest upstream (no API changes)</changelog>
  <changelog author="lduncan@suse.com" date="1599393600">- Update to version v1.0.1+69.e8f522565f5a to removed commpiler
  and rpmlint complaints:
  * Fix bash-completion dir: don't use /etc
  * Fix compiler issue with strcpy(): use memcpy
  * Fix compiler complaint argument type mismatch.
  * Fix compiler complaint declaration vs function.
  * Fix compiler complaint copying to packed member.
  * add 'lldpad.socket' to the '%service_*' macros in the SPEC
    file</changelog>
  <changelog author="lduncan@suse.com" date="1604923200">- Update to version v1.1+15.ef8495548d04, by merging
  upstream version 1.1 + latest, including:
  * Fix merge error: remove bogus line
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  This removed the need for the patch disable-werror.patch.</changelog>
  <changelog author="lduncan@suse.com" date="1607601600">- Update to version v1.1+18.0e969d0edcc4:
  * event_iface: only set rcv buf size if too small (bsc#1175570)</changelog>
  <changelog author="lduncan@suse.com" date="1610107200">- Update to version v1.1+36.e926f7172b96:
  * tx: rename variable
  * event_iface: only set rcv buf size if too small (bsc#1175570)
  * tx: when operating in rx-only mode don't send a port shutdown pdu
  * Update .travis.yml
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  * autoconf: convenience to setup asan and ubsan
  * Post 1.1 release</changelog>
  <changelog author="lduncan@suse.com" date="1632139200">- Update to version v1.1+44.0f781b4162d3:
  * agent: reset frame status on message delete
  * Avoiding null pointer dereference</changelog>
  <changelog author="lduncan@suse.com" date="1666785600">- Update to version v1.1+58.8ca361bab766:
  * clif: Include string.h for mem* function prototypes
  * basman: use return address when pulling address
  * Revert "Use interface index instead of name in libconfig"
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
  <changelog author="tabraham@suse.com" date="1704974400">- Update to version latest Intel upstream (v1.1+77.75e83b6fb98e, jsc#PED-6852):
  * lldpad: dcbx: prevent null dereference in dcbx_free_data (bsc#1212749)
  * dcbx: Fix use-after-free
  * dcbx: Fix NULL pointer dereference
  * dcbx: Fix leak when receiving legacy TLVs with mismatched mode
  * lldp: Reject frames with duplicate TLVs
  * dcbx: Free manifest in rchange callback
  * dcbx: Avoid memory leak if ifup is called twice
  * ctrl_iface: Fix a memory leak in ctrl_iface_deinit
  * lldp: Avoid sending uninitialized data
  * lldptool: fix null pointer deference
  * Revert "Use interface index instead of name in libconfig"
  * Avoiding null pointer dereference
  * agent: reset frame status on message delete
  * basman: use return address when pulling address
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
</package>
<package pkgid="6dd1eb15087fd6f4fec849d60becd881be2e9640218aed1ac4cba2eb8045064a" name="open-vm-tools" arch="src">
  <version epoch="0" ver="12.3.0" rel="150300.40.1"/>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- limit to protobuf &lt; 22 for now until build failures have been fixed</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
</package>
<package pkgid="074b3782faa8af65d3f018bdc1da4882b0fb4ea3cd14ff1e1fc7dc5518cddbd7" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="12.3.0" rel="150300.40.1"/>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- limit to protobuf &lt; 22 for now until build failures have been fixed</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
</package>
<package pkgid="89dbcb6e0279ce2bd921ae279c049f4c3002672adfeafd097321bff693a741b5" name="open-vm-tools" arch="src">
  <version epoch="0" ver="12.3.0" rel="150300.43.1"/>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- limit to protobuf &lt; 22 for now until build failures have been fixed</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
</package>
<package pkgid="a5d51aa3d61016e60ba79464c7af260a6853af21040e1bd0698b94a7b6001348" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="12.3.0" rel="150300.43.1"/>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- limit to protobuf &lt; 22 for now until build failures have been fixed</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
</package>
<package pkgid="83465ccabfb43714140929fcaac01b11a3f62fe22fd07bce08f6fa0cacfacd96" name="open-vm-tools" arch="src">
  <version epoch="0" ver="12.3.5" rel="150300.46.1"/>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- limit to protobuf &lt; 22 for now until build failures have been fixed</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
</package>
<package pkgid="3a2e53de84ccb724b8241bef9e10346dd483ad3e3d2ac15a541f1a2f7b259ffc" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="12.3.5" rel="150300.46.1"/>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- limit to protobuf &lt; 22 for now until build failures have been fixed</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
</package>
<package pkgid="80e844f720c01772bfefc35fff9c7040bf1797a72616695fc383e5de157da7b9" name="opensc" arch="aarch64">
  <version epoch="0" ver="0.22.0" rel="150400.3.6.1"/>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
  <changelog author="kbabioch@suse.com" date="1536840000">- Update to version 0.19.0
  * Fixed multiple security problems (out of bound writes/reads):
  * bsc#1104812
  * CVE-2018-16391 (bsc#1106998)
  * CVE-2018-16392 (bsc#1106999)
  * CVE-2018-16393 (bsc#1108318)
  * CVE-2018-16418 (bsc#1107039)
  * CVE-2018-16419 (bsc#1107107)
  * CVE-2018-16420 (bsc#1107097)
  * CVE-2018-16421 (bsc#1107049)
  * CVE-2018-16422 (bsc#1107038)
  * CVE-2018-16423 (bsc#1107037)
  * CVE-2018-16424 (bsc#1107036)
  * CVE-2018-16425 (bsc#1107035)
  * CVE-2018-16426 (bsc#1107034)
  * CVE-2018-16427 (bsc#1107033)
  * Workaround cards returning short signatures without leading zeroes
  * Distribute minimal opensc.conf
  * `pkcs11_enable_InitToken made` global configuration option
  * Modify behavior of `OPENSC_DRIVER` environment variable to restrict driver
    list instead of forcing one driver and skipping vital parts of
    configuration
  * Removed configuration options `zero_ckaid_for_ca_certs`,
    `force_card_driver`, `reopen_debug_file`, `paranoid-memory`
  * Generalized configuration option `ignored_readers`
  * If card initialization fails, continue card detection with other card
    drivers
  * reader-pcsc: allow fixing the length of a PIN
  * fixed crash during `C_WaitForSlotEvent`
  * Allow cancelling the PIN pad prompt before starting the reader transaction.
    Whether to start the transaction immediately or not is user-configurable
    for each application
  * opensc-notify
  * add Exit button to tray icon
  * User better description (GenericName) and a generic application icon
  * Do not display in the application list
- Removed patches included upstream now:
  * opensc-desktop.patch
  * opensc-desktop2.patch
  * opensc-bash-completions.patch
- Applied spec-cleaner</changelog>
  <changelog author="code@bnavigator.de" date="1563883200">- add explicit BuildRequires: zlib-devel</changelog>
  <changelog author="jsikes@suse.de" date="1564488000">- added opensc-0.19.0-rsa-pss.patch
  * Fixes the pkcs11-tool example
  * Added missing CKM_SHA224_RSA_PKCS_PSS
  * Add support for PSS padding to RSA signatures
  * Support for signature verification in pkcs11-tool
  * Switch cleanup steps to avoid segfaults on errors and more sanity checking
- added opensc-0.19.0-redundant_logging.patch
  * Remove redundant debug output</changelog>
  <changelog author="jsikes@suse.com" date="1566129600">- added opensc-0.19.0-piv_card_matching.patch
  * Improve Card Matching for Dual CAC/PIV and PIVKEY cards.
  * sourced from https://github.com/OpenSC/OpenSC/pull/1549</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606478400">- OpenSC 0.21.0:
  * CVE-2020-26571: stack-based buffer overflow in the gemsafe GPK
    smart card software driver (boo#1177380)
  * CVE-2020-26572: stack-based buffer overflow in the TCOS smart
    card software driver (boo#1177378)
  * CVE-2020-26570: heap-based buffer overflow in the Oberthur
    smart card software driver (boo#1177364)
  * CardOS 5.x support boo#1179291
  * Support for OAEP encryption, make SHA256 default
  * New separate debug level for PIN commands
  * Fix handling of card/reader insertion/removal events in pcscd
  * Fixes of removed readers handling
  * Fix Firefox crash because of invalid pcsc context
  * PKCS#11: Return CKR_TOKEN_NOT_RECOGNIZED for not recognized cards
  * Propagate ignore_user_content to PKCS#11 layer not to confuse applications
  * Minidriver: Fix check of ATR length (2-to 33 characters inclusive)
  * pkcs11-tool: allow using SW tokens
  * opensc-explorer asn1 accepts offsets and decode records
  * opensc-explorer cat accepts records
  * OpenPGP: Add new ec curves supported by GNUK
  * First steps supporting OpenPGP 3.4
  * OpenPGP: Add support for EC key import
  * Rutoken: Add ATR for Rutoken ECP SC NFC
  * Improve detection of various CardOS 5 configurations
  * DNIe: Add new DNIe CA structure for the secure channel
  * ePass2003: Improve ECC support
  * ePass2003: Fix erase sequence
  * IAS-ECC: Fix support for Idemia Cosmo cards
  * IAS-ECC: PIN padding settings are now used from PKCS#15 info when available
  * IAS-ECC: Added PIN-pad support for PIN unblock
  * New driver for Gemalto IDPrime (only some types)
  * eDo: New driver with initial support for Polish eID card (e-dowód, eDO)
  * MCRD: Remove unused and broken RSA EstEID support
  * TCOS: Add missing encryption certificates
  * PIV: Add ATR of DOD Yubikey
  * fixed PIV global pin bug
  * CAC1: Support changing PIN with CAC Alt tokens
- includes changes from 0.20.0
  * CVE-2019-6502: memory leak in libopensc (boo#1122756)
  * CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string (boo#1149747)
  * CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring (boo#1149746)
  * CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (boo#1158256)
  * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307)
  * CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809)
  * Support RSA-PSS signature mechanisms using RSA-RAW
  * Added memory locking for secrets
  * added support for terminal colors
  * PC/SC driver: Fixed error handling in case of changing or removing the card reader
  * rename md_read_only to read_only and use it for PKCS#11 and Minidriver
  * allow global use of ignore_private_certificate
  * PKCS#11: Implement write protection (CKF_WRITE_PROTECTED) based on the card profile
  * PKCS#11: Add C_WrapKey and C_UnwrapKey implementations
  * PKCS#11: Handle CKA_ALWAYS_AUTHENTICATE when creating key objects
  * PKCS#11: Truncate long PKCS#11 labels with ...
  * PKCS#11: Fixed recognition of a token when being unplugged and reinserted
  * Minidriver: Register for CardOS5 cards
  * Minidriver: Add support for RSA-PSS
  * tools: Harmonize the use of option -r/--reader
  * goid-tool: GoID personalization with fingerprint
  * openpgp-tool: replace the options -L/--key-length with -t/--key-type
  * openpgp-tool: add options -C/--card-info and -K/--key-info
  * opensc-explorer: add command pin_info, extend random
  * pkcs11-register: Auto-configuration of applications for use of OpenSC PKCS#11
  * pkcd11-register: Autostart
  * opensc-tool: Show ATR also for cards not recognized by OpenSC
  * pkcs11-spy: parse CKM_AES_GCM, EC Derive parameters
  * pkcs11-spy: Add support for CKA_OTP_* and CKM_*_PSS values
  * pkcs11-tool: Support for signature verification via --verify
  * pkcs11-tool: Add object type secrkey for --type option
  * pkcs11-tool: Implement Secret Key write object
  * pkcs11-tool: Add GOSTR3410-2012 support
  * pkcs11-tool: Add support for testing CKM_RSA_PKCS_OAEP
  * pkcs11-tool: Add extractable option to key import
  * pkcs11-tool: list more key access flags when listing keys
  * pkcs11-tool: Add support for CKA_ALLOWED_MECHANISMS when creating new objects and listing keys
  * pkcs15-crypt: *Handle keys with user consent
  * New separate CAC1 driver using the old CAC specification (#1502)
  * CardOS: Add support for 4K RSA keys in CardOS 5
  * CardOS: Fixed decryption with CardOS 5
  * Enable CoolKey driver to handle 2048-bit keys
  * EstEID: add support for a minimalistic, small and fast card profile based on IAS-ECC issued since December 2018
  * GIDS Decipher fix (#1881)
  * GIDS: Allow RSA 4K support
  * MICARDO: Remove long expired EstEID 1.0/1.1 card support
  * MyEID: Add support for unwrapping a secret key with an RSA key or secret key
  * MyEID Add support for wrapping a secret key with a secret key
  * Support for MyEID 4K RSA
  * Support for OsEID
  * Gemalto GemSafe: add new PTeID ATRs, add support for 4K RSA keys
  * OpenPGP Card v3 ECC support
  * Add Rutoken ECP SC
  * Add Rutoken Lite
  * Add SmartCard-HSM 4K ATR
  * Add missing secp384r1 curve parameter
  * Stacros: Fix decipher with 2.3
  * Stacros: Add ATR for 2nd gen. eGK
  * Stacros: Add new ATR for 3.5
  * Stacros: Detect and allow Globalplatform PIN encoding
  * Fix TCOS IDKey support
  * TCOS: add encryption certificate for IDKey
  * Infocamere, Postecert, Cnipa: Remove profiles
  * Remove incomplete acos5 driver
- drop patches now upstream:
  * opensc-0.19.0-piv_card_matching.patch
  * opensc-0.19.0-redundant_logging.patch
  * opensc-0.19.0-rsa-pss.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="predivan@mts.rs" date="1624795200">- Fix build on GCC11
  * Add opensc-gcc11.patch from Fedora
    (https://github.com/OpenSC/OpenSC/pull/2241/)</changelog>
  <changelog author="daniel.donisa@suse.com" date="1633348800">- Update to OpenSC 0.22.0:
  * Removed changes in opensc-gcc11.patch already present in upstream.
  - See https://github.com/OpenSC/OpenSC/pull/2241/commits/e549e9c62eb4fcd2260800e2665071e4dd9bbbda
  * Removed some false positives from the openrc-rpmlintrc file.
  * Use standard paths for file cache on Linux (#2148) and OSX (#2214)
  * Various issues of memory/buffer handling in legacy drivers mostly reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc, westcos, gpk, flex, dnie, mcrd, authentic, belpic)
  * Add threading test to `pkcs11-tool` (#2067)
  * Add support to generate generic secret keys (#2140)
  * `opensc-explorer`: Print information about LCS (Life cycle status byte) (#2195)
  * Add support for Apple's arm64 (M1) binaries, removed TokenD. A seperate installer with TokenD (and without arm64 binaries) will be available (#2179).
  * Support for gcc11 and its new strict aliasing rules (#2241, #2260)
  * Initial support for building with OpenSSL 3.0 (#2343)
  * pkcs15-tool: Write data objects in binary mode (#2324)
  * Avoid limited size of log messages (#2352)
  * Support for ECDSA verification (#2211)
  * Support for ECDSA with different SHA hashes (#2190)
  * Prevent issues in p11-kit by not returning unexpected return codes (#2207)
  * Add support for PKCS#11 3.0: The new interfaces, profile objects and functions (#2096, #2293)
  * Standardize the version 2 on 2.20 in the code (#2096)
  * Fix CKA_MODIFIABLE and CKA_EXTRACTABLE  (#2176)
  * Copy arguments of C_Initialize (#2350)
  * Fix RSA-PSS signing (#2234)
  * Fix DO deletion (#2215)
  * Add support for (X)EdDSA keys (#1960)
  * Add support for applet version 3 and fix RSA-PSS mechanisms (#2205)
  * Add support for applet version 4 (#2332)
  * New configuration option for opensc.conf to disable pkcs1_padding (#2193)
  * Add support for ECDSA with different hashes (#2190)
  * Enable more mechanisms (#2178)
  * Fixed asking for a user pin when formatting a card (#1737)
  * Added support for French CPx Healthcare cards (#2217)
  * Added ATR for new CardOS 5.4 version (#2296)
  * Fixes security issues:
  * tcos: use after return (bsc#1192005, CVE-2021-42780)
  * oberthur: use after free (bsc#1191992, CVE-2021-42779)
  * oberthur: multiple heap buffer overflows (bsc#1192000,
    CVE-2021-42781)
  * multiple stack buffer overflow issues (bsc#1191957,
    CVE-2021-42782)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685620800">- Security Fix: [CVE-2023-2977, bsc#1211894]
  * opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()
  * Add opensc-CVE-2023-2977.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Security Fix: [CVE-2023-40660, bsc#1215762]
  * opensc: PIN bypass when card tracks its own login state
  * Add patches:
  - patches/opensc-0_22_0-CVE-2023-40660-1of2.patch
  - patches/opensc-0_22_0-CVE-2023-40660-2of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696593600">- Security Fix: [CVE-2023-40661, bsc#1215761]
  * opensc: multiple memory issues with pkcs15-init (enrollment tool)
  * Add patches:
  - opensc-CVE-2023-40661-1of12.patch
  - opensc-CVE-2023-40661-2of12.patch
  - opensc-CVE-2023-40661-3of12.patch
  - opensc-CVE-2023-40661-4of12.patch
  - opensc-CVE-2023-40661-5of12.patch
  - opensc-CVE-2023-40661-6of12.patch
  - opensc-CVE-2023-40661-7of12.patch
  - opensc-CVE-2023-40661-8of12.patch
  - opensc-CVE-2023-40661-9of12.patch
  - opensc-CVE-2023-40661-10of12.patch
  - opensc-CVE-2023-40661-11of12.patch
  - opensc-CVE-2023-40661-12of12.patch</changelog>
</package>
<package pkgid="9ce6d260f3651309d75c7e21501cea4973ec12582bcd92e73ceb831688724a16" name="opensc" arch="s390x">
  <version epoch="0" ver="0.22.0" rel="150400.3.6.1"/>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
  <changelog author="kbabioch@suse.com" date="1536840000">- Update to version 0.19.0
  * Fixed multiple security problems (out of bound writes/reads):
  * bsc#1104812
  * CVE-2018-16391 (bsc#1106998)
  * CVE-2018-16392 (bsc#1106999)
  * CVE-2018-16393 (bsc#1108318)
  * CVE-2018-16418 (bsc#1107039)
  * CVE-2018-16419 (bsc#1107107)
  * CVE-2018-16420 (bsc#1107097)
  * CVE-2018-16421 (bsc#1107049)
  * CVE-2018-16422 (bsc#1107038)
  * CVE-2018-16423 (bsc#1107037)
  * CVE-2018-16424 (bsc#1107036)
  * CVE-2018-16425 (bsc#1107035)
  * CVE-2018-16426 (bsc#1107034)
  * CVE-2018-16427 (bsc#1107033)
  * Workaround cards returning short signatures without leading zeroes
  * Distribute minimal opensc.conf
  * `pkcs11_enable_InitToken made` global configuration option
  * Modify behavior of `OPENSC_DRIVER` environment variable to restrict driver
    list instead of forcing one driver and skipping vital parts of
    configuration
  * Removed configuration options `zero_ckaid_for_ca_certs`,
    `force_card_driver`, `reopen_debug_file`, `paranoid-memory`
  * Generalized configuration option `ignored_readers`
  * If card initialization fails, continue card detection with other card
    drivers
  * reader-pcsc: allow fixing the length of a PIN
  * fixed crash during `C_WaitForSlotEvent`
  * Allow cancelling the PIN pad prompt before starting the reader transaction.
    Whether to start the transaction immediately or not is user-configurable
    for each application
  * opensc-notify
  * add Exit button to tray icon
  * User better description (GenericName) and a generic application icon
  * Do not display in the application list
- Removed patches included upstream now:
  * opensc-desktop.patch
  * opensc-desktop2.patch
  * opensc-bash-completions.patch
- Applied spec-cleaner</changelog>
  <changelog author="code@bnavigator.de" date="1563883200">- add explicit BuildRequires: zlib-devel</changelog>
  <changelog author="jsikes@suse.de" date="1564488000">- added opensc-0.19.0-rsa-pss.patch
  * Fixes the pkcs11-tool example
  * Added missing CKM_SHA224_RSA_PKCS_PSS
  * Add support for PSS padding to RSA signatures
  * Support for signature verification in pkcs11-tool
  * Switch cleanup steps to avoid segfaults on errors and more sanity checking
- added opensc-0.19.0-redundant_logging.patch
  * Remove redundant debug output</changelog>
  <changelog author="jsikes@suse.com" date="1566129600">- added opensc-0.19.0-piv_card_matching.patch
  * Improve Card Matching for Dual CAC/PIV and PIVKEY cards.
  * sourced from https://github.com/OpenSC/OpenSC/pull/1549</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606478400">- OpenSC 0.21.0:
  * CVE-2020-26571: stack-based buffer overflow in the gemsafe GPK
    smart card software driver (boo#1177380)
  * CVE-2020-26572: stack-based buffer overflow in the TCOS smart
    card software driver (boo#1177378)
  * CVE-2020-26570: heap-based buffer overflow in the Oberthur
    smart card software driver (boo#1177364)
  * CardOS 5.x support boo#1179291
  * Support for OAEP encryption, make SHA256 default
  * New separate debug level for PIN commands
  * Fix handling of card/reader insertion/removal events in pcscd
  * Fixes of removed readers handling
  * Fix Firefox crash because of invalid pcsc context
  * PKCS#11: Return CKR_TOKEN_NOT_RECOGNIZED for not recognized cards
  * Propagate ignore_user_content to PKCS#11 layer not to confuse applications
  * Minidriver: Fix check of ATR length (2-to 33 characters inclusive)
  * pkcs11-tool: allow using SW tokens
  * opensc-explorer asn1 accepts offsets and decode records
  * opensc-explorer cat accepts records
  * OpenPGP: Add new ec curves supported by GNUK
  * First steps supporting OpenPGP 3.4
  * OpenPGP: Add support for EC key import
  * Rutoken: Add ATR for Rutoken ECP SC NFC
  * Improve detection of various CardOS 5 configurations
  * DNIe: Add new DNIe CA structure for the secure channel
  * ePass2003: Improve ECC support
  * ePass2003: Fix erase sequence
  * IAS-ECC: Fix support for Idemia Cosmo cards
  * IAS-ECC: PIN padding settings are now used from PKCS#15 info when available
  * IAS-ECC: Added PIN-pad support for PIN unblock
  * New driver for Gemalto IDPrime (only some types)
  * eDo: New driver with initial support for Polish eID card (e-dowód, eDO)
  * MCRD: Remove unused and broken RSA EstEID support
  * TCOS: Add missing encryption certificates
  * PIV: Add ATR of DOD Yubikey
  * fixed PIV global pin bug
  * CAC1: Support changing PIN with CAC Alt tokens
- includes changes from 0.20.0
  * CVE-2019-6502: memory leak in libopensc (boo#1122756)
  * CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string (boo#1149747)
  * CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring (boo#1149746)
  * CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (boo#1158256)
  * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307)
  * CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809)
  * Support RSA-PSS signature mechanisms using RSA-RAW
  * Added memory locking for secrets
  * added support for terminal colors
  * PC/SC driver: Fixed error handling in case of changing or removing the card reader
  * rename md_read_only to read_only and use it for PKCS#11 and Minidriver
  * allow global use of ignore_private_certificate
  * PKCS#11: Implement write protection (CKF_WRITE_PROTECTED) based on the card profile
  * PKCS#11: Add C_WrapKey and C_UnwrapKey implementations
  * PKCS#11: Handle CKA_ALWAYS_AUTHENTICATE when creating key objects
  * PKCS#11: Truncate long PKCS#11 labels with ...
  * PKCS#11: Fixed recognition of a token when being unplugged and reinserted
  * Minidriver: Register for CardOS5 cards
  * Minidriver: Add support for RSA-PSS
  * tools: Harmonize the use of option -r/--reader
  * goid-tool: GoID personalization with fingerprint
  * openpgp-tool: replace the options -L/--key-length with -t/--key-type
  * openpgp-tool: add options -C/--card-info and -K/--key-info
  * opensc-explorer: add command pin_info, extend random
  * pkcs11-register: Auto-configuration of applications for use of OpenSC PKCS#11
  * pkcd11-register: Autostart
  * opensc-tool: Show ATR also for cards not recognized by OpenSC
  * pkcs11-spy: parse CKM_AES_GCM, EC Derive parameters
  * pkcs11-spy: Add support for CKA_OTP_* and CKM_*_PSS values
  * pkcs11-tool: Support for signature verification via --verify
  * pkcs11-tool: Add object type secrkey for --type option
  * pkcs11-tool: Implement Secret Key write object
  * pkcs11-tool: Add GOSTR3410-2012 support
  * pkcs11-tool: Add support for testing CKM_RSA_PKCS_OAEP
  * pkcs11-tool: Add extractable option to key import
  * pkcs11-tool: list more key access flags when listing keys
  * pkcs11-tool: Add support for CKA_ALLOWED_MECHANISMS when creating new objects and listing keys
  * pkcs15-crypt: *Handle keys with user consent
  * New separate CAC1 driver using the old CAC specification (#1502)
  * CardOS: Add support for 4K RSA keys in CardOS 5
  * CardOS: Fixed decryption with CardOS 5
  * Enable CoolKey driver to handle 2048-bit keys
  * EstEID: add support for a minimalistic, small and fast card profile based on IAS-ECC issued since December 2018
  * GIDS Decipher fix (#1881)
  * GIDS: Allow RSA 4K support
  * MICARDO: Remove long expired EstEID 1.0/1.1 card support
  * MyEID: Add support for unwrapping a secret key with an RSA key or secret key
  * MyEID Add support for wrapping a secret key with a secret key
  * Support for MyEID 4K RSA
  * Support for OsEID
  * Gemalto GemSafe: add new PTeID ATRs, add support for 4K RSA keys
  * OpenPGP Card v3 ECC support
  * Add Rutoken ECP SC
  * Add Rutoken Lite
  * Add SmartCard-HSM 4K ATR
  * Add missing secp384r1 curve parameter
  * Stacros: Fix decipher with 2.3
  * Stacros: Add ATR for 2nd gen. eGK
  * Stacros: Add new ATR for 3.5
  * Stacros: Detect and allow Globalplatform PIN encoding
  * Fix TCOS IDKey support
  * TCOS: add encryption certificate for IDKey
  * Infocamere, Postecert, Cnipa: Remove profiles
  * Remove incomplete acos5 driver
- drop patches now upstream:
  * opensc-0.19.0-piv_card_matching.patch
  * opensc-0.19.0-redundant_logging.patch
  * opensc-0.19.0-rsa-pss.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="predivan@mts.rs" date="1624795200">- Fix build on GCC11
  * Add opensc-gcc11.patch from Fedora
    (https://github.com/OpenSC/OpenSC/pull/2241/)</changelog>
  <changelog author="daniel.donisa@suse.com" date="1633348800">- Update to OpenSC 0.22.0:
  * Removed changes in opensc-gcc11.patch already present in upstream.
  - See https://github.com/OpenSC/OpenSC/pull/2241/commits/e549e9c62eb4fcd2260800e2665071e4dd9bbbda
  * Removed some false positives from the openrc-rpmlintrc file.
  * Use standard paths for file cache on Linux (#2148) and OSX (#2214)
  * Various issues of memory/buffer handling in legacy drivers mostly reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc, westcos, gpk, flex, dnie, mcrd, authentic, belpic)
  * Add threading test to `pkcs11-tool` (#2067)
  * Add support to generate generic secret keys (#2140)
  * `opensc-explorer`: Print information about LCS (Life cycle status byte) (#2195)
  * Add support for Apple's arm64 (M1) binaries, removed TokenD. A seperate installer with TokenD (and without arm64 binaries) will be available (#2179).
  * Support for gcc11 and its new strict aliasing rules (#2241, #2260)
  * Initial support for building with OpenSSL 3.0 (#2343)
  * pkcs15-tool: Write data objects in binary mode (#2324)
  * Avoid limited size of log messages (#2352)
  * Support for ECDSA verification (#2211)
  * Support for ECDSA with different SHA hashes (#2190)
  * Prevent issues in p11-kit by not returning unexpected return codes (#2207)
  * Add support for PKCS#11 3.0: The new interfaces, profile objects and functions (#2096, #2293)
  * Standardize the version 2 on 2.20 in the code (#2096)
  * Fix CKA_MODIFIABLE and CKA_EXTRACTABLE  (#2176)
  * Copy arguments of C_Initialize (#2350)
  * Fix RSA-PSS signing (#2234)
  * Fix DO deletion (#2215)
  * Add support for (X)EdDSA keys (#1960)
  * Add support for applet version 3 and fix RSA-PSS mechanisms (#2205)
  * Add support for applet version 4 (#2332)
  * New configuration option for opensc.conf to disable pkcs1_padding (#2193)
  * Add support for ECDSA with different hashes (#2190)
  * Enable more mechanisms (#2178)
  * Fixed asking for a user pin when formatting a card (#1737)
  * Added support for French CPx Healthcare cards (#2217)
  * Added ATR for new CardOS 5.4 version (#2296)
  * Fixes security issues:
  * tcos: use after return (bsc#1192005, CVE-2021-42780)
  * oberthur: use after free (bsc#1191992, CVE-2021-42779)
  * oberthur: multiple heap buffer overflows (bsc#1192000,
    CVE-2021-42781)
  * multiple stack buffer overflow issues (bsc#1191957,
    CVE-2021-42782)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685620800">- Security Fix: [CVE-2023-2977, bsc#1211894]
  * opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()
  * Add opensc-CVE-2023-2977.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Security Fix: [CVE-2023-40660, bsc#1215762]
  * opensc: PIN bypass when card tracks its own login state
  * Add patches:
  - patches/opensc-0_22_0-CVE-2023-40660-1of2.patch
  - patches/opensc-0_22_0-CVE-2023-40660-2of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696593600">- Security Fix: [CVE-2023-40661, bsc#1215761]
  * opensc: multiple memory issues with pkcs15-init (enrollment tool)
  * Add patches:
  - opensc-CVE-2023-40661-1of12.patch
  - opensc-CVE-2023-40661-2of12.patch
  - opensc-CVE-2023-40661-3of12.patch
  - opensc-CVE-2023-40661-4of12.patch
  - opensc-CVE-2023-40661-5of12.patch
  - opensc-CVE-2023-40661-6of12.patch
  - opensc-CVE-2023-40661-7of12.patch
  - opensc-CVE-2023-40661-8of12.patch
  - opensc-CVE-2023-40661-9of12.patch
  - opensc-CVE-2023-40661-10of12.patch
  - opensc-CVE-2023-40661-11of12.patch
  - opensc-CVE-2023-40661-12of12.patch</changelog>
</package>
<package pkgid="a92abbecd97b743968bef98078c7ee1ab42e453128ef9729a4ecd8b19b0f8dc5" name="opensc" arch="src">
  <version epoch="0" ver="0.22.0" rel="150400.3.6.1"/>
  <changelog author="mgorse@suse.com" date="1339502400">- make needed directories before running make install</changelog>
  <changelog author="luizluca@tre-sc.gov.br" date="1386072000">- update to version 0.13.0</changelog>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
  <changelog author="kbabioch@suse.com" date="1536840000">- Update to version 0.19.0
  * Fixed multiple security problems (out of bound writes/reads):
  * bsc#1104812
  * CVE-2018-16391 (bsc#1106998)
  * CVE-2018-16392 (bsc#1106999)
  * CVE-2018-16393 (bsc#1108318)
  * CVE-2018-16418 (bsc#1107039)
  * CVE-2018-16419 (bsc#1107107)
  * CVE-2018-16420 (bsc#1107097)
  * CVE-2018-16421 (bsc#1107049)
  * CVE-2018-16422 (bsc#1107038)
  * CVE-2018-16423 (bsc#1107037)
  * CVE-2018-16424 (bsc#1107036)
  * CVE-2018-16425 (bsc#1107035)
  * CVE-2018-16426 (bsc#1107034)
  * CVE-2018-16427 (bsc#1107033)
  * Workaround cards returning short signatures without leading zeroes
  * Distribute minimal opensc.conf
  * `pkcs11_enable_InitToken made` global configuration option
  * Modify behavior of `OPENSC_DRIVER` environment variable to restrict driver
    list instead of forcing one driver and skipping vital parts of
    configuration
  * Removed configuration options `zero_ckaid_for_ca_certs`,
    `force_card_driver`, `reopen_debug_file`, `paranoid-memory`
  * Generalized configuration option `ignored_readers`
  * If card initialization fails, continue card detection with other card
    drivers
  * reader-pcsc: allow fixing the length of a PIN
  * fixed crash during `C_WaitForSlotEvent`
  * Allow cancelling the PIN pad prompt before starting the reader transaction.
    Whether to start the transaction immediately or not is user-configurable
    for each application
  * opensc-notify
  * add Exit button to tray icon
  * User better description (GenericName) and a generic application icon
  * Do not display in the application list
- Removed patches included upstream now:
  * opensc-desktop.patch
  * opensc-desktop2.patch
  * opensc-bash-completions.patch
- Applied spec-cleaner</changelog>
  <changelog author="code@bnavigator.de" date="1563883200">- add explicit BuildRequires: zlib-devel</changelog>
  <changelog author="jsikes@suse.de" date="1564488000">- added opensc-0.19.0-rsa-pss.patch
  * Fixes the pkcs11-tool example
  * Added missing CKM_SHA224_RSA_PKCS_PSS
  * Add support for PSS padding to RSA signatures
  * Support for signature verification in pkcs11-tool
  * Switch cleanup steps to avoid segfaults on errors and more sanity checking
- added opensc-0.19.0-redundant_logging.patch
  * Remove redundant debug output</changelog>
  <changelog author="jsikes@suse.com" date="1566129600">- added opensc-0.19.0-piv_card_matching.patch
  * Improve Card Matching for Dual CAC/PIV and PIVKEY cards.
  * sourced from https://github.com/OpenSC/OpenSC/pull/1549</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606478400">- OpenSC 0.21.0:
  * CVE-2020-26571: stack-based buffer overflow in the gemsafe GPK
    smart card software driver (boo#1177380)
  * CVE-2020-26572: stack-based buffer overflow in the TCOS smart
    card software driver (boo#1177378)
  * CVE-2020-26570: heap-based buffer overflow in the Oberthur
    smart card software driver (boo#1177364)
  * CardOS 5.x support boo#1179291
  * Support for OAEP encryption, make SHA256 default
  * New separate debug level for PIN commands
  * Fix handling of card/reader insertion/removal events in pcscd
  * Fixes of removed readers handling
  * Fix Firefox crash because of invalid pcsc context
  * PKCS#11: Return CKR_TOKEN_NOT_RECOGNIZED for not recognized cards
  * Propagate ignore_user_content to PKCS#11 layer not to confuse applications
  * Minidriver: Fix check of ATR length (2-to 33 characters inclusive)
  * pkcs11-tool: allow using SW tokens
  * opensc-explorer asn1 accepts offsets and decode records
  * opensc-explorer cat accepts records
  * OpenPGP: Add new ec curves supported by GNUK
  * First steps supporting OpenPGP 3.4
  * OpenPGP: Add support for EC key import
  * Rutoken: Add ATR for Rutoken ECP SC NFC
  * Improve detection of various CardOS 5 configurations
  * DNIe: Add new DNIe CA structure for the secure channel
  * ePass2003: Improve ECC support
  * ePass2003: Fix erase sequence
  * IAS-ECC: Fix support for Idemia Cosmo cards
  * IAS-ECC: PIN padding settings are now used from PKCS#15 info when available
  * IAS-ECC: Added PIN-pad support for PIN unblock
  * New driver for Gemalto IDPrime (only some types)
  * eDo: New driver with initial support for Polish eID card (e-dowód, eDO)
  * MCRD: Remove unused and broken RSA EstEID support
  * TCOS: Add missing encryption certificates
  * PIV: Add ATR of DOD Yubikey
  * fixed PIV global pin bug
  * CAC1: Support changing PIN with CAC Alt tokens
- includes changes from 0.20.0
  * CVE-2019-6502: memory leak in libopensc (boo#1122756)
  * CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string (boo#1149747)
  * CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring (boo#1149746)
  * CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (boo#1158256)
  * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307)
  * CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809)
  * Support RSA-PSS signature mechanisms using RSA-RAW
  * Added memory locking for secrets
  * added support for terminal colors
  * PC/SC driver: Fixed error handling in case of changing or removing the card reader
  * rename md_read_only to read_only and use it for PKCS#11 and Minidriver
  * allow global use of ignore_private_certificate
  * PKCS#11: Implement write protection (CKF_WRITE_PROTECTED) based on the card profile
  * PKCS#11: Add C_WrapKey and C_UnwrapKey implementations
  * PKCS#11: Handle CKA_ALWAYS_AUTHENTICATE when creating key objects
  * PKCS#11: Truncate long PKCS#11 labels with ...
  * PKCS#11: Fixed recognition of a token when being unplugged and reinserted
  * Minidriver: Register for CardOS5 cards
  * Minidriver: Add support for RSA-PSS
  * tools: Harmonize the use of option -r/--reader
  * goid-tool: GoID personalization with fingerprint
  * openpgp-tool: replace the options -L/--key-length with -t/--key-type
  * openpgp-tool: add options -C/--card-info and -K/--key-info
  * opensc-explorer: add command pin_info, extend random
  * pkcs11-register: Auto-configuration of applications for use of OpenSC PKCS#11
  * pkcd11-register: Autostart
  * opensc-tool: Show ATR also for cards not recognized by OpenSC
  * pkcs11-spy: parse CKM_AES_GCM, EC Derive parameters
  * pkcs11-spy: Add support for CKA_OTP_* and CKM_*_PSS values
  * pkcs11-tool: Support for signature verification via --verify
  * pkcs11-tool: Add object type secrkey for --type option
  * pkcs11-tool: Implement Secret Key write object
  * pkcs11-tool: Add GOSTR3410-2012 support
  * pkcs11-tool: Add support for testing CKM_RSA_PKCS_OAEP
  * pkcs11-tool: Add extractable option to key import
  * pkcs11-tool: list more key access flags when listing keys
  * pkcs11-tool: Add support for CKA_ALLOWED_MECHANISMS when creating new objects and listing keys
  * pkcs15-crypt: *Handle keys with user consent
  * New separate CAC1 driver using the old CAC specification (#1502)
  * CardOS: Add support for 4K RSA keys in CardOS 5
  * CardOS: Fixed decryption with CardOS 5
  * Enable CoolKey driver to handle 2048-bit keys
  * EstEID: add support for a minimalistic, small and fast card profile based on IAS-ECC issued since December 2018
  * GIDS Decipher fix (#1881)
  * GIDS: Allow RSA 4K support
  * MICARDO: Remove long expired EstEID 1.0/1.1 card support
  * MyEID: Add support for unwrapping a secret key with an RSA key or secret key
  * MyEID Add support for wrapping a secret key with a secret key
  * Support for MyEID 4K RSA
  * Support for OsEID
  * Gemalto GemSafe: add new PTeID ATRs, add support for 4K RSA keys
  * OpenPGP Card v3 ECC support
  * Add Rutoken ECP SC
  * Add Rutoken Lite
  * Add SmartCard-HSM 4K ATR
  * Add missing secp384r1 curve parameter
  * Stacros: Fix decipher with 2.3
  * Stacros: Add ATR for 2nd gen. eGK
  * Stacros: Add new ATR for 3.5
  * Stacros: Detect and allow Globalplatform PIN encoding
  * Fix TCOS IDKey support
  * TCOS: add encryption certificate for IDKey
  * Infocamere, Postecert, Cnipa: Remove profiles
  * Remove incomplete acos5 driver
- drop patches now upstream:
  * opensc-0.19.0-piv_card_matching.patch
  * opensc-0.19.0-redundant_logging.patch
  * opensc-0.19.0-rsa-pss.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="predivan@mts.rs" date="1624795200">- Fix build on GCC11
  * Add opensc-gcc11.patch from Fedora
    (https://github.com/OpenSC/OpenSC/pull/2241/)</changelog>
  <changelog author="daniel.donisa@suse.com" date="1633348800">- Update to OpenSC 0.22.0:
  * Removed changes in opensc-gcc11.patch already present in upstream.
  - See https://github.com/OpenSC/OpenSC/pull/2241/commits/e549e9c62eb4fcd2260800e2665071e4dd9bbbda
  * Removed some false positives from the openrc-rpmlintrc file.
  * Use standard paths for file cache on Linux (#2148) and OSX (#2214)
  * Various issues of memory/buffer handling in legacy drivers mostly reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc, westcos, gpk, flex, dnie, mcrd, authentic, belpic)
  * Add threading test to `pkcs11-tool` (#2067)
  * Add support to generate generic secret keys (#2140)
  * `opensc-explorer`: Print information about LCS (Life cycle status byte) (#2195)
  * Add support for Apple's arm64 (M1) binaries, removed TokenD. A seperate installer with TokenD (and without arm64 binaries) will be available (#2179).
  * Support for gcc11 and its new strict aliasing rules (#2241, #2260)
  * Initial support for building with OpenSSL 3.0 (#2343)
  * pkcs15-tool: Write data objects in binary mode (#2324)
  * Avoid limited size of log messages (#2352)
  * Support for ECDSA verification (#2211)
  * Support for ECDSA with different SHA hashes (#2190)
  * Prevent issues in p11-kit by not returning unexpected return codes (#2207)
  * Add support for PKCS#11 3.0: The new interfaces, profile objects and functions (#2096, #2293)
  * Standardize the version 2 on 2.20 in the code (#2096)
  * Fix CKA_MODIFIABLE and CKA_EXTRACTABLE  (#2176)
  * Copy arguments of C_Initialize (#2350)
  * Fix RSA-PSS signing (#2234)
  * Fix DO deletion (#2215)
  * Add support for (X)EdDSA keys (#1960)
  * Add support for applet version 3 and fix RSA-PSS mechanisms (#2205)
  * Add support for applet version 4 (#2332)
  * New configuration option for opensc.conf to disable pkcs1_padding (#2193)
  * Add support for ECDSA with different hashes (#2190)
  * Enable more mechanisms (#2178)
  * Fixed asking for a user pin when formatting a card (#1737)
  * Added support for French CPx Healthcare cards (#2217)
  * Added ATR for new CardOS 5.4 version (#2296)
  * Fixes security issues:
  * tcos: use after return (bsc#1192005, CVE-2021-42780)
  * oberthur: use after free (bsc#1191992, CVE-2021-42779)
  * oberthur: multiple heap buffer overflows (bsc#1192000,
    CVE-2021-42781)
  * multiple stack buffer overflow issues (bsc#1191957,
    CVE-2021-42782)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685620800">- Security Fix: [CVE-2023-2977, bsc#1211894]
  * opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()
  * Add opensc-CVE-2023-2977.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Security Fix: [CVE-2023-40660, bsc#1215762]
  * opensc: PIN bypass when card tracks its own login state
  * Add patches:
  - patches/opensc-0_22_0-CVE-2023-40660-1of2.patch
  - patches/opensc-0_22_0-CVE-2023-40660-2of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696593600">- Security Fix: [CVE-2023-40661, bsc#1215761]
  * opensc: multiple memory issues with pkcs15-init (enrollment tool)
  * Add patches:
  - opensc-CVE-2023-40661-1of12.patch
  - opensc-CVE-2023-40661-2of12.patch
  - opensc-CVE-2023-40661-3of12.patch
  - opensc-CVE-2023-40661-4of12.patch
  - opensc-CVE-2023-40661-5of12.patch
  - opensc-CVE-2023-40661-6of12.patch
  - opensc-CVE-2023-40661-7of12.patch
  - opensc-CVE-2023-40661-8of12.patch
  - opensc-CVE-2023-40661-9of12.patch
  - opensc-CVE-2023-40661-10of12.patch
  - opensc-CVE-2023-40661-11of12.patch
  - opensc-CVE-2023-40661-12of12.patch</changelog>
</package>
<package pkgid="6d46e2a2a305fb1f77c52a01f983f45af0c541ff8ff568f5b4cb3a3582ac9d93" name="opensc" arch="x86_64">
  <version epoch="0" ver="0.22.0" rel="150400.3.6.1"/>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
  <changelog author="kbabioch@suse.com" date="1536840000">- Update to version 0.19.0
  * Fixed multiple security problems (out of bound writes/reads):
  * bsc#1104812
  * CVE-2018-16391 (bsc#1106998)
  * CVE-2018-16392 (bsc#1106999)
  * CVE-2018-16393 (bsc#1108318)
  * CVE-2018-16418 (bsc#1107039)
  * CVE-2018-16419 (bsc#1107107)
  * CVE-2018-16420 (bsc#1107097)
  * CVE-2018-16421 (bsc#1107049)
  * CVE-2018-16422 (bsc#1107038)
  * CVE-2018-16423 (bsc#1107037)
  * CVE-2018-16424 (bsc#1107036)
  * CVE-2018-16425 (bsc#1107035)
  * CVE-2018-16426 (bsc#1107034)
  * CVE-2018-16427 (bsc#1107033)
  * Workaround cards returning short signatures without leading zeroes
  * Distribute minimal opensc.conf
  * `pkcs11_enable_InitToken made` global configuration option
  * Modify behavior of `OPENSC_DRIVER` environment variable to restrict driver
    list instead of forcing one driver and skipping vital parts of
    configuration
  * Removed configuration options `zero_ckaid_for_ca_certs`,
    `force_card_driver`, `reopen_debug_file`, `paranoid-memory`
  * Generalized configuration option `ignored_readers`
  * If card initialization fails, continue card detection with other card
    drivers
  * reader-pcsc: allow fixing the length of a PIN
  * fixed crash during `C_WaitForSlotEvent`
  * Allow cancelling the PIN pad prompt before starting the reader transaction.
    Whether to start the transaction immediately or not is user-configurable
    for each application
  * opensc-notify
  * add Exit button to tray icon
  * User better description (GenericName) and a generic application icon
  * Do not display in the application list
- Removed patches included upstream now:
  * opensc-desktop.patch
  * opensc-desktop2.patch
  * opensc-bash-completions.patch
- Applied spec-cleaner</changelog>
  <changelog author="code@bnavigator.de" date="1563883200">- add explicit BuildRequires: zlib-devel</changelog>
  <changelog author="jsikes@suse.de" date="1564488000">- added opensc-0.19.0-rsa-pss.patch
  * Fixes the pkcs11-tool example
  * Added missing CKM_SHA224_RSA_PKCS_PSS
  * Add support for PSS padding to RSA signatures
  * Support for signature verification in pkcs11-tool
  * Switch cleanup steps to avoid segfaults on errors and more sanity checking
- added opensc-0.19.0-redundant_logging.patch
  * Remove redundant debug output</changelog>
  <changelog author="jsikes@suse.com" date="1566129600">- added opensc-0.19.0-piv_card_matching.patch
  * Improve Card Matching for Dual CAC/PIV and PIVKEY cards.
  * sourced from https://github.com/OpenSC/OpenSC/pull/1549</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606478400">- OpenSC 0.21.0:
  * CVE-2020-26571: stack-based buffer overflow in the gemsafe GPK
    smart card software driver (boo#1177380)
  * CVE-2020-26572: stack-based buffer overflow in the TCOS smart
    card software driver (boo#1177378)
  * CVE-2020-26570: heap-based buffer overflow in the Oberthur
    smart card software driver (boo#1177364)
  * CardOS 5.x support boo#1179291
  * Support for OAEP encryption, make SHA256 default
  * New separate debug level for PIN commands
  * Fix handling of card/reader insertion/removal events in pcscd
  * Fixes of removed readers handling
  * Fix Firefox crash because of invalid pcsc context
  * PKCS#11: Return CKR_TOKEN_NOT_RECOGNIZED for not recognized cards
  * Propagate ignore_user_content to PKCS#11 layer not to confuse applications
  * Minidriver: Fix check of ATR length (2-to 33 characters inclusive)
  * pkcs11-tool: allow using SW tokens
  * opensc-explorer asn1 accepts offsets and decode records
  * opensc-explorer cat accepts records
  * OpenPGP: Add new ec curves supported by GNUK
  * First steps supporting OpenPGP 3.4
  * OpenPGP: Add support for EC key import
  * Rutoken: Add ATR for Rutoken ECP SC NFC
  * Improve detection of various CardOS 5 configurations
  * DNIe: Add new DNIe CA structure for the secure channel
  * ePass2003: Improve ECC support
  * ePass2003: Fix erase sequence
  * IAS-ECC: Fix support for Idemia Cosmo cards
  * IAS-ECC: PIN padding settings are now used from PKCS#15 info when available
  * IAS-ECC: Added PIN-pad support for PIN unblock
  * New driver for Gemalto IDPrime (only some types)
  * eDo: New driver with initial support for Polish eID card (e-dowód, eDO)
  * MCRD: Remove unused and broken RSA EstEID support
  * TCOS: Add missing encryption certificates
  * PIV: Add ATR of DOD Yubikey
  * fixed PIV global pin bug
  * CAC1: Support changing PIN with CAC Alt tokens
- includes changes from 0.20.0
  * CVE-2019-6502: memory leak in libopensc (boo#1122756)
  * CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string (boo#1149747)
  * CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring (boo#1149746)
  * CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (boo#1158256)
  * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307)
  * CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809)
  * Support RSA-PSS signature mechanisms using RSA-RAW
  * Added memory locking for secrets
  * added support for terminal colors
  * PC/SC driver: Fixed error handling in case of changing or removing the card reader
  * rename md_read_only to read_only and use it for PKCS#11 and Minidriver
  * allow global use of ignore_private_certificate
  * PKCS#11: Implement write protection (CKF_WRITE_PROTECTED) based on the card profile
  * PKCS#11: Add C_WrapKey and C_UnwrapKey implementations
  * PKCS#11: Handle CKA_ALWAYS_AUTHENTICATE when creating key objects
  * PKCS#11: Truncate long PKCS#11 labels with ...
  * PKCS#11: Fixed recognition of a token when being unplugged and reinserted
  * Minidriver: Register for CardOS5 cards
  * Minidriver: Add support for RSA-PSS
  * tools: Harmonize the use of option -r/--reader
  * goid-tool: GoID personalization with fingerprint
  * openpgp-tool: replace the options -L/--key-length with -t/--key-type
  * openpgp-tool: add options -C/--card-info and -K/--key-info
  * opensc-explorer: add command pin_info, extend random
  * pkcs11-register: Auto-configuration of applications for use of OpenSC PKCS#11
  * pkcd11-register: Autostart
  * opensc-tool: Show ATR also for cards not recognized by OpenSC
  * pkcs11-spy: parse CKM_AES_GCM, EC Derive parameters
  * pkcs11-spy: Add support for CKA_OTP_* and CKM_*_PSS values
  * pkcs11-tool: Support for signature verification via --verify
  * pkcs11-tool: Add object type secrkey for --type option
  * pkcs11-tool: Implement Secret Key write object
  * pkcs11-tool: Add GOSTR3410-2012 support
  * pkcs11-tool: Add support for testing CKM_RSA_PKCS_OAEP
  * pkcs11-tool: Add extractable option to key import
  * pkcs11-tool: list more key access flags when listing keys
  * pkcs11-tool: Add support for CKA_ALLOWED_MECHANISMS when creating new objects and listing keys
  * pkcs15-crypt: *Handle keys with user consent
  * New separate CAC1 driver using the old CAC specification (#1502)
  * CardOS: Add support for 4K RSA keys in CardOS 5
  * CardOS: Fixed decryption with CardOS 5
  * Enable CoolKey driver to handle 2048-bit keys
  * EstEID: add support for a minimalistic, small and fast card profile based on IAS-ECC issued since December 2018
  * GIDS Decipher fix (#1881)
  * GIDS: Allow RSA 4K support
  * MICARDO: Remove long expired EstEID 1.0/1.1 card support
  * MyEID: Add support for unwrapping a secret key with an RSA key or secret key
  * MyEID Add support for wrapping a secret key with a secret key
  * Support for MyEID 4K RSA
  * Support for OsEID
  * Gemalto GemSafe: add new PTeID ATRs, add support for 4K RSA keys
  * OpenPGP Card v3 ECC support
  * Add Rutoken ECP SC
  * Add Rutoken Lite
  * Add SmartCard-HSM 4K ATR
  * Add missing secp384r1 curve parameter
  * Stacros: Fix decipher with 2.3
  * Stacros: Add ATR for 2nd gen. eGK
  * Stacros: Add new ATR for 3.5
  * Stacros: Detect and allow Globalplatform PIN encoding
  * Fix TCOS IDKey support
  * TCOS: add encryption certificate for IDKey
  * Infocamere, Postecert, Cnipa: Remove profiles
  * Remove incomplete acos5 driver
- drop patches now upstream:
  * opensc-0.19.0-piv_card_matching.patch
  * opensc-0.19.0-redundant_logging.patch
  * opensc-0.19.0-rsa-pss.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="predivan@mts.rs" date="1624795200">- Fix build on GCC11
  * Add opensc-gcc11.patch from Fedora
    (https://github.com/OpenSC/OpenSC/pull/2241/)</changelog>
  <changelog author="daniel.donisa@suse.com" date="1633348800">- Update to OpenSC 0.22.0:
  * Removed changes in opensc-gcc11.patch already present in upstream.
  - See https://github.com/OpenSC/OpenSC/pull/2241/commits/e549e9c62eb4fcd2260800e2665071e4dd9bbbda
  * Removed some false positives from the openrc-rpmlintrc file.
  * Use standard paths for file cache on Linux (#2148) and OSX (#2214)
  * Various issues of memory/buffer handling in legacy drivers mostly reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc, westcos, gpk, flex, dnie, mcrd, authentic, belpic)
  * Add threading test to `pkcs11-tool` (#2067)
  * Add support to generate generic secret keys (#2140)
  * `opensc-explorer`: Print information about LCS (Life cycle status byte) (#2195)
  * Add support for Apple's arm64 (M1) binaries, removed TokenD. A seperate installer with TokenD (and without arm64 binaries) will be available (#2179).
  * Support for gcc11 and its new strict aliasing rules (#2241, #2260)
  * Initial support for building with OpenSSL 3.0 (#2343)
  * pkcs15-tool: Write data objects in binary mode (#2324)
  * Avoid limited size of log messages (#2352)
  * Support for ECDSA verification (#2211)
  * Support for ECDSA with different SHA hashes (#2190)
  * Prevent issues in p11-kit by not returning unexpected return codes (#2207)
  * Add support for PKCS#11 3.0: The new interfaces, profile objects and functions (#2096, #2293)
  * Standardize the version 2 on 2.20 in the code (#2096)
  * Fix CKA_MODIFIABLE and CKA_EXTRACTABLE  (#2176)
  * Copy arguments of C_Initialize (#2350)
  * Fix RSA-PSS signing (#2234)
  * Fix DO deletion (#2215)
  * Add support for (X)EdDSA keys (#1960)
  * Add support for applet version 3 and fix RSA-PSS mechanisms (#2205)
  * Add support for applet version 4 (#2332)
  * New configuration option for opensc.conf to disable pkcs1_padding (#2193)
  * Add support for ECDSA with different hashes (#2190)
  * Enable more mechanisms (#2178)
  * Fixed asking for a user pin when formatting a card (#1737)
  * Added support for French CPx Healthcare cards (#2217)
  * Added ATR for new CardOS 5.4 version (#2296)
  * Fixes security issues:
  * tcos: use after return (bsc#1192005, CVE-2021-42780)
  * oberthur: use after free (bsc#1191992, CVE-2021-42779)
  * oberthur: multiple heap buffer overflows (bsc#1192000,
    CVE-2021-42781)
  * multiple stack buffer overflow issues (bsc#1191957,
    CVE-2021-42782)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685620800">- Security Fix: [CVE-2023-2977, bsc#1211894]
  * opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()
  * Add opensc-CVE-2023-2977.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Security Fix: [CVE-2023-40660, bsc#1215762]
  * opensc: PIN bypass when card tracks its own login state
  * Add patches:
  - patches/opensc-0_22_0-CVE-2023-40660-1of2.patch
  - patches/opensc-0_22_0-CVE-2023-40660-2of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696593600">- Security Fix: [CVE-2023-40661, bsc#1215761]
  * opensc: multiple memory issues with pkcs15-init (enrollment tool)
  * Add patches:
  - opensc-CVE-2023-40661-1of12.patch
  - opensc-CVE-2023-40661-2of12.patch
  - opensc-CVE-2023-40661-3of12.patch
  - opensc-CVE-2023-40661-4of12.patch
  - opensc-CVE-2023-40661-5of12.patch
  - opensc-CVE-2023-40661-6of12.patch
  - opensc-CVE-2023-40661-7of12.patch
  - opensc-CVE-2023-40661-8of12.patch
  - opensc-CVE-2023-40661-9of12.patch
  - opensc-CVE-2023-40661-10of12.patch
  - opensc-CVE-2023-40661-11of12.patch
  - opensc-CVE-2023-40661-12of12.patch</changelog>
</package>
<package pkgid="8e20099833ab94dcfb82ea0d818ad85b0023f512bcb7b4b078fad8410c3a84b5" name="openslp" arch="aarch64">
  <version epoch="0" ver="2.0.0" rel="150000.6.17.1"/>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Do not depend on fillup and insserv if the package build with
  systemd support; the dependencies are not needed in that case</changelog>
  <changelog author="mls@suse.de" date="1473681600">- remove convenience code as changes bytes in the message
  buffer breaking the verification code [bnc#994989]
  new patch: openslp.noconvenience.diff
- fix storage handling in predicate code, it clashed with gcc's
  fortify_source extension [bnc#909195]
  new patch: openslp.predicatestorage.diff
- bring back allowDoubleEqualInPredicate option
  new patch: openslp.doubleequal.diff
- fix bug in openslp.initda.diff patch
- fix rcopenslp helper
- fix _xrealloc not checking the malloc return value
  [bnc#980722] [CVE-2016-4912]
  new patch: openslp.xrealloc.diff</changelog>
  <changelog author="mls@suse.de" date="1476273600">- Fix bounds check in SLPFoldWhiteSpace
  [bnc#1001600] [CVE-2016-7567]
  new patch: openslp.foldws.diff</changelog>
  <changelog author="fbui@suse.com" date="1481544000">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  Nowadays pkgconfig(libsystemd) replaces all libsystemd-* libs, which
  are obsolete.</changelog>
  <changelog author="fbui@suse.com" date="1483963200">- Also update openslp.sd_notify.diff to use the new systemd lib</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Add support for OpenSSL 1.1. Commit from upstream [bsc#1042665]
  new patch: openslp.openssl-1.1.diff</changelog>
  <changelog author="ro@suse.de" date="1511956800">- add separate source openslp.logrotate.systemd to
  use systemctl reload for logrotate configuration</changelog>
  <changelog author="mls@suse.de" date="1519905600">- Use %license (boo#1082318)
- fix slpd using the peer address as local address for TCP
  connections [bnc#1076035]
  new patch: openslp.localaddr.diff
- use tcp connections for unicast requests [bnc#1080964]
  new patch: openslp.tcpunicast.diff</changelog>
  <changelog author="mls@suse.de" date="1523448000">- move systemd notification before the chroot() call, otherwise
  the notify function cannot reach systend's unix domain socket
  [bnc#1089097]</changelog>
  <changelog author="mls@suse.de" date="1530187200">- Fix memory corruption when the sendbuf gets reallocated
  [bnc#1090638] [CVE-2017-17833]
  new patch: openslp.sendbuf_move.diff
- Fix out of bounds reads in message parsing
  new patch: openslp.parseoob.diff</changelog>
  <changelog author="mls@suse.de" date="1559908800">- Use tcp connects to talk with other DAs [bnc#1117969]
  new patch: openslp.tcpknownda.diff
- Fix segfault in predicate match if a registered service has
  a malformed attribute list [bnc#1136136]
  new patch: openslp.nullattr.diff</changelog>
  <changelog author="vcizek@suse.com" date="1568289600">- Add missing zlib build dependency, which used to be pulled in
  by libopenssl-devel. The package fails to build since the openssl
  upgrade to 1.1.1 (bsc#1149792)</changelog>
  <changelog author="mls@suse.de" date="1585051200">- Add missing group(daemon) prerequires to the openslp-server
  package [bnc#1165050]
- Add missing openslp requires to the openslp-server package
  [bnc#1165121]</changelog>
  <changelog author="mls@suse.de" date="1618401600">- Implement automatic active discovery retries so that DAs do
  not get dropped if they are not reachable for some time
  [bnc#1166637] [bnc#1184008]
  new patch: openslp.unicastactivediscovery.diff</changelog>
</package>
<package pkgid="d472c4dce38fe8d62311447e8ed75aa8292c0155e140b5505a2fa3cc23d46915" name="openslp" arch="s390x">
  <version epoch="0" ver="2.0.0" rel="150000.6.17.1"/>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Do not depend on fillup and insserv if the package build with
  systemd support; the dependencies are not needed in that case</changelog>
  <changelog author="mls@suse.de" date="1473681600">- remove convenience code as changes bytes in the message
  buffer breaking the verification code [bnc#994989]
  new patch: openslp.noconvenience.diff
- fix storage handling in predicate code, it clashed with gcc's
  fortify_source extension [bnc#909195]
  new patch: openslp.predicatestorage.diff
- bring back allowDoubleEqualInPredicate option
  new patch: openslp.doubleequal.diff
- fix bug in openslp.initda.diff patch
- fix rcopenslp helper
- fix _xrealloc not checking the malloc return value
  [bnc#980722] [CVE-2016-4912]
  new patch: openslp.xrealloc.diff</changelog>
  <changelog author="mls@suse.de" date="1476273600">- Fix bounds check in SLPFoldWhiteSpace
  [bnc#1001600] [CVE-2016-7567]
  new patch: openslp.foldws.diff</changelog>
  <changelog author="fbui@suse.com" date="1481544000">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  Nowadays pkgconfig(libsystemd) replaces all libsystemd-* libs, which
  are obsolete.</changelog>
  <changelog author="fbui@suse.com" date="1483963200">- Also update openslp.sd_notify.diff to use the new systemd lib</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Add support for OpenSSL 1.1. Commit from upstream [bsc#1042665]
  new patch: openslp.openssl-1.1.diff</changelog>
  <changelog author="ro@suse.de" date="1511956800">- add separate source openslp.logrotate.systemd to
  use systemctl reload for logrotate configuration</changelog>
  <changelog author="mls@suse.de" date="1519905600">- Use %license (boo#1082318)
- fix slpd using the peer address as local address for TCP
  connections [bnc#1076035]
  new patch: openslp.localaddr.diff
- use tcp connections for unicast requests [bnc#1080964]
  new patch: openslp.tcpunicast.diff</changelog>
  <changelog author="mls@suse.de" date="1523448000">- move systemd notification before the chroot() call, otherwise
  the notify function cannot reach systend's unix domain socket
  [bnc#1089097]</changelog>
  <changelog author="mls@suse.de" date="1530187200">- Fix memory corruption when the sendbuf gets reallocated
  [bnc#1090638] [CVE-2017-17833]
  new patch: openslp.sendbuf_move.diff
- Fix out of bounds reads in message parsing
  new patch: openslp.parseoob.diff</changelog>
  <changelog author="mls@suse.de" date="1559908800">- Use tcp connects to talk with other DAs [bnc#1117969]
  new patch: openslp.tcpknownda.diff
- Fix segfault in predicate match if a registered service has
  a malformed attribute list [bnc#1136136]
  new patch: openslp.nullattr.diff</changelog>
  <changelog author="vcizek@suse.com" date="1568289600">- Add missing zlib build dependency, which used to be pulled in
  by libopenssl-devel. The package fails to build since the openssl
  upgrade to 1.1.1 (bsc#1149792)</changelog>
  <changelog author="mls@suse.de" date="1585051200">- Add missing group(daemon) prerequires to the openslp-server
  package [bnc#1165050]
- Add missing openslp requires to the openslp-server package
  [bnc#1165121]</changelog>
  <changelog author="mls@suse.de" date="1618401600">- Implement automatic active discovery retries so that DAs do
  not get dropped if they are not reachable for some time
  [bnc#1166637] [bnc#1184008]
  new patch: openslp.unicastactivediscovery.diff</changelog>
</package>
<package pkgid="c468323afe151a024e13dda59700d62d9dff35900c3f2ae1ddb0229703607d99" name="openslp" arch="src">
  <version epoch="0" ver="2.0.0" rel="150000.6.17.1"/>
  <changelog author="mls@suse.de" date="1392292800">- frontport SLE11 patches:
  * add hardMTU option to limit the datagram package size to
    1400 bytes [bnc#648384].
    patch: openslp.hardmtu.diff
  * fix double free in SLPDKnownDAAdd error case [bnc#667953]
    patch: openslp.knowndafree.diff
  * fix libslp socket handling, check if socket is still alive
    and fix socket close code [bnc#693756]
    patch: openslp.loopbacksocket.diff
  * make openslpd reconnect to DAs if they closed the connection
    [bnc#723385]
    patch: openslp.slpdreconnect.diff
  * fixup lifetime of registrations a bit so that they
    don't get removed too early [bnc#658972]
    patch: openslp.lifetime.diff</changelog>
  <changelog author="mls@suse.de" date="1392811200">- update to openslp-2.0.0 to get IPv6 support
  * dropped patches:
    v1dadiscovery.diff, openslp.clrflags.diff
    openslp.fixdsareturn.diff, openslp.dereg.diff,
    openslp.tcpclearovr.diff, openslp.lifetime.diff,
    slptool-timeout.diff, openslp.poll.diff,
    openslp.ignorespaces.diff, openslp.checkovr.diff,
    openslp.fixaddrcheck.diff, openslp.loopbacksocket.diff,
    openslp.diff, openslp.doubleequal.diff, openslp.discovery.diff,
    openslp.parseext.diff, openslp.knowndafree.diff,
    openslp.emptyanswer.diff, openslp.v1sladdr.diff, hppa.diff
  * renamed patches:
    openslp-1.2.0-visibility.patch -&gt; openslp.visibility.diff
    openslp-1.2.0-daemon.diff -&gt; openslp.daemon.diff
    openslp.use-TCPDIAG-for-checking-listeners -&gt; openslp.netlink.diff
    openslp-ocloexec.patch -&gt; openslp.cloexec.diff
- always use localtime in the log file [bnc#855385]
  patch: openslp.localtime.diff
- use tcp to connect to the local SA
  patch: openslp.tcplocal.diff
- drop unused mdns support
- rename README.SuSE to README.SUSE</changelog>
  <changelog author="mls@suse.de" date="1397131200">- use AI_CANONNAME when looking up the canonical name</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1406462400">- openslp.sd_notify.diff make slpd systemd service of type
  notify instead of simple, to avoid startup races.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1406548800">- Do not apply previous patch to distros without systemd.
- Limit init script usage only to legacy products.</changelog>
  <changelog author="mls@suse.de" date="1409572800">- fix last commit</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Do not depend on fillup and insserv if the package build with
  systemd support; the dependencies are not needed in that case</changelog>
  <changelog author="mls@suse.de" date="1473681600">- remove convenience code as changes bytes in the message
  buffer breaking the verification code [bnc#994989]
  new patch: openslp.noconvenience.diff
- fix storage handling in predicate code, it clashed with gcc's
  fortify_source extension [bnc#909195]
  new patch: openslp.predicatestorage.diff
- bring back allowDoubleEqualInPredicate option
  new patch: openslp.doubleequal.diff
- fix bug in openslp.initda.diff patch
- fix rcopenslp helper
- fix _xrealloc not checking the malloc return value
  [bnc#980722] [CVE-2016-4912]
  new patch: openslp.xrealloc.diff</changelog>
  <changelog author="mls@suse.de" date="1476273600">- Fix bounds check in SLPFoldWhiteSpace
  [bnc#1001600] [CVE-2016-7567]
  new patch: openslp.foldws.diff</changelog>
  <changelog author="fbui@suse.com" date="1481544000">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  Nowadays pkgconfig(libsystemd) replaces all libsystemd-* libs, which
  are obsolete.</changelog>
  <changelog author="fbui@suse.com" date="1483963200">- Also update openslp.sd_notify.diff to use the new systemd lib</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Add support for OpenSSL 1.1. Commit from upstream [bsc#1042665]
  new patch: openslp.openssl-1.1.diff</changelog>
  <changelog author="ro@suse.de" date="1511956800">- add separate source openslp.logrotate.systemd to
  use systemctl reload for logrotate configuration</changelog>
  <changelog author="mls@suse.de" date="1519905600">- Use %license (boo#1082318)
- fix slpd using the peer address as local address for TCP
  connections [bnc#1076035]
  new patch: openslp.localaddr.diff
- use tcp connections for unicast requests [bnc#1080964]
  new patch: openslp.tcpunicast.diff</changelog>
  <changelog author="mls@suse.de" date="1523448000">- move systemd notification before the chroot() call, otherwise
  the notify function cannot reach systend's unix domain socket
  [bnc#1089097]</changelog>
  <changelog author="mls@suse.de" date="1530187200">- Fix memory corruption when the sendbuf gets reallocated
  [bnc#1090638] [CVE-2017-17833]
  new patch: openslp.sendbuf_move.diff
- Fix out of bounds reads in message parsing
  new patch: openslp.parseoob.diff</changelog>
  <changelog author="mls@suse.de" date="1559908800">- Use tcp connects to talk with other DAs [bnc#1117969]
  new patch: openslp.tcpknownda.diff
- Fix segfault in predicate match if a registered service has
  a malformed attribute list [bnc#1136136]
  new patch: openslp.nullattr.diff</changelog>
  <changelog author="vcizek@suse.com" date="1568289600">- Add missing zlib build dependency, which used to be pulled in
  by libopenssl-devel. The package fails to build since the openssl
  upgrade to 1.1.1 (bsc#1149792)</changelog>
  <changelog author="mls@suse.de" date="1585051200">- Add missing group(daemon) prerequires to the openslp-server
  package [bnc#1165050]
- Add missing openslp requires to the openslp-server package
  [bnc#1165121]</changelog>
  <changelog author="mls@suse.de" date="1618401600">- Implement automatic active discovery retries so that DAs do
  not get dropped if they are not reachable for some time
  [bnc#1166637] [bnc#1184008]
  new patch: openslp.unicastactivediscovery.diff</changelog>
</package>
<package pkgid="d40096c5a33fd2dbe46e8ca65003f098015b10cc2d2070bc858c3f4d6c866513" name="openslp" arch="x86_64">
  <version epoch="0" ver="2.0.0" rel="150000.6.17.1"/>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Do not depend on fillup and insserv if the package build with
  systemd support; the dependencies are not needed in that case</changelog>
  <changelog author="mls@suse.de" date="1473681600">- remove convenience code as changes bytes in the message
  buffer breaking the verification code [bnc#994989]
  new patch: openslp.noconvenience.diff
- fix storage handling in predicate code, it clashed with gcc's
  fortify_source extension [bnc#909195]
  new patch: openslp.predicatestorage.diff
- bring back allowDoubleEqualInPredicate option
  new patch: openslp.doubleequal.diff
- fix bug in openslp.initda.diff patch
- fix rcopenslp helper
- fix _xrealloc not checking the malloc return value
  [bnc#980722] [CVE-2016-4912]
  new patch: openslp.xrealloc.diff</changelog>
  <changelog author="mls@suse.de" date="1476273600">- Fix bounds check in SLPFoldWhiteSpace
  [bnc#1001600] [CVE-2016-7567]
  new patch: openslp.foldws.diff</changelog>
  <changelog author="fbui@suse.com" date="1481544000">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  Nowadays pkgconfig(libsystemd) replaces all libsystemd-* libs, which
  are obsolete.</changelog>
  <changelog author="fbui@suse.com" date="1483963200">- Also update openslp.sd_notify.diff to use the new systemd lib</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Add support for OpenSSL 1.1. Commit from upstream [bsc#1042665]
  new patch: openslp.openssl-1.1.diff</changelog>
  <changelog author="ro@suse.de" date="1511956800">- add separate source openslp.logrotate.systemd to
  use systemctl reload for logrotate configuration</changelog>
  <changelog author="mls@suse.de" date="1519905600">- Use %license (boo#1082318)
- fix slpd using the peer address as local address for TCP
  connections [bnc#1076035]
  new patch: openslp.localaddr.diff
- use tcp connections for unicast requests [bnc#1080964]
  new patch: openslp.tcpunicast.diff</changelog>
  <changelog author="mls@suse.de" date="1523448000">- move systemd notification before the chroot() call, otherwise
  the notify function cannot reach systend's unix domain socket
  [bnc#1089097]</changelog>
  <changelog author="mls@suse.de" date="1530187200">- Fix memory corruption when the sendbuf gets reallocated
  [bnc#1090638] [CVE-2017-17833]
  new patch: openslp.sendbuf_move.diff
- Fix out of bounds reads in message parsing
  new patch: openslp.parseoob.diff</changelog>
  <changelog author="mls@suse.de" date="1559908800">- Use tcp connects to talk with other DAs [bnc#1117969]
  new patch: openslp.tcpknownda.diff
- Fix segfault in predicate match if a registered service has
  a malformed attribute list [bnc#1136136]
  new patch: openslp.nullattr.diff</changelog>
  <changelog author="vcizek@suse.com" date="1568289600">- Add missing zlib build dependency, which used to be pulled in
  by libopenssl-devel. The package fails to build since the openssl
  upgrade to 1.1.1 (bsc#1149792)</changelog>
  <changelog author="mls@suse.de" date="1585051200">- Add missing group(daemon) prerequires to the openslp-server
  package [bnc#1165050]
- Add missing openslp requires to the openslp-server package
  [bnc#1165121]</changelog>
  <changelog author="mls@suse.de" date="1618401600">- Implement automatic active discovery retries so that DAs do
  not get dropped if they are not reachable for some time
  [bnc#1166637] [bnc#1184008]
  new patch: openslp.unicastactivediscovery.diff</changelog>
</package>
<package pkgid="1104096e66a7617b4730351722d1c0f07fef6c58ffc992ef444e3178fc73cf5b" name="openssh" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="d447a944ec7a86d2df650f8fddda71d63e7fc6b342cf3c0382bc6e82ee5d94bf" name="openssh" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="f5ac4473915013fb48d265ff501133aa381310a1f304b4d2271297484d0668e3" name="openssh" arch="src">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="0d8d47dd676699b626b9ded1933437ab9859b4d9bdb8c070bcd9c670a0f0d498" name="openssh" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="7af80bcd939f084fb561a4c03ce5f8d9689b2140f730bb01069d2b9b5ea31406" name="openssh" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="6316264b1e432b462e70870acae1bdee29667de1cb8e2ebe204c57913f44c4da" name="openssh" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="2f7c774ef16abe43f78406e8d7ce1ff7e1b3027adcf87f2f31116108e074d3bf" name="openssh" arch="src">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="78fc2ef8016f732d4ff05374ce41d68eb061c4d218827b10f7f7e65746e16b7f" name="openssh" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="fa8a67a714d3ebfb9e66c1a4b91cf6a9d6926f0b761a1ed9aca5412ca1b45ab1" name="openssh-clients" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="7a15f371c5a7776ebfccea5aaab0e2a3945fdbc54db4c5f04786a93f01ea5918" name="openssh-clients" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="169de9762b96bff3272d8ec3ed4c83fc09be278321874e4774736ce8773dd150" name="openssh-clients" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="77d9cbece1d805f1fc6386babbfd30d1fe593fe6793613a46a0707e6323da158" name="openssh-clients" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="5dbb5c29a43aba7f9e62dd89e6d408596de718372c4e981603e054a3b1f07a8e" name="openssh-clients" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="46b125f87eba645be860ce206689354c8ddf47e07209394d412c6994965b4d7b" name="openssh-clients" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="a32350bcfed0deaa4b5b519d6b9276c87975c38f43a17680d8e19e4b7b99640d" name="openssh-common" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="cf97dd88fe632f4ee89d3e4eb456c708ccb63aaef3e7716029174f86b69b0147" name="openssh-common" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="2fae7dfd8b50c699710be4f0e242ba6f81c0ab9410045c01da911bd6d8c24621" name="openssh-common" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="e8dfc1b215680a17ad7a2ad69ff9fba26d2a4b61cb2915123445bebf5f3bfdd5" name="openssh-common" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="3e90f35c1fe16d30c248537a5aaff38b28d7cc01441f71e7997c6df693c8c327" name="openssh-common" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="836daf382c178e49939012b4ac7834bbb8a30107ad46fafde921e7081d14e042" name="openssh-common" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="f98bb9ca74797f27abef73d168283aa189603e6063bd4358768d344cf74d0ccd" name="openssh-fips" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="cebc784cabcdb4b2256c927c02522a6d8fda9f9cd97716d7539356d5f91dc303" name="openssh-fips" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="914b6fb5fe05776e363991012a20c2fab24d56e9037f83f467e49c32ffb24516" name="openssh-fips" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="9990ed87ab9a2236246d8ebb145f5cbea62cec9fc55cd5534f28f6646196d3a4" name="openssh-fips" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="dfee18ebeb6f6ef64bd60dc65cc64fbf3a7f9b962685f4ad46efbdb751647b10" name="openssh-fips" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="ece5dbaa481500adb5a1b1555bf652dfd826a84addc1f7b292d235092b0f3b9b" name="openssh-fips" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="be7e7805300040e3392aa52dbedbafc532bd41b6fccc5ebca79dd20a164462cc" name="openssh-server" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="0d86c32de5e7509fc3be0f4be3fa1ab6a1c59e0b8c5e0acc31cca52f16afa4b7" name="openssh-server" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="04156c333b32d3c9fe2244663775958181fdbdf05cb12038e60e78e4e0974402" name="openssh-server" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="04bd1806b9c09d0871bdcd4788e905c82b88072ba7a5b86d8beaa0ee2a878fec" name="openssh-server" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="353347c1025ad23a94fcc71ededb1e3434533c0c11f7748e3859f4dcddeaab29" name="openssh-server" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="32f47a47d046d1e8c88426bcfd5dbaa1f66231c4741240c4e2149a81128dffca" name="openssh-server" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="9032de71e0e75bc38314d7318bbee57a365aa1ac31114b1c039f85af93171183" name="openssl-1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.19.1"/>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
</package>
<package pkgid="0cc8b2f67ff94cbc6e0526a898b165c4e0665f220f503152be1e0e4375b0c6f5" name="openssl-1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.19.1"/>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
</package>
<package pkgid="a71cf6cb9b91442ae5dc138421db7a3543a922dccbb02a8978b06e9fb8a451cb" name="openssl-1_1" arch="src">
  <version epoch="0" ver="1.1.1l" rel="150500.17.19.1"/>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
</package>
<package pkgid="0278e98c4f9029345ff0e764315524f3ddc993e30ec6f1c59db6958d66a614dc" name="openssl-1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.19.1"/>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
</package>
<package pkgid="40f40b5d281f13dcebfe4860cfc400736b665b13d1734d269c906909172b324f" name="openssl-1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.22.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="156838d3f0c2a9499a86c7ecadb3b0c3c835db82991e608fc84869e6902e138f" name="openssl-1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.22.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="b935e314f40cb22d07b59e3f55abbdf57e2bcdd52ca79f3d481dacdbcf714792" name="openssl-1_1" arch="src">
  <version epoch="0" ver="1.1.1l" rel="150500.17.22.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="cf74dd0a770c8f9c0a2efbd753d48d80ab39a0c36ae9f536da35a0610864026d" name="openssl-1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.22.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="500ce27948aecfa4a935008f4852b413d68f0a7c2695e4b704b14adb4e1d11b1" name="openssl-1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.25.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="257be61328e181070970bde83cf901b8765edf932ed3ca02cf206b391507299b" name="openssl-1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.25.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="bcb90dc5859b5262b9bc64f1a48c88dd0bff59600ee785d0614ed27c78db9170" name="openssl-1_1" arch="src">
  <version epoch="0" ver="1.1.1l" rel="150500.17.25.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="f5589826153cf13a4918d82e4aadbb48082997822f9f8891c6afd988f6b8c3bf" name="openssl-1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.25.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="e234a0c57f6ec0a2ca68c7f19389b9062673d274004506073e276a15aac183c3" name="openssl-ibmca" arch="s390x">
  <version epoch="0" ver="2.4.0" rel="150500.6.3.1"/>
  <changelog author="mpost@suse.com" date="1535716800">- Added the following patches for bsc#1097463
  * openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch
  * openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch
  * openssl-ibmca-sles15-Update-lib-name-in-documentation.patch</changelog>
  <changelog author="mpost@suse.com" date="1542196800">- Upgraded to version 2.0.0 (Fate#325688)
  * openssl-ibmca 2.0.0
    Add ECC support.
    Add check and distcheck make-targets.
    Project cleanup, code was broken into multiple files and coding style cleanup.
    Improvements to compat macros for openssl.
    Don't disable libica sw fallbacks.
    Fix dlclose logic.
  * openssl-ibmca 1.4.1
    Fix structure size for aes-256-ecb/cbc/cfb/ofb
    Update man page
    Switch to ibmca.so filename to allow standalone use
    Switch off Libica fallback mode if available
    Make sure ibmca_init only runs once
    Provide simple macro for DEBUG_PRINTF possibility
    Cleanup and slight rework of function set_supported_meths
- Did some cleanup to the spec file, based on spec-cleanup.
- Removed the following obsolete patches:
  * openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch
  * openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch
  * openssl-ibmca-sles15-Update-lib-name-in-documentation.patch</changelog>
  <changelog author="mpost@suse.com" date="1542283200">- Upgraded to version 2.0.1 (Fate#325688)
  * openssl-ibmca 2.0.1
    Dont fail when a libica symbol cannot be resolved.
- Made multiple changes to the spec file based on spec-cleaner output.</changelog>
  <changelog author="mpost@suse.com" date="1543320000">- Upgraded to version 2.0.2 (Fate#325688)
  * openssl-ibmca 2.0.2
    Fix doing rsa-me, altough rsa-crt would be possible.</changelog>
  <changelog author="mpost@suse.com" date="1561723200">- Added openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch
  An Apache HTTP Server was set up with mod_ssl and the openssl
  ibmca engine using libica and a CEX6A card. Whenever a worker
  process is cleaned up a segmentation fault occurs.
  (bsc#1138517)</changelog>
  <changelog author="mpost@suse.com" date="1566993600">- Upgraded to version 2.0.3 (jsc#SLE-6123, jsc#SLE-6424)
  * openssl-ibmca 2.0.3
    Add MSA9 CPACF support for ECDSA sign/verify
- Dropped obsolete openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch
- Changed the ExclusiveArch directive to include s390x only.
- The code in e_ibmca.c does a dlopen for libica.so.3, instead of
  linking against the shared library. As a result, if the package
  containing libica.so.3 isn't installed, problems occur. Added
  a "Requires: libica3" to the spec file to fix this. (bsc#1142286)
- Made a couple of changes to the spec file based on the output
  from spec-cleaner.</changelog>
  <changelog author="mpost@suse.com" date="1568116800">- Upgrade to version 2.1.0 (jsc#SLE-7852, jsc#SLE-7882)
  Add MSA9 CPACF support for X25519, X448, Ed25519 and Ed448</changelog>
  <changelog author="mpost@suse.com" date="1600257600">- Upgrade to version 2.1.1 (jsc#SLE-13709)
  * Bug fixes</changelog>
  <changelog author="mpost@suse.com" date="1631880000">- Upgraded to version 2.2.1 (jsc#SLE-18333)
  * openssl-ibmca 2.2.1
    Bug fixes
  * openssl-ibmca 2.2.0
    Implement fallbacks based on OpenSSL
    Disable software fallbacks from libica
    Allow to specify default library (libica vs. libica-cex) to use
    Provide "libica" engine ctrl to switch library at load time
    Update README.md
    Remove libica link dependency
    Generate sample configuration files from system configuration
    Restructure registration global data
  * openssl-ibmca 2.1.3
    Bug fix
  * openssl-ibmca 2.1.2
    Bug fixes
- Modified spec file to
  * Define a global variable enginesdir the same was as IBM does
    instead of _ENGINE_DIR as we had been doing.
  * Implemented %make_build macro according to spec-cleaner
  * Changed the package description to match IBM's.
  * Removed the redundant "autoreconf --force --install"</changelog>
  <changelog author="mpost@suse.com" date="1647345600">- Completely revamped the postinstall scriptlet so that it doesn't
  need to know or care about how many lines are in either
  /etc/ssl/openssl.cnf, or the sample file at
  /usr/share/doc/packages/openssl-ibmca/openssl.cnf.sample
  We're now using the ".include" directive for the openssl.cnf
  file, and only modifying that file the minimum necessary to
  implement the change. (bsc#1004463)</changelog>
  <changelog author="mpost@suse.com" date="1664884800">- Upgraded to version 2.3.1 (jsc#PED-597)
  * openssl-ibmca 2.3.1
  - Adjustments for libica 4.1.0
  * openssl-ibmca 2.3.0
  - First version including the provider
  - Fix for engine build without OpenSSL 3.0 sources
  * openssl-ibmca 2.2.3
  - Fix PKEY segfault with OpenSSL 3.0
  * openssl-ibmca 2.2.2
  - Fix tests with OpenSSL 3.0
  - Build against libica 4.0
- Removed a Requires for libica from the specfile.
- Removed the obsolete baselibs.conf file</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678449600">- Updated .spec file removed '#' from the line containing
  'sed -e 's/^dynamic_path/#dynamic_path/' (bsc#1209038)
- Added in %files
  * /usr/lib64/engines-3/ibmca-provider.la
  * /usr/lib64/engines-3/ibmca-provider.so</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1680696000">- Upgraded openssl-ibmca to version 2.4.0 (bsc#1210059)
  * openssl-ibmca 2.4.0
  - Provider: Adjustments for OpenSSL versions 3.1 and 3.2
  - Provider: Support RSA blinding
  - Provider: Constant-time fixes for RSA PKCS#1 v1.5 and OAEP padding
  - Provider: Support "implicit rejection" option for RSA PKCS#1 v1.5 padding
  - Provider: Adjustments in OpenSSL config generator and example configs
  - Engine: EC: Cache ICA key in EC_KEY object (performance improvement)
  - Engine: Enable RSA blinding</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1681992000">- Applies a patch (bsc#1210359)
  * openssl-ibmca-engine-noregister.patch
- Updated the '#dynamic_path' line, as it was before, with the comment '#'.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1682424000">- Added dependency on libica4 (bsc#1209038)
  * BuildRequires and Requires statements in .spec file for libica4</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1682596800">- Updated the .spec file as follow:
  * BuildRequires:  libica-devel &gt;= 4.0.0
  * BuildRequires:  libica-tools &gt;= 4.0.0</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1683028800">- Updated the .spec file
  * uses a flag openssl3 (1 or 0) to include or not the openssl3 libraries</changelog>
  <changelog author="otto.hollmann@suse.com" date="1683201600">- Add multibuild flavor to provide library compiled against openssl-3
  [bsc#1207472]</changelog>
  <changelog author="pmonreal@suse.com" date="1687435200">- Adjust dlopen() for the new ibmca-openssl3.so for the multibuild
  flavor. This allows to install in parallel a version compiled
  against openssl 1.1.1 and another with openssl 3.0. [bsc#1207472]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1693569600">- Adjust configure and Makefile to require libica-openssl3 when
  building wiht openssl3 flavor. [bsc#1207472]
  * Add openssl3-rename-libica-files.patch</changelog>
</package>
<package pkgid="4fcf427a662e9687af26a6d8007fd6007aa440beaec5bff644a460cbdeba48ec" name="openssl-ibmca" arch="src">
  <version epoch="0" ver="2.4.0" rel="150500.6.3.1"/>
  <changelog author="mpost@suse.com" date="1535716800">- Added the following patches for bsc#1097463
  * openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch
  * openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch
  * openssl-ibmca-sles15-Update-lib-name-in-documentation.patch</changelog>
  <changelog author="mpost@suse.com" date="1542196800">- Upgraded to version 2.0.0 (Fate#325688)
  * openssl-ibmca 2.0.0
    Add ECC support.
    Add check and distcheck make-targets.
    Project cleanup, code was broken into multiple files and coding style cleanup.
    Improvements to compat macros for openssl.
    Don't disable libica sw fallbacks.
    Fix dlclose logic.
  * openssl-ibmca 1.4.1
    Fix structure size for aes-256-ecb/cbc/cfb/ofb
    Update man page
    Switch to ibmca.so filename to allow standalone use
    Switch off Libica fallback mode if available
    Make sure ibmca_init only runs once
    Provide simple macro for DEBUG_PRINTF possibility
    Cleanup and slight rework of function set_supported_meths
- Did some cleanup to the spec file, based on spec-cleanup.
- Removed the following obsolete patches:
  * openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch
  * openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch
  * openssl-ibmca-sles15-Update-lib-name-in-documentation.patch</changelog>
  <changelog author="mpost@suse.com" date="1542283200">- Upgraded to version 2.0.1 (Fate#325688)
  * openssl-ibmca 2.0.1
    Dont fail when a libica symbol cannot be resolved.
- Made multiple changes to the spec file based on spec-cleaner output.</changelog>
  <changelog author="mpost@suse.com" date="1543320000">- Upgraded to version 2.0.2 (Fate#325688)
  * openssl-ibmca 2.0.2
    Fix doing rsa-me, altough rsa-crt would be possible.</changelog>
  <changelog author="mpost@suse.com" date="1561723200">- Added openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch
  An Apache HTTP Server was set up with mod_ssl and the openssl
  ibmca engine using libica and a CEX6A card. Whenever a worker
  process is cleaned up a segmentation fault occurs.
  (bsc#1138517)</changelog>
  <changelog author="mpost@suse.com" date="1566993600">- Upgraded to version 2.0.3 (jsc#SLE-6123, jsc#SLE-6424)
  * openssl-ibmca 2.0.3
    Add MSA9 CPACF support for ECDSA sign/verify
- Dropped obsolete openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch
- Changed the ExclusiveArch directive to include s390x only.
- The code in e_ibmca.c does a dlopen for libica.so.3, instead of
  linking against the shared library. As a result, if the package
  containing libica.so.3 isn't installed, problems occur. Added
  a "Requires: libica3" to the spec file to fix this. (bsc#1142286)
- Made a couple of changes to the spec file based on the output
  from spec-cleaner.</changelog>
  <changelog author="mpost@suse.com" date="1568116800">- Upgrade to version 2.1.0 (jsc#SLE-7852, jsc#SLE-7882)
  Add MSA9 CPACF support for X25519, X448, Ed25519 and Ed448</changelog>
  <changelog author="mpost@suse.com" date="1600257600">- Upgrade to version 2.1.1 (jsc#SLE-13709)
  * Bug fixes</changelog>
  <changelog author="mpost@suse.com" date="1631880000">- Upgraded to version 2.2.1 (jsc#SLE-18333)
  * openssl-ibmca 2.2.1
    Bug fixes
  * openssl-ibmca 2.2.0
    Implement fallbacks based on OpenSSL
    Disable software fallbacks from libica
    Allow to specify default library (libica vs. libica-cex) to use
    Provide "libica" engine ctrl to switch library at load time
    Update README.md
    Remove libica link dependency
    Generate sample configuration files from system configuration
    Restructure registration global data
  * openssl-ibmca 2.1.3
    Bug fix
  * openssl-ibmca 2.1.2
    Bug fixes
- Modified spec file to
  * Define a global variable enginesdir the same was as IBM does
    instead of _ENGINE_DIR as we had been doing.
  * Implemented %make_build macro according to spec-cleaner
  * Changed the package description to match IBM's.
  * Removed the redundant "autoreconf --force --install"</changelog>
  <changelog author="mpost@suse.com" date="1647345600">- Completely revamped the postinstall scriptlet so that it doesn't
  need to know or care about how many lines are in either
  /etc/ssl/openssl.cnf, or the sample file at
  /usr/share/doc/packages/openssl-ibmca/openssl.cnf.sample
  We're now using the ".include" directive for the openssl.cnf
  file, and only modifying that file the minimum necessary to
  implement the change. (bsc#1004463)</changelog>
  <changelog author="mpost@suse.com" date="1664884800">- Upgraded to version 2.3.1 (jsc#PED-597)
  * openssl-ibmca 2.3.1
  - Adjustments for libica 4.1.0
  * openssl-ibmca 2.3.0
  - First version including the provider
  - Fix for engine build without OpenSSL 3.0 sources
  * openssl-ibmca 2.2.3
  - Fix PKEY segfault with OpenSSL 3.0
  * openssl-ibmca 2.2.2
  - Fix tests with OpenSSL 3.0
  - Build against libica 4.0
- Removed a Requires for libica from the specfile.
- Removed the obsolete baselibs.conf file</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678449600">- Updated .spec file removed '#' from the line containing
  'sed -e 's/^dynamic_path/#dynamic_path/' (bsc#1209038)
- Added in %files
  * /usr/lib64/engines-3/ibmca-provider.la
  * /usr/lib64/engines-3/ibmca-provider.so</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1680696000">- Upgraded openssl-ibmca to version 2.4.0 (bsc#1210059)
  * openssl-ibmca 2.4.0
  - Provider: Adjustments for OpenSSL versions 3.1 and 3.2
  - Provider: Support RSA blinding
  - Provider: Constant-time fixes for RSA PKCS#1 v1.5 and OAEP padding
  - Provider: Support "implicit rejection" option for RSA PKCS#1 v1.5 padding
  - Provider: Adjustments in OpenSSL config generator and example configs
  - Engine: EC: Cache ICA key in EC_KEY object (performance improvement)
  - Engine: Enable RSA blinding</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1681992000">- Applies a patch (bsc#1210359)
  * openssl-ibmca-engine-noregister.patch
- Updated the '#dynamic_path' line, as it was before, with the comment '#'.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1682424000">- Added dependency on libica4 (bsc#1209038)
  * BuildRequires and Requires statements in .spec file for libica4</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1682596800">- Updated the .spec file as follow:
  * BuildRequires:  libica-devel &gt;= 4.0.0
  * BuildRequires:  libica-tools &gt;= 4.0.0</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1683028800">- Updated the .spec file
  * uses a flag openssl3 (1 or 0) to include or not the openssl3 libraries</changelog>
  <changelog author="otto.hollmann@suse.com" date="1683201600">- Add multibuild flavor to provide library compiled against openssl-3
  [bsc#1207472]</changelog>
  <changelog author="pmonreal@suse.com" date="1687435200">- Adjust dlopen() for the new ibmca-openssl3.so for the multibuild
  flavor. This allows to install in parallel a version compiled
  against openssl 1.1.1 and another with openssl 3.0. [bsc#1207472]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1693569600">- Adjust configure and Makefile to require libica-openssl3 when
  building wiht openssl3 flavor. [bsc#1207472]
  * Add openssl3-rename-libica-files.patch</changelog>
</package>
<package pkgid="28d11bd7a2c580eec3cf834e834eaa05f4b9c29f07ebae64e628734360eac66f" name="p11-kit" arch="aarch64">
  <version epoch="0" ver="0.23.22" rel="150500.8.3.1"/>
  <changelog author="lnussel@suse.de" date="1413201600">- remove patches:
  * trust-Print-label-of-certificate-when-complaining-.patch
  * trust-Dont-use-invalid-public-keys-for-looking-up-.patch
- new version 0.20.7 (stable)
  * New public pkcs11x.h header containing extensions [fdo#83495]
  * Export necessary defines to lookup attached extensions [fdo#83495]
  * Build fixes
- new version 0.20.6 (stable)
  * Make the p11-kit-proxy.so module respect critical = no [fdo#83651]
  * Build fix for FreeBSD [fdo#75674]
- new version 0.20.5 (stable)
  * Don't use invalid keys for looking up stapled extensions [fdo#82328]
  * Better error messages when invalid certificate extensions
  * Fix parsing of some odd OpenSSL TRUSTED CERTIFICATE files
  * Fix some leaks, and memory issues
  * Silence some clang scanner warnings
- new version 0.20.4 (stable)
  * Don't complain about C_Finalize after a fork
  * Fix typo</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Update to version 0.23.1 (stable)
  * Use new PKCS#11 URI draft fields for URIs [fdo#86474 fdo#87582]
  * Add pem-directory-hash extract format
  * Build fixes
- Remove 0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff;
  fixed on upstream release
- Remove autoconf, automake and libtool require; unneeded dependencies
- Add gtk-doc require; needed to build html documentation
- Remove redundant %clean section</changelog>
  <changelog author="mpluskal@suse.com" date="1454932800">- Update to 0.23.2
  * Fix forking issues with libffi
  * Fix various crashes in corner cases
  * Updated translations
  * Build fixes
- Make building more verbose
- Enable tests
- Small spec file cleanup with spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- 32-bit compatibility fixes:
  * Add PKCS11 module to p11-kit-32bit (bsc#996047#c39)
  * Add p11-kit-nss-trust-32bit NSS module
  * Fix potential bi-arch issue with private binaries
    (fdo#98817, p11-kit-biarch.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="lnussel@suse.de" date="1573819200">- support loading NSS attribute CKA_NSS_MOZILLA_CA_POLICY so Firefox
  detects built in certificates (boo#1154871,
  0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch,
  0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch)</changelog>
  <changelog author="lnussel@suse.de" date="1577102400">- Also build documentation (boo#1013125)</changelog>
  <changelog author="scabrero@suse.de" date="1628683200">- Update to version 0.23.22 (bsc#1180064, bsc#1180065, bsc#1180066):
  * Fix memory-safety issues that affect the RPC protocol
  (CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363), discovered
  and fixed by David Cook
  * anchor: Prefer persistent format when storing anchor [PR#329]
  * common: Fix infloop in p11_path_build [PR#326, PR#327]
  * proxy: C_CloseAllSessions: Make sure that calloc args are non-zero [PR#325]
  * common: Check for a NULL locale before freeing it [PR#321]
  * Build and test fixes [PR#313, PR#315, PR#317, PR#318, PR#319, PR#323,
  PR#330, PR#333, PR#334, PR#335, PR#338, PR#339]
- Changes for version 0.23.21
  * proxy: Do not assign duplicate slot IDs [PR#282]
  * common: Get program name based on executable path if possible [PR#307]
  * anchor: Exit with non-zero code, if any error occurs [PR#304]
  * Build and test fixes [PR#283, PR#290, PR#291, PR#292, PR#296, PR#299,
  PR#305, PR#306, PR#309, PR#311]
- Changes for version 0.23.20:
  * Revert "Fix RPC when length-s are 0" changes [PR#276]
- Changes for version 0.23.19:
  * common: add Russian PKCS#11 extensions to pkcs11x.h header [PR#255]
  * Add simple bash completion for provided commands [PR#258]
  * Unbreak list matching in enable-in and disable-in [PR#262]
  * Fix RPC when length-s are 0 [PR#259]
  * rpc: Add vsock transport support [PR#270]
  * trust: Support CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER [PR#265]
  * Build fixes [PR#271, PR#272, PR#273, ...]
- Changes for version 0.23.18:
  * rpc: Allow empty CK_DATE value [PR#253]
  * build: Meson fixes [PR#245]
  * build: Adjust feature parity between meson and autotools [PR#247]
- Changes for version 0.23.17:
  * common: Fix uClibc-ng compilation [PR#237]
  * trust: do not allow daylight to invalidate date validation [PR#236]
  * build: Port to meson build system [PR#231, PR#234]
  * rpc: On UNIX wait on condition variable instead of FD if header is for a different thread [PR#232]
  * doc: Add 'server' command in help [PR#229]
  * Build and test fixes [PR#230]
- Changes for version 0.23.16:
  * proxy: Support C_WaitForSlotEvent() if CKF_DONT_BLOCK is specified [PR#225]
  * conf: Ignore user configuration if the program is running as root [PR#226]
  * proxy: Refresh slot list on every C_GetSlotList call [PR#224]
  * modules: Fix index used in call to p11_dict_remove() [PR#219]
  * Fix Win32 p11_dl_error crash [PR#218]
  * modules: check gl.modules before iterates on it when freeing [PR#217]
  * trust: Ignore unreadable content in anchors [PR#215]
  * extract-jks: Prefer _p11_extract_jks_timestamp to SOURCE_DATE_EPOCH [PR#213]
- Changes for version 0.23.15:
  * trust: Improve error handling if backed trust file is corrupted [PR#206]
  * url: Prefer upper-case letters in hex characters when encoding [PR#193]
  * trust/extract-jks.c: also honor SOURCE_DATE_EPOCH time [PR#202]
  * virtual: Prefer fixed closures to libffi closures [PR#196]
  * Fix issues spotted by coverity and cppcheck [PR#194, PR#204]
  * Build and test fixes [PR#164, PR#191, PR#199, PR#201]
- Changes for version 0.23.14:
  * proxy: Avoid invalid memory access when unloading proxy module [PR#180]
  * Update pkcs11 header to allow SoftHSMv2 to compile [PR#181]
  * build: Restore libpthread dependency [PR#183]
  * Build fixes [PR#188]
- Changes for version 0.23.13:
  * server: Enable socket activation through systemd [PR#173]
  * rpc-server: p11_kit_remote_serve_tokens: Allow exporting all modules
    [PR#174]
  * proxy: Fail early if there is no slot mapping [PR#175]
  * Remove hard dependency on libpthread [PR#177]
  * Build fixes [PR#170, PR#176]
- Changes for version 0.23.12
  * Fix compile error when PKCS#11 GNU calling convention is enabled [PR#160]
  * Fix getauxval() and secure_getenv() emulation on macOS and FreeBSD [PR#167]
  * Build and test fixes on macOS [PR#162, PR#168]
- Changes for version 0.23.11
  * trust: Add extractor for edk2/cacerts.bin [PR#139]
  * modules: Add option to control module visibility from proxy [PR#140]
  * trust: Prevent trust module being loaded by proxy module [PR#142]
  * library: Use dedicated locale object for printing error [PR#148]
  * Treat CKR_CRYPTOKI_ALREADY_INITIALIZED correctly [PR#134]
  * Improve const correctness for P11KitUri [PR#152]
  * PKCS#11 URI scheme comparison is now case insensitive [PR#156]
  * Build and test fixes [PR#151, PR#149, PR#141, PR#138, PR#135]
- Changes for version 0.23.10
  * filter: Respect "write-protected" vendor-specific attribute in
    PKCS#11 URI [PR#129]
  * server: Improve shell integration and documentation [PR#107, PR#108]
  * proxy: Reuse existing slot ID mapping in after fork() [PR#120]
  * trust: Forcibly mark "Default Trust" read-only [PR#123]
  * New function p11_kit_override_system_files() which can be used for
    testing [PR#110]
  * trust: Filter out duplicate extensions [PR#69]
  * Update translations [PR#128]
  * Bug fixes [PR#125, PR#126]
- Changes for version 0.23.9
  * Fix p11-kit server regressions [PR#103, PR#104]
  * trust: Respect anyExtendedKeyUsage in CA certificates [PR#99]
  * Build fixes related to reallocarray [PR#96, PR#98, PR#100]
- Changes for version 0.23.8
  * Improve vendor query attributes handling in PKCS#11 URI [PR#92]
  * Add OTP and GOST mechanisms to pkcs11.h [PR#90, PR#91]
  * New envvar P11_KIT_NO_USER_CONFIG to stop looking at user
    configurations [PR#87]
  * Build fixes for Solaris and 32-bit big-endian platforms [PR#81, PR#86]
- Changes for version 0.23.7
  * Fix memory issues with "p11-kit server" [PR#78]
  * Build fixes [PR#77 ...]
- Changes for version 0.23.6
  * Port "p11-kit server" to Windows and portability fixes of the RPC
    protocol [PR#67, PR#72, PR#74]
  * Recover the old behavior of "trust anchor --remove" [PR#70, PR#71]
  * Build fixes [PR#63 ...]
- Changes for version 0.23.5
  * Fix license notice of common/unix-peer.c [PR#58]
  * Remove systemd unit files for now [PR#60]
  * Build fixes for FreeBSD [PR#56]
- Changes for version 0.23.4
  * Recognize query attributes defined in PKCS#11 URI (RFC7512) [PR#31,
    PR#37, PR#52]
  * The trust policy module now recognizes CKA_NSS_MOZILLA_CA_POLICY
    attribute, used by Firefox [#99453, PR#46]
  * Add 'trust dump' command to dump all PKCS#11 objects in the
    persistence format [PR#44]
  * New experimental 'p11-kit server' command that allows PKCS#11
    forwarding through a Unix domain socket.  A client-side module
    p11-kit-client.so is also provided [PR#15]
  * Add systemd unit files for exporting the proxy module through a
    Unix domain socket [PR#35]
  * New P11KitIter API to iterate over slots, tokens, and modules in
    addition to objects [PR#28]
  * libffi dependency is now optional [PR#9]
  * Build fixes for FreeBSD, macOS, and Windows [PR#32, PR#39, PR#45]
- Changes for version 0.23.3
  * Install private executables in libexecdir [fdo#98817]
  * Fix link error of proxy module on macOS [fdo#98022]
  * Use new PKCS#11 URI specification for URIs [fdo#97245]
  * Support x-init-reserved argument of C_Initialize() in remote modules
    [fdo#80519]
  * Incorporate changes from PKCS#11 2.40 specification
  * Bump libtool library version
  * Documentation fixes
  * Build fixes [fdo#87192 ...]
- Move RPM macros to %_rpmmacrodir.
- New server subpackage
- Change keyring to new maintainer Daiki Ueno
- Avoid bareword to fix build failure
- Remove obsolete patches:
  * p11-kit-biarch.patch
  * 0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch
  * 0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch</changelog>
  <changelog author="lnussel@suse.com" date="1674648000">- Backport IBM specific mechanism and attributes (Jira#PED-584)
  0001-Add-IBM-specific-mechanism-and-attributes.patch
  0002-Add-support-for-serializing-CK_ECDH1_DERIVE_PARAMS-m.patch
  0003-client-Allow-zero-part-length-at-C_SignUpdate.patch
  0004-Fix-support-of-CKA_DERIVE_TEMPLATE.patch
  0005-Add-other-SHA-variants-also-for-RSA-and-EC-signature.patch
  0006-Add-support-for-missing-AES-and-DES-DES3-mechanisms.patch
  0007-Add-support-for-MAC-and-HMAC-general-mechanisms.patch
  0008-Add-support-for-CKM_DH_PKCS_DERIVE.patch
  0009-rpc-Handle-special-cases-for-buffer-and-length.patch
  0010-Add-support-for-CKM_AES_CTR.patch
  0011-Add-support-for-CKM_AES_GCM.patch
  0012-common-pkcs11x.h-Support-CRYPTOKI_GNU-for-IBM-vendor.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1698148800">- Ensure that programs using &lt;p11-kit/pkcs11x.h&gt; can be compiled
  with CRYPTOKI_GNU. Fixes GnuTLS builds. [jsc#PED-6705]
  * Add p11-kit-pkcs11-gnu-Enable-testing-with-p11-kit-pkcs11x.h.patch</changelog>
</package>
<package pkgid="74ff31dda88ed2f6b172e402b46054185cf8b697c1a058508bd082a237c393fb" name="p11-kit" arch="s390x">
  <version epoch="0" ver="0.23.22" rel="150500.8.3.1"/>
  <changelog author="lnussel@suse.de" date="1413201600">- remove patches:
  * trust-Print-label-of-certificate-when-complaining-.patch
  * trust-Dont-use-invalid-public-keys-for-looking-up-.patch
- new version 0.20.7 (stable)
  * New public pkcs11x.h header containing extensions [fdo#83495]
  * Export necessary defines to lookup attached extensions [fdo#83495]
  * Build fixes
- new version 0.20.6 (stable)
  * Make the p11-kit-proxy.so module respect critical = no [fdo#83651]
  * Build fix for FreeBSD [fdo#75674]
- new version 0.20.5 (stable)
  * Don't use invalid keys for looking up stapled extensions [fdo#82328]
  * Better error messages when invalid certificate extensions
  * Fix parsing of some odd OpenSSL TRUSTED CERTIFICATE files
  * Fix some leaks, and memory issues
  * Silence some clang scanner warnings
- new version 0.20.4 (stable)
  * Don't complain about C_Finalize after a fork
  * Fix typo</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Update to version 0.23.1 (stable)
  * Use new PKCS#11 URI draft fields for URIs [fdo#86474 fdo#87582]
  * Add pem-directory-hash extract format
  * Build fixes
- Remove 0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff;
  fixed on upstream release
- Remove autoconf, automake and libtool require; unneeded dependencies
- Add gtk-doc require; needed to build html documentation
- Remove redundant %clean section</changelog>
  <changelog author="mpluskal@suse.com" date="1454932800">- Update to 0.23.2
  * Fix forking issues with libffi
  * Fix various crashes in corner cases
  * Updated translations
  * Build fixes
- Make building more verbose
- Enable tests
- Small spec file cleanup with spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- 32-bit compatibility fixes:
  * Add PKCS11 module to p11-kit-32bit (bsc#996047#c39)
  * Add p11-kit-nss-trust-32bit NSS module
  * Fix potential bi-arch issue with private binaries
    (fdo#98817, p11-kit-biarch.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="lnussel@suse.de" date="1573819200">- support loading NSS attribute CKA_NSS_MOZILLA_CA_POLICY so Firefox
  detects built in certificates (boo#1154871,
  0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch,
  0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch)</changelog>
  <changelog author="lnussel@suse.de" date="1577102400">- Also build documentation (boo#1013125)</changelog>
  <changelog author="scabrero@suse.de" date="1628683200">- Update to version 0.23.22 (bsc#1180064, bsc#1180065, bsc#1180066):
  * Fix memory-safety issues that affect the RPC protocol
  (CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363), discovered
  and fixed by David Cook
  * anchor: Prefer persistent format when storing anchor [PR#329]
  * common: Fix infloop in p11_path_build [PR#326, PR#327]
  * proxy: C_CloseAllSessions: Make sure that calloc args are non-zero [PR#325]
  * common: Check for a NULL locale before freeing it [PR#321]
  * Build and test fixes [PR#313, PR#315, PR#317, PR#318, PR#319, PR#323,
  PR#330, PR#333, PR#334, PR#335, PR#338, PR#339]
- Changes for version 0.23.21
  * proxy: Do not assign duplicate slot IDs [PR#282]
  * common: Get program name based on executable path if possible [PR#307]
  * anchor: Exit with non-zero code, if any error occurs [PR#304]
  * Build and test fixes [PR#283, PR#290, PR#291, PR#292, PR#296, PR#299,
  PR#305, PR#306, PR#309, PR#311]
- Changes for version 0.23.20:
  * Revert "Fix RPC when length-s are 0" changes [PR#276]
- Changes for version 0.23.19:
  * common: add Russian PKCS#11 extensions to pkcs11x.h header [PR#255]
  * Add simple bash completion for provided commands [PR#258]
  * Unbreak list matching in enable-in and disable-in [PR#262]
  * Fix RPC when length-s are 0 [PR#259]
  * rpc: Add vsock transport support [PR#270]
  * trust: Support CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER [PR#265]
  * Build fixes [PR#271, PR#272, PR#273, ...]
- Changes for version 0.23.18:
  * rpc: Allow empty CK_DATE value [PR#253]
  * build: Meson fixes [PR#245]
  * build: Adjust feature parity between meson and autotools [PR#247]
- Changes for version 0.23.17:
  * common: Fix uClibc-ng compilation [PR#237]
  * trust: do not allow daylight to invalidate date validation [PR#236]
  * build: Port to meson build system [PR#231, PR#234]
  * rpc: On UNIX wait on condition variable instead of FD if header is for a different thread [PR#232]
  * doc: Add 'server' command in help [PR#229]
  * Build and test fixes [PR#230]
- Changes for version 0.23.16:
  * proxy: Support C_WaitForSlotEvent() if CKF_DONT_BLOCK is specified [PR#225]
  * conf: Ignore user configuration if the program is running as root [PR#226]
  * proxy: Refresh slot list on every C_GetSlotList call [PR#224]
  * modules: Fix index used in call to p11_dict_remove() [PR#219]
  * Fix Win32 p11_dl_error crash [PR#218]
  * modules: check gl.modules before iterates on it when freeing [PR#217]
  * trust: Ignore unreadable content in anchors [PR#215]
  * extract-jks: Prefer _p11_extract_jks_timestamp to SOURCE_DATE_EPOCH [PR#213]
- Changes for version 0.23.15:
  * trust: Improve error handling if backed trust file is corrupted [PR#206]
  * url: Prefer upper-case letters in hex characters when encoding [PR#193]
  * trust/extract-jks.c: also honor SOURCE_DATE_EPOCH time [PR#202]
  * virtual: Prefer fixed closures to libffi closures [PR#196]
  * Fix issues spotted by coverity and cppcheck [PR#194, PR#204]
  * Build and test fixes [PR#164, PR#191, PR#199, PR#201]
- Changes for version 0.23.14:
  * proxy: Avoid invalid memory access when unloading proxy module [PR#180]
  * Update pkcs11 header to allow SoftHSMv2 to compile [PR#181]
  * build: Restore libpthread dependency [PR#183]
  * Build fixes [PR#188]
- Changes for version 0.23.13:
  * server: Enable socket activation through systemd [PR#173]
  * rpc-server: p11_kit_remote_serve_tokens: Allow exporting all modules
    [PR#174]
  * proxy: Fail early if there is no slot mapping [PR#175]
  * Remove hard dependency on libpthread [PR#177]
  * Build fixes [PR#170, PR#176]
- Changes for version 0.23.12
  * Fix compile error when PKCS#11 GNU calling convention is enabled [PR#160]
  * Fix getauxval() and secure_getenv() emulation on macOS and FreeBSD [PR#167]
  * Build and test fixes on macOS [PR#162, PR#168]
- Changes for version 0.23.11
  * trust: Add extractor for edk2/cacerts.bin [PR#139]
  * modules: Add option to control module visibility from proxy [PR#140]
  * trust: Prevent trust module being loaded by proxy module [PR#142]
  * library: Use dedicated locale object for printing error [PR#148]
  * Treat CKR_CRYPTOKI_ALREADY_INITIALIZED correctly [PR#134]
  * Improve const correctness for P11KitUri [PR#152]
  * PKCS#11 URI scheme comparison is now case insensitive [PR#156]
  * Build and test fixes [PR#151, PR#149, PR#141, PR#138, PR#135]
- Changes for version 0.23.10
  * filter: Respect "write-protected" vendor-specific attribute in
    PKCS#11 URI [PR#129]
  * server: Improve shell integration and documentation [PR#107, PR#108]
  * proxy: Reuse existing slot ID mapping in after fork() [PR#120]
  * trust: Forcibly mark "Default Trust" read-only [PR#123]
  * New function p11_kit_override_system_files() which can be used for
    testing [PR#110]
  * trust: Filter out duplicate extensions [PR#69]
  * Update translations [PR#128]
  * Bug fixes [PR#125, PR#126]
- Changes for version 0.23.9
  * Fix p11-kit server regressions [PR#103, PR#104]
  * trust: Respect anyExtendedKeyUsage in CA certificates [PR#99]
  * Build fixes related to reallocarray [PR#96, PR#98, PR#100]
- Changes for version 0.23.8
  * Improve vendor query attributes handling in PKCS#11 URI [PR#92]
  * Add OTP and GOST mechanisms to pkcs11.h [PR#90, PR#91]
  * New envvar P11_KIT_NO_USER_CONFIG to stop looking at user
    configurations [PR#87]
  * Build fixes for Solaris and 32-bit big-endian platforms [PR#81, PR#86]
- Changes for version 0.23.7
  * Fix memory issues with "p11-kit server" [PR#78]
  * Build fixes [PR#77 ...]
- Changes for version 0.23.6
  * Port "p11-kit server" to Windows and portability fixes of the RPC
    protocol [PR#67, PR#72, PR#74]
  * Recover the old behavior of "trust anchor --remove" [PR#70, PR#71]
  * Build fixes [PR#63 ...]
- Changes for version 0.23.5
  * Fix license notice of common/unix-peer.c [PR#58]
  * Remove systemd unit files for now [PR#60]
  * Build fixes for FreeBSD [PR#56]
- Changes for version 0.23.4
  * Recognize query attributes defined in PKCS#11 URI (RFC7512) [PR#31,
    PR#37, PR#52]
  * The trust policy module now recognizes CKA_NSS_MOZILLA_CA_POLICY
    attribute, used by Firefox [#99453, PR#46]
  * Add 'trust dump' command to dump all PKCS#11 objects in the
    persistence format [PR#44]
  * New experimental 'p11-kit server' command that allows PKCS#11
    forwarding through a Unix domain socket.  A client-side module
    p11-kit-client.so is also provided [PR#15]
  * Add systemd unit files for exporting the proxy module through a
    Unix domain socket [PR#35]
  * New P11KitIter API to iterate over slots, tokens, and modules in
    addition to objects [PR#28]
  * libffi dependency is now optional [PR#9]
  * Build fixes for FreeBSD, macOS, and Windows [PR#32, PR#39, PR#45]
- Changes for version 0.23.3
  * Install private executables in libexecdir [fdo#98817]
  * Fix link error of proxy module on macOS [fdo#98022]
  * Use new PKCS#11 URI specification for URIs [fdo#97245]
  * Support x-init-reserved argument of C_Initialize() in remote modules
    [fdo#80519]
  * Incorporate changes from PKCS#11 2.40 specification
  * Bump libtool library version
  * Documentation fixes
  * Build fixes [fdo#87192 ...]
- Move RPM macros to %_rpmmacrodir.
- New server subpackage
- Change keyring to new maintainer Daiki Ueno
- Avoid bareword to fix build failure
- Remove obsolete patches:
  * p11-kit-biarch.patch
  * 0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch
  * 0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch</changelog>
  <changelog author="lnussel@suse.com" date="1674648000">- Backport IBM specific mechanism and attributes (Jira#PED-584)
  0001-Add-IBM-specific-mechanism-and-attributes.patch
  0002-Add-support-for-serializing-CK_ECDH1_DERIVE_PARAMS-m.patch
  0003-client-Allow-zero-part-length-at-C_SignUpdate.patch
  0004-Fix-support-of-CKA_DERIVE_TEMPLATE.patch
  0005-Add-other-SHA-variants-also-for-RSA-and-EC-signature.patch
  0006-Add-support-for-missing-AES-and-DES-DES3-mechanisms.patch
  0007-Add-support-for-MAC-and-HMAC-general-mechanisms.patch
  0008-Add-support-for-CKM_DH_PKCS_DERIVE.patch
  0009-rpc-Handle-special-cases-for-buffer-and-length.patch
  0010-Add-support-for-CKM_AES_CTR.patch
  0011-Add-support-for-CKM_AES_GCM.patch
  0012-common-pkcs11x.h-Support-CRYPTOKI_GNU-for-IBM-vendor.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1698148800">- Ensure that programs using &lt;p11-kit/pkcs11x.h&gt; can be compiled
  with CRYPTOKI_GNU. Fixes GnuTLS builds. [jsc#PED-6705]
  * Add p11-kit-pkcs11-gnu-Enable-testing-with-p11-kit-pkcs11x.h.patch</changelog>
</package>
<package pkgid="d2e69563a14fbccae0a623f60cb03f9e1b68d7c2313f5757ce9900b939dbae13" name="p11-kit" arch="src">
  <version epoch="0" ver="0.23.22" rel="150500.8.3.1"/>
  <changelog author="lnussel@suse.de" date="1372075200">- add p11-kit-nss-trust subpackage that serves as drop-in
  replacement for mozilla-nss-certs</changelog>
  <changelog author="lnussel@suse.de" date="1372420800">- provide libnssckbi.so to replace mozilla-nss-certs</changelog>
  <changelog author="lnussel@suse.de" date="1373025600">- fix 32bit provides of libnssckbi.so
- repace p11-kit-extract-trust with update-ca-certificates</changelog>
  <changelog author="lnussel@suse.de" date="1374753600">- new version 0.19.3
  * Fix up problems with automake testing
  * Fix a bunch of memory leaks in newly refactored code
  * Don't use _GNU_SOURCE and the unportability it brings
  * Add basic 'trust anchor' command to store a new anchor
  * Support for writing out trust token objects
  * Port to use CKA_PUBLIC_KEY_INFO and updated trust store spec
  * Add option to use freebl for hashing
  * Implement reloading of token data
  * Fix warnings and possible minor bugs higlighted by code scanners
  * Don't load configs in home directories when running setuid or setgid
  * Support treating ~/.config as $XDG_CONFIG_HOME
  * Use $XDG_DATA_HOME/pkcs11 as default user config directory
  * Use $TMPDIR instead of $TEMP while testing
  * Open files and fds with O_CLOEXEC
  * Abort initialization if a critical module fails to load
  * Don't use thread-unsafe functions: strerror, getpwuid
  * Fix p11_kit_space_strlen() result when empty string
  * Refactoring of where various components live</changelog>
  <changelog author="lnussel@suse.de" date="1377864000">- new version 0.19.4
  * 'trust anchor' now adds/removes certificate anchors
  * 'trust list' lists trust policy stuff
  * 'p11-kit extract' is now 'trust extract'
  * 'p11-kit extract-trust' is now 'trust extract-compat'
  * Workarounds for working on broken zfsonlinux.org [#68525]
  * Add --with-module-config parameter to the configure script [#68122]
  * Add support for removing stored PKCS#11 objects in trust module</changelog>
  <changelog author="lnussel@suse.de" date="1378814400">- upgrade to 0.20.1 which is 0.19 declared stable
  * Extract compat trust data after we've changes
  * Skip compat extraction if running as non-root
  * Better failure messages when removing anchors</changelog>
  <changelog author="lnussel@suse.de" date="1386331200">- trust: allow to also add openssl style hashes to pem-directory
  0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff</changelog>
  <changelog author="meissner@suse.com" date="1392120000">- added .sig file. trying to locate source of the keyring.</changelog>
  <changelog author="lnussel@suse.de" date="1400500800">- New version 0.20.2
  * Fix bug where blacklist didn't affect extracted ca-anchors if the anchor
    and blacklist were not in the same trust path (regression) [fdo#73558]
  * Check for race in BasicConstraints stapled extension [fdo#69314]
  * Build fixes and cleanup</changelog>
  <changelog author="lnussel@suse.de" date="1409313600">- new version 0.20.3
  * Fix problems reinitializing managed modules after fork
  * Fix bad bookeeping when fail initializing one of the modules
  * Fix case where module would be unloaded while in use [#74919]
  * Remove assertions when module used before initialized [#74919]
  * Fix handling of mmap failure and mapping empty files [#74773]
  * Stable p11_kit_be_quiet() and p11_kit_be_loud() functions
  * Require automake 1.12 or later
  * Build fixes for Windows [#76594 #74149]
- apply patches to avoid errors from certificates with invalid public key
  (fdo#82328, bnc#890908,
  trust-Dont-use-invalid-public-keys-for-looking-up-.patch,
  trust-Print-label-of-certificate-when-complaining-.patch)</changelog>
  <changelog author="lnussel@suse.de" date="1413201600">- remove patches:
  * trust-Print-label-of-certificate-when-complaining-.patch
  * trust-Dont-use-invalid-public-keys-for-looking-up-.patch
- new version 0.20.7 (stable)
  * New public pkcs11x.h header containing extensions [fdo#83495]
  * Export necessary defines to lookup attached extensions [fdo#83495]
  * Build fixes
- new version 0.20.6 (stable)
  * Make the p11-kit-proxy.so module respect critical = no [fdo#83651]
  * Build fix for FreeBSD [fdo#75674]
- new version 0.20.5 (stable)
  * Don't use invalid keys for looking up stapled extensions [fdo#82328]
  * Better error messages when invalid certificate extensions
  * Fix parsing of some odd OpenSSL TRUSTED CERTIFICATE files
  * Fix some leaks, and memory issues
  * Silence some clang scanner warnings
- new version 0.20.4 (stable)
  * Don't complain about C_Finalize after a fork
  * Fix typo</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Update to version 0.23.1 (stable)
  * Use new PKCS#11 URI draft fields for URIs [fdo#86474 fdo#87582]
  * Add pem-directory-hash extract format
  * Build fixes
- Remove 0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff;
  fixed on upstream release
- Remove autoconf, automake and libtool require; unneeded dependencies
- Add gtk-doc require; needed to build html documentation
- Remove redundant %clean section</changelog>
  <changelog author="mpluskal@suse.com" date="1454932800">- Update to 0.23.2
  * Fix forking issues with libffi
  * Fix various crashes in corner cases
  * Updated translations
  * Build fixes
- Make building more verbose
- Enable tests
- Small spec file cleanup with spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- 32-bit compatibility fixes:
  * Add PKCS11 module to p11-kit-32bit (bsc#996047#c39)
  * Add p11-kit-nss-trust-32bit NSS module
  * Fix potential bi-arch issue with private binaries
    (fdo#98817, p11-kit-biarch.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="lnussel@suse.de" date="1573819200">- support loading NSS attribute CKA_NSS_MOZILLA_CA_POLICY so Firefox
  detects built in certificates (boo#1154871,
  0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch,
  0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch)</changelog>
  <changelog author="lnussel@suse.de" date="1577102400">- Also build documentation (boo#1013125)</changelog>
  <changelog author="scabrero@suse.de" date="1628683200">- Update to version 0.23.22 (bsc#1180064, bsc#1180065, bsc#1180066):
  * Fix memory-safety issues that affect the RPC protocol
  (CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363), discovered
  and fixed by David Cook
  * anchor: Prefer persistent format when storing anchor [PR#329]
  * common: Fix infloop in p11_path_build [PR#326, PR#327]
  * proxy: C_CloseAllSessions: Make sure that calloc args are non-zero [PR#325]
  * common: Check for a NULL locale before freeing it [PR#321]
  * Build and test fixes [PR#313, PR#315, PR#317, PR#318, PR#319, PR#323,
  PR#330, PR#333, PR#334, PR#335, PR#338, PR#339]
- Changes for version 0.23.21
  * proxy: Do not assign duplicate slot IDs [PR#282]
  * common: Get program name based on executable path if possible [PR#307]
  * anchor: Exit with non-zero code, if any error occurs [PR#304]
  * Build and test fixes [PR#283, PR#290, PR#291, PR#292, PR#296, PR#299,
  PR#305, PR#306, PR#309, PR#311]
- Changes for version 0.23.20:
  * Revert "Fix RPC when length-s are 0" changes [PR#276]
- Changes for version 0.23.19:
  * common: add Russian PKCS#11 extensions to pkcs11x.h header [PR#255]
  * Add simple bash completion for provided commands [PR#258]
  * Unbreak list matching in enable-in and disable-in [PR#262]
  * Fix RPC when length-s are 0 [PR#259]
  * rpc: Add vsock transport support [PR#270]
  * trust: Support CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER [PR#265]
  * Build fixes [PR#271, PR#272, PR#273, ...]
- Changes for version 0.23.18:
  * rpc: Allow empty CK_DATE value [PR#253]
  * build: Meson fixes [PR#245]
  * build: Adjust feature parity between meson and autotools [PR#247]
- Changes for version 0.23.17:
  * common: Fix uClibc-ng compilation [PR#237]
  * trust: do not allow daylight to invalidate date validation [PR#236]
  * build: Port to meson build system [PR#231, PR#234]
  * rpc: On UNIX wait on condition variable instead of FD if header is for a different thread [PR#232]
  * doc: Add 'server' command in help [PR#229]
  * Build and test fixes [PR#230]
- Changes for version 0.23.16:
  * proxy: Support C_WaitForSlotEvent() if CKF_DONT_BLOCK is specified [PR#225]
  * conf: Ignore user configuration if the program is running as root [PR#226]
  * proxy: Refresh slot list on every C_GetSlotList call [PR#224]
  * modules: Fix index used in call to p11_dict_remove() [PR#219]
  * Fix Win32 p11_dl_error crash [PR#218]
  * modules: check gl.modules before iterates on it when freeing [PR#217]
  * trust: Ignore unreadable content in anchors [PR#215]
  * extract-jks: Prefer _p11_extract_jks_timestamp to SOURCE_DATE_EPOCH [PR#213]
- Changes for version 0.23.15:
  * trust: Improve error handling if backed trust file is corrupted [PR#206]
  * url: Prefer upper-case letters in hex characters when encoding [PR#193]
  * trust/extract-jks.c: also honor SOURCE_DATE_EPOCH time [PR#202]
  * virtual: Prefer fixed closures to libffi closures [PR#196]
  * Fix issues spotted by coverity and cppcheck [PR#194, PR#204]
  * Build and test fixes [PR#164, PR#191, PR#199, PR#201]
- Changes for version 0.23.14:
  * proxy: Avoid invalid memory access when unloading proxy module [PR#180]
  * Update pkcs11 header to allow SoftHSMv2 to compile [PR#181]
  * build: Restore libpthread dependency [PR#183]
  * Build fixes [PR#188]
- Changes for version 0.23.13:
  * server: Enable socket activation through systemd [PR#173]
  * rpc-server: p11_kit_remote_serve_tokens: Allow exporting all modules
    [PR#174]
  * proxy: Fail early if there is no slot mapping [PR#175]
  * Remove hard dependency on libpthread [PR#177]
  * Build fixes [PR#170, PR#176]
- Changes for version 0.23.12
  * Fix compile error when PKCS#11 GNU calling convention is enabled [PR#160]
  * Fix getauxval() and secure_getenv() emulation on macOS and FreeBSD [PR#167]
  * Build and test fixes on macOS [PR#162, PR#168]
- Changes for version 0.23.11
  * trust: Add extractor for edk2/cacerts.bin [PR#139]
  * modules: Add option to control module visibility from proxy [PR#140]
  * trust: Prevent trust module being loaded by proxy module [PR#142]
  * library: Use dedicated locale object for printing error [PR#148]
  * Treat CKR_CRYPTOKI_ALREADY_INITIALIZED correctly [PR#134]
  * Improve const correctness for P11KitUri [PR#152]
  * PKCS#11 URI scheme comparison is now case insensitive [PR#156]
  * Build and test fixes [PR#151, PR#149, PR#141, PR#138, PR#135]
- Changes for version 0.23.10
  * filter: Respect "write-protected" vendor-specific attribute in
    PKCS#11 URI [PR#129]
  * server: Improve shell integration and documentation [PR#107, PR#108]
  * proxy: Reuse existing slot ID mapping in after fork() [PR#120]
  * trust: Forcibly mark "Default Trust" read-only [PR#123]
  * New function p11_kit_override_system_files() which can be used for
    testing [PR#110]
  * trust: Filter out duplicate extensions [PR#69]
  * Update translations [PR#128]
  * Bug fixes [PR#125, PR#126]
- Changes for version 0.23.9
  * Fix p11-kit server regressions [PR#103, PR#104]
  * trust: Respect anyExtendedKeyUsage in CA certificates [PR#99]
  * Build fixes related to reallocarray [PR#96, PR#98, PR#100]
- Changes for version 0.23.8
  * Improve vendor query attributes handling in PKCS#11 URI [PR#92]
  * Add OTP and GOST mechanisms to pkcs11.h [PR#90, PR#91]
  * New envvar P11_KIT_NO_USER_CONFIG to stop looking at user
    configurations [PR#87]
  * Build fixes for Solaris and 32-bit big-endian platforms [PR#81, PR#86]
- Changes for version 0.23.7
  * Fix memory issues with "p11-kit server" [PR#78]
  * Build fixes [PR#77 ...]
- Changes for version 0.23.6
  * Port "p11-kit server" to Windows and portability fixes of the RPC
    protocol [PR#67, PR#72, PR#74]
  * Recover the old behavior of "trust anchor --remove" [PR#70, PR#71]
  * Build fixes [PR#63 ...]
- Changes for version 0.23.5
  * Fix license notice of common/unix-peer.c [PR#58]
  * Remove systemd unit files for now [PR#60]
  * Build fixes for FreeBSD [PR#56]
- Changes for version 0.23.4
  * Recognize query attributes defined in PKCS#11 URI (RFC7512) [PR#31,
    PR#37, PR#52]
  * The trust policy module now recognizes CKA_NSS_MOZILLA_CA_POLICY
    attribute, used by Firefox [#99453, PR#46]
  * Add 'trust dump' command to dump all PKCS#11 objects in the
    persistence format [PR#44]
  * New experimental 'p11-kit server' command that allows PKCS#11
    forwarding through a Unix domain socket.  A client-side module
    p11-kit-client.so is also provided [PR#15]
  * Add systemd unit files for exporting the proxy module through a
    Unix domain socket [PR#35]
  * New P11KitIter API to iterate over slots, tokens, and modules in
    addition to objects [PR#28]
  * libffi dependency is now optional [PR#9]
  * Build fixes for FreeBSD, macOS, and Windows [PR#32, PR#39, PR#45]
- Changes for version 0.23.3
  * Install private executables in libexecdir [fdo#98817]
  * Fix link error of proxy module on macOS [fdo#98022]
  * Use new PKCS#11 URI specification for URIs [fdo#97245]
  * Support x-init-reserved argument of C_Initialize() in remote modules
    [fdo#80519]
  * Incorporate changes from PKCS#11 2.40 specification
  * Bump libtool library version
  * Documentation fixes
  * Build fixes [fdo#87192 ...]
- Move RPM macros to %_rpmmacrodir.
- New server subpackage
- Change keyring to new maintainer Daiki Ueno
- Avoid bareword to fix build failure
- Remove obsolete patches:
  * p11-kit-biarch.patch
  * 0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch
  * 0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch</changelog>
  <changelog author="lnussel@suse.com" date="1674648000">- Backport IBM specific mechanism and attributes (Jira#PED-584)
  0001-Add-IBM-specific-mechanism-and-attributes.patch
  0002-Add-support-for-serializing-CK_ECDH1_DERIVE_PARAMS-m.patch
  0003-client-Allow-zero-part-length-at-C_SignUpdate.patch
  0004-Fix-support-of-CKA_DERIVE_TEMPLATE.patch
  0005-Add-other-SHA-variants-also-for-RSA-and-EC-signature.patch
  0006-Add-support-for-missing-AES-and-DES-DES3-mechanisms.patch
  0007-Add-support-for-MAC-and-HMAC-general-mechanisms.patch
  0008-Add-support-for-CKM_DH_PKCS_DERIVE.patch
  0009-rpc-Handle-special-cases-for-buffer-and-length.patch
  0010-Add-support-for-CKM_AES_CTR.patch
  0011-Add-support-for-CKM_AES_GCM.patch
  0012-common-pkcs11x.h-Support-CRYPTOKI_GNU-for-IBM-vendor.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1698148800">- Ensure that programs using &lt;p11-kit/pkcs11x.h&gt; can be compiled
  with CRYPTOKI_GNU. Fixes GnuTLS builds. [jsc#PED-6705]
  * Add p11-kit-pkcs11-gnu-Enable-testing-with-p11-kit-pkcs11x.h.patch</changelog>
</package>
<package pkgid="0a74d8da1df62d889f31bc41f257a7e4ddba6b75950fd2e936a1c7574de6c7f6" name="p11-kit" arch="x86_64">
  <version epoch="0" ver="0.23.22" rel="150500.8.3.1"/>
  <changelog author="lnussel@suse.de" date="1413201600">- remove patches:
  * trust-Print-label-of-certificate-when-complaining-.patch
  * trust-Dont-use-invalid-public-keys-for-looking-up-.patch
- new version 0.20.7 (stable)
  * New public pkcs11x.h header containing extensions [fdo#83495]
  * Export necessary defines to lookup attached extensions [fdo#83495]
  * Build fixes
- new version 0.20.6 (stable)
  * Make the p11-kit-proxy.so module respect critical = no [fdo#83651]
  * Build fix for FreeBSD [fdo#75674]
- new version 0.20.5 (stable)
  * Don't use invalid keys for looking up stapled extensions [fdo#82328]
  * Better error messages when invalid certificate extensions
  * Fix parsing of some odd OpenSSL TRUSTED CERTIFICATE files
  * Fix some leaks, and memory issues
  * Silence some clang scanner warnings
- new version 0.20.4 (stable)
  * Don't complain about C_Finalize after a fork
  * Fix typo</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Update to version 0.23.1 (stable)
  * Use new PKCS#11 URI draft fields for URIs [fdo#86474 fdo#87582]
  * Add pem-directory-hash extract format
  * Build fixes
- Remove 0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff;
  fixed on upstream release
- Remove autoconf, automake and libtool require; unneeded dependencies
- Add gtk-doc require; needed to build html documentation
- Remove redundant %clean section</changelog>
  <changelog author="mpluskal@suse.com" date="1454932800">- Update to 0.23.2
  * Fix forking issues with libffi
  * Fix various crashes in corner cases
  * Updated translations
  * Build fixes
- Make building more verbose
- Enable tests
- Small spec file cleanup with spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- 32-bit compatibility fixes:
  * Add PKCS11 module to p11-kit-32bit (bsc#996047#c39)
  * Add p11-kit-nss-trust-32bit NSS module
  * Fix potential bi-arch issue with private binaries
    (fdo#98817, p11-kit-biarch.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="lnussel@suse.de" date="1573819200">- support loading NSS attribute CKA_NSS_MOZILLA_CA_POLICY so Firefox
  detects built in certificates (boo#1154871,
  0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch,
  0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch)</changelog>
  <changelog author="lnussel@suse.de" date="1577102400">- Also build documentation (boo#1013125)</changelog>
  <changelog author="scabrero@suse.de" date="1628683200">- Update to version 0.23.22 (bsc#1180064, bsc#1180065, bsc#1180066):
  * Fix memory-safety issues that affect the RPC protocol
  (CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363), discovered
  and fixed by David Cook
  * anchor: Prefer persistent format when storing anchor [PR#329]
  * common: Fix infloop in p11_path_build [PR#326, PR#327]
  * proxy: C_CloseAllSessions: Make sure that calloc args are non-zero [PR#325]
  * common: Check for a NULL locale before freeing it [PR#321]
  * Build and test fixes [PR#313, PR#315, PR#317, PR#318, PR#319, PR#323,
  PR#330, PR#333, PR#334, PR#335, PR#338, PR#339]
- Changes for version 0.23.21
  * proxy: Do not assign duplicate slot IDs [PR#282]
  * common: Get program name based on executable path if possible [PR#307]
  * anchor: Exit with non-zero code, if any error occurs [PR#304]
  * Build and test fixes [PR#283, PR#290, PR#291, PR#292, PR#296, PR#299,
  PR#305, PR#306, PR#309, PR#311]
- Changes for version 0.23.20:
  * Revert "Fix RPC when length-s are 0" changes [PR#276]
- Changes for version 0.23.19:
  * common: add Russian PKCS#11 extensions to pkcs11x.h header [PR#255]
  * Add simple bash completion for provided commands [PR#258]
  * Unbreak list matching in enable-in and disable-in [PR#262]
  * Fix RPC when length-s are 0 [PR#259]
  * rpc: Add vsock transport support [PR#270]
  * trust: Support CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER [PR#265]
  * Build fixes [PR#271, PR#272, PR#273, ...]
- Changes for version 0.23.18:
  * rpc: Allow empty CK_DATE value [PR#253]
  * build: Meson fixes [PR#245]
  * build: Adjust feature parity between meson and autotools [PR#247]
- Changes for version 0.23.17:
  * common: Fix uClibc-ng compilation [PR#237]
  * trust: do not allow daylight to invalidate date validation [PR#236]
  * build: Port to meson build system [PR#231, PR#234]
  * rpc: On UNIX wait on condition variable instead of FD if header is for a different thread [PR#232]
  * doc: Add 'server' command in help [PR#229]
  * Build and test fixes [PR#230]
- Changes for version 0.23.16:
  * proxy: Support C_WaitForSlotEvent() if CKF_DONT_BLOCK is specified [PR#225]
  * conf: Ignore user configuration if the program is running as root [PR#226]
  * proxy: Refresh slot list on every C_GetSlotList call [PR#224]
  * modules: Fix index used in call to p11_dict_remove() [PR#219]
  * Fix Win32 p11_dl_error crash [PR#218]
  * modules: check gl.modules before iterates on it when freeing [PR#217]
  * trust: Ignore unreadable content in anchors [PR#215]
  * extract-jks: Prefer _p11_extract_jks_timestamp to SOURCE_DATE_EPOCH [PR#213]
- Changes for version 0.23.15:
  * trust: Improve error handling if backed trust file is corrupted [PR#206]
  * url: Prefer upper-case letters in hex characters when encoding [PR#193]
  * trust/extract-jks.c: also honor SOURCE_DATE_EPOCH time [PR#202]
  * virtual: Prefer fixed closures to libffi closures [PR#196]
  * Fix issues spotted by coverity and cppcheck [PR#194, PR#204]
  * Build and test fixes [PR#164, PR#191, PR#199, PR#201]
- Changes for version 0.23.14:
  * proxy: Avoid invalid memory access when unloading proxy module [PR#180]
  * Update pkcs11 header to allow SoftHSMv2 to compile [PR#181]
  * build: Restore libpthread dependency [PR#183]
  * Build fixes [PR#188]
- Changes for version 0.23.13:
  * server: Enable socket activation through systemd [PR#173]
  * rpc-server: p11_kit_remote_serve_tokens: Allow exporting all modules
    [PR#174]
  * proxy: Fail early if there is no slot mapping [PR#175]
  * Remove hard dependency on libpthread [PR#177]
  * Build fixes [PR#170, PR#176]
- Changes for version 0.23.12
  * Fix compile error when PKCS#11 GNU calling convention is enabled [PR#160]
  * Fix getauxval() and secure_getenv() emulation on macOS and FreeBSD [PR#167]
  * Build and test fixes on macOS [PR#162, PR#168]
- Changes for version 0.23.11
  * trust: Add extractor for edk2/cacerts.bin [PR#139]
  * modules: Add option to control module visibility from proxy [PR#140]
  * trust: Prevent trust module being loaded by proxy module [PR#142]
  * library: Use dedicated locale object for printing error [PR#148]
  * Treat CKR_CRYPTOKI_ALREADY_INITIALIZED correctly [PR#134]
  * Improve const correctness for P11KitUri [PR#152]
  * PKCS#11 URI scheme comparison is now case insensitive [PR#156]
  * Build and test fixes [PR#151, PR#149, PR#141, PR#138, PR#135]
- Changes for version 0.23.10
  * filter: Respect "write-protected" vendor-specific attribute in
    PKCS#11 URI [PR#129]
  * server: Improve shell integration and documentation [PR#107, PR#108]
  * proxy: Reuse existing slot ID mapping in after fork() [PR#120]
  * trust: Forcibly mark "Default Trust" read-only [PR#123]
  * New function p11_kit_override_system_files() which can be used for
    testing [PR#110]
  * trust: Filter out duplicate extensions [PR#69]
  * Update translations [PR#128]
  * Bug fixes [PR#125, PR#126]
- Changes for version 0.23.9
  * Fix p11-kit server regressions [PR#103, PR#104]
  * trust: Respect anyExtendedKeyUsage in CA certificates [PR#99]
  * Build fixes related to reallocarray [PR#96, PR#98, PR#100]
- Changes for version 0.23.8
  * Improve vendor query attributes handling in PKCS#11 URI [PR#92]
  * Add OTP and GOST mechanisms to pkcs11.h [PR#90, PR#91]
  * New envvar P11_KIT_NO_USER_CONFIG to stop looking at user
    configurations [PR#87]
  * Build fixes for Solaris and 32-bit big-endian platforms [PR#81, PR#86]
- Changes for version 0.23.7
  * Fix memory issues with "p11-kit server" [PR#78]
  * Build fixes [PR#77 ...]
- Changes for version 0.23.6
  * Port "p11-kit server" to Windows and portability fixes of the RPC
    protocol [PR#67, PR#72, PR#74]
  * Recover the old behavior of "trust anchor --remove" [PR#70, PR#71]
  * Build fixes [PR#63 ...]
- Changes for version 0.23.5
  * Fix license notice of common/unix-peer.c [PR#58]
  * Remove systemd unit files for now [PR#60]
  * Build fixes for FreeBSD [PR#56]
- Changes for version 0.23.4
  * Recognize query attributes defined in PKCS#11 URI (RFC7512) [PR#31,
    PR#37, PR#52]
  * The trust policy module now recognizes CKA_NSS_MOZILLA_CA_POLICY
    attribute, used by Firefox [#99453, PR#46]
  * Add 'trust dump' command to dump all PKCS#11 objects in the
    persistence format [PR#44]
  * New experimental 'p11-kit server' command that allows PKCS#11
    forwarding through a Unix domain socket.  A client-side module
    p11-kit-client.so is also provided [PR#15]
  * Add systemd unit files for exporting the proxy module through a
    Unix domain socket [PR#35]
  * New P11KitIter API to iterate over slots, tokens, and modules in
    addition to objects [PR#28]
  * libffi dependency is now optional [PR#9]
  * Build fixes for FreeBSD, macOS, and Windows [PR#32, PR#39, PR#45]
- Changes for version 0.23.3
  * Install private executables in libexecdir [fdo#98817]
  * Fix link error of proxy module on macOS [fdo#98022]
  * Use new PKCS#11 URI specification for URIs [fdo#97245]
  * Support x-init-reserved argument of C_Initialize() in remote modules
    [fdo#80519]
  * Incorporate changes from PKCS#11 2.40 specification
  * Bump libtool library version
  * Documentation fixes
  * Build fixes [fdo#87192 ...]
- Move RPM macros to %_rpmmacrodir.
- New server subpackage
- Change keyring to new maintainer Daiki Ueno
- Avoid bareword to fix build failure
- Remove obsolete patches:
  * p11-kit-biarch.patch
  * 0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch
  * 0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch</changelog>
  <changelog author="lnussel@suse.com" date="1674648000">- Backport IBM specific mechanism and attributes (Jira#PED-584)
  0001-Add-IBM-specific-mechanism-and-attributes.patch
  0002-Add-support-for-serializing-CK_ECDH1_DERIVE_PARAMS-m.patch
  0003-client-Allow-zero-part-length-at-C_SignUpdate.patch
  0004-Fix-support-of-CKA_DERIVE_TEMPLATE.patch
  0005-Add-other-SHA-variants-also-for-RSA-and-EC-signature.patch
  0006-Add-support-for-missing-AES-and-DES-DES3-mechanisms.patch
  0007-Add-support-for-MAC-and-HMAC-general-mechanisms.patch
  0008-Add-support-for-CKM_DH_PKCS_DERIVE.patch
  0009-rpc-Handle-special-cases-for-buffer-and-length.patch
  0010-Add-support-for-CKM_AES_CTR.patch
  0011-Add-support-for-CKM_AES_GCM.patch
  0012-common-pkcs11x.h-Support-CRYPTOKI_GNU-for-IBM-vendor.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1698148800">- Ensure that programs using &lt;p11-kit/pkcs11x.h&gt; can be compiled
  with CRYPTOKI_GNU. Fixes GnuTLS builds. [jsc#PED-6705]
  * Add p11-kit-pkcs11-gnu-Enable-testing-with-p11-kit-pkcs11x.h.patch</changelog>
</package>
<package pkgid="95a420fff56758dde4506eb8cab333b102dc797f244b1ecf669b72230e7f9a83" name="p11-kit-tools" arch="aarch64">
  <version epoch="0" ver="0.23.22" rel="150500.8.3.1"/>
  <changelog author="lnussel@suse.de" date="1413201600">- remove patches:
  * trust-Print-label-of-certificate-when-complaining-.patch
  * trust-Dont-use-invalid-public-keys-for-looking-up-.patch
- new version 0.20.7 (stable)
  * New public pkcs11x.h header containing extensions [fdo#83495]
  * Export necessary defines to lookup attached extensions [fdo#83495]
  * Build fixes
- new version 0.20.6 (stable)
  * Make the p11-kit-proxy.so module respect critical = no [fdo#83651]
  * Build fix for FreeBSD [fdo#75674]
- new version 0.20.5 (stable)
  * Don't use invalid keys for looking up stapled extensions [fdo#82328]
  * Better error messages when invalid certificate extensions
  * Fix parsing of some odd OpenSSL TRUSTED CERTIFICATE files
  * Fix some leaks, and memory issues
  * Silence some clang scanner warnings
- new version 0.20.4 (stable)
  * Don't complain about C_Finalize after a fork
  * Fix typo</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Update to version 0.23.1 (stable)
  * Use new PKCS#11 URI draft fields for URIs [fdo#86474 fdo#87582]
  * Add pem-directory-hash extract format
  * Build fixes
- Remove 0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff;
  fixed on upstream release
- Remove autoconf, automake and libtool require; unneeded dependencies
- Add gtk-doc require; needed to build html documentation
- Remove redundant %clean section</changelog>
  <changelog author="mpluskal@suse.com" date="1454932800">- Update to 0.23.2
  * Fix forking issues with libffi
  * Fix various crashes in corner cases
  * Updated translations
  * Build fixes
- Make building more verbose
- Enable tests
- Small spec file cleanup with spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- 32-bit compatibility fixes:
  * Add PKCS11 module to p11-kit-32bit (bsc#996047#c39)
  * Add p11-kit-nss-trust-32bit NSS module
  * Fix potential bi-arch issue with private binaries
    (fdo#98817, p11-kit-biarch.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="lnussel@suse.de" date="1573819200">- support loading NSS attribute CKA_NSS_MOZILLA_CA_POLICY so Firefox
  detects built in certificates (boo#1154871,
  0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch,
  0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch)</changelog>
  <changelog author="lnussel@suse.de" date="1577102400">- Also build documentation (boo#1013125)</changelog>
  <changelog author="scabrero@suse.de" date="1628683200">- Update to version 0.23.22 (bsc#1180064, bsc#1180065, bsc#1180066):
  * Fix memory-safety issues that affect the RPC protocol
  (CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363), discovered
  and fixed by David Cook
  * anchor: Prefer persistent format when storing anchor [PR#329]
  * common: Fix infloop in p11_path_build [PR#326, PR#327]
  * proxy: C_CloseAllSessions: Make sure that calloc args are non-zero [PR#325]
  * common: Check for a NULL locale before freeing it [PR#321]
  * Build and test fixes [PR#313, PR#315, PR#317, PR#318, PR#319, PR#323,
  PR#330, PR#333, PR#334, PR#335, PR#338, PR#339]
- Changes for version 0.23.21
  * proxy: Do not assign duplicate slot IDs [PR#282]
  * common: Get program name based on executable path if possible [PR#307]
  * anchor: Exit with non-zero code, if any error occurs [PR#304]
  * Build and test fixes [PR#283, PR#290, PR#291, PR#292, PR#296, PR#299,
  PR#305, PR#306, PR#309, PR#311]
- Changes for version 0.23.20:
  * Revert "Fix RPC when length-s are 0" changes [PR#276]
- Changes for version 0.23.19:
  * common: add Russian PKCS#11 extensions to pkcs11x.h header [PR#255]
  * Add simple bash completion for provided commands [PR#258]
  * Unbreak list matching in enable-in and disable-in [PR#262]
  * Fix RPC when length-s are 0 [PR#259]
  * rpc: Add vsock transport support [PR#270]
  * trust: Support CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER [PR#265]
  * Build fixes [PR#271, PR#272, PR#273, ...]
- Changes for version 0.23.18:
  * rpc: Allow empty CK_DATE value [PR#253]
  * build: Meson fixes [PR#245]
  * build: Adjust feature parity between meson and autotools [PR#247]
- Changes for version 0.23.17:
  * common: Fix uClibc-ng compilation [PR#237]
  * trust: do not allow daylight to invalidate date validation [PR#236]
  * build: Port to meson build system [PR#231, PR#234]
  * rpc: On UNIX wait on condition variable instead of FD if header is for a different thread [PR#232]
  * doc: Add 'server' command in help [PR#229]
  * Build and test fixes [PR#230]
- Changes for version 0.23.16:
  * proxy: Support C_WaitForSlotEvent() if CKF_DONT_BLOCK is specified [PR#225]
  * conf: Ignore user configuration if the program is running as root [PR#226]
  * proxy: Refresh slot list on every C_GetSlotList call [PR#224]
  * modules: Fix index used in call to p11_dict_remove() [PR#219]
  * Fix Win32 p11_dl_error crash [PR#218]
  * modules: check gl.modules before iterates on it when freeing [PR#217]
  * trust: Ignore unreadable content in anchors [PR#215]
  * extract-jks: Prefer _p11_extract_jks_timestamp to SOURCE_DATE_EPOCH [PR#213]
- Changes for version 0.23.15:
  * trust: Improve error handling if backed trust file is corrupted [PR#206]
  * url: Prefer upper-case letters in hex characters when encoding [PR#193]
  * trust/extract-jks.c: also honor SOURCE_DATE_EPOCH time [PR#202]
  * virtual: Prefer fixed closures to libffi closures [PR#196]
  * Fix issues spotted by coverity and cppcheck [PR#194, PR#204]
  * Build and test fixes [PR#164, PR#191, PR#199, PR#201]
- Changes for version 0.23.14:
  * proxy: Avoid invalid memory access when unloading proxy module [PR#180]
  * Update pkcs11 header to allow SoftHSMv2 to compile [PR#181]
  * build: Restore libpthread dependency [PR#183]
  * Build fixes [PR#188]
- Changes for version 0.23.13:
  * server: Enable socket activation through systemd [PR#173]
  * rpc-server: p11_kit_remote_serve_tokens: Allow exporting all modules
    [PR#174]
  * proxy: Fail early if there is no slot mapping [PR#175]
  * Remove hard dependency on libpthread [PR#177]
  * Build fixes [PR#170, PR#176]
- Changes for version 0.23.12
  * Fix compile error when PKCS#11 GNU calling convention is enabled [PR#160]
  * Fix getauxval() and secure_getenv() emulation on macOS and FreeBSD [PR#167]
  * Build and test fixes on macOS [PR#162, PR#168]
- Changes for version 0.23.11
  * trust: Add extractor for edk2/cacerts.bin [PR#139]
  * modules: Add option to control module visibility from proxy [PR#140]
  * trust: Prevent trust module being loaded by proxy module [PR#142]
  * library: Use dedicated locale object for printing error [PR#148]
  * Treat CKR_CRYPTOKI_ALREADY_INITIALIZED correctly [PR#134]
  * Improve const correctness for P11KitUri [PR#152]
  * PKCS#11 URI scheme comparison is now case insensitive [PR#156]
  * Build and test fixes [PR#151, PR#149, PR#141, PR#138, PR#135]
- Changes for version 0.23.10
  * filter: Respect "write-protected" vendor-specific attribute in
    PKCS#11 URI [PR#129]
  * server: Improve shell integration and documentation [PR#107, PR#108]
  * proxy: Reuse existing slot ID mapping in after fork() [PR#120]
  * trust: Forcibly mark "Default Trust" read-only [PR#123]
  * New function p11_kit_override_system_files() which can be used for
    testing [PR#110]
  * trust: Filter out duplicate extensions [PR#69]
  * Update translations [PR#128]
  * Bug fixes [PR#125, PR#126]
- Changes for version 0.23.9
  * Fix p11-kit server regressions [PR#103, PR#104]
  * trust: Respect anyExtendedKeyUsage in CA certificates [PR#99]
  * Build fixes related to reallocarray [PR#96, PR#98, PR#100]
- Changes for version 0.23.8
  * Improve vendor query attributes handling in PKCS#11 URI [PR#92]
  * Add OTP and GOST mechanisms to pkcs11.h [PR#90, PR#91]
  * New envvar P11_KIT_NO_USER_CONFIG to stop looking at user
    configurations [PR#87]
  * Build fixes for Solaris and 32-bit big-endian platforms [PR#81, PR#86]
- Changes for version 0.23.7
  * Fix memory issues with "p11-kit server" [PR#78]
  * Build fixes [PR#77 ...]
- Changes for version 0.23.6
  * Port "p11-kit server" to Windows and portability fixes of the RPC
    protocol [PR#67, PR#72, PR#74]
  * Recover the old behavior of "trust anchor --remove" [PR#70, PR#71]
  * Build fixes [PR#63 ...]
- Changes for version 0.23.5
  * Fix license notice of common/unix-peer.c [PR#58]
  * Remove systemd unit files for now [PR#60]
  * Build fixes for FreeBSD [PR#56]
- Changes for version 0.23.4
  * Recognize query attributes defined in PKCS#11 URI (RFC7512) [PR#31,
    PR#37, PR#52]
  * The trust policy module now recognizes CKA_NSS_MOZILLA_CA_POLICY
    attribute, used by Firefox [#99453, PR#46]
  * Add 'trust dump' command to dump all PKCS#11 objects in the
    persistence format [PR#44]
  * New experimental 'p11-kit server' command that allows PKCS#11
    forwarding through a Unix domain socket.  A client-side module
    p11-kit-client.so is also provided [PR#15]
  * Add systemd unit files for exporting the proxy module through a
    Unix domain socket [PR#35]
  * New P11KitIter API to iterate over slots, tokens, and modules in
    addition to objects [PR#28]
  * libffi dependency is now optional [PR#9]
  * Build fixes for FreeBSD, macOS, and Windows [PR#32, PR#39, PR#45]
- Changes for version 0.23.3
  * Install private executables in libexecdir [fdo#98817]
  * Fix link error of proxy module on macOS [fdo#98022]
  * Use new PKCS#11 URI specification for URIs [fdo#97245]
  * Support x-init-reserved argument of C_Initialize() in remote modules
    [fdo#80519]
  * Incorporate changes from PKCS#11 2.40 specification
  * Bump libtool library version
  * Documentation fixes
  * Build fixes [fdo#87192 ...]
- Move RPM macros to %_rpmmacrodir.
- New server subpackage
- Change keyring to new maintainer Daiki Ueno
- Avoid bareword to fix build failure
- Remove obsolete patches:
  * p11-kit-biarch.patch
  * 0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch
  * 0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch</changelog>
  <changelog author="lnussel@suse.com" date="1674648000">- Backport IBM specific mechanism and attributes (Jira#PED-584)
  0001-Add-IBM-specific-mechanism-and-attributes.patch
  0002-Add-support-for-serializing-CK_ECDH1_DERIVE_PARAMS-m.patch
  0003-client-Allow-zero-part-length-at-C_SignUpdate.patch
  0004-Fix-support-of-CKA_DERIVE_TEMPLATE.patch
  0005-Add-other-SHA-variants-also-for-RSA-and-EC-signature.patch
  0006-Add-support-for-missing-AES-and-DES-DES3-mechanisms.patch
  0007-Add-support-for-MAC-and-HMAC-general-mechanisms.patch
  0008-Add-support-for-CKM_DH_PKCS_DERIVE.patch
  0009-rpc-Handle-special-cases-for-buffer-and-length.patch
  0010-Add-support-for-CKM_AES_CTR.patch
  0011-Add-support-for-CKM_AES_GCM.patch
  0012-common-pkcs11x.h-Support-CRYPTOKI_GNU-for-IBM-vendor.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1698148800">- Ensure that programs using &lt;p11-kit/pkcs11x.h&gt; can be compiled
  with CRYPTOKI_GNU. Fixes GnuTLS builds. [jsc#PED-6705]
  * Add p11-kit-pkcs11-gnu-Enable-testing-with-p11-kit-pkcs11x.h.patch</changelog>
</package>
<package pkgid="b03cfc99e288d791532a9c5c651f9dbc4d777f69e422ffa7627ce0cc9b700632" name="p11-kit-tools" arch="s390x">
  <version epoch="0" ver="0.23.22" rel="150500.8.3.1"/>
  <changelog author="lnussel@suse.de" date="1413201600">- remove patches:
  * trust-Print-label-of-certificate-when-complaining-.patch
  * trust-Dont-use-invalid-public-keys-for-looking-up-.patch
- new version 0.20.7 (stable)
  * New public pkcs11x.h header containing extensions [fdo#83495]
  * Export necessary defines to lookup attached extensions [fdo#83495]
  * Build fixes
- new version 0.20.6 (stable)
  * Make the p11-kit-proxy.so module respect critical = no [fdo#83651]
  * Build fix for FreeBSD [fdo#75674]
- new version 0.20.5 (stable)
  * Don't use invalid keys for looking up stapled extensions [fdo#82328]
  * Better error messages when invalid certificate extensions
  * Fix parsing of some odd OpenSSL TRUSTED CERTIFICATE files
  * Fix some leaks, and memory issues
  * Silence some clang scanner warnings
- new version 0.20.4 (stable)
  * Don't complain about C_Finalize after a fork
  * Fix typo</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Update to version 0.23.1 (stable)
  * Use new PKCS#11 URI draft fields for URIs [fdo#86474 fdo#87582]
  * Add pem-directory-hash extract format
  * Build fixes
- Remove 0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff;
  fixed on upstream release
- Remove autoconf, automake and libtool require; unneeded dependencies
- Add gtk-doc require; needed to build html documentation
- Remove redundant %clean section</changelog>
  <changelog author="mpluskal@suse.com" date="1454932800">- Update to 0.23.2
  * Fix forking issues with libffi
  * Fix various crashes in corner cases
  * Updated translations
  * Build fixes
- Make building more verbose
- Enable tests
- Small spec file cleanup with spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- 32-bit compatibility fixes:
  * Add PKCS11 module to p11-kit-32bit (bsc#996047#c39)
  * Add p11-kit-nss-trust-32bit NSS module
  * Fix potential bi-arch issue with private binaries
    (fdo#98817, p11-kit-biarch.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="lnussel@suse.de" date="1573819200">- support loading NSS attribute CKA_NSS_MOZILLA_CA_POLICY so Firefox
  detects built in certificates (boo#1154871,
  0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch,
  0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch)</changelog>
  <changelog author="lnussel@suse.de" date="1577102400">- Also build documentation (boo#1013125)</changelog>
  <changelog author="scabrero@suse.de" date="1628683200">- Update to version 0.23.22 (bsc#1180064, bsc#1180065, bsc#1180066):
  * Fix memory-safety issues that affect the RPC protocol
  (CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363), discovered
  and fixed by David Cook
  * anchor: Prefer persistent format when storing anchor [PR#329]
  * common: Fix infloop in p11_path_build [PR#326, PR#327]
  * proxy: C_CloseAllSessions: Make sure that calloc args are non-zero [PR#325]
  * common: Check for a NULL locale before freeing it [PR#321]
  * Build and test fixes [PR#313, PR#315, PR#317, PR#318, PR#319, PR#323,
  PR#330, PR#333, PR#334, PR#335, PR#338, PR#339]
- Changes for version 0.23.21
  * proxy: Do not assign duplicate slot IDs [PR#282]
  * common: Get program name based on executable path if possible [PR#307]
  * anchor: Exit with non-zero code, if any error occurs [PR#304]
  * Build and test fixes [PR#283, PR#290, PR#291, PR#292, PR#296, PR#299,
  PR#305, PR#306, PR#309, PR#311]
- Changes for version 0.23.20:
  * Revert "Fix RPC when length-s are 0" changes [PR#276]
- Changes for version 0.23.19:
  * common: add Russian PKCS#11 extensions to pkcs11x.h header [PR#255]
  * Add simple bash completion for provided commands [PR#258]
  * Unbreak list matching in enable-in and disable-in [PR#262]
  * Fix RPC when length-s are 0 [PR#259]
  * rpc: Add vsock transport support [PR#270]
  * trust: Support CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER [PR#265]
  * Build fixes [PR#271, PR#272, PR#273, ...]
- Changes for version 0.23.18:
  * rpc: Allow empty CK_DATE value [PR#253]
  * build: Meson fixes [PR#245]
  * build: Adjust feature parity between meson and autotools [PR#247]
- Changes for version 0.23.17:
  * common: Fix uClibc-ng compilation [PR#237]
  * trust: do not allow daylight to invalidate date validation [PR#236]
  * build: Port to meson build system [PR#231, PR#234]
  * rpc: On UNIX wait on condition variable instead of FD if header is for a different thread [PR#232]
  * doc: Add 'server' command in help [PR#229]
  * Build and test fixes [PR#230]
- Changes for version 0.23.16:
  * proxy: Support C_WaitForSlotEvent() if CKF_DONT_BLOCK is specified [PR#225]
  * conf: Ignore user configuration if the program is running as root [PR#226]
  * proxy: Refresh slot list on every C_GetSlotList call [PR#224]
  * modules: Fix index used in call to p11_dict_remove() [PR#219]
  * Fix Win32 p11_dl_error crash [PR#218]
  * modules: check gl.modules before iterates on it when freeing [PR#217]
  * trust: Ignore unreadable content in anchors [PR#215]
  * extract-jks: Prefer _p11_extract_jks_timestamp to SOURCE_DATE_EPOCH [PR#213]
- Changes for version 0.23.15:
  * trust: Improve error handling if backed trust file is corrupted [PR#206]
  * url: Prefer upper-case letters in hex characters when encoding [PR#193]
  * trust/extract-jks.c: also honor SOURCE_DATE_EPOCH time [PR#202]
  * virtual: Prefer fixed closures to libffi closures [PR#196]
  * Fix issues spotted by coverity and cppcheck [PR#194, PR#204]
  * Build and test fixes [PR#164, PR#191, PR#199, PR#201]
- Changes for version 0.23.14:
  * proxy: Avoid invalid memory access when unloading proxy module [PR#180]
  * Update pkcs11 header to allow SoftHSMv2 to compile [PR#181]
  * build: Restore libpthread dependency [PR#183]
  * Build fixes [PR#188]
- Changes for version 0.23.13:
  * server: Enable socket activation through systemd [PR#173]
  * rpc-server: p11_kit_remote_serve_tokens: Allow exporting all modules
    [PR#174]
  * proxy: Fail early if there is no slot mapping [PR#175]
  * Remove hard dependency on libpthread [PR#177]
  * Build fixes [PR#170, PR#176]
- Changes for version 0.23.12
  * Fix compile error when PKCS#11 GNU calling convention is enabled [PR#160]
  * Fix getauxval() and secure_getenv() emulation on macOS and FreeBSD [PR#167]
  * Build and test fixes on macOS [PR#162, PR#168]
- Changes for version 0.23.11
  * trust: Add extractor for edk2/cacerts.bin [PR#139]
  * modules: Add option to control module visibility from proxy [PR#140]
  * trust: Prevent trust module being loaded by proxy module [PR#142]
  * library: Use dedicated locale object for printing error [PR#148]
  * Treat CKR_CRYPTOKI_ALREADY_INITIALIZED correctly [PR#134]
  * Improve const correctness for P11KitUri [PR#152]
  * PKCS#11 URI scheme comparison is now case insensitive [PR#156]
  * Build and test fixes [PR#151, PR#149, PR#141, PR#138, PR#135]
- Changes for version 0.23.10
  * filter: Respect "write-protected" vendor-specific attribute in
    PKCS#11 URI [PR#129]
  * server: Improve shell integration and documentation [PR#107, PR#108]
  * proxy: Reuse existing slot ID mapping in after fork() [PR#120]
  * trust: Forcibly mark "Default Trust" read-only [PR#123]
  * New function p11_kit_override_system_files() which can be used for
    testing [PR#110]
  * trust: Filter out duplicate extensions [PR#69]
  * Update translations [PR#128]
  * Bug fixes [PR#125, PR#126]
- Changes for version 0.23.9
  * Fix p11-kit server regressions [PR#103, PR#104]
  * trust: Respect anyExtendedKeyUsage in CA certificates [PR#99]
  * Build fixes related to reallocarray [PR#96, PR#98, PR#100]
- Changes for version 0.23.8
  * Improve vendor query attributes handling in PKCS#11 URI [PR#92]
  * Add OTP and GOST mechanisms to pkcs11.h [PR#90, PR#91]
  * New envvar P11_KIT_NO_USER_CONFIG to stop looking at user
    configurations [PR#87]
  * Build fixes for Solaris and 32-bit big-endian platforms [PR#81, PR#86]
- Changes for version 0.23.7
  * Fix memory issues with "p11-kit server" [PR#78]
  * Build fixes [PR#77 ...]
- Changes for version 0.23.6
  * Port "p11-kit server" to Windows and portability fixes of the RPC
    protocol [PR#67, PR#72, PR#74]
  * Recover the old behavior of "trust anchor --remove" [PR#70, PR#71]
  * Build fixes [PR#63 ...]
- Changes for version 0.23.5
  * Fix license notice of common/unix-peer.c [PR#58]
  * Remove systemd unit files for now [PR#60]
  * Build fixes for FreeBSD [PR#56]
- Changes for version 0.23.4
  * Recognize query attributes defined in PKCS#11 URI (RFC7512) [PR#31,
    PR#37, PR#52]
  * The trust policy module now recognizes CKA_NSS_MOZILLA_CA_POLICY
    attribute, used by Firefox [#99453, PR#46]
  * Add 'trust dump' command to dump all PKCS#11 objects in the
    persistence format [PR#44]
  * New experimental 'p11-kit server' command that allows PKCS#11
    forwarding through a Unix domain socket.  A client-side module
    p11-kit-client.so is also provided [PR#15]
  * Add systemd unit files for exporting the proxy module through a
    Unix domain socket [PR#35]
  * New P11KitIter API to iterate over slots, tokens, and modules in
    addition to objects [PR#28]
  * libffi dependency is now optional [PR#9]
  * Build fixes for FreeBSD, macOS, and Windows [PR#32, PR#39, PR#45]
- Changes for version 0.23.3
  * Install private executables in libexecdir [fdo#98817]
  * Fix link error of proxy module on macOS [fdo#98022]
  * Use new PKCS#11 URI specification for URIs [fdo#97245]
  * Support x-init-reserved argument of C_Initialize() in remote modules
    [fdo#80519]
  * Incorporate changes from PKCS#11 2.40 specification
  * Bump libtool library version
  * Documentation fixes
  * Build fixes [fdo#87192 ...]
- Move RPM macros to %_rpmmacrodir.
- New server subpackage
- Change keyring to new maintainer Daiki Ueno
- Avoid bareword to fix build failure
- Remove obsolete patches:
  * p11-kit-biarch.patch
  * 0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch
  * 0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch</changelog>
  <changelog author="lnussel@suse.com" date="1674648000">- Backport IBM specific mechanism and attributes (Jira#PED-584)
  0001-Add-IBM-specific-mechanism-and-attributes.patch
  0002-Add-support-for-serializing-CK_ECDH1_DERIVE_PARAMS-m.patch
  0003-client-Allow-zero-part-length-at-C_SignUpdate.patch
  0004-Fix-support-of-CKA_DERIVE_TEMPLATE.patch
  0005-Add-other-SHA-variants-also-for-RSA-and-EC-signature.patch
  0006-Add-support-for-missing-AES-and-DES-DES3-mechanisms.patch
  0007-Add-support-for-MAC-and-HMAC-general-mechanisms.patch
  0008-Add-support-for-CKM_DH_PKCS_DERIVE.patch
  0009-rpc-Handle-special-cases-for-buffer-and-length.patch
  0010-Add-support-for-CKM_AES_CTR.patch
  0011-Add-support-for-CKM_AES_GCM.patch
  0012-common-pkcs11x.h-Support-CRYPTOKI_GNU-for-IBM-vendor.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1698148800">- Ensure that programs using &lt;p11-kit/pkcs11x.h&gt; can be compiled
  with CRYPTOKI_GNU. Fixes GnuTLS builds. [jsc#PED-6705]
  * Add p11-kit-pkcs11-gnu-Enable-testing-with-p11-kit-pkcs11x.h.patch</changelog>
</package>
<package pkgid="b722a0c558e9ec2e13643d68d073784bc607e7e63c244818cf1a953ebfbf745c" name="p11-kit-tools" arch="x86_64">
  <version epoch="0" ver="0.23.22" rel="150500.8.3.1"/>
  <changelog author="lnussel@suse.de" date="1413201600">- remove patches:
  * trust-Print-label-of-certificate-when-complaining-.patch
  * trust-Dont-use-invalid-public-keys-for-looking-up-.patch
- new version 0.20.7 (stable)
  * New public pkcs11x.h header containing extensions [fdo#83495]
  * Export necessary defines to lookup attached extensions [fdo#83495]
  * Build fixes
- new version 0.20.6 (stable)
  * Make the p11-kit-proxy.so module respect critical = no [fdo#83651]
  * Build fix for FreeBSD [fdo#75674]
- new version 0.20.5 (stable)
  * Don't use invalid keys for looking up stapled extensions [fdo#82328]
  * Better error messages when invalid certificate extensions
  * Fix parsing of some odd OpenSSL TRUSTED CERTIFICATE files
  * Fix some leaks, and memory issues
  * Silence some clang scanner warnings
- new version 0.20.4 (stable)
  * Don't complain about C_Finalize after a fork
  * Fix typo</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Update to version 0.23.1 (stable)
  * Use new PKCS#11 URI draft fields for URIs [fdo#86474 fdo#87582]
  * Add pem-directory-hash extract format
  * Build fixes
- Remove 0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff;
  fixed on upstream release
- Remove autoconf, automake and libtool require; unneeded dependencies
- Add gtk-doc require; needed to build html documentation
- Remove redundant %clean section</changelog>
  <changelog author="mpluskal@suse.com" date="1454932800">- Update to 0.23.2
  * Fix forking issues with libffi
  * Fix various crashes in corner cases
  * Updated translations
  * Build fixes
- Make building more verbose
- Enable tests
- Small spec file cleanup with spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- 32-bit compatibility fixes:
  * Add PKCS11 module to p11-kit-32bit (bsc#996047#c39)
  * Add p11-kit-nss-trust-32bit NSS module
  * Fix potential bi-arch issue with private binaries
    (fdo#98817, p11-kit-biarch.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="lnussel@suse.de" date="1573819200">- support loading NSS attribute CKA_NSS_MOZILLA_CA_POLICY so Firefox
  detects built in certificates (boo#1154871,
  0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch,
  0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch)</changelog>
  <changelog author="lnussel@suse.de" date="1577102400">- Also build documentation (boo#1013125)</changelog>
  <changelog author="scabrero@suse.de" date="1628683200">- Update to version 0.23.22 (bsc#1180064, bsc#1180065, bsc#1180066):
  * Fix memory-safety issues that affect the RPC protocol
  (CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363), discovered
  and fixed by David Cook
  * anchor: Prefer persistent format when storing anchor [PR#329]
  * common: Fix infloop in p11_path_build [PR#326, PR#327]
  * proxy: C_CloseAllSessions: Make sure that calloc args are non-zero [PR#325]
  * common: Check for a NULL locale before freeing it [PR#321]
  * Build and test fixes [PR#313, PR#315, PR#317, PR#318, PR#319, PR#323,
  PR#330, PR#333, PR#334, PR#335, PR#338, PR#339]
- Changes for version 0.23.21
  * proxy: Do not assign duplicate slot IDs [PR#282]
  * common: Get program name based on executable path if possible [PR#307]
  * anchor: Exit with non-zero code, if any error occurs [PR#304]
  * Build and test fixes [PR#283, PR#290, PR#291, PR#292, PR#296, PR#299,
  PR#305, PR#306, PR#309, PR#311]
- Changes for version 0.23.20:
  * Revert "Fix RPC when length-s are 0" changes [PR#276]
- Changes for version 0.23.19:
  * common: add Russian PKCS#11 extensions to pkcs11x.h header [PR#255]
  * Add simple bash completion for provided commands [PR#258]
  * Unbreak list matching in enable-in and disable-in [PR#262]
  * Fix RPC when length-s are 0 [PR#259]
  * rpc: Add vsock transport support [PR#270]
  * trust: Support CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER [PR#265]
  * Build fixes [PR#271, PR#272, PR#273, ...]
- Changes for version 0.23.18:
  * rpc: Allow empty CK_DATE value [PR#253]
  * build: Meson fixes [PR#245]
  * build: Adjust feature parity between meson and autotools [PR#247]
- Changes for version 0.23.17:
  * common: Fix uClibc-ng compilation [PR#237]
  * trust: do not allow daylight to invalidate date validation [PR#236]
  * build: Port to meson build system [PR#231, PR#234]
  * rpc: On UNIX wait on condition variable instead of FD if header is for a different thread [PR#232]
  * doc: Add 'server' command in help [PR#229]
  * Build and test fixes [PR#230]
- Changes for version 0.23.16:
  * proxy: Support C_WaitForSlotEvent() if CKF_DONT_BLOCK is specified [PR#225]
  * conf: Ignore user configuration if the program is running as root [PR#226]
  * proxy: Refresh slot list on every C_GetSlotList call [PR#224]
  * modules: Fix index used in call to p11_dict_remove() [PR#219]
  * Fix Win32 p11_dl_error crash [PR#218]
  * modules: check gl.modules before iterates on it when freeing [PR#217]
  * trust: Ignore unreadable content in anchors [PR#215]
  * extract-jks: Prefer _p11_extract_jks_timestamp to SOURCE_DATE_EPOCH [PR#213]
- Changes for version 0.23.15:
  * trust: Improve error handling if backed trust file is corrupted [PR#206]
  * url: Prefer upper-case letters in hex characters when encoding [PR#193]
  * trust/extract-jks.c: also honor SOURCE_DATE_EPOCH time [PR#202]
  * virtual: Prefer fixed closures to libffi closures [PR#196]
  * Fix issues spotted by coverity and cppcheck [PR#194, PR#204]
  * Build and test fixes [PR#164, PR#191, PR#199, PR#201]
- Changes for version 0.23.14:
  * proxy: Avoid invalid memory access when unloading proxy module [PR#180]
  * Update pkcs11 header to allow SoftHSMv2 to compile [PR#181]
  * build: Restore libpthread dependency [PR#183]
  * Build fixes [PR#188]
- Changes for version 0.23.13:
  * server: Enable socket activation through systemd [PR#173]
  * rpc-server: p11_kit_remote_serve_tokens: Allow exporting all modules
    [PR#174]
  * proxy: Fail early if there is no slot mapping [PR#175]
  * Remove hard dependency on libpthread [PR#177]
  * Build fixes [PR#170, PR#176]
- Changes for version 0.23.12
  * Fix compile error when PKCS#11 GNU calling convention is enabled [PR#160]
  * Fix getauxval() and secure_getenv() emulation on macOS and FreeBSD [PR#167]
  * Build and test fixes on macOS [PR#162, PR#168]
- Changes for version 0.23.11
  * trust: Add extractor for edk2/cacerts.bin [PR#139]
  * modules: Add option to control module visibility from proxy [PR#140]
  * trust: Prevent trust module being loaded by proxy module [PR#142]
  * library: Use dedicated locale object for printing error [PR#148]
  * Treat CKR_CRYPTOKI_ALREADY_INITIALIZED correctly [PR#134]
  * Improve const correctness for P11KitUri [PR#152]
  * PKCS#11 URI scheme comparison is now case insensitive [PR#156]
  * Build and test fixes [PR#151, PR#149, PR#141, PR#138, PR#135]
- Changes for version 0.23.10
  * filter: Respect "write-protected" vendor-specific attribute in
    PKCS#11 URI [PR#129]
  * server: Improve shell integration and documentation [PR#107, PR#108]
  * proxy: Reuse existing slot ID mapping in after fork() [PR#120]
  * trust: Forcibly mark "Default Trust" read-only [PR#123]
  * New function p11_kit_override_system_files() which can be used for
    testing [PR#110]
  * trust: Filter out duplicate extensions [PR#69]
  * Update translations [PR#128]
  * Bug fixes [PR#125, PR#126]
- Changes for version 0.23.9
  * Fix p11-kit server regressions [PR#103, PR#104]
  * trust: Respect anyExtendedKeyUsage in CA certificates [PR#99]
  * Build fixes related to reallocarray [PR#96, PR#98, PR#100]
- Changes for version 0.23.8
  * Improve vendor query attributes handling in PKCS#11 URI [PR#92]
  * Add OTP and GOST mechanisms to pkcs11.h [PR#90, PR#91]
  * New envvar P11_KIT_NO_USER_CONFIG to stop looking at user
    configurations [PR#87]
  * Build fixes for Solaris and 32-bit big-endian platforms [PR#81, PR#86]
- Changes for version 0.23.7
  * Fix memory issues with "p11-kit server" [PR#78]
  * Build fixes [PR#77 ...]
- Changes for version 0.23.6
  * Port "p11-kit server" to Windows and portability fixes of the RPC
    protocol [PR#67, PR#72, PR#74]
  * Recover the old behavior of "trust anchor --remove" [PR#70, PR#71]
  * Build fixes [PR#63 ...]
- Changes for version 0.23.5
  * Fix license notice of common/unix-peer.c [PR#58]
  * Remove systemd unit files for now [PR#60]
  * Build fixes for FreeBSD [PR#56]
- Changes for version 0.23.4
  * Recognize query attributes defined in PKCS#11 URI (RFC7512) [PR#31,
    PR#37, PR#52]
  * The trust policy module now recognizes CKA_NSS_MOZILLA_CA_POLICY
    attribute, used by Firefox [#99453, PR#46]
  * Add 'trust dump' command to dump all PKCS#11 objects in the
    persistence format [PR#44]
  * New experimental 'p11-kit server' command that allows PKCS#11
    forwarding through a Unix domain socket.  A client-side module
    p11-kit-client.so is also provided [PR#15]
  * Add systemd unit files for exporting the proxy module through a
    Unix domain socket [PR#35]
  * New P11KitIter API to iterate over slots, tokens, and modules in
    addition to objects [PR#28]
  * libffi dependency is now optional [PR#9]
  * Build fixes for FreeBSD, macOS, and Windows [PR#32, PR#39, PR#45]
- Changes for version 0.23.3
  * Install private executables in libexecdir [fdo#98817]
  * Fix link error of proxy module on macOS [fdo#98022]
  * Use new PKCS#11 URI specification for URIs [fdo#97245]
  * Support x-init-reserved argument of C_Initialize() in remote modules
    [fdo#80519]
  * Incorporate changes from PKCS#11 2.40 specification
  * Bump libtool library version
  * Documentation fixes
  * Build fixes [fdo#87192 ...]
- Move RPM macros to %_rpmmacrodir.
- New server subpackage
- Change keyring to new maintainer Daiki Ueno
- Avoid bareword to fix build failure
- Remove obsolete patches:
  * p11-kit-biarch.patch
  * 0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch
  * 0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch</changelog>
  <changelog author="lnussel@suse.com" date="1674648000">- Backport IBM specific mechanism and attributes (Jira#PED-584)
  0001-Add-IBM-specific-mechanism-and-attributes.patch
  0002-Add-support-for-serializing-CK_ECDH1_DERIVE_PARAMS-m.patch
  0003-client-Allow-zero-part-length-at-C_SignUpdate.patch
  0004-Fix-support-of-CKA_DERIVE_TEMPLATE.patch
  0005-Add-other-SHA-variants-also-for-RSA-and-EC-signature.patch
  0006-Add-support-for-missing-AES-and-DES-DES3-mechanisms.patch
  0007-Add-support-for-MAC-and-HMAC-general-mechanisms.patch
  0008-Add-support-for-CKM_DH_PKCS_DERIVE.patch
  0009-rpc-Handle-special-cases-for-buffer-and-length.patch
  0010-Add-support-for-CKM_AES_CTR.patch
  0011-Add-support-for-CKM_AES_GCM.patch
  0012-common-pkcs11x.h-Support-CRYPTOKI_GNU-for-IBM-vendor.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1698148800">- Ensure that programs using &lt;p11-kit/pkcs11x.h&gt; can be compiled
  with CRYPTOKI_GNU. Fixes GnuTLS builds. [jsc#PED-6705]
  * Add p11-kit-pkcs11-gnu-Enable-testing-with-p11-kit-pkcs11x.h.patch</changelog>
</package>
<package pkgid="70c16505c10d0dbb414faf5127fe9f9ac94c244971f492c1bcab3b0e272b712f" name="pam" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="150000.6.66.1"/>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1629892800">- Added pam_faillock to the set of modules.
  [jsc#sle-20638, pam-sle20638-add-pam_faillock.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1630497600">- Added new file macros.pam on request of systemd.
  [bsc#1190052, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1633521600">- Corrected macros.pam entry for %_pam_moduledir
  Cleanup in pam.spec:
  * Replaced all references to ${_lib}/security in pam.spec by
  %{_pam_moduledir}
  * Removed definition of (unused) "amdir".</changelog>
  <changelog author="josef.moellers@suse.com" date="1634212800">- Added tmpfiles for pam to set up directory for pam_faillock.
  [pam.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634817600">- Corrected a bad directive file which resulted in
  the "securetty" file to be installed as "macros.pam".
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1645704000">- Define _pam_vendordir as "/%{_sysconfdir}/pam.d"
  The variable is needed by systemd and others.
  [bsc#1196093, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- Between allocating the variable "ai" and free'ing them, there are
  two "return NO" were we don't free this variable. This patch
  inserts freaddrinfo() calls before the "return NO;"s.
  [bsc#1197024, pam-bsc1197024-free-addrinfo-before-return.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1648814400">- Do not include obsolete libselinux header files flask.h and
  av_permissions.h.
  [bsc#1197794, pam-bsc1197794-do-not-include-obsolete-header-files.patch]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1662552000">- Update pam_motd to the most current version. This fixes various issues
  and adds support for mot.d directories [jsc#PED-1712].
  * Added: pam-ped1712-pam_motd-directory-feature.patch</changelog>
  <changelog author="tabraham@suse.com" date="1703851200">- pam_lastlog: check localtime_r() return value (bsc#1217000)
  * Added: pam-bsc1217000-pam_lastlog-check-localtime_r-return-value.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1704715200">- Add missing O_DIRECTORY flag in `protect_dir()` for pam_namespace module.
  [bsc#1218475, pam-bsc1218475-pam_namespace-O_DIRECTORY-flag.patch]</changelog>
</package>
<package pkgid="f0dd371c82d2850bd65bac9d62bd7f1781af6b4793ea7d3a15c69a1736454a00" name="pam" arch="s390x">
  <version epoch="0" ver="1.3.0" rel="150000.6.66.1"/>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1629892800">- Added pam_faillock to the set of modules.
  [jsc#sle-20638, pam-sle20638-add-pam_faillock.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1630497600">- Added new file macros.pam on request of systemd.
  [bsc#1190052, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1633521600">- Corrected macros.pam entry for %_pam_moduledir
  Cleanup in pam.spec:
  * Replaced all references to ${_lib}/security in pam.spec by
  %{_pam_moduledir}
  * Removed definition of (unused) "amdir".</changelog>
  <changelog author="josef.moellers@suse.com" date="1634212800">- Added tmpfiles for pam to set up directory for pam_faillock.
  [pam.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634817600">- Corrected a bad directive file which resulted in
  the "securetty" file to be installed as "macros.pam".
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1645704000">- Define _pam_vendordir as "/%{_sysconfdir}/pam.d"
  The variable is needed by systemd and others.
  [bsc#1196093, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- Between allocating the variable "ai" and free'ing them, there are
  two "return NO" were we don't free this variable. This patch
  inserts freaddrinfo() calls before the "return NO;"s.
  [bsc#1197024, pam-bsc1197024-free-addrinfo-before-return.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1648814400">- Do not include obsolete libselinux header files flask.h and
  av_permissions.h.
  [bsc#1197794, pam-bsc1197794-do-not-include-obsolete-header-files.patch]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1662552000">- Update pam_motd to the most current version. This fixes various issues
  and adds support for mot.d directories [jsc#PED-1712].
  * Added: pam-ped1712-pam_motd-directory-feature.patch</changelog>
  <changelog author="tabraham@suse.com" date="1703851200">- pam_lastlog: check localtime_r() return value (bsc#1217000)
  * Added: pam-bsc1217000-pam_lastlog-check-localtime_r-return-value.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1704715200">- Add missing O_DIRECTORY flag in `protect_dir()` for pam_namespace module.
  [bsc#1218475, pam-bsc1218475-pam_namespace-O_DIRECTORY-flag.patch]</changelog>
</package>
<package pkgid="ca4331e4069f2b3ce1e6555040a1038ebb0198490337eee6e436d78e7012e5e3" name="pam" arch="src">
  <version epoch="0" ver="1.3.0" rel="150000.6.66.1"/>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1629892800">- Added pam_faillock to the set of modules.
  [jsc#sle-20638, pam-sle20638-add-pam_faillock.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1630497600">- Added new file macros.pam on request of systemd.
  [bsc#1190052, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1633521600">- Corrected macros.pam entry for %_pam_moduledir
  Cleanup in pam.spec:
  * Replaced all references to ${_lib}/security in pam.spec by
  %{_pam_moduledir}
  * Removed definition of (unused) "amdir".</changelog>
  <changelog author="josef.moellers@suse.com" date="1634212800">- Added tmpfiles for pam to set up directory for pam_faillock.
  [pam.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634817600">- Corrected a bad directive file which resulted in
  the "securetty" file to be installed as "macros.pam".
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1645704000">- Define _pam_vendordir as "/%{_sysconfdir}/pam.d"
  The variable is needed by systemd and others.
  [bsc#1196093, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- Between allocating the variable "ai" and free'ing them, there are
  two "return NO" were we don't free this variable. This patch
  inserts freaddrinfo() calls before the "return NO;"s.
  [bsc#1197024, pam-bsc1197024-free-addrinfo-before-return.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1648814400">- Do not include obsolete libselinux header files flask.h and
  av_permissions.h.
  [bsc#1197794, pam-bsc1197794-do-not-include-obsolete-header-files.patch]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1662552000">- Update pam_motd to the most current version. This fixes various issues
  and adds support for mot.d directories [jsc#PED-1712].
  * Added: pam-ped1712-pam_motd-directory-feature.patch</changelog>
  <changelog author="tabraham@suse.com" date="1703851200">- pam_lastlog: check localtime_r() return value (bsc#1217000)
  * Added: pam-bsc1217000-pam_lastlog-check-localtime_r-return-value.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1704715200">- Add missing O_DIRECTORY flag in `protect_dir()` for pam_namespace module.
  [bsc#1218475, pam-bsc1218475-pam_namespace-O_DIRECTORY-flag.patch]</changelog>
</package>
<package pkgid="3e730b84a0cff3112c968ba6a2b42b2e63bff359b4714e757ec0befd0a70ea77" name="pam" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="150000.6.66.1"/>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1629892800">- Added pam_faillock to the set of modules.
  [jsc#sle-20638, pam-sle20638-add-pam_faillock.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1630497600">- Added new file macros.pam on request of systemd.
  [bsc#1190052, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1633521600">- Corrected macros.pam entry for %_pam_moduledir
  Cleanup in pam.spec:
  * Replaced all references to ${_lib}/security in pam.spec by
  %{_pam_moduledir}
  * Removed definition of (unused) "amdir".</changelog>
  <changelog author="josef.moellers@suse.com" date="1634212800">- Added tmpfiles for pam to set up directory for pam_faillock.
  [pam.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634817600">- Corrected a bad directive file which resulted in
  the "securetty" file to be installed as "macros.pam".
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1645704000">- Define _pam_vendordir as "/%{_sysconfdir}/pam.d"
  The variable is needed by systemd and others.
  [bsc#1196093, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- Between allocating the variable "ai" and free'ing them, there are
  two "return NO" were we don't free this variable. This patch
  inserts freaddrinfo() calls before the "return NO;"s.
  [bsc#1197024, pam-bsc1197024-free-addrinfo-before-return.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1648814400">- Do not include obsolete libselinux header files flask.h and
  av_permissions.h.
  [bsc#1197794, pam-bsc1197794-do-not-include-obsolete-header-files.patch]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1662552000">- Update pam_motd to the most current version. This fixes various issues
  and adds support for mot.d directories [jsc#PED-1712].
  * Added: pam-ped1712-pam_motd-directory-feature.patch</changelog>
  <changelog author="tabraham@suse.com" date="1703851200">- pam_lastlog: check localtime_r() return value (bsc#1217000)
  * Added: pam-bsc1217000-pam_lastlog-check-localtime_r-return-value.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1704715200">- Add missing O_DIRECTORY flag in `protect_dir()` for pam_namespace module.
  [bsc#1218475, pam-bsc1218475-pam_namespace-O_DIRECTORY-flag.patch]</changelog>
</package>
<package pkgid="9ea8380bfb32d632d4d36d859546e789117a3665ecc4c926a78746e4c07c541c" name="pam_apparmor" arch="aarch64">
  <version epoch="0" ver="3.0.4" rel="150500.11.9.1"/>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="scabrero@suse.de" date="1671796800">- Add samba-4-17.patch to update the samba profiles for samba
  version 4.17 (bsc#1206626);</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1693915200">- update zgrep profile to allow egrep helper use (bsc#1214458)
  - zgrep-profile-sync-with-master.diff</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
</package>
<package pkgid="0161be2da89bdf0ed67c70a42f4da15e1c47b680c81303d63546417f8ac8e7b9" name="pam_apparmor" arch="s390x">
  <version epoch="0" ver="3.0.4" rel="150500.11.9.1"/>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="scabrero@suse.de" date="1671796800">- Add samba-4-17.patch to update the samba profiles for samba
  version 4.17 (bsc#1206626);</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1693915200">- update zgrep profile to allow egrep helper use (bsc#1214458)
  - zgrep-profile-sync-with-master.diff</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
</package>
<package pkgid="4906e4cbf5e3540650daadc511704014183422af0d4817fbc678643cbb302491" name="pam_apparmor" arch="x86_64">
  <version epoch="0" ver="3.0.4" rel="150500.11.9.1"/>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="scabrero@suse.de" date="1671796800">- Add samba-4-17.patch to update the samba profiles for samba
  version 4.17 (bsc#1206626);</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1693915200">- update zgrep profile to allow egrep helper use (bsc#1214458)
  - zgrep-profile-sync-with-master.diff</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
</package>
<package pkgid="5490df4cc18bcd2dd6a8a486666dc34261a3b8e25d2e54259a0cfec17a8e2e4f" name="pciutils" arch="aarch64">
  <version epoch="0" ver="3.5.6" rel="150300.13.6.1"/>
  <changelog author="tchvatal@suse.com" date="1416312000">- Version bump to 3.3.0:
  * Device names exported by BIOS are displayed on Linux.
  * On Linux systems, HWDB is used to look up device names
    when our ID database gives no match. (More precisely,
    HWDB is consulted after local pci.ids, but before using
    network to query online pci.ids.) Thanks to Tom Gundersen
    for the initial patch.
  * Added experimental back-end for OS X / Darwin. Thanks to
    Richard Yao for providing it.
  * Filters now support matching by device class. Original
    patch by Matthew Wilcox, wrappers for ABI compatibility
    by me.
  * Interrupt Pin and Interrupt Line registers are displayed
    for bridge devices, too.
  * Several portability bugs have been fixed.
  * Several typos have been fixed. Also, use of questionable
    constructs in man pages has been reduced.
  * PCIe link capabilities now include the ASPMOptComp bit.
  * The "CRS Software Visibility" bit is now decoded properly.
  * Updated pci.ids to the current snapshot of the database.
- Refresh patch:
  * pciutils-endianh.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1441540800">- Update to 3.3.1
  * Removed hacks for backward compatibility with Linux libc5,
    which were breaking newer non-glibc Linux systems. Thanks
    to Felix Janda.
  * Display VirtIO vendor-specific capability. Patch by Gerd
    Hoffmann.
  * Fixed memory leak in name cache.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1447416000">- Update to 3.4.0
  * On Linux, we report NUMA nodes of devices.
  * The sysfs back-end does not die on read errors
    of optional attributes. Instead, a warning is produced.
  * Fixed several minor bugs.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="jengelh@inai.de" date="1448107200">- Summary update</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 3.4.1:
  * New capabilities decoded: Process Address Space, Page Request
    Interface, Enhanced Allocation. Thanks to David Daney and
    David Woodhouse.
  * DevCap SlotPowerLimit is now decoded for all components with
    upstream ports.</changelog>
  <changelog author="mpluskal@suse.com" date="1463745600">- Update to version 3.5.0:
  * New capabilities decoded: Downstream Port Containment,
    Precision Time Measurement. Thanks to Keith Busch and
    Jonathan Yong.
  * Domain numbers extended to 31 bits. This will be used by the
    Linux kernel on some machines in near future.
  * Enhanced allocation regions are now decoded on Linux.
  * The NetBSD back-end supports PCIe extended configuration space.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1464177600">- Update to version 3.5.1:
  * Fixed symbol versioning of pci_init().</changelog>
  <changelog author="mpluskal@suse.com" date="1488196800">- Update to version 3.5.4:
  * Previous version broke compilation on systems, for which
    lib/types.h did not provide a 64-bit integer type. It is
    provided everywhere now.
- Changes for version 3.5.3:
  * When lspci looks for Linux kernel modules, it uses the default
  path to module directory provided by libkmod. Previously,
  it tried to construct the path explicitly, which need not
  work on all systems.
  * Improved formatting of memory and I/O ranges behind a bridge.
  * PCIe link capabilities now display GEN4 speed (16GT/s).
  * PCIe device capabilities now show bits related to atomic
    operations.
- Changes for version 3.5.2:
  * The L1 power management capability is now decoded more
  thoroughly. Thanks to Rajat Jain for the patch.
  * The table of configuration registers used by setpci
  had a bug in the definition of SUBSYSTEM_VENDOR_ID.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to version 3.5.5
  * Better decoding of AER capability.
  * "Slot Implemented" flag is decoded for PCI/PCI-X to PCIe bridges.
  * Minor fixes of decoding other capabilities.
  * As usual, updated pci.ids to the current snapshot of the
    database.
- cleanup with spec-cleaner
- switch from ftp to https
- track signature</changelog>
  <changelog author="aavindraa@gmail.com" date="1511092800">- Update to version 3.5.6
  * MN VPD keyword is decoded correctly.
  * As usual, updated pci.ids to the current snapshot of the
    database.
  * FreeBSD back-end: read-only access for non-root, support
    DragonFly BSD, support extended config space.</changelog>
  <changelog author="msuchanek@suse.com" date="1590062400">- Fix lspci outputs few of the VPD data fields are displayed as unknown (bsc#1170554, ltc#185587).
  Added:
  * pciutils-VPD-When-printing-item-IDs-escape-non-ASCII-characte.patch
  * pciutils-VPD-Cleanup.patch
  * pciutils-Add-decoding-of-vendor-specific-VPD-fields.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603972800">- Add decode support for RCECs [jsc#SLE-13735]
- added patches
  https://github.com/pciutils/pciutils/commit/e12bd01eea67ca8cf539263124843ba281eb6ecc
  + pciutils-add-decode-support-for-RCECs.patch</changelog>
  <changelog author="vliaskovitis@suse.com" date="1643025600">- Add pciutils-Add-PCIe-5.0-data-rate-32-GT-s-support.patch
  Add pciutils-Add-PCIe-6.0-data-rate-64-GT-s-support.patch
  (bsc#1192862)</changelog>
  <changelog author="psimons@suse.com" date="1696420800">- Apply "lspci-Fixed-buffer-overflows-in-ls-tree.c.patch" to fix a
  buffer overflow error that would cause lspci to crash on systems
  with complex topologies. [bsc#1215265]
- Add "pciutils.keyring" so that the tarball's signature can be
  verified at build time.
- Use "%license" tag instead of "%doc" to install the package's
  license file.</changelog>
</package>
<package pkgid="9f79d397feeab25ba1ed2d5199d83760ac930d375656d95374f3b8ef48311ce8" name="pciutils" arch="s390x">
  <version epoch="0" ver="3.5.6" rel="150300.13.6.1"/>
  <changelog author="tchvatal@suse.com" date="1416312000">- Version bump to 3.3.0:
  * Device names exported by BIOS are displayed on Linux.
  * On Linux systems, HWDB is used to look up device names
    when our ID database gives no match. (More precisely,
    HWDB is consulted after local pci.ids, but before using
    network to query online pci.ids.) Thanks to Tom Gundersen
    for the initial patch.
  * Added experimental back-end for OS X / Darwin. Thanks to
    Richard Yao for providing it.
  * Filters now support matching by device class. Original
    patch by Matthew Wilcox, wrappers for ABI compatibility
    by me.
  * Interrupt Pin and Interrupt Line registers are displayed
    for bridge devices, too.
  * Several portability bugs have been fixed.
  * Several typos have been fixed. Also, use of questionable
    constructs in man pages has been reduced.
  * PCIe link capabilities now include the ASPMOptComp bit.
  * The "CRS Software Visibility" bit is now decoded properly.
  * Updated pci.ids to the current snapshot of the database.
- Refresh patch:
  * pciutils-endianh.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1441540800">- Update to 3.3.1
  * Removed hacks for backward compatibility with Linux libc5,
    which were breaking newer non-glibc Linux systems. Thanks
    to Felix Janda.
  * Display VirtIO vendor-specific capability. Patch by Gerd
    Hoffmann.
  * Fixed memory leak in name cache.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1447416000">- Update to 3.4.0
  * On Linux, we report NUMA nodes of devices.
  * The sysfs back-end does not die on read errors
    of optional attributes. Instead, a warning is produced.
  * Fixed several minor bugs.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="jengelh@inai.de" date="1448107200">- Summary update</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 3.4.1:
  * New capabilities decoded: Process Address Space, Page Request
    Interface, Enhanced Allocation. Thanks to David Daney and
    David Woodhouse.
  * DevCap SlotPowerLimit is now decoded for all components with
    upstream ports.</changelog>
  <changelog author="mpluskal@suse.com" date="1463745600">- Update to version 3.5.0:
  * New capabilities decoded: Downstream Port Containment,
    Precision Time Measurement. Thanks to Keith Busch and
    Jonathan Yong.
  * Domain numbers extended to 31 bits. This will be used by the
    Linux kernel on some machines in near future.
  * Enhanced allocation regions are now decoded on Linux.
  * The NetBSD back-end supports PCIe extended configuration space.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1464177600">- Update to version 3.5.1:
  * Fixed symbol versioning of pci_init().</changelog>
  <changelog author="mpluskal@suse.com" date="1488196800">- Update to version 3.5.4:
  * Previous version broke compilation on systems, for which
    lib/types.h did not provide a 64-bit integer type. It is
    provided everywhere now.
- Changes for version 3.5.3:
  * When lspci looks for Linux kernel modules, it uses the default
  path to module directory provided by libkmod. Previously,
  it tried to construct the path explicitly, which need not
  work on all systems.
  * Improved formatting of memory and I/O ranges behind a bridge.
  * PCIe link capabilities now display GEN4 speed (16GT/s).
  * PCIe device capabilities now show bits related to atomic
    operations.
- Changes for version 3.5.2:
  * The L1 power management capability is now decoded more
  thoroughly. Thanks to Rajat Jain for the patch.
  * The table of configuration registers used by setpci
  had a bug in the definition of SUBSYSTEM_VENDOR_ID.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to version 3.5.5
  * Better decoding of AER capability.
  * "Slot Implemented" flag is decoded for PCI/PCI-X to PCIe bridges.
  * Minor fixes of decoding other capabilities.
  * As usual, updated pci.ids to the current snapshot of the
    database.
- cleanup with spec-cleaner
- switch from ftp to https
- track signature</changelog>
  <changelog author="aavindraa@gmail.com" date="1511092800">- Update to version 3.5.6
  * MN VPD keyword is decoded correctly.
  * As usual, updated pci.ids to the current snapshot of the
    database.
  * FreeBSD back-end: read-only access for non-root, support
    DragonFly BSD, support extended config space.</changelog>
  <changelog author="msuchanek@suse.com" date="1590062400">- Fix lspci outputs few of the VPD data fields are displayed as unknown (bsc#1170554, ltc#185587).
  Added:
  * pciutils-VPD-When-printing-item-IDs-escape-non-ASCII-characte.patch
  * pciutils-VPD-Cleanup.patch
  * pciutils-Add-decoding-of-vendor-specific-VPD-fields.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603972800">- Add decode support for RCECs [jsc#SLE-13735]
- added patches
  https://github.com/pciutils/pciutils/commit/e12bd01eea67ca8cf539263124843ba281eb6ecc
  + pciutils-add-decode-support-for-RCECs.patch</changelog>
  <changelog author="vliaskovitis@suse.com" date="1643025600">- Add pciutils-Add-PCIe-5.0-data-rate-32-GT-s-support.patch
  Add pciutils-Add-PCIe-6.0-data-rate-64-GT-s-support.patch
  (bsc#1192862)</changelog>
  <changelog author="psimons@suse.com" date="1696420800">- Apply "lspci-Fixed-buffer-overflows-in-ls-tree.c.patch" to fix a
  buffer overflow error that would cause lspci to crash on systems
  with complex topologies. [bsc#1215265]
- Add "pciutils.keyring" so that the tarball's signature can be
  verified at build time.
- Use "%license" tag instead of "%doc" to install the package's
  license file.</changelog>
</package>
<package pkgid="18c209170cbc8fabc55e9a50fd36aff3385e72d9820342f9127fdc2612505890" name="pciutils" arch="src">
  <version epoch="0" ver="3.5.6" rel="150300.13.6.1"/>
  <changelog author="jengelh@medozas.de" date="1332072000">- Shared library policy: new subpackage libpci3</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1356955200">- pciutils-endianh.patch Use the documented/optimized byteswapping
  routines from endian.h</changelog>
  <changelog author="idonmez@suse.com" date="1366027200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1375185600">- Update to 3.2.0
  * On newer Linux systems, we use libkmod to look up kernel
    modules (modules.pcimap no longer exists.) To facilitate this,
    libpci is able to look up module aliases in sysfs.
  * Various minor bug fixes.
  * Updated pci.ids to the today's snapshot of the database.
- Update to 3.1.10
  * Decoding of LTR/OBFF in PCIe capabilities.
  * Various minor bug fixes.
  * Updated pci.ids to the today's snapshot of the database.
- rebase patches
- require libkmod</changelog>
  <changelog author="tchvatal@suse.com" date="1399982400">- Remove COPYING from obs it is in tarball directly
- Version bump to 3.2.1:
  * CardBus bridge capabilities are displayed.
  * PCIe L1 PM substates are decoded.
  * Various bugs were fixed in decoding of PCIe capabilities.
  * The sysfs back-end does not spit out unnecessary warnings when
    empty slots report only a partial device address. This actually
    happens on IBM pSeries.
  * Updated pci.ids to the today's snapshot of the database.
- Cleanup with spec-cleaner</changelog>
  <changelog author="fcrozat@suse.com" date="1408363200">- Add obsoletes/provides to baselibs.conf.</changelog>
  <changelog author="tchvatal@suse.com" date="1416312000">- Version bump to 3.3.0:
  * Device names exported by BIOS are displayed on Linux.
  * On Linux systems, HWDB is used to look up device names
    when our ID database gives no match. (More precisely,
    HWDB is consulted after local pci.ids, but before using
    network to query online pci.ids.) Thanks to Tom Gundersen
    for the initial patch.
  * Added experimental back-end for OS X / Darwin. Thanks to
    Richard Yao for providing it.
  * Filters now support matching by device class. Original
    patch by Matthew Wilcox, wrappers for ABI compatibility
    by me.
  * Interrupt Pin and Interrupt Line registers are displayed
    for bridge devices, too.
  * Several portability bugs have been fixed.
  * Several typos have been fixed. Also, use of questionable
    constructs in man pages has been reduced.
  * PCIe link capabilities now include the ASPMOptComp bit.
  * The "CRS Software Visibility" bit is now decoded properly.
  * Updated pci.ids to the current snapshot of the database.
- Refresh patch:
  * pciutils-endianh.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1441540800">- Update to 3.3.1
  * Removed hacks for backward compatibility with Linux libc5,
    which were breaking newer non-glibc Linux systems. Thanks
    to Felix Janda.
  * Display VirtIO vendor-specific capability. Patch by Gerd
    Hoffmann.
  * Fixed memory leak in name cache.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1447416000">- Update to 3.4.0
  * On Linux, we report NUMA nodes of devices.
  * The sysfs back-end does not die on read errors
    of optional attributes. Instead, a warning is produced.
  * Fixed several minor bugs.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="jengelh@inai.de" date="1448107200">- Summary update</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 3.4.1:
  * New capabilities decoded: Process Address Space, Page Request
    Interface, Enhanced Allocation. Thanks to David Daney and
    David Woodhouse.
  * DevCap SlotPowerLimit is now decoded for all components with
    upstream ports.</changelog>
  <changelog author="mpluskal@suse.com" date="1463745600">- Update to version 3.5.0:
  * New capabilities decoded: Downstream Port Containment,
    Precision Time Measurement. Thanks to Keith Busch and
    Jonathan Yong.
  * Domain numbers extended to 31 bits. This will be used by the
    Linux kernel on some machines in near future.
  * Enhanced allocation regions are now decoded on Linux.
  * The NetBSD back-end supports PCIe extended configuration space.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1464177600">- Update to version 3.5.1:
  * Fixed symbol versioning of pci_init().</changelog>
  <changelog author="mpluskal@suse.com" date="1488196800">- Update to version 3.5.4:
  * Previous version broke compilation on systems, for which
    lib/types.h did not provide a 64-bit integer type. It is
    provided everywhere now.
- Changes for version 3.5.3:
  * When lspci looks for Linux kernel modules, it uses the default
  path to module directory provided by libkmod. Previously,
  it tried to construct the path explicitly, which need not
  work on all systems.
  * Improved formatting of memory and I/O ranges behind a bridge.
  * PCIe link capabilities now display GEN4 speed (16GT/s).
  * PCIe device capabilities now show bits related to atomic
    operations.
- Changes for version 3.5.2:
  * The L1 power management capability is now decoded more
  thoroughly. Thanks to Rajat Jain for the patch.
  * The table of configuration registers used by setpci
  had a bug in the definition of SUBSYSTEM_VENDOR_ID.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to version 3.5.5
  * Better decoding of AER capability.
  * "Slot Implemented" flag is decoded for PCI/PCI-X to PCIe bridges.
  * Minor fixes of decoding other capabilities.
  * As usual, updated pci.ids to the current snapshot of the
    database.
- cleanup with spec-cleaner
- switch from ftp to https
- track signature</changelog>
  <changelog author="aavindraa@gmail.com" date="1511092800">- Update to version 3.5.6
  * MN VPD keyword is decoded correctly.
  * As usual, updated pci.ids to the current snapshot of the
    database.
  * FreeBSD back-end: read-only access for non-root, support
    DragonFly BSD, support extended config space.</changelog>
  <changelog author="msuchanek@suse.com" date="1590062400">- Fix lspci outputs few of the VPD data fields are displayed as unknown (bsc#1170554, ltc#185587).
  Added:
  * pciutils-VPD-When-printing-item-IDs-escape-non-ASCII-characte.patch
  * pciutils-VPD-Cleanup.patch
  * pciutils-Add-decoding-of-vendor-specific-VPD-fields.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603972800">- Add decode support for RCECs [jsc#SLE-13735]
- added patches
  https://github.com/pciutils/pciutils/commit/e12bd01eea67ca8cf539263124843ba281eb6ecc
  + pciutils-add-decode-support-for-RCECs.patch</changelog>
  <changelog author="vliaskovitis@suse.com" date="1643025600">- Add pciutils-Add-PCIe-5.0-data-rate-32-GT-s-support.patch
  Add pciutils-Add-PCIe-6.0-data-rate-64-GT-s-support.patch
  (bsc#1192862)</changelog>
  <changelog author="psimons@suse.com" date="1696420800">- Apply "lspci-Fixed-buffer-overflows-in-ls-tree.c.patch" to fix a
  buffer overflow error that would cause lspci to crash on systems
  with complex topologies. [bsc#1215265]
- Add "pciutils.keyring" so that the tarball's signature can be
  verified at build time.
- Use "%license" tag instead of "%doc" to install the package's
  license file.</changelog>
</package>
<package pkgid="da051809c0150d165b146e217514ab650977e991b00bf5eb914e35c987b9e4a4" name="pciutils" arch="x86_64">
  <version epoch="0" ver="3.5.6" rel="150300.13.6.1"/>
  <changelog author="tchvatal@suse.com" date="1416312000">- Version bump to 3.3.0:
  * Device names exported by BIOS are displayed on Linux.
  * On Linux systems, HWDB is used to look up device names
    when our ID database gives no match. (More precisely,
    HWDB is consulted after local pci.ids, but before using
    network to query online pci.ids.) Thanks to Tom Gundersen
    for the initial patch.
  * Added experimental back-end for OS X / Darwin. Thanks to
    Richard Yao for providing it.
  * Filters now support matching by device class. Original
    patch by Matthew Wilcox, wrappers for ABI compatibility
    by me.
  * Interrupt Pin and Interrupt Line registers are displayed
    for bridge devices, too.
  * Several portability bugs have been fixed.
  * Several typos have been fixed. Also, use of questionable
    constructs in man pages has been reduced.
  * PCIe link capabilities now include the ASPMOptComp bit.
  * The "CRS Software Visibility" bit is now decoded properly.
  * Updated pci.ids to the current snapshot of the database.
- Refresh patch:
  * pciutils-endianh.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1441540800">- Update to 3.3.1
  * Removed hacks for backward compatibility with Linux libc5,
    which were breaking newer non-glibc Linux systems. Thanks
    to Felix Janda.
  * Display VirtIO vendor-specific capability. Patch by Gerd
    Hoffmann.
  * Fixed memory leak in name cache.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1447416000">- Update to 3.4.0
  * On Linux, we report NUMA nodes of devices.
  * The sysfs back-end does not die on read errors
    of optional attributes. Instead, a warning is produced.
  * Fixed several minor bugs.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="jengelh@inai.de" date="1448107200">- Summary update</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 3.4.1:
  * New capabilities decoded: Process Address Space, Page Request
    Interface, Enhanced Allocation. Thanks to David Daney and
    David Woodhouse.
  * DevCap SlotPowerLimit is now decoded for all components with
    upstream ports.</changelog>
  <changelog author="mpluskal@suse.com" date="1463745600">- Update to version 3.5.0:
  * New capabilities decoded: Downstream Port Containment,
    Precision Time Measurement. Thanks to Keith Busch and
    Jonathan Yong.
  * Domain numbers extended to 31 bits. This will be used by the
    Linux kernel on some machines in near future.
  * Enhanced allocation regions are now decoded on Linux.
  * The NetBSD back-end supports PCIe extended configuration space.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1464177600">- Update to version 3.5.1:
  * Fixed symbol versioning of pci_init().</changelog>
  <changelog author="mpluskal@suse.com" date="1488196800">- Update to version 3.5.4:
  * Previous version broke compilation on systems, for which
    lib/types.h did not provide a 64-bit integer type. It is
    provided everywhere now.
- Changes for version 3.5.3:
  * When lspci looks for Linux kernel modules, it uses the default
  path to module directory provided by libkmod. Previously,
  it tried to construct the path explicitly, which need not
  work on all systems.
  * Improved formatting of memory and I/O ranges behind a bridge.
  * PCIe link capabilities now display GEN4 speed (16GT/s).
  * PCIe device capabilities now show bits related to atomic
    operations.
- Changes for version 3.5.2:
  * The L1 power management capability is now decoded more
  thoroughly. Thanks to Rajat Jain for the patch.
  * The table of configuration registers used by setpci
  had a bug in the definition of SUBSYSTEM_VENDOR_ID.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to version 3.5.5
  * Better decoding of AER capability.
  * "Slot Implemented" flag is decoded for PCI/PCI-X to PCIe bridges.
  * Minor fixes of decoding other capabilities.
  * As usual, updated pci.ids to the current snapshot of the
    database.
- cleanup with spec-cleaner
- switch from ftp to https
- track signature</changelog>
  <changelog author="aavindraa@gmail.com" date="1511092800">- Update to version 3.5.6
  * MN VPD keyword is decoded correctly.
  * As usual, updated pci.ids to the current snapshot of the
    database.
  * FreeBSD back-end: read-only access for non-root, support
    DragonFly BSD, support extended config space.</changelog>
  <changelog author="msuchanek@suse.com" date="1590062400">- Fix lspci outputs few of the VPD data fields are displayed as unknown (bsc#1170554, ltc#185587).
  Added:
  * pciutils-VPD-When-printing-item-IDs-escape-non-ASCII-characte.patch
  * pciutils-VPD-Cleanup.patch
  * pciutils-Add-decoding-of-vendor-specific-VPD-fields.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603972800">- Add decode support for RCECs [jsc#SLE-13735]
- added patches
  https://github.com/pciutils/pciutils/commit/e12bd01eea67ca8cf539263124843ba281eb6ecc
  + pciutils-add-decode-support-for-RCECs.patch</changelog>
  <changelog author="vliaskovitis@suse.com" date="1643025600">- Add pciutils-Add-PCIe-5.0-data-rate-32-GT-s-support.patch
  Add pciutils-Add-PCIe-6.0-data-rate-64-GT-s-support.patch
  (bsc#1192862)</changelog>
  <changelog author="psimons@suse.com" date="1696420800">- Apply "lspci-Fixed-buffer-overflows-in-ls-tree.c.patch" to fix a
  buffer overflow error that would cause lspci to crash on systems
  with complex topologies. [bsc#1215265]
- Add "pciutils.keyring" so that the tarball's signature can be
  verified at build time.
- Use "%license" tag instead of "%doc" to install the package's
  license file.</changelog>
</package>
<package pkgid="b99320be850809ac61b5145f758c27b216ba248e03ab6df15945c3cf6b19d8bc" name="perl-Bootloader" arch="aarch64">
  <version epoch="0" ver="0.945" rel="150400.3.9.1"/>
  <changelog author="wfeldt@opensuse.org" date="1571054400">- merge gh#openSUSE/perl-bootloader#123
- Accept sysconfig values without quotes
- 0.926</changelog>
  <changelog author="wfeldt@opensuse.org" date="1587729600">- merge gh#openSUSE/perl-bootloader#126
- always install EFI fallback boot for aarch64 (bsc#1167015)
- 0.927</changelog>
  <changelog author="wfeldt@opensuse.org" date="1591185600">- merge gh#openSUSE/perl-bootloader#127
- use correct target name on aarch64 (bsc#1172293)
- 0.928</changelog>
  <changelog author="wfeldt@opensuse.org" date="1594728000">- merge gh#openSUSE/perl-bootloader#128
- Do not warn about missing SECURE_BOOT sysconfig
- 0.929</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595505600">- merge gh#openSUSE/perl-bootloader#130
- Throw less warnings about fstab
- 0.930</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595592000">- merge gh#openSUSE/perl-bootloader#129
- Check tpm.mod in the new grub2 directory (bsc#1174320)
- 0.931</changelog>
  <changelog author="wfeldt@opensuse.org" date="1603108800">- merge gh#openSUSE/perl-bootloader#131
- grub2 install: honor UPDATE_NVRAM in /etc/sysconfig/bootloader
  (bsc#1157550 jsc#SLE-11500).
- 0.932</changelog>
  <changelog author="wfeldt@opensuse.org" date="1613044800">- merge gh#openSUSE/perl-bootloader#133
- use shim on aarch64 (jsc#SLE-15823, jsc#SLE-15020)
- 0.933</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618488000">- merge gh#openSUSE/perl-bootloader#134
- install with --removable if efivars are not writable
  (bsc#1182749, bsc#1174111, bsc#1184160)
- fix whitespace
- 0.934</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627387200">- merge gh#openSUSE/perl-bootloader#135
- fix typo in update-bootloader
- 0.935</changelog>
  <changelog author="wfeldt@opensuse.org" date="1631793600">- merge gh#openSUSE/perl-bootloader#136
- report error if config file could not be updated (bsc#1188768)
- 0.936</changelog>
  <changelog author="wfeldt@opensuse.org" date="1642075200">- merge gh#openSUSE/perl-bootloader#137
- grub2 install: Support secure boot on powerpc (bsc#1192764
  jsc#SLE-18271).
- 0.937</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649332800">- merge gh#openSUSE/perl-bootloader#138
- grub2/install: reset error code when passing through recover code
  (bsc#1198197)
- 0.938</changelog>
  <changelog author="wfeldt@opensuse.org" date="1651060800">- merge gh#openSUSE/perl-bootloader#139
- fix sysconfig parsing (bsc#1198828)
- 0.939</changelog>
  <changelog author="wfeldt@opensuse.org" date="1670241600">- merge gh#openSUSE/perl-bootloader#140
- add basic support for systemd-boot
- 0.940</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673524800">- merge gh#openSUSE/perl-bootloader#141
- systemd-boot: easier initial setup
- 0.941</changelog>
  <changelog author="wfeldt@opensuse.org" date="1682337600">- merge gh#openSUSE/perl-bootloader#142
- use fw_platform_size to distinguish between 32 bit and 64 bit
  UEFI platforms (bsc#1208003)
- 0.942</changelog>
  <changelog author="wfeldt@opensuse.org" date="1685534400">- merge gh#openSUSE/perl-bootloader#147
- UEFI: update also default location, if it is controlled by SUSE
  (bsc#1210799, bsc#1201399)
- 0.943</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688126400">- merge gh#openSUSE/perl-bootloader#152
- use signed grub EFI binary when updating grub in default EFI
  location (bsc#1210799)
- check whether grub2-install supports --suse-force-signed option
- 0.944</changelog>
  <changelog author="wfeldt@opensuse.org" date="1694088000">- merge gh#openSUSE/perl-bootloader#157
- bootloader_entry script can have an optional 'force-default'
  argument (bsc#1215064)
- skip warning about unsupported options when in compat mode
- 0.945</changelog>
</package>
<package pkgid="093cc4162472563605e40c66a0308608485e4b7293c6fc64e98142110819234f" name="perl-Bootloader" arch="s390x">
  <version epoch="0" ver="0.945" rel="150400.3.9.1"/>
  <changelog author="wfeldt@opensuse.org" date="1571054400">- merge gh#openSUSE/perl-bootloader#123
- Accept sysconfig values without quotes
- 0.926</changelog>
  <changelog author="wfeldt@opensuse.org" date="1587729600">- merge gh#openSUSE/perl-bootloader#126
- always install EFI fallback boot for aarch64 (bsc#1167015)
- 0.927</changelog>
  <changelog author="wfeldt@opensuse.org" date="1591185600">- merge gh#openSUSE/perl-bootloader#127
- use correct target name on aarch64 (bsc#1172293)
- 0.928</changelog>
  <changelog author="wfeldt@opensuse.org" date="1594728000">- merge gh#openSUSE/perl-bootloader#128
- Do not warn about missing SECURE_BOOT sysconfig
- 0.929</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595505600">- merge gh#openSUSE/perl-bootloader#130
- Throw less warnings about fstab
- 0.930</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595592000">- merge gh#openSUSE/perl-bootloader#129
- Check tpm.mod in the new grub2 directory (bsc#1174320)
- 0.931</changelog>
  <changelog author="wfeldt@opensuse.org" date="1603108800">- merge gh#openSUSE/perl-bootloader#131
- grub2 install: honor UPDATE_NVRAM in /etc/sysconfig/bootloader
  (bsc#1157550 jsc#SLE-11500).
- 0.932</changelog>
  <changelog author="wfeldt@opensuse.org" date="1613044800">- merge gh#openSUSE/perl-bootloader#133
- use shim on aarch64 (jsc#SLE-15823, jsc#SLE-15020)
- 0.933</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618488000">- merge gh#openSUSE/perl-bootloader#134
- install with --removable if efivars are not writable
  (bsc#1182749, bsc#1174111, bsc#1184160)
- fix whitespace
- 0.934</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627387200">- merge gh#openSUSE/perl-bootloader#135
- fix typo in update-bootloader
- 0.935</changelog>
  <changelog author="wfeldt@opensuse.org" date="1631793600">- merge gh#openSUSE/perl-bootloader#136
- report error if config file could not be updated (bsc#1188768)
- 0.936</changelog>
  <changelog author="wfeldt@opensuse.org" date="1642075200">- merge gh#openSUSE/perl-bootloader#137
- grub2 install: Support secure boot on powerpc (bsc#1192764
  jsc#SLE-18271).
- 0.937</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649332800">- merge gh#openSUSE/perl-bootloader#138
- grub2/install: reset error code when passing through recover code
  (bsc#1198197)
- 0.938</changelog>
  <changelog author="wfeldt@opensuse.org" date="1651060800">- merge gh#openSUSE/perl-bootloader#139
- fix sysconfig parsing (bsc#1198828)
- 0.939</changelog>
  <changelog author="wfeldt@opensuse.org" date="1670241600">- merge gh#openSUSE/perl-bootloader#140
- add basic support for systemd-boot
- 0.940</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673524800">- merge gh#openSUSE/perl-bootloader#141
- systemd-boot: easier initial setup
- 0.941</changelog>
  <changelog author="wfeldt@opensuse.org" date="1682337600">- merge gh#openSUSE/perl-bootloader#142
- use fw_platform_size to distinguish between 32 bit and 64 bit
  UEFI platforms (bsc#1208003)
- 0.942</changelog>
  <changelog author="wfeldt@opensuse.org" date="1685534400">- merge gh#openSUSE/perl-bootloader#147
- UEFI: update also default location, if it is controlled by SUSE
  (bsc#1210799, bsc#1201399)
- 0.943</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688126400">- merge gh#openSUSE/perl-bootloader#152
- use signed grub EFI binary when updating grub in default EFI
  location (bsc#1210799)
- check whether grub2-install supports --suse-force-signed option
- 0.944</changelog>
  <changelog author="wfeldt@opensuse.org" date="1694088000">- merge gh#openSUSE/perl-bootloader#157
- bootloader_entry script can have an optional 'force-default'
  argument (bsc#1215064)
- skip warning about unsupported options when in compat mode
- 0.945</changelog>
</package>
<package pkgid="ed73bca7fdbdad353bce73043d156bcc81df05129f0deb67d3998c939c7a24af" name="perl-Bootloader" arch="src">
  <version epoch="0" ver="0.945" rel="150400.3.9.1"/>
  <changelog author="wfeldt@opensuse.org" date="1571054400">- merge gh#openSUSE/perl-bootloader#123
- Accept sysconfig values without quotes
- 0.926</changelog>
  <changelog author="wfeldt@opensuse.org" date="1587729600">- merge gh#openSUSE/perl-bootloader#126
- always install EFI fallback boot for aarch64 (bsc#1167015)
- 0.927</changelog>
  <changelog author="wfeldt@opensuse.org" date="1591185600">- merge gh#openSUSE/perl-bootloader#127
- use correct target name on aarch64 (bsc#1172293)
- 0.928</changelog>
  <changelog author="wfeldt@opensuse.org" date="1594728000">- merge gh#openSUSE/perl-bootloader#128
- Do not warn about missing SECURE_BOOT sysconfig
- 0.929</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595505600">- merge gh#openSUSE/perl-bootloader#130
- Throw less warnings about fstab
- 0.930</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595592000">- merge gh#openSUSE/perl-bootloader#129
- Check tpm.mod in the new grub2 directory (bsc#1174320)
- 0.931</changelog>
  <changelog author="wfeldt@opensuse.org" date="1603108800">- merge gh#openSUSE/perl-bootloader#131
- grub2 install: honor UPDATE_NVRAM in /etc/sysconfig/bootloader
  (bsc#1157550 jsc#SLE-11500).
- 0.932</changelog>
  <changelog author="wfeldt@opensuse.org" date="1613044800">- merge gh#openSUSE/perl-bootloader#133
- use shim on aarch64 (jsc#SLE-15823, jsc#SLE-15020)
- 0.933</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618488000">- merge gh#openSUSE/perl-bootloader#134
- install with --removable if efivars are not writable
  (bsc#1182749, bsc#1174111, bsc#1184160)
- fix whitespace
- 0.934</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627387200">- merge gh#openSUSE/perl-bootloader#135
- fix typo in update-bootloader
- 0.935</changelog>
  <changelog author="wfeldt@opensuse.org" date="1631793600">- merge gh#openSUSE/perl-bootloader#136
- report error if config file could not be updated (bsc#1188768)
- 0.936</changelog>
  <changelog author="wfeldt@opensuse.org" date="1642075200">- merge gh#openSUSE/perl-bootloader#137
- grub2 install: Support secure boot on powerpc (bsc#1192764
  jsc#SLE-18271).
- 0.937</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649332800">- merge gh#openSUSE/perl-bootloader#138
- grub2/install: reset error code when passing through recover code
  (bsc#1198197)
- 0.938</changelog>
  <changelog author="wfeldt@opensuse.org" date="1651060800">- merge gh#openSUSE/perl-bootloader#139
- fix sysconfig parsing (bsc#1198828)
- 0.939</changelog>
  <changelog author="wfeldt@opensuse.org" date="1670241600">- merge gh#openSUSE/perl-bootloader#140
- add basic support for systemd-boot
- 0.940</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673524800">- merge gh#openSUSE/perl-bootloader#141
- systemd-boot: easier initial setup
- 0.941</changelog>
  <changelog author="wfeldt@opensuse.org" date="1682337600">- merge gh#openSUSE/perl-bootloader#142
- use fw_platform_size to distinguish between 32 bit and 64 bit
  UEFI platforms (bsc#1208003)
- 0.942</changelog>
  <changelog author="wfeldt@opensuse.org" date="1685534400">- merge gh#openSUSE/perl-bootloader#147
- UEFI: update also default location, if it is controlled by SUSE
  (bsc#1210799, bsc#1201399)
- 0.943</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688126400">- merge gh#openSUSE/perl-bootloader#152
- use signed grub EFI binary when updating grub in default EFI
  location (bsc#1210799)
- check whether grub2-install supports --suse-force-signed option
- 0.944</changelog>
  <changelog author="wfeldt@opensuse.org" date="1694088000">- merge gh#openSUSE/perl-bootloader#157
- bootloader_entry script can have an optional 'force-default'
  argument (bsc#1215064)
- skip warning about unsupported options when in compat mode
- 0.945</changelog>
</package>
<package pkgid="bbf74264fe14c7f8882a3dd6365d3cd54020ffb42acde5dec5b5ed243b30821f" name="perl-Bootloader" arch="x86_64">
  <version epoch="0" ver="0.945" rel="150400.3.9.1"/>
  <changelog author="wfeldt@opensuse.org" date="1571054400">- merge gh#openSUSE/perl-bootloader#123
- Accept sysconfig values without quotes
- 0.926</changelog>
  <changelog author="wfeldt@opensuse.org" date="1587729600">- merge gh#openSUSE/perl-bootloader#126
- always install EFI fallback boot for aarch64 (bsc#1167015)
- 0.927</changelog>
  <changelog author="wfeldt@opensuse.org" date="1591185600">- merge gh#openSUSE/perl-bootloader#127
- use correct target name on aarch64 (bsc#1172293)
- 0.928</changelog>
  <changelog author="wfeldt@opensuse.org" date="1594728000">- merge gh#openSUSE/perl-bootloader#128
- Do not warn about missing SECURE_BOOT sysconfig
- 0.929</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595505600">- merge gh#openSUSE/perl-bootloader#130
- Throw less warnings about fstab
- 0.930</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595592000">- merge gh#openSUSE/perl-bootloader#129
- Check tpm.mod in the new grub2 directory (bsc#1174320)
- 0.931</changelog>
  <changelog author="wfeldt@opensuse.org" date="1603108800">- merge gh#openSUSE/perl-bootloader#131
- grub2 install: honor UPDATE_NVRAM in /etc/sysconfig/bootloader
  (bsc#1157550 jsc#SLE-11500).
- 0.932</changelog>
  <changelog author="wfeldt@opensuse.org" date="1613044800">- merge gh#openSUSE/perl-bootloader#133
- use shim on aarch64 (jsc#SLE-15823, jsc#SLE-15020)
- 0.933</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618488000">- merge gh#openSUSE/perl-bootloader#134
- install with --removable if efivars are not writable
  (bsc#1182749, bsc#1174111, bsc#1184160)
- fix whitespace
- 0.934</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627387200">- merge gh#openSUSE/perl-bootloader#135
- fix typo in update-bootloader
- 0.935</changelog>
  <changelog author="wfeldt@opensuse.org" date="1631793600">- merge gh#openSUSE/perl-bootloader#136
- report error if config file could not be updated (bsc#1188768)
- 0.936</changelog>
  <changelog author="wfeldt@opensuse.org" date="1642075200">- merge gh#openSUSE/perl-bootloader#137
- grub2 install: Support secure boot on powerpc (bsc#1192764
  jsc#SLE-18271).
- 0.937</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649332800">- merge gh#openSUSE/perl-bootloader#138
- grub2/install: reset error code when passing through recover code
  (bsc#1198197)
- 0.938</changelog>
  <changelog author="wfeldt@opensuse.org" date="1651060800">- merge gh#openSUSE/perl-bootloader#139
- fix sysconfig parsing (bsc#1198828)
- 0.939</changelog>
  <changelog author="wfeldt@opensuse.org" date="1670241600">- merge gh#openSUSE/perl-bootloader#140
- add basic support for systemd-boot
- 0.940</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673524800">- merge gh#openSUSE/perl-bootloader#141
- systemd-boot: easier initial setup
- 0.941</changelog>
  <changelog author="wfeldt@opensuse.org" date="1682337600">- merge gh#openSUSE/perl-bootloader#142
- use fw_platform_size to distinguish between 32 bit and 64 bit
  UEFI platforms (bsc#1208003)
- 0.942</changelog>
  <changelog author="wfeldt@opensuse.org" date="1685534400">- merge gh#openSUSE/perl-bootloader#147
- UEFI: update also default location, if it is controlled by SUSE
  (bsc#1210799, bsc#1201399)
- 0.943</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688126400">- merge gh#openSUSE/perl-bootloader#152
- use signed grub EFI binary when updating grub in default EFI
  location (bsc#1210799)
- check whether grub2-install supports --suse-force-signed option
- 0.944</changelog>
  <changelog author="wfeldt@opensuse.org" date="1694088000">- merge gh#openSUSE/perl-bootloader#157
- bootloader_entry script can have an optional 'force-default'
  argument (bsc#1215064)
- skip warning about unsupported options when in compat mode
- 0.945</changelog>
</package>
<package pkgid="c95a10ef698f439c890095b89c392469d76001b315c4759eace72205b6710e29" name="perl-Git" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.30.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
</package>
<package pkgid="b25e9b58c7c6adc03087137d1a0c3f0656e095c6a091e25062db0c05a8cfaf66" name="perl-Git" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.30.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
</package>
<package pkgid="3e5d58db6b48d7153de38bcd25e186fca8c56ca8e18af940779d4d30f2756b78" name="perl-Git" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.30.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
</package>
<package pkgid="d967964574f8602d8f440edf0f81f438bb4575c583b65929dfbeeb8b027df951" name="perl-Git" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.33.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
</package>
<package pkgid="9854a75c4bff9c53060eca5f52391258a9a373306d12758b5de89632077b34a7" name="perl-Git" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.33.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
</package>
<package pkgid="b4816934049000f05436b5f3b85b2dfd83cc734885b70d3d58a98a7bad20b6d2" name="perl-Git" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.33.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
</package>
<package pkgid="f484ddc311159356adafe5a40fad5344dd55d67ea80dded5f2dfe83e0f8689c4" name="podman" arch="aarch64">
  <version epoch="0" ver="4.7.2" rel="150500.3.3.1"/>
  <changelog author="danish.prakash@suse.com" date="1677240000">- Update to version 4.4.2:
  * Bump to v4.4.2
  * Release notes for v4.4.2
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * kube play: only enforce passthrough in Quadlet
  * Emergency fix for man pages: check for broken includes
  * CI: Temporarily disable all AWS EC2-based tasks
  * quadlet system tests: add useful defaults, logging
  * volume,container: chroot to source before exporting content
  * install sigproxy before start/attach
  * Update to c/image 5.24.1
  * events + container inspect test: RHEL fixes
  * Bump to v4.4.2-dev
- Remove patches (merged upstream):
  * volume-container-chroot-to-source-before-exporting-content.patch
- podman.spec: add `crun` requirement for quadlet
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add patch to let quadlet use the default runtime
  Added patch:
  * Quadlet-use-the-default-runtime.patch
  =&gt; Remove dependency on crun</changelog>
  <changelog author="danish.prakash@suse.com" date="1679659200">- Update to version 4.4.3:
  * Bump to v4.4.3
  * Release notes for v4.4.3
  * compat: /auth: parse server address correctly
  * vendor github.com/containers/common@v0.51.1
  * pkginstaller: bump Qemu to version 7.2.0
  * podman machine: Adjust Chrony makestep config
  * [v4.4] fix --health-on-failure=restart in transient unit
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * journald: remove initializeJournal()
  * netavark: only use aardvark ip as nameserver
  * compat API: network create return 409 for duplicate
  * fix "podman logs --since --follow" flake
  * system service --log-level=trace: support hijack
  * podman-mac-helper: exit 1 on error
  * bump golang.org/x/net to v0.8.0
  * Fix package restore
  * Quadlet - use the default runtime
  * Bump to v4.4.3-dev
- Remove patch (merged upstream):
  * Quadlet-use-the-default-runtime.patch
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="danish.prakash@suse.com" date="1680004800">- Update to version 4.4.4:
  * Bump to v4.4.4
  * Release notes for v4.4.4
  * libpod: always use direct mapping
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * Bump to v4.4.4-dev
- spec: Bump required version for libcontainers-common (bsc#1209495)</changelog>
  <changelog author="dcermak@suse.com" date="1681473600">- Don't build against EoL go versions, fixes bsc#1210299</changelog>
  <changelog author="danish.prakash@suse.com" date="1681819200">- Update to version 4.5.0:
  * Release v4.5.0
  * [CI:DOCS] Final release notes for v4.5.0
  * Quadlet - do not set log-driver by default
  * Return title fields as a list
  * Bump to v4.5.0-dev
  * Bump to v4.5.0-RC2
  * Final release notes for v4.5.0-RC2
  * test/e2e: remove unnecessary SkipIfNetavark() calls
  * test/e2e: deduplicated network test
  * docs: update podman-network-create.1
  * network create: add --interface-name
  * test/system/252-quadlet.bats: fix flake
  * Read kube_generate_type from containers.conf
  * Debian setup: workaround for runc /dev/char/10:200 bug
  * pkg/rootless: use catatonit from /usr/libexec/podman
  * rootless: make sure we only use a single pause process
  * Use atomic config writing strategy for podman machine config files
  * Add remaining release notes for v4.5.0-RC2
  * GHA: Use version instead of SHA for actions
  * chore(deps): update dependency containers/automation_images to v20230405
  * build: pass env by reference
  * test: retrofit error message
  * test/system: expect 12 char for short id
  * vendor: bump containers/(storage, common, buildah, image)
  * [skip-ci] Update actions/upload-artifact action to v3
  * [skip-ci] Update actions/stale action to v8
  * [skip-ci] Update actions/setup-go action to v4
  * [skip-ci] Update github/issue-labeler action to v2.6
  * Fix up codespell errors
  * Capitalize all uid,gid and id words that are not options in docs
  * build(deps): bump golang.org/x/tools from 0.7.0 to 0.8.0 in /test/tools
  * Properly remove the service container during kube down
  * quadlet: add `UserNS` option key
  * [CI:DOCS] Release notes for 4.5.0 Part 1
  * "podman pull by digest and list --all" test: untag instead of rmi
  * build(deps): bump golang.org/x/text from 0.8.0 to 0.9.0
  * Add renovate.json configuration
  * CI: postbuild step: skip under nightly treadmill
  * The `--ulimit` option accepts the name with an `RLIMIT_` prefix both upper and lower case
  * test/e2e: use custom network config dir where needed
  * chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml`
  * update completion scripts for cobra v1.7.0
  * libpod.storageService.CreateContainerStorage(): retrieve ID maps
  * Fix invalid pod name and hostname during kube generate
  * e2e tests: fix racy flakes
  * Cirrus: Enable labeling of EC2 VMs
  * Cirrus: Fix aarch64 clone_script 404 errors
  * e2e: GinkgoParallelNode() -&gt; ...Process()
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
  * [CI:DOCS] --creds and registries
  * Copr: fix build deps for /usr/bin/envsubst
  * Don't error when removing non-existant env vars
  * e2e: healthcheck on stopped container: fix flake
  * test/apiv2/80-kube.at
  * test/apiv2/80-kube.at
  * system service: do not close Body
  * rm `hack/release.sh`
  * build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6
  * add `quadlet -version` flag
  * add version/rawversion package
  * quadlet: use `Flag` suffix for variables
  * quadlet: implement `Tmpfs` option
  * Bump to v4.5.0-dev
  * Bump to 4.5.0-rc1
  * Update release notes from 4.4 branch
  * rootless netns: recover from invalid netns
  * System tests: unverbosify a flake log
  * Add support for secret exists
  * Fix Win install task failures with large PR bodies
  * docs: add `starting` to `HealthCheckResults.Status`
  * Add support for cgroup_config from containers.conf
  * libpod: mount safely subpaths
  * Support Deployment generation with kube generate
  * Use secret.items to create volume mounts if present
  * [CI:DOCS] fix typo in --systemd option
  * rootless: drop preexec hook error message
  * Edit the docker wrapper to use the install prefix
  * Update podman-for-windows.md
  * Quadlet: RemapUsers documentation fixes
  * speed up image listing
  * vendor containers/common@e27c30ee9b1b
  * fix volume-plugin-test flake
  * Document building Podman remote on Windows hosts
  * test/e2e: gpg keep stdout/err attached
  * auto-update: stop+start instead of restart sytemd units
  * [CI:DOCS] Improve basic tutorial
  * Update docs/source/markdown/podman-network.1.md
  * Add debug to --wait test
  * fix slirp4netns resolv.conf ip with a userns
  * Quadlet: add support for keep-id with mapping values
  * Quadlet E2E test - run quadlet as user generator
  * sqlite: do not `Ping()` after connecting
  * Quadlet - treat paths starting with systemd specifiers as absolute
  * Update docs/source/markdown/podman-kube-play.1.md.in
  * system tests: use CONTAINERS_CONF_OVERRIDE
  * implement podman machine set for hyperv
  * [CI:DOCS] Add network subnets info to network man page
  * CI: retry the golangci install
  * system tests: fix racey sdnotify test
  * hyperv: lookup machine on local filesystem first
  * fix os.IsNotExist() CI check
  * Ensure that SQLite state handles name-ID collisions
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * build(deps): bump github.com/onsi/gomega from 1.27.4 to 1.27.5
  * Fix a race around SQLite DB config validation
  * add CONTAINERS_CONF_OVERRIDE
  * vendor containers/common@main
  * docs: minor grammar fix in `--volume` description
  * sqlite: do not use shared cache
  * test: podman checkpoint/restore the latest container
  * stats compat API: return "id" lowercase
  * Run make codespell
  * Drop SQLite max connections
  * sqlite: set connection attributes on open
  * Fix database locked errors with SQLite
  * quadlet tests: skip on RHEL8 rootless
  * Kube Play Doc: Document the support for K8S Secret
  * New ulimit test: bump up minimum nfiles
  * logformatter: hide --db-backend, and friendlyize quadlet
  * Quadlet - add support for relative path in Volume key in .container file
  * Add service ctr cleanup to PlayKubeDown
  * fix --health-on-failure=restart in transient unit
  * Quadlet Doc: Suggest the kill operation for HealthOnFailure
  * Quadlet - Add support for health checks configuration in .container files
  * Makefile: allow specifying /lib dir location
  * Fix option --opts -&gt; --opt
  * basic hypverv machine implementation
  * Fix SQLite DB schema migration code
  * Add support for oom_score_adj value from containers.conf
  * Use default_ulimits field in containers.conf
  * CI: test and confirm DESIRED_DATABASE
  * build(deps): bump github.com/openshift/imagebuilder
  * logformatter: futureproof output filename
  * Vendor in latest containers/(storage, common, image)
  * build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.30.0
  * test/system/255-auto-update.bats: add debug logs
  * Revert "Revert "pasta: Use two connections instead of three in TCP range forward tests""
  * Add information for secret inspect
  * Add format to podman volume ls
  * Add format to podman volume inspect
  * Add format to podman secret ls
  * Add format to podman system df
  * Add format to podman machine info
  * Add format table to podman image inspect man page
  * Cirrus: Store podman machine benchmark data
  * Update Cirrus display names, and fix get-ci-vm script
  * Ensure SQLite places uses the runroot in transient mode
  * Fix various integration test issues with SQLite state
  * Remove test for pod/container name global uniqueness
  * Improve handling of existing container names in SQLite
  * Add SQLite job to CI
  * buildah treadmill: also run rootless tests
  * build(deps): bump github.com/vbatts/git-validation in /test/tools
  * auto update: return restart error
  * fix: Document removing anonymous volumes
  * events: no duplicates when streaming during a log rotation
  * Add search --cert-dir, --creds
  * podman-mac-helper: exit 1 on error
  * system service --log-level=trace: support hijack
  * test/system: fix wait_for_port() to wait for bind
  * cgroupns: private cgroupns on cgroupv1 breaks --systemd
  * libpod: remove error stutter
  * podman events: unhide --stream
  * test/system/255-auto-update.bats: multiple services
  * 255-auto-update.bats: turn off rollback where needed
  * Use append() to add elements to a slice
  * Revert "pasta: Use two connections instead of three in TCP range forward tests"
  * Support running nested SELinux container separation
  * bud tests: rootless remote: use correct socket path
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.2.1 to 8.3.0
  * compat: /auth: parse server address correctly
  * docs: fix cmd `set DOCKER_HOST` suggestion
  * test: reenable idmap test
  * Must use mountlabel when creating builtin volumes
  * podman.spec.rpkg: distro conditionals for modulesloaddir
  * build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0
  * podman inspect list network when using --net=host or none
  * pasta: Re-enable "Local forwarder, IPv4" test, accept NXDOMAIN as response
  * build(deps): bump golang.org/x/tools from 0.6.0 to 0.7.0 in /test/tools
  * CI: Switch to c20230307t192532z-f37f36d12 images
  * Cirrus: Run system &amp; integration tests in parallel
  * Update checkpointctl v0.1.0
  * Quadlet: add support for setting --ip and --ip6
  * build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0
  * build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0
  * libpod: avoid nil pointer dereference in (*Container).Cleanup
  * [CI:DOCS] Add image not found info to troubleshooting
  * cmd: do not require userns for "version"
  * cmd: drop special handling for "scp"
  * cmd: clarify meaning of ParentNSRequired
  * Fix package restore
  * [CI:DOCS] Fix docs/version-check always requesting updates
  * sqlite: add a hidden --db-backend flag
  * fix: update the default machine value when the previously set default machine is deleted
  * podman machine: Adjust Chrony makestep config
  * sqlite: add container short ID to network aliases
  * sqlite: remove dead code
  * sqlite: addContainer: add named volume only once
  * sqlite: implement RewriteVolumeConfig
  * sqlite: LookupVolume: fix partial name match
  * sqlite: LookupVolume: wrap error
  * sqlite: fix type rewriting container config
  * sqlite: return correct error on pod-name conflict
  * sqlite: RewritePodConfig: update error message
  * test/system/255-auto-update.bats: wait 10 for update to finish
  * auto-update test: wait for service to be ready
  * Vendor in latest containers/(common, storage, image)
  * play kube: Add --wait option
  * Cirrus: Fix git config permission denied
  * Quadlet: Add support for the Mount key in .container files
  * build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2
  * fix "podman logs --since --follow" flake
  * Clarify that replicas are ignored in kubernetes deployment
  * Revert "Skip all pasta tests"
  * CI: Switch to c20230223t153813z-f37f36d12 images
  * Fix user socket path
  * pkginstaller: bump Qemu to version 7.2.0
  * Cirrus: Fix bud tests failing to apply patches
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2
  * build(deps): bump github.com/coreos/stream-metadata-go
  * Vendor in latest containers/storage
  * buildah-bud tests: don't sudo when rootless is desired
  * Temporarily disable version-check
  * CI: new rootless buildah-bud tests (cron only)
  * sqlite: fix volume lookups with partial names
  * sqlite: fix container lookups with partial IDs
  * sqlite: fix LookupPod
  * sqlite: fix pod create/rm
  * sqlite: LookupContainer: update error message
  * sqlite: AddContainerExitCode: allow to replace
  * system: add warning when running rootless on cgroupv1
  * sqlite: fix AllContainers with state
  * sqlite: fix "UPDATE TABLE" typos
  * sqlite: SaveVolume: fix syntax error updating the volumes table
  * sqlite: exit code: allow -1
  * sqlite: fix typo when removing exec sessions
  * sqlite: AllContainers: fix inner join
  * sqlite: move migration after table creation
  * sqlite: implement pod methods
  * Quadlet - use the default runtime
  * docs: context is not optional for build
  * Fix an incorrect comment on NewSqliteState
  * Add support for containers.conf database setting
  * Add support for volume operations to SQLite state
  * Implement exec session handling in SQL database
  * Various fixes from code review
  * Remove `--namespace` flag from Podman root
  * Get E2E tests to pass
  * Implement network disconnect for SQLite state
  * Implement Network Connect/Modify for SQLite state
  * Fix various lint issues
  * Some further work on SQLite state
  * Remove concept of Namespaces from BoltDB
  * Add initial SQLite-backed state implementation
  * Cirrus: Support runc testing on debian VMs
  * Skip all pasta tests
  * Skip buildah-bud test
  * Skip buildx test with VFS podman storage driver
  * Skip 'podman kube --network' test for rootless CGv1
  * Skip tests which fail with CGv1 &amp; runc
  * Skip rootless CGv1 quadlet tests due to issue
  * Makefile: Define SHELL
  * Machine refactor for QEMU/AppleHV
  * machine refactoring preparations for hyperv
  * [CI:BUILD] spec.rpkg: trim dependency list
  * Logs follow-until tests: loosen checks
  * [CI:DOCS] Windows/Mac docs link update
  * Doc update for docker network options via CLI
  * compat API: network create return 409 for duplicate
  * Apply suggestions to man page
  * vendor c/common@852ca05a1fbb
  * Quadlet: Add support for LogDriver key in container and kube units
  * machine refactoring preparations for hyperv
  * libpod: always use direct mapping
  * netavark: only use aardvark ip as nameserver
  * build(deps): bump github.com/container-orchestrated-devices/container-device-interface
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * make docs: sanity check for broken man pages
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.6 to 8.2.0
  * build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1
  * kube: rm secret on down, print secret on play
  * Fix spacing typo that triggered OCD &amp; indent units in podman-systemd.unit(5)
  * Update remote_client.md
  * [CI:DOCS] Add restriction to option README
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0
  * kube play: only enforce passthrough in Quadlet
  * journald: remove initializeJournal()
  * auto-update: support pods
  * Emergency fix for man pages: check for broken includes
  * System tests: assert(): friendlier failure messages
  * Cirrus: Fix version-check to only run on `main` job
  * CI: Temporarily disable all AWS EC2-based tasks
  * build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18
  * volume,container: chroot to source before exporting content
  * Support sysctl configs via podman kube play
  * [CI:BUILD] copr: podman.spec.rpkg cleanups
  * quadlet system tests: add useful defaults, logging
  * libpod: support relative positions for idmaps
  * Experimental workaround for cdn03.quay.io flake
  * system tests: prevent leading tabs
  * Introduce podman machine os apply
  * create: add support for --group-entry
  * fix != filter in volume prune
  * Allow specification of podman --remote build -f -
  * Quadlet use crun specified in containers.conf
  * build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0
  * Vendor c/image after https://github.com/containers/image/pull/1847
  * Don't set hostPort when generating a service
  * man page --format xref: tighten the autocompletion check
  * add support for limiting tmpfs size for systemd-specific mnts
  * build(deps): bump golang.org/x/text from 0.6.0 to 0.7.0
  * Add ulimit annotation to kube gen &amp; play
  * man page xref: validate displayed man page names
  * quadlet: add ExecStop
  * install sigproxy before start/attach
  * build(deps): bump golang.org/x/tools from 0.5.0 to 0.6.0 in /test/tools
  * Fix typos
  * Cirrus: Make benchmarks .env file easier to load
  * Cirrus: Omit functions in env. file
  * kube play: set service container as main PID when possible
  * Fix typos. Improve language.
  * events + container inspect test: RHEL fixes
  * Add ctrName to network alias during kube play
  * Run codespell on codebase
  * podman image scp: added identity for ssh.Exec
  * [CI:DOCS] Clarify nomap constrains
  * [CI:DOCS] man-page checker: include --format (Go templates)
  * Vendor c/image after https://github.com/containers/image/pull/1816
  * [CI:DOCS] Cleanup some man pages to display options with line breaks
  * [CI:DOCS] Add tables to podman-systemd.unit man page
  * github: remove prefix from bugs/features
  * Quadlet: Add support for the Secret key in Container group
  * [CI:DOCS] OWNERS: add @ygalblum and @alexlarsson
  * build(deps): bump golang.org/x/term from 0.4.0 to 0.5.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.1.6
  * Sort quadlet keys to make it easier to read
  * e2e: fix some tests on remote
  * kube play: do not teardown unconditionally on error
  * Fix typos in comments
  * Resolve symlink path for qemu directory if possible
  * #17363 Fix contradicting documentation podman-commit
  * Fix a potential UID/GID collision in unit tests
  * golangci-lint: show all errors at once
  * update golangci-lint to version 1.51.1
  * [CI:DOCS] events: document journald identifiers
  * Quadlet: exit 0 when there are no files to process
  * network ls: handle removed container
  * e2e: adapt play kube test on remote rootless
  * docs/podman-systemd.unit: Explicitely mention network &amp; kube units
  * docs/podman-systemd.unit: Update example to work out of the box
  * [CI:BUILD] Cirrus: Fix GraphQL ownerRepository:null error
  * Add missing return after errors
  * Revert "Cirrus: Emergency fix to un-stuck PRs"
  * pasta: Fix ICMPv6 Echo test, skip it for the moment
  * pasta: Fix ICMP Echo Request (IPv4) test
  * pasta: Use two connections instead of three in TCP range forward tests
  * Add SELinux label types support to quadlet
  * Add quadlet support for rootfs= containers
  * Cirrus: Emergency fix to un-stuck PRs
  * Move clean-binaries before podman-remote in podman-remote-docs target
  * oci: bind mount /sys with --userns=(auto|pod:)
  * Cleanup podman-systemd.unit file
  * Install podman-systemd.unit  man page, make quadlet discoverable
  * libpod: allow userns=keep-id for root
  * system-reset: use CleanCacheMount to clear build cache
  * vendor: bump buildah to v1.29.1-0.20230201192322-e56eb25575c7
  * system tests: fix noexistent labels test in the remote
  * Expose Podman named pipe in Inspect output
  * libpod: support idmap for --rootfs
  * test: adapt test to work on cgroupv1
  * Bump to v4.5.0-dev
  * Update main to reflect v4.4.0 release
  * Update from /github.com/vbauerster/mpb/v7 to /v8
  * hack/perf: cleanup after benchmarks
  * hack/perf/bz-2162111.sh: use custom network
  * Update bug_report.yaml
  * Handle filetype field in kubernetes.yaml files
  * hack/perf/bz-2162111.sh: measure stop
  * make hack/markdown-preprocess parallel-safe
  * system tests: fix volume exec/noexec test
  * system tests: minor fix for RHEL8 incompatibility
  * Cirrus: Use versionable IMAGE_SUFFIX
  * utils: new conversion method
  * libpod: use GraphRoot for overlay upper dir
  * vendor: update containers/storage
  * Do not mount /dev/tty into rootless containers
  * build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7
  * e2e: fix run_staticip_test about no_proxy
  * docs: specify order preference for FROM
  * Fixes port collision issue on use of --publish-all
  * Support for Windows paths in the source position of the volume mounts
  * e2e tests: fix incorrect os.User.Name
  * Log data that we failed to unmarshal
  * [CI:DOCS] hack/perf: add script for BZ 216111
  * container rm: save once for exec removal and state change
  * [DOCS:CI] podman-events: document verbose create events
  * e2e: Avoid hard-coding included in quadlet test
  * e2e: Avoid hard-coding ImageCacheDir
  * Making gvproxy.exe optional for building Windows installer
  * Add gvproxy to Windows packages
  * Add comment to clarify error handling intention
  * fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
  * Fix usage of absolute windows paths with --image-path
  * Match VT device paths to be blocked from mounting exactly
  * Fix default handling of pids-limit
  * Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
  * journald: podman logs only show logs for current user
  * journald: podman events only show events for current user
  * e2e: Remove the cache with "podman unshare rm" when a rootless user
  * Clean up more language for inclusiveness
  * e2e: Remove some directories at SynchronizedAfterSuite
  * fix: don't output "ago" when container is currently up and running
  * fix: running check error when podman is default in wsl
  * fix CI: test fail due to merge
  * Bump Bulidah to v1.29.0
  * e2e: reduce dependency on /tmp for e2e tests
  * Bump cirrus image with easier dependency management
  * quadlet: Add device support for .volume files
  * remote,build: error if containerignore is symlink
  * DB: make loading container states optional
  * ps: do not sync container
  * Set runAsNonRoot=true in gen kube
  * WSL refactoring
  * kube-play: add support for HostIPC in pod.Spec
  * Allow --device-cgroup-rule to be passed in by docker API</changelog>
  <changelog author="danish.prakash@suse.com" date="1685361600">- Update to version 4.5.1:
  * Release v4.5.1
  * [CI:DOCS] Final release notes for v4.5.1
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * Revert "Resolve symlink path for qemu directory if possible"
  * no need for podman-next rpm test on maint branch
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * network create/update: allow dns servers comma separated
  * machine: fix default connection URL to use 127.0.0.1
  * compat: accept tag in /images/create?fromSrc
  * compat container create: match duplicate mounts correctly
  * machine: qemu only remove connection after confirmation
  * windows: podman save allow the use of stdout
  * remote: exec inspect update exec session status
  * podman-remote logs: handle server error correctly
  * libpod: stop containers with --restart=always
  * Do not include image annotations when building spec
  * [v4.5] system tests: fix race in kube-play read-only
  * api: fix parsing filters
  * Support systemd optional prefix '-' for devices.
  * *: migrate image registry to registry.k8s.io
  * Makefile: include `release-artifacts` target
  * [CI:BUILD] Packit: Initial Enablement
  * Bump to v4.5.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
</package>
<package pkgid="9a1a2852b9fe625fedeb39941a9a4d5c4bc5ba022b76bf5b1ba50680aed54d9f" name="podman" arch="ppc64le">
  <version epoch="0" ver="4.7.2" rel="150500.3.3.1"/>
  <changelog author="danish.prakash@suse.com" date="1677240000">- Update to version 4.4.2:
  * Bump to v4.4.2
  * Release notes for v4.4.2
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * kube play: only enforce passthrough in Quadlet
  * Emergency fix for man pages: check for broken includes
  * CI: Temporarily disable all AWS EC2-based tasks
  * quadlet system tests: add useful defaults, logging
  * volume,container: chroot to source before exporting content
  * install sigproxy before start/attach
  * Update to c/image 5.24.1
  * events + container inspect test: RHEL fixes
  * Bump to v4.4.2-dev
- Remove patches (merged upstream):
  * volume-container-chroot-to-source-before-exporting-content.patch
- podman.spec: add `crun` requirement for quadlet
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add patch to let quadlet use the default runtime
  Added patch:
  * Quadlet-use-the-default-runtime.patch
  =&gt; Remove dependency on crun</changelog>
  <changelog author="danish.prakash@suse.com" date="1679659200">- Update to version 4.4.3:
  * Bump to v4.4.3
  * Release notes for v4.4.3
  * compat: /auth: parse server address correctly
  * vendor github.com/containers/common@v0.51.1
  * pkginstaller: bump Qemu to version 7.2.0
  * podman machine: Adjust Chrony makestep config
  * [v4.4] fix --health-on-failure=restart in transient unit
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * journald: remove initializeJournal()
  * netavark: only use aardvark ip as nameserver
  * compat API: network create return 409 for duplicate
  * fix "podman logs --since --follow" flake
  * system service --log-level=trace: support hijack
  * podman-mac-helper: exit 1 on error
  * bump golang.org/x/net to v0.8.0
  * Fix package restore
  * Quadlet - use the default runtime
  * Bump to v4.4.3-dev
- Remove patch (merged upstream):
  * Quadlet-use-the-default-runtime.patch
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="danish.prakash@suse.com" date="1680004800">- Update to version 4.4.4:
  * Bump to v4.4.4
  * Release notes for v4.4.4
  * libpod: always use direct mapping
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * Bump to v4.4.4-dev
- spec: Bump required version for libcontainers-common (bsc#1209495)</changelog>
  <changelog author="dcermak@suse.com" date="1681473600">- Don't build against EoL go versions, fixes bsc#1210299</changelog>
  <changelog author="danish.prakash@suse.com" date="1681819200">- Update to version 4.5.0:
  * Release v4.5.0
  * [CI:DOCS] Final release notes for v4.5.0
  * Quadlet - do not set log-driver by default
  * Return title fields as a list
  * Bump to v4.5.0-dev
  * Bump to v4.5.0-RC2
  * Final release notes for v4.5.0-RC2
  * test/e2e: remove unnecessary SkipIfNetavark() calls
  * test/e2e: deduplicated network test
  * docs: update podman-network-create.1
  * network create: add --interface-name
  * test/system/252-quadlet.bats: fix flake
  * Read kube_generate_type from containers.conf
  * Debian setup: workaround for runc /dev/char/10:200 bug
  * pkg/rootless: use catatonit from /usr/libexec/podman
  * rootless: make sure we only use a single pause process
  * Use atomic config writing strategy for podman machine config files
  * Add remaining release notes for v4.5.0-RC2
  * GHA: Use version instead of SHA for actions
  * chore(deps): update dependency containers/automation_images to v20230405
  * build: pass env by reference
  * test: retrofit error message
  * test/system: expect 12 char for short id
  * vendor: bump containers/(storage, common, buildah, image)
  * [skip-ci] Update actions/upload-artifact action to v3
  * [skip-ci] Update actions/stale action to v8
  * [skip-ci] Update actions/setup-go action to v4
  * [skip-ci] Update github/issue-labeler action to v2.6
  * Fix up codespell errors
  * Capitalize all uid,gid and id words that are not options in docs
  * build(deps): bump golang.org/x/tools from 0.7.0 to 0.8.0 in /test/tools
  * Properly remove the service container during kube down
  * quadlet: add `UserNS` option key
  * [CI:DOCS] Release notes for 4.5.0 Part 1
  * "podman pull by digest and list --all" test: untag instead of rmi
  * build(deps): bump golang.org/x/text from 0.8.0 to 0.9.0
  * Add renovate.json configuration
  * CI: postbuild step: skip under nightly treadmill
  * The `--ulimit` option accepts the name with an `RLIMIT_` prefix both upper and lower case
  * test/e2e: use custom network config dir where needed
  * chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml`
  * update completion scripts for cobra v1.7.0
  * libpod.storageService.CreateContainerStorage(): retrieve ID maps
  * Fix invalid pod name and hostname during kube generate
  * e2e tests: fix racy flakes
  * Cirrus: Enable labeling of EC2 VMs
  * Cirrus: Fix aarch64 clone_script 404 errors
  * e2e: GinkgoParallelNode() -&gt; ...Process()
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
  * [CI:DOCS] --creds and registries
  * Copr: fix build deps for /usr/bin/envsubst
  * Don't error when removing non-existant env vars
  * e2e: healthcheck on stopped container: fix flake
  * test/apiv2/80-kube.at
  * test/apiv2/80-kube.at
  * system service: do not close Body
  * rm `hack/release.sh`
  * build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6
  * add `quadlet -version` flag
  * add version/rawversion package
  * quadlet: use `Flag` suffix for variables
  * quadlet: implement `Tmpfs` option
  * Bump to v4.5.0-dev
  * Bump to 4.5.0-rc1
  * Update release notes from 4.4 branch
  * rootless netns: recover from invalid netns
  * System tests: unverbosify a flake log
  * Add support for secret exists
  * Fix Win install task failures with large PR bodies
  * docs: add `starting` to `HealthCheckResults.Status`
  * Add support for cgroup_config from containers.conf
  * libpod: mount safely subpaths
  * Support Deployment generation with kube generate
  * Use secret.items to create volume mounts if present
  * [CI:DOCS] fix typo in --systemd option
  * rootless: drop preexec hook error message
  * Edit the docker wrapper to use the install prefix
  * Update podman-for-windows.md
  * Quadlet: RemapUsers documentation fixes
  * speed up image listing
  * vendor containers/common@e27c30ee9b1b
  * fix volume-plugin-test flake
  * Document building Podman remote on Windows hosts
  * test/e2e: gpg keep stdout/err attached
  * auto-update: stop+start instead of restart sytemd units
  * [CI:DOCS] Improve basic tutorial
  * Update docs/source/markdown/podman-network.1.md
  * Add debug to --wait test
  * fix slirp4netns resolv.conf ip with a userns
  * Quadlet: add support for keep-id with mapping values
  * Quadlet E2E test - run quadlet as user generator
  * sqlite: do not `Ping()` after connecting
  * Quadlet - treat paths starting with systemd specifiers as absolute
  * Update docs/source/markdown/podman-kube-play.1.md.in
  * system tests: use CONTAINERS_CONF_OVERRIDE
  * implement podman machine set for hyperv
  * [CI:DOCS] Add network subnets info to network man page
  * CI: retry the golangci install
  * system tests: fix racey sdnotify test
  * hyperv: lookup machine on local filesystem first
  * fix os.IsNotExist() CI check
  * Ensure that SQLite state handles name-ID collisions
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * build(deps): bump github.com/onsi/gomega from 1.27.4 to 1.27.5
  * Fix a race around SQLite DB config validation
  * add CONTAINERS_CONF_OVERRIDE
  * vendor containers/common@main
  * docs: minor grammar fix in `--volume` description
  * sqlite: do not use shared cache
  * test: podman checkpoint/restore the latest container
  * stats compat API: return "id" lowercase
  * Run make codespell
  * Drop SQLite max connections
  * sqlite: set connection attributes on open
  * Fix database locked errors with SQLite
  * quadlet tests: skip on RHEL8 rootless
  * Kube Play Doc: Document the support for K8S Secret
  * New ulimit test: bump up minimum nfiles
  * logformatter: hide --db-backend, and friendlyize quadlet
  * Quadlet - add support for relative path in Volume key in .container file
  * Add service ctr cleanup to PlayKubeDown
  * fix --health-on-failure=restart in transient unit
  * Quadlet Doc: Suggest the kill operation for HealthOnFailure
  * Quadlet - Add support for health checks configuration in .container files
  * Makefile: allow specifying /lib dir location
  * Fix option --opts -&gt; --opt
  * basic hypverv machine implementation
  * Fix SQLite DB schema migration code
  * Add support for oom_score_adj value from containers.conf
  * Use default_ulimits field in containers.conf
  * CI: test and confirm DESIRED_DATABASE
  * build(deps): bump github.com/openshift/imagebuilder
  * logformatter: futureproof output filename
  * Vendor in latest containers/(storage, common, image)
  * build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.30.0
  * test/system/255-auto-update.bats: add debug logs
  * Revert "Revert "pasta: Use two connections instead of three in TCP range forward tests""
  * Add information for secret inspect
  * Add format to podman volume ls
  * Add format to podman volume inspect
  * Add format to podman secret ls
  * Add format to podman system df
  * Add format to podman machine info
  * Add format table to podman image inspect man page
  * Cirrus: Store podman machine benchmark data
  * Update Cirrus display names, and fix get-ci-vm script
  * Ensure SQLite places uses the runroot in transient mode
  * Fix various integration test issues with SQLite state
  * Remove test for pod/container name global uniqueness
  * Improve handling of existing container names in SQLite
  * Add SQLite job to CI
  * buildah treadmill: also run rootless tests
  * build(deps): bump github.com/vbatts/git-validation in /test/tools
  * auto update: return restart error
  * fix: Document removing anonymous volumes
  * events: no duplicates when streaming during a log rotation
  * Add search --cert-dir, --creds
  * podman-mac-helper: exit 1 on error
  * system service --log-level=trace: support hijack
  * test/system: fix wait_for_port() to wait for bind
  * cgroupns: private cgroupns on cgroupv1 breaks --systemd
  * libpod: remove error stutter
  * podman events: unhide --stream
  * test/system/255-auto-update.bats: multiple services
  * 255-auto-update.bats: turn off rollback where needed
  * Use append() to add elements to a slice
  * Revert "pasta: Use two connections instead of three in TCP range forward tests"
  * Support running nested SELinux container separation
  * bud tests: rootless remote: use correct socket path
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.2.1 to 8.3.0
  * compat: /auth: parse server address correctly
  * docs: fix cmd `set DOCKER_HOST` suggestion
  * test: reenable idmap test
  * Must use mountlabel when creating builtin volumes
  * podman.spec.rpkg: distro conditionals for modulesloaddir
  * build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0
  * podman inspect list network when using --net=host or none
  * pasta: Re-enable "Local forwarder, IPv4" test, accept NXDOMAIN as response
  * build(deps): bump golang.org/x/tools from 0.6.0 to 0.7.0 in /test/tools
  * CI: Switch to c20230307t192532z-f37f36d12 images
  * Cirrus: Run system &amp; integration tests in parallel
  * Update checkpointctl v0.1.0
  * Quadlet: add support for setting --ip and --ip6
  * build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0
  * build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0
  * libpod: avoid nil pointer dereference in (*Container).Cleanup
  * [CI:DOCS] Add image not found info to troubleshooting
  * cmd: do not require userns for "version"
  * cmd: drop special handling for "scp"
  * cmd: clarify meaning of ParentNSRequired
  * Fix package restore
  * [CI:DOCS] Fix docs/version-check always requesting updates
  * sqlite: add a hidden --db-backend flag
  * fix: update the default machine value when the previously set default machine is deleted
  * podman machine: Adjust Chrony makestep config
  * sqlite: add container short ID to network aliases
  * sqlite: remove dead code
  * sqlite: addContainer: add named volume only once
  * sqlite: implement RewriteVolumeConfig
  * sqlite: LookupVolume: fix partial name match
  * sqlite: LookupVolume: wrap error
  * sqlite: fix type rewriting container config
  * sqlite: return correct error on pod-name conflict
  * sqlite: RewritePodConfig: update error message
  * test/system/255-auto-update.bats: wait 10 for update to finish
  * auto-update test: wait for service to be ready
  * Vendor in latest containers/(common, storage, image)
  * play kube: Add --wait option
  * Cirrus: Fix git config permission denied
  * Quadlet: Add support for the Mount key in .container files
  * build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2
  * fix "podman logs --since --follow" flake
  * Clarify that replicas are ignored in kubernetes deployment
  * Revert "Skip all pasta tests"
  * CI: Switch to c20230223t153813z-f37f36d12 images
  * Fix user socket path
  * pkginstaller: bump Qemu to version 7.2.0
  * Cirrus: Fix bud tests failing to apply patches
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2
  * build(deps): bump github.com/coreos/stream-metadata-go
  * Vendor in latest containers/storage
  * buildah-bud tests: don't sudo when rootless is desired
  * Temporarily disable version-check
  * CI: new rootless buildah-bud tests (cron only)
  * sqlite: fix volume lookups with partial names
  * sqlite: fix container lookups with partial IDs
  * sqlite: fix LookupPod
  * sqlite: fix pod create/rm
  * sqlite: LookupContainer: update error message
  * sqlite: AddContainerExitCode: allow to replace
  * system: add warning when running rootless on cgroupv1
  * sqlite: fix AllContainers with state
  * sqlite: fix "UPDATE TABLE" typos
  * sqlite: SaveVolume: fix syntax error updating the volumes table
  * sqlite: exit code: allow -1
  * sqlite: fix typo when removing exec sessions
  * sqlite: AllContainers: fix inner join
  * sqlite: move migration after table creation
  * sqlite: implement pod methods
  * Quadlet - use the default runtime
  * docs: context is not optional for build
  * Fix an incorrect comment on NewSqliteState
  * Add support for containers.conf database setting
  * Add support for volume operations to SQLite state
  * Implement exec session handling in SQL database
  * Various fixes from code review
  * Remove `--namespace` flag from Podman root
  * Get E2E tests to pass
  * Implement network disconnect for SQLite state
  * Implement Network Connect/Modify for SQLite state
  * Fix various lint issues
  * Some further work on SQLite state
  * Remove concept of Namespaces from BoltDB
  * Add initial SQLite-backed state implementation
  * Cirrus: Support runc testing on debian VMs
  * Skip all pasta tests
  * Skip buildah-bud test
  * Skip buildx test with VFS podman storage driver
  * Skip 'podman kube --network' test for rootless CGv1
  * Skip tests which fail with CGv1 &amp; runc
  * Skip rootless CGv1 quadlet tests due to issue
  * Makefile: Define SHELL
  * Machine refactor for QEMU/AppleHV
  * machine refactoring preparations for hyperv
  * [CI:BUILD] spec.rpkg: trim dependency list
  * Logs follow-until tests: loosen checks
  * [CI:DOCS] Windows/Mac docs link update
  * Doc update for docker network options via CLI
  * compat API: network create return 409 for duplicate
  * Apply suggestions to man page
  * vendor c/common@852ca05a1fbb
  * Quadlet: Add support for LogDriver key in container and kube units
  * machine refactoring preparations for hyperv
  * libpod: always use direct mapping
  * netavark: only use aardvark ip as nameserver
  * build(deps): bump github.com/container-orchestrated-devices/container-device-interface
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * make docs: sanity check for broken man pages
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.6 to 8.2.0
  * build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1
  * kube: rm secret on down, print secret on play
  * Fix spacing typo that triggered OCD &amp; indent units in podman-systemd.unit(5)
  * Update remote_client.md
  * [CI:DOCS] Add restriction to option README
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0
  * kube play: only enforce passthrough in Quadlet
  * journald: remove initializeJournal()
  * auto-update: support pods
  * Emergency fix for man pages: check for broken includes
  * System tests: assert(): friendlier failure messages
  * Cirrus: Fix version-check to only run on `main` job
  * CI: Temporarily disable all AWS EC2-based tasks
  * build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18
  * volume,container: chroot to source before exporting content
  * Support sysctl configs via podman kube play
  * [CI:BUILD] copr: podman.spec.rpkg cleanups
  * quadlet system tests: add useful defaults, logging
  * libpod: support relative positions for idmaps
  * Experimental workaround for cdn03.quay.io flake
  * system tests: prevent leading tabs
  * Introduce podman machine os apply
  * create: add support for --group-entry
  * fix != filter in volume prune
  * Allow specification of podman --remote build -f -
  * Quadlet use crun specified in containers.conf
  * build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0
  * Vendor c/image after https://github.com/containers/image/pull/1847
  * Don't set hostPort when generating a service
  * man page --format xref: tighten the autocompletion check
  * add support for limiting tmpfs size for systemd-specific mnts
  * build(deps): bump golang.org/x/text from 0.6.0 to 0.7.0
  * Add ulimit annotation to kube gen &amp; play
  * man page xref: validate displayed man page names
  * quadlet: add ExecStop
  * install sigproxy before start/attach
  * build(deps): bump golang.org/x/tools from 0.5.0 to 0.6.0 in /test/tools
  * Fix typos
  * Cirrus: Make benchmarks .env file easier to load
  * Cirrus: Omit functions in env. file
  * kube play: set service container as main PID when possible
  * Fix typos. Improve language.
  * events + container inspect test: RHEL fixes
  * Add ctrName to network alias during kube play
  * Run codespell on codebase
  * podman image scp: added identity for ssh.Exec
  * [CI:DOCS] Clarify nomap constrains
  * [CI:DOCS] man-page checker: include --format (Go templates)
  * Vendor c/image after https://github.com/containers/image/pull/1816
  * [CI:DOCS] Cleanup some man pages to display options with line breaks
  * [CI:DOCS] Add tables to podman-systemd.unit man page
  * github: remove prefix from bugs/features
  * Quadlet: Add support for the Secret key in Container group
  * [CI:DOCS] OWNERS: add @ygalblum and @alexlarsson
  * build(deps): bump golang.org/x/term from 0.4.0 to 0.5.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.1.6
  * Sort quadlet keys to make it easier to read
  * e2e: fix some tests on remote
  * kube play: do not teardown unconditionally on error
  * Fix typos in comments
  * Resolve symlink path for qemu directory if possible
  * #17363 Fix contradicting documentation podman-commit
  * Fix a potential UID/GID collision in unit tests
  * golangci-lint: show all errors at once
  * update golangci-lint to version 1.51.1
  * [CI:DOCS] events: document journald identifiers
  * Quadlet: exit 0 when there are no files to process
  * network ls: handle removed container
  * e2e: adapt play kube test on remote rootless
  * docs/podman-systemd.unit: Explicitely mention network &amp; kube units
  * docs/podman-systemd.unit: Update example to work out of the box
  * [CI:BUILD] Cirrus: Fix GraphQL ownerRepository:null error
  * Add missing return after errors
  * Revert "Cirrus: Emergency fix to un-stuck PRs"
  * pasta: Fix ICMPv6 Echo test, skip it for the moment
  * pasta: Fix ICMP Echo Request (IPv4) test
  * pasta: Use two connections instead of three in TCP range forward tests
  * Add SELinux label types support to quadlet
  * Add quadlet support for rootfs= containers
  * Cirrus: Emergency fix to un-stuck PRs
  * Move clean-binaries before podman-remote in podman-remote-docs target
  * oci: bind mount /sys with --userns=(auto|pod:)
  * Cleanup podman-systemd.unit file
  * Install podman-systemd.unit  man page, make quadlet discoverable
  * libpod: allow userns=keep-id for root
  * system-reset: use CleanCacheMount to clear build cache
  * vendor: bump buildah to v1.29.1-0.20230201192322-e56eb25575c7
  * system tests: fix noexistent labels test in the remote
  * Expose Podman named pipe in Inspect output
  * libpod: support idmap for --rootfs
  * test: adapt test to work on cgroupv1
  * Bump to v4.5.0-dev
  * Update main to reflect v4.4.0 release
  * Update from /github.com/vbauerster/mpb/v7 to /v8
  * hack/perf: cleanup after benchmarks
  * hack/perf/bz-2162111.sh: use custom network
  * Update bug_report.yaml
  * Handle filetype field in kubernetes.yaml files
  * hack/perf/bz-2162111.sh: measure stop
  * make hack/markdown-preprocess parallel-safe
  * system tests: fix volume exec/noexec test
  * system tests: minor fix for RHEL8 incompatibility
  * Cirrus: Use versionable IMAGE_SUFFIX
  * utils: new conversion method
  * libpod: use GraphRoot for overlay upper dir
  * vendor: update containers/storage
  * Do not mount /dev/tty into rootless containers
  * build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7
  * e2e: fix run_staticip_test about no_proxy
  * docs: specify order preference for FROM
  * Fixes port collision issue on use of --publish-all
  * Support for Windows paths in the source position of the volume mounts
  * e2e tests: fix incorrect os.User.Name
  * Log data that we failed to unmarshal
  * [CI:DOCS] hack/perf: add script for BZ 216111
  * container rm: save once for exec removal and state change
  * [DOCS:CI] podman-events: document verbose create events
  * e2e: Avoid hard-coding included in quadlet test
  * e2e: Avoid hard-coding ImageCacheDir
  * Making gvproxy.exe optional for building Windows installer
  * Add gvproxy to Windows packages
  * Add comment to clarify error handling intention
  * fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
  * Fix usage of absolute windows paths with --image-path
  * Match VT device paths to be blocked from mounting exactly
  * Fix default handling of pids-limit
  * Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
  * journald: podman logs only show logs for current user
  * journald: podman events only show events for current user
  * e2e: Remove the cache with "podman unshare rm" when a rootless user
  * Clean up more language for inclusiveness
  * e2e: Remove some directories at SynchronizedAfterSuite
  * fix: don't output "ago" when container is currently up and running
  * fix: running check error when podman is default in wsl
  * fix CI: test fail due to merge
  * Bump Bulidah to v1.29.0
  * e2e: reduce dependency on /tmp for e2e tests
  * Bump cirrus image with easier dependency management
  * quadlet: Add device support for .volume files
  * remote,build: error if containerignore is symlink
  * DB: make loading container states optional
  * ps: do not sync container
  * Set runAsNonRoot=true in gen kube
  * WSL refactoring
  * kube-play: add support for HostIPC in pod.Spec
  * Allow --device-cgroup-rule to be passed in by docker API</changelog>
  <changelog author="danish.prakash@suse.com" date="1685361600">- Update to version 4.5.1:
  * Release v4.5.1
  * [CI:DOCS] Final release notes for v4.5.1
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * Revert "Resolve symlink path for qemu directory if possible"
  * no need for podman-next rpm test on maint branch
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * network create/update: allow dns servers comma separated
  * machine: fix default connection URL to use 127.0.0.1
  * compat: accept tag in /images/create?fromSrc
  * compat container create: match duplicate mounts correctly
  * machine: qemu only remove connection after confirmation
  * windows: podman save allow the use of stdout
  * remote: exec inspect update exec session status
  * podman-remote logs: handle server error correctly
  * libpod: stop containers with --restart=always
  * Do not include image annotations when building spec
  * [v4.5] system tests: fix race in kube-play read-only
  * api: fix parsing filters
  * Support systemd optional prefix '-' for devices.
  * *: migrate image registry to registry.k8s.io
  * Makefile: include `release-artifacts` target
  * [CI:BUILD] Packit: Initial Enablement
  * Bump to v4.5.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
</package>
<package pkgid="e957183df8526e4020684e8728bc61065ec7c1b2d66a2ca91825aaa901fa190e" name="podman" arch="s390x">
  <version epoch="0" ver="4.7.2" rel="150500.3.3.1"/>
  <changelog author="danish.prakash@suse.com" date="1677240000">- Update to version 4.4.2:
  * Bump to v4.4.2
  * Release notes for v4.4.2
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * kube play: only enforce passthrough in Quadlet
  * Emergency fix for man pages: check for broken includes
  * CI: Temporarily disable all AWS EC2-based tasks
  * quadlet system tests: add useful defaults, logging
  * volume,container: chroot to source before exporting content
  * install sigproxy before start/attach
  * Update to c/image 5.24.1
  * events + container inspect test: RHEL fixes
  * Bump to v4.4.2-dev
- Remove patches (merged upstream):
  * volume-container-chroot-to-source-before-exporting-content.patch
- podman.spec: add `crun` requirement for quadlet
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add patch to let quadlet use the default runtime
  Added patch:
  * Quadlet-use-the-default-runtime.patch
  =&gt; Remove dependency on crun</changelog>
  <changelog author="danish.prakash@suse.com" date="1679659200">- Update to version 4.4.3:
  * Bump to v4.4.3
  * Release notes for v4.4.3
  * compat: /auth: parse server address correctly
  * vendor github.com/containers/common@v0.51.1
  * pkginstaller: bump Qemu to version 7.2.0
  * podman machine: Adjust Chrony makestep config
  * [v4.4] fix --health-on-failure=restart in transient unit
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * journald: remove initializeJournal()
  * netavark: only use aardvark ip as nameserver
  * compat API: network create return 409 for duplicate
  * fix "podman logs --since --follow" flake
  * system service --log-level=trace: support hijack
  * podman-mac-helper: exit 1 on error
  * bump golang.org/x/net to v0.8.0
  * Fix package restore
  * Quadlet - use the default runtime
  * Bump to v4.4.3-dev
- Remove patch (merged upstream):
  * Quadlet-use-the-default-runtime.patch
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="danish.prakash@suse.com" date="1680004800">- Update to version 4.4.4:
  * Bump to v4.4.4
  * Release notes for v4.4.4
  * libpod: always use direct mapping
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * Bump to v4.4.4-dev
- spec: Bump required version for libcontainers-common (bsc#1209495)</changelog>
  <changelog author="dcermak@suse.com" date="1681473600">- Don't build against EoL go versions, fixes bsc#1210299</changelog>
  <changelog author="danish.prakash@suse.com" date="1681819200">- Update to version 4.5.0:
  * Release v4.5.0
  * [CI:DOCS] Final release notes for v4.5.0
  * Quadlet - do not set log-driver by default
  * Return title fields as a list
  * Bump to v4.5.0-dev
  * Bump to v4.5.0-RC2
  * Final release notes for v4.5.0-RC2
  * test/e2e: remove unnecessary SkipIfNetavark() calls
  * test/e2e: deduplicated network test
  * docs: update podman-network-create.1
  * network create: add --interface-name
  * test/system/252-quadlet.bats: fix flake
  * Read kube_generate_type from containers.conf
  * Debian setup: workaround for runc /dev/char/10:200 bug
  * pkg/rootless: use catatonit from /usr/libexec/podman
  * rootless: make sure we only use a single pause process
  * Use atomic config writing strategy for podman machine config files
  * Add remaining release notes for v4.5.0-RC2
  * GHA: Use version instead of SHA for actions
  * chore(deps): update dependency containers/automation_images to v20230405
  * build: pass env by reference
  * test: retrofit error message
  * test/system: expect 12 char for short id
  * vendor: bump containers/(storage, common, buildah, image)
  * [skip-ci] Update actions/upload-artifact action to v3
  * [skip-ci] Update actions/stale action to v8
  * [skip-ci] Update actions/setup-go action to v4
  * [skip-ci] Update github/issue-labeler action to v2.6
  * Fix up codespell errors
  * Capitalize all uid,gid and id words that are not options in docs
  * build(deps): bump golang.org/x/tools from 0.7.0 to 0.8.0 in /test/tools
  * Properly remove the service container during kube down
  * quadlet: add `UserNS` option key
  * [CI:DOCS] Release notes for 4.5.0 Part 1
  * "podman pull by digest and list --all" test: untag instead of rmi
  * build(deps): bump golang.org/x/text from 0.8.0 to 0.9.0
  * Add renovate.json configuration
  * CI: postbuild step: skip under nightly treadmill
  * The `--ulimit` option accepts the name with an `RLIMIT_` prefix both upper and lower case
  * test/e2e: use custom network config dir where needed
  * chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml`
  * update completion scripts for cobra v1.7.0
  * libpod.storageService.CreateContainerStorage(): retrieve ID maps
  * Fix invalid pod name and hostname during kube generate
  * e2e tests: fix racy flakes
  * Cirrus: Enable labeling of EC2 VMs
  * Cirrus: Fix aarch64 clone_script 404 errors
  * e2e: GinkgoParallelNode() -&gt; ...Process()
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
  * [CI:DOCS] --creds and registries
  * Copr: fix build deps for /usr/bin/envsubst
  * Don't error when removing non-existant env vars
  * e2e: healthcheck on stopped container: fix flake
  * test/apiv2/80-kube.at
  * test/apiv2/80-kube.at
  * system service: do not close Body
  * rm `hack/release.sh`
  * build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6
  * add `quadlet -version` flag
  * add version/rawversion package
  * quadlet: use `Flag` suffix for variables
  * quadlet: implement `Tmpfs` option
  * Bump to v4.5.0-dev
  * Bump to 4.5.0-rc1
  * Update release notes from 4.4 branch
  * rootless netns: recover from invalid netns
  * System tests: unverbosify a flake log
  * Add support for secret exists
  * Fix Win install task failures with large PR bodies
  * docs: add `starting` to `HealthCheckResults.Status`
  * Add support for cgroup_config from containers.conf
  * libpod: mount safely subpaths
  * Support Deployment generation with kube generate
  * Use secret.items to create volume mounts if present
  * [CI:DOCS] fix typo in --systemd option
  * rootless: drop preexec hook error message
  * Edit the docker wrapper to use the install prefix
  * Update podman-for-windows.md
  * Quadlet: RemapUsers documentation fixes
  * speed up image listing
  * vendor containers/common@e27c30ee9b1b
  * fix volume-plugin-test flake
  * Document building Podman remote on Windows hosts
  * test/e2e: gpg keep stdout/err attached
  * auto-update: stop+start instead of restart sytemd units
  * [CI:DOCS] Improve basic tutorial
  * Update docs/source/markdown/podman-network.1.md
  * Add debug to --wait test
  * fix slirp4netns resolv.conf ip with a userns
  * Quadlet: add support for keep-id with mapping values
  * Quadlet E2E test - run quadlet as user generator
  * sqlite: do not `Ping()` after connecting
  * Quadlet - treat paths starting with systemd specifiers as absolute
  * Update docs/source/markdown/podman-kube-play.1.md.in
  * system tests: use CONTAINERS_CONF_OVERRIDE
  * implement podman machine set for hyperv
  * [CI:DOCS] Add network subnets info to network man page
  * CI: retry the golangci install
  * system tests: fix racey sdnotify test
  * hyperv: lookup machine on local filesystem first
  * fix os.IsNotExist() CI check
  * Ensure that SQLite state handles name-ID collisions
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * build(deps): bump github.com/onsi/gomega from 1.27.4 to 1.27.5
  * Fix a race around SQLite DB config validation
  * add CONTAINERS_CONF_OVERRIDE
  * vendor containers/common@main
  * docs: minor grammar fix in `--volume` description
  * sqlite: do not use shared cache
  * test: podman checkpoint/restore the latest container
  * stats compat API: return "id" lowercase
  * Run make codespell
  * Drop SQLite max connections
  * sqlite: set connection attributes on open
  * Fix database locked errors with SQLite
  * quadlet tests: skip on RHEL8 rootless
  * Kube Play Doc: Document the support for K8S Secret
  * New ulimit test: bump up minimum nfiles
  * logformatter: hide --db-backend, and friendlyize quadlet
  * Quadlet - add support for relative path in Volume key in .container file
  * Add service ctr cleanup to PlayKubeDown
  * fix --health-on-failure=restart in transient unit
  * Quadlet Doc: Suggest the kill operation for HealthOnFailure
  * Quadlet - Add support for health checks configuration in .container files
  * Makefile: allow specifying /lib dir location
  * Fix option --opts -&gt; --opt
  * basic hypverv machine implementation
  * Fix SQLite DB schema migration code
  * Add support for oom_score_adj value from containers.conf
  * Use default_ulimits field in containers.conf
  * CI: test and confirm DESIRED_DATABASE
  * build(deps): bump github.com/openshift/imagebuilder
  * logformatter: futureproof output filename
  * Vendor in latest containers/(storage, common, image)
  * build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.30.0
  * test/system/255-auto-update.bats: add debug logs
  * Revert "Revert "pasta: Use two connections instead of three in TCP range forward tests""
  * Add information for secret inspect
  * Add format to podman volume ls
  * Add format to podman volume inspect
  * Add format to podman secret ls
  * Add format to podman system df
  * Add format to podman machine info
  * Add format table to podman image inspect man page
  * Cirrus: Store podman machine benchmark data
  * Update Cirrus display names, and fix get-ci-vm script
  * Ensure SQLite places uses the runroot in transient mode
  * Fix various integration test issues with SQLite state
  * Remove test for pod/container name global uniqueness
  * Improve handling of existing container names in SQLite
  * Add SQLite job to CI
  * buildah treadmill: also run rootless tests
  * build(deps): bump github.com/vbatts/git-validation in /test/tools
  * auto update: return restart error
  * fix: Document removing anonymous volumes
  * events: no duplicates when streaming during a log rotation
  * Add search --cert-dir, --creds
  * podman-mac-helper: exit 1 on error
  * system service --log-level=trace: support hijack
  * test/system: fix wait_for_port() to wait for bind
  * cgroupns: private cgroupns on cgroupv1 breaks --systemd
  * libpod: remove error stutter
  * podman events: unhide --stream
  * test/system/255-auto-update.bats: multiple services
  * 255-auto-update.bats: turn off rollback where needed
  * Use append() to add elements to a slice
  * Revert "pasta: Use two connections instead of three in TCP range forward tests"
  * Support running nested SELinux container separation
  * bud tests: rootless remote: use correct socket path
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.2.1 to 8.3.0
  * compat: /auth: parse server address correctly
  * docs: fix cmd `set DOCKER_HOST` suggestion
  * test: reenable idmap test
  * Must use mountlabel when creating builtin volumes
  * podman.spec.rpkg: distro conditionals for modulesloaddir
  * build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0
  * podman inspect list network when using --net=host or none
  * pasta: Re-enable "Local forwarder, IPv4" test, accept NXDOMAIN as response
  * build(deps): bump golang.org/x/tools from 0.6.0 to 0.7.0 in /test/tools
  * CI: Switch to c20230307t192532z-f37f36d12 images
  * Cirrus: Run system &amp; integration tests in parallel
  * Update checkpointctl v0.1.0
  * Quadlet: add support for setting --ip and --ip6
  * build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0
  * build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0
  * libpod: avoid nil pointer dereference in (*Container).Cleanup
  * [CI:DOCS] Add image not found info to troubleshooting
  * cmd: do not require userns for "version"
  * cmd: drop special handling for "scp"
  * cmd: clarify meaning of ParentNSRequired
  * Fix package restore
  * [CI:DOCS] Fix docs/version-check always requesting updates
  * sqlite: add a hidden --db-backend flag
  * fix: update the default machine value when the previously set default machine is deleted
  * podman machine: Adjust Chrony makestep config
  * sqlite: add container short ID to network aliases
  * sqlite: remove dead code
  * sqlite: addContainer: add named volume only once
  * sqlite: implement RewriteVolumeConfig
  * sqlite: LookupVolume: fix partial name match
  * sqlite: LookupVolume: wrap error
  * sqlite: fix type rewriting container config
  * sqlite: return correct error on pod-name conflict
  * sqlite: RewritePodConfig: update error message
  * test/system/255-auto-update.bats: wait 10 for update to finish
  * auto-update test: wait for service to be ready
  * Vendor in latest containers/(common, storage, image)
  * play kube: Add --wait option
  * Cirrus: Fix git config permission denied
  * Quadlet: Add support for the Mount key in .container files
  * build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2
  * fix "podman logs --since --follow" flake
  * Clarify that replicas are ignored in kubernetes deployment
  * Revert "Skip all pasta tests"
  * CI: Switch to c20230223t153813z-f37f36d12 images
  * Fix user socket path
  * pkginstaller: bump Qemu to version 7.2.0
  * Cirrus: Fix bud tests failing to apply patches
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2
  * build(deps): bump github.com/coreos/stream-metadata-go
  * Vendor in latest containers/storage
  * buildah-bud tests: don't sudo when rootless is desired
  * Temporarily disable version-check
  * CI: new rootless buildah-bud tests (cron only)
  * sqlite: fix volume lookups with partial names
  * sqlite: fix container lookups with partial IDs
  * sqlite: fix LookupPod
  * sqlite: fix pod create/rm
  * sqlite: LookupContainer: update error message
  * sqlite: AddContainerExitCode: allow to replace
  * system: add warning when running rootless on cgroupv1
  * sqlite: fix AllContainers with state
  * sqlite: fix "UPDATE TABLE" typos
  * sqlite: SaveVolume: fix syntax error updating the volumes table
  * sqlite: exit code: allow -1
  * sqlite: fix typo when removing exec sessions
  * sqlite: AllContainers: fix inner join
  * sqlite: move migration after table creation
  * sqlite: implement pod methods
  * Quadlet - use the default runtime
  * docs: context is not optional for build
  * Fix an incorrect comment on NewSqliteState
  * Add support for containers.conf database setting
  * Add support for volume operations to SQLite state
  * Implement exec session handling in SQL database
  * Various fixes from code review
  * Remove `--namespace` flag from Podman root
  * Get E2E tests to pass
  * Implement network disconnect for SQLite state
  * Implement Network Connect/Modify for SQLite state
  * Fix various lint issues
  * Some further work on SQLite state
  * Remove concept of Namespaces from BoltDB
  * Add initial SQLite-backed state implementation
  * Cirrus: Support runc testing on debian VMs
  * Skip all pasta tests
  * Skip buildah-bud test
  * Skip buildx test with VFS podman storage driver
  * Skip 'podman kube --network' test for rootless CGv1
  * Skip tests which fail with CGv1 &amp; runc
  * Skip rootless CGv1 quadlet tests due to issue
  * Makefile: Define SHELL
  * Machine refactor for QEMU/AppleHV
  * machine refactoring preparations for hyperv
  * [CI:BUILD] spec.rpkg: trim dependency list
  * Logs follow-until tests: loosen checks
  * [CI:DOCS] Windows/Mac docs link update
  * Doc update for docker network options via CLI
  * compat API: network create return 409 for duplicate
  * Apply suggestions to man page
  * vendor c/common@852ca05a1fbb
  * Quadlet: Add support for LogDriver key in container and kube units
  * machine refactoring preparations for hyperv
  * libpod: always use direct mapping
  * netavark: only use aardvark ip as nameserver
  * build(deps): bump github.com/container-orchestrated-devices/container-device-interface
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * make docs: sanity check for broken man pages
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.6 to 8.2.0
  * build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1
  * kube: rm secret on down, print secret on play
  * Fix spacing typo that triggered OCD &amp; indent units in podman-systemd.unit(5)
  * Update remote_client.md
  * [CI:DOCS] Add restriction to option README
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0
  * kube play: only enforce passthrough in Quadlet
  * journald: remove initializeJournal()
  * auto-update: support pods
  * Emergency fix for man pages: check for broken includes
  * System tests: assert(): friendlier failure messages
  * Cirrus: Fix version-check to only run on `main` job
  * CI: Temporarily disable all AWS EC2-based tasks
  * build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18
  * volume,container: chroot to source before exporting content
  * Support sysctl configs via podman kube play
  * [CI:BUILD] copr: podman.spec.rpkg cleanups
  * quadlet system tests: add useful defaults, logging
  * libpod: support relative positions for idmaps
  * Experimental workaround for cdn03.quay.io flake
  * system tests: prevent leading tabs
  * Introduce podman machine os apply
  * create: add support for --group-entry
  * fix != filter in volume prune
  * Allow specification of podman --remote build -f -
  * Quadlet use crun specified in containers.conf
  * build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0
  * Vendor c/image after https://github.com/containers/image/pull/1847
  * Don't set hostPort when generating a service
  * man page --format xref: tighten the autocompletion check
  * add support for limiting tmpfs size for systemd-specific mnts
  * build(deps): bump golang.org/x/text from 0.6.0 to 0.7.0
  * Add ulimit annotation to kube gen &amp; play
  * man page xref: validate displayed man page names
  * quadlet: add ExecStop
  * install sigproxy before start/attach
  * build(deps): bump golang.org/x/tools from 0.5.0 to 0.6.0 in /test/tools
  * Fix typos
  * Cirrus: Make benchmarks .env file easier to load
  * Cirrus: Omit functions in env. file
  * kube play: set service container as main PID when possible
  * Fix typos. Improve language.
  * events + container inspect test: RHEL fixes
  * Add ctrName to network alias during kube play
  * Run codespell on codebase
  * podman image scp: added identity for ssh.Exec
  * [CI:DOCS] Clarify nomap constrains
  * [CI:DOCS] man-page checker: include --format (Go templates)
  * Vendor c/image after https://github.com/containers/image/pull/1816
  * [CI:DOCS] Cleanup some man pages to display options with line breaks
  * [CI:DOCS] Add tables to podman-systemd.unit man page
  * github: remove prefix from bugs/features
  * Quadlet: Add support for the Secret key in Container group
  * [CI:DOCS] OWNERS: add @ygalblum and @alexlarsson
  * build(deps): bump golang.org/x/term from 0.4.0 to 0.5.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.1.6
  * Sort quadlet keys to make it easier to read
  * e2e: fix some tests on remote
  * kube play: do not teardown unconditionally on error
  * Fix typos in comments
  * Resolve symlink path for qemu directory if possible
  * #17363 Fix contradicting documentation podman-commit
  * Fix a potential UID/GID collision in unit tests
  * golangci-lint: show all errors at once
  * update golangci-lint to version 1.51.1
  * [CI:DOCS] events: document journald identifiers
  * Quadlet: exit 0 when there are no files to process
  * network ls: handle removed container
  * e2e: adapt play kube test on remote rootless
  * docs/podman-systemd.unit: Explicitely mention network &amp; kube units
  * docs/podman-systemd.unit: Update example to work out of the box
  * [CI:BUILD] Cirrus: Fix GraphQL ownerRepository:null error
  * Add missing return after errors
  * Revert "Cirrus: Emergency fix to un-stuck PRs"
  * pasta: Fix ICMPv6 Echo test, skip it for the moment
  * pasta: Fix ICMP Echo Request (IPv4) test
  * pasta: Use two connections instead of three in TCP range forward tests
  * Add SELinux label types support to quadlet
  * Add quadlet support for rootfs= containers
  * Cirrus: Emergency fix to un-stuck PRs
  * Move clean-binaries before podman-remote in podman-remote-docs target
  * oci: bind mount /sys with --userns=(auto|pod:)
  * Cleanup podman-systemd.unit file
  * Install podman-systemd.unit  man page, make quadlet discoverable
  * libpod: allow userns=keep-id for root
  * system-reset: use CleanCacheMount to clear build cache
  * vendor: bump buildah to v1.29.1-0.20230201192322-e56eb25575c7
  * system tests: fix noexistent labels test in the remote
  * Expose Podman named pipe in Inspect output
  * libpod: support idmap for --rootfs
  * test: adapt test to work on cgroupv1
  * Bump to v4.5.0-dev
  * Update main to reflect v4.4.0 release
  * Update from /github.com/vbauerster/mpb/v7 to /v8
  * hack/perf: cleanup after benchmarks
  * hack/perf/bz-2162111.sh: use custom network
  * Update bug_report.yaml
  * Handle filetype field in kubernetes.yaml files
  * hack/perf/bz-2162111.sh: measure stop
  * make hack/markdown-preprocess parallel-safe
  * system tests: fix volume exec/noexec test
  * system tests: minor fix for RHEL8 incompatibility
  * Cirrus: Use versionable IMAGE_SUFFIX
  * utils: new conversion method
  * libpod: use GraphRoot for overlay upper dir
  * vendor: update containers/storage
  * Do not mount /dev/tty into rootless containers
  * build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7
  * e2e: fix run_staticip_test about no_proxy
  * docs: specify order preference for FROM
  * Fixes port collision issue on use of --publish-all
  * Support for Windows paths in the source position of the volume mounts
  * e2e tests: fix incorrect os.User.Name
  * Log data that we failed to unmarshal
  * [CI:DOCS] hack/perf: add script for BZ 216111
  * container rm: save once for exec removal and state change
  * [DOCS:CI] podman-events: document verbose create events
  * e2e: Avoid hard-coding included in quadlet test
  * e2e: Avoid hard-coding ImageCacheDir
  * Making gvproxy.exe optional for building Windows installer
  * Add gvproxy to Windows packages
  * Add comment to clarify error handling intention
  * fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
  * Fix usage of absolute windows paths with --image-path
  * Match VT device paths to be blocked from mounting exactly
  * Fix default handling of pids-limit
  * Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
  * journald: podman logs only show logs for current user
  * journald: podman events only show events for current user
  * e2e: Remove the cache with "podman unshare rm" when a rootless user
  * Clean up more language for inclusiveness
  * e2e: Remove some directories at SynchronizedAfterSuite
  * fix: don't output "ago" when container is currently up and running
  * fix: running check error when podman is default in wsl
  * fix CI: test fail due to merge
  * Bump Bulidah to v1.29.0
  * e2e: reduce dependency on /tmp for e2e tests
  * Bump cirrus image with easier dependency management
  * quadlet: Add device support for .volume files
  * remote,build: error if containerignore is symlink
  * DB: make loading container states optional
  * ps: do not sync container
  * Set runAsNonRoot=true in gen kube
  * WSL refactoring
  * kube-play: add support for HostIPC in pod.Spec
  * Allow --device-cgroup-rule to be passed in by docker API</changelog>
  <changelog author="danish.prakash@suse.com" date="1685361600">- Update to version 4.5.1:
  * Release v4.5.1
  * [CI:DOCS] Final release notes for v4.5.1
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * Revert "Resolve symlink path for qemu directory if possible"
  * no need for podman-next rpm test on maint branch
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * network create/update: allow dns servers comma separated
  * machine: fix default connection URL to use 127.0.0.1
  * compat: accept tag in /images/create?fromSrc
  * compat container create: match duplicate mounts correctly
  * machine: qemu only remove connection after confirmation
  * windows: podman save allow the use of stdout
  * remote: exec inspect update exec session status
  * podman-remote logs: handle server error correctly
  * libpod: stop containers with --restart=always
  * Do not include image annotations when building spec
  * [v4.5] system tests: fix race in kube-play read-only
  * api: fix parsing filters
  * Support systemd optional prefix '-' for devices.
  * *: migrate image registry to registry.k8s.io
  * Makefile: include `release-artifacts` target
  * [CI:BUILD] Packit: Initial Enablement
  * Bump to v4.5.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
</package>
<package pkgid="9977648e27a3e27fa812e0e32b3f4f78f070555a8410b5d5061a7a3e0f0f7d7b" name="podman" arch="src">
  <version epoch="0" ver="4.7.2" rel="150500.3.3.1"/>
  <changelog author="danish.prakash@suse.com" date="1677240000">- Update to version 4.4.2:
  * Bump to v4.4.2
  * Release notes for v4.4.2
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * kube play: only enforce passthrough in Quadlet
  * Emergency fix for man pages: check for broken includes
  * CI: Temporarily disable all AWS EC2-based tasks
  * quadlet system tests: add useful defaults, logging
  * volume,container: chroot to source before exporting content
  * install sigproxy before start/attach
  * Update to c/image 5.24.1
  * events + container inspect test: RHEL fixes
  * Bump to v4.4.2-dev
- Remove patches (merged upstream):
  * volume-container-chroot-to-source-before-exporting-content.patch
- podman.spec: add `crun` requirement for quadlet
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add patch to let quadlet use the default runtime
  Added patch:
  * Quadlet-use-the-default-runtime.patch
  =&gt; Remove dependency on crun</changelog>
  <changelog author="danish.prakash@suse.com" date="1679659200">- Update to version 4.4.3:
  * Bump to v4.4.3
  * Release notes for v4.4.3
  * compat: /auth: parse server address correctly
  * vendor github.com/containers/common@v0.51.1
  * pkginstaller: bump Qemu to version 7.2.0
  * podman machine: Adjust Chrony makestep config
  * [v4.4] fix --health-on-failure=restart in transient unit
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * journald: remove initializeJournal()
  * netavark: only use aardvark ip as nameserver
  * compat API: network create return 409 for duplicate
  * fix "podman logs --since --follow" flake
  * system service --log-level=trace: support hijack
  * podman-mac-helper: exit 1 on error
  * bump golang.org/x/net to v0.8.0
  * Fix package restore
  * Quadlet - use the default runtime
  * Bump to v4.4.3-dev
- Remove patch (merged upstream):
  * Quadlet-use-the-default-runtime.patch
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="danish.prakash@suse.com" date="1680004800">- Update to version 4.4.4:
  * Bump to v4.4.4
  * Release notes for v4.4.4
  * libpod: always use direct mapping
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * Bump to v4.4.4-dev
- spec: Bump required version for libcontainers-common (bsc#1209495)</changelog>
  <changelog author="dcermak@suse.com" date="1681473600">- Don't build against EoL go versions, fixes bsc#1210299</changelog>
  <changelog author="danish.prakash@suse.com" date="1681819200">- Update to version 4.5.0:
  * Release v4.5.0
  * [CI:DOCS] Final release notes for v4.5.0
  * Quadlet - do not set log-driver by default
  * Return title fields as a list
  * Bump to v4.5.0-dev
  * Bump to v4.5.0-RC2
  * Final release notes for v4.5.0-RC2
  * test/e2e: remove unnecessary SkipIfNetavark() calls
  * test/e2e: deduplicated network test
  * docs: update podman-network-create.1
  * network create: add --interface-name
  * test/system/252-quadlet.bats: fix flake
  * Read kube_generate_type from containers.conf
  * Debian setup: workaround for runc /dev/char/10:200 bug
  * pkg/rootless: use catatonit from /usr/libexec/podman
  * rootless: make sure we only use a single pause process
  * Use atomic config writing strategy for podman machine config files
  * Add remaining release notes for v4.5.0-RC2
  * GHA: Use version instead of SHA for actions
  * chore(deps): update dependency containers/automation_images to v20230405
  * build: pass env by reference
  * test: retrofit error message
  * test/system: expect 12 char for short id
  * vendor: bump containers/(storage, common, buildah, image)
  * [skip-ci] Update actions/upload-artifact action to v3
  * [skip-ci] Update actions/stale action to v8
  * [skip-ci] Update actions/setup-go action to v4
  * [skip-ci] Update github/issue-labeler action to v2.6
  * Fix up codespell errors
  * Capitalize all uid,gid and id words that are not options in docs
  * build(deps): bump golang.org/x/tools from 0.7.0 to 0.8.0 in /test/tools
  * Properly remove the service container during kube down
  * quadlet: add `UserNS` option key
  * [CI:DOCS] Release notes for 4.5.0 Part 1
  * "podman pull by digest and list --all" test: untag instead of rmi
  * build(deps): bump golang.org/x/text from 0.8.0 to 0.9.0
  * Add renovate.json configuration
  * CI: postbuild step: skip under nightly treadmill
  * The `--ulimit` option accepts the name with an `RLIMIT_` prefix both upper and lower case
  * test/e2e: use custom network config dir where needed
  * chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml`
  * update completion scripts for cobra v1.7.0
  * libpod.storageService.CreateContainerStorage(): retrieve ID maps
  * Fix invalid pod name and hostname during kube generate
  * e2e tests: fix racy flakes
  * Cirrus: Enable labeling of EC2 VMs
  * Cirrus: Fix aarch64 clone_script 404 errors
  * e2e: GinkgoParallelNode() -&gt; ...Process()
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
  * [CI:DOCS] --creds and registries
  * Copr: fix build deps for /usr/bin/envsubst
  * Don't error when removing non-existant env vars
  * e2e: healthcheck on stopped container: fix flake
  * test/apiv2/80-kube.at
  * test/apiv2/80-kube.at
  * system service: do not close Body
  * rm `hack/release.sh`
  * build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6
  * add `quadlet -version` flag
  * add version/rawversion package
  * quadlet: use `Flag` suffix for variables
  * quadlet: implement `Tmpfs` option
  * Bump to v4.5.0-dev
  * Bump to 4.5.0-rc1
  * Update release notes from 4.4 branch
  * rootless netns: recover from invalid netns
  * System tests: unverbosify a flake log
  * Add support for secret exists
  * Fix Win install task failures with large PR bodies
  * docs: add `starting` to `HealthCheckResults.Status`
  * Add support for cgroup_config from containers.conf
  * libpod: mount safely subpaths
  * Support Deployment generation with kube generate
  * Use secret.items to create volume mounts if present
  * [CI:DOCS] fix typo in --systemd option
  * rootless: drop preexec hook error message
  * Edit the docker wrapper to use the install prefix
  * Update podman-for-windows.md
  * Quadlet: RemapUsers documentation fixes
  * speed up image listing
  * vendor containers/common@e27c30ee9b1b
  * fix volume-plugin-test flake
  * Document building Podman remote on Windows hosts
  * test/e2e: gpg keep stdout/err attached
  * auto-update: stop+start instead of restart sytemd units
  * [CI:DOCS] Improve basic tutorial
  * Update docs/source/markdown/podman-network.1.md
  * Add debug to --wait test
  * fix slirp4netns resolv.conf ip with a userns
  * Quadlet: add support for keep-id with mapping values
  * Quadlet E2E test - run quadlet as user generator
  * sqlite: do not `Ping()` after connecting
  * Quadlet - treat paths starting with systemd specifiers as absolute
  * Update docs/source/markdown/podman-kube-play.1.md.in
  * system tests: use CONTAINERS_CONF_OVERRIDE
  * implement podman machine set for hyperv
  * [CI:DOCS] Add network subnets info to network man page
  * CI: retry the golangci install
  * system tests: fix racey sdnotify test
  * hyperv: lookup machine on local filesystem first
  * fix os.IsNotExist() CI check
  * Ensure that SQLite state handles name-ID collisions
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * build(deps): bump github.com/onsi/gomega from 1.27.4 to 1.27.5
  * Fix a race around SQLite DB config validation
  * add CONTAINERS_CONF_OVERRIDE
  * vendor containers/common@main
  * docs: minor grammar fix in `--volume` description
  * sqlite: do not use shared cache
  * test: podman checkpoint/restore the latest container
  * stats compat API: return "id" lowercase
  * Run make codespell
  * Drop SQLite max connections
  * sqlite: set connection attributes on open
  * Fix database locked errors with SQLite
  * quadlet tests: skip on RHEL8 rootless
  * Kube Play Doc: Document the support for K8S Secret
  * New ulimit test: bump up minimum nfiles
  * logformatter: hide --db-backend, and friendlyize quadlet
  * Quadlet - add support for relative path in Volume key in .container file
  * Add service ctr cleanup to PlayKubeDown
  * fix --health-on-failure=restart in transient unit
  * Quadlet Doc: Suggest the kill operation for HealthOnFailure
  * Quadlet - Add support for health checks configuration in .container files
  * Makefile: allow specifying /lib dir location
  * Fix option --opts -&gt; --opt
  * basic hypverv machine implementation
  * Fix SQLite DB schema migration code
  * Add support for oom_score_adj value from containers.conf
  * Use default_ulimits field in containers.conf
  * CI: test and confirm DESIRED_DATABASE
  * build(deps): bump github.com/openshift/imagebuilder
  * logformatter: futureproof output filename
  * Vendor in latest containers/(storage, common, image)
  * build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.30.0
  * test/system/255-auto-update.bats: add debug logs
  * Revert "Revert "pasta: Use two connections instead of three in TCP range forward tests""
  * Add information for secret inspect
  * Add format to podman volume ls
  * Add format to podman volume inspect
  * Add format to podman secret ls
  * Add format to podman system df
  * Add format to podman machine info
  * Add format table to podman image inspect man page
  * Cirrus: Store podman machine benchmark data
  * Update Cirrus display names, and fix get-ci-vm script
  * Ensure SQLite places uses the runroot in transient mode
  * Fix various integration test issues with SQLite state
  * Remove test for pod/container name global uniqueness
  * Improve handling of existing container names in SQLite
  * Add SQLite job to CI
  * buildah treadmill: also run rootless tests
  * build(deps): bump github.com/vbatts/git-validation in /test/tools
  * auto update: return restart error
  * fix: Document removing anonymous volumes
  * events: no duplicates when streaming during a log rotation
  * Add search --cert-dir, --creds
  * podman-mac-helper: exit 1 on error
  * system service --log-level=trace: support hijack
  * test/system: fix wait_for_port() to wait for bind
  * cgroupns: private cgroupns on cgroupv1 breaks --systemd
  * libpod: remove error stutter
  * podman events: unhide --stream
  * test/system/255-auto-update.bats: multiple services
  * 255-auto-update.bats: turn off rollback where needed
  * Use append() to add elements to a slice
  * Revert "pasta: Use two connections instead of three in TCP range forward tests"
  * Support running nested SELinux container separation
  * bud tests: rootless remote: use correct socket path
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.2.1 to 8.3.0
  * compat: /auth: parse server address correctly
  * docs: fix cmd `set DOCKER_HOST` suggestion
  * test: reenable idmap test
  * Must use mountlabel when creating builtin volumes
  * podman.spec.rpkg: distro conditionals for modulesloaddir
  * build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0
  * podman inspect list network when using --net=host or none
  * pasta: Re-enable "Local forwarder, IPv4" test, accept NXDOMAIN as response
  * build(deps): bump golang.org/x/tools from 0.6.0 to 0.7.0 in /test/tools
  * CI: Switch to c20230307t192532z-f37f36d12 images
  * Cirrus: Run system &amp; integration tests in parallel
  * Update checkpointctl v0.1.0
  * Quadlet: add support for setting --ip and --ip6
  * build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0
  * build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0
  * libpod: avoid nil pointer dereference in (*Container).Cleanup
  * [CI:DOCS] Add image not found info to troubleshooting
  * cmd: do not require userns for "version"
  * cmd: drop special handling for "scp"
  * cmd: clarify meaning of ParentNSRequired
  * Fix package restore
  * [CI:DOCS] Fix docs/version-check always requesting updates
  * sqlite: add a hidden --db-backend flag
  * fix: update the default machine value when the previously set default machine is deleted
  * podman machine: Adjust Chrony makestep config
  * sqlite: add container short ID to network aliases
  * sqlite: remove dead code
  * sqlite: addContainer: add named volume only once
  * sqlite: implement RewriteVolumeConfig
  * sqlite: LookupVolume: fix partial name match
  * sqlite: LookupVolume: wrap error
  * sqlite: fix type rewriting container config
  * sqlite: return correct error on pod-name conflict
  * sqlite: RewritePodConfig: update error message
  * test/system/255-auto-update.bats: wait 10 for update to finish
  * auto-update test: wait for service to be ready
  * Vendor in latest containers/(common, storage, image)
  * play kube: Add --wait option
  * Cirrus: Fix git config permission denied
  * Quadlet: Add support for the Mount key in .container files
  * build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2
  * fix "podman logs --since --follow" flake
  * Clarify that replicas are ignored in kubernetes deployment
  * Revert "Skip all pasta tests"
  * CI: Switch to c20230223t153813z-f37f36d12 images
  * Fix user socket path
  * pkginstaller: bump Qemu to version 7.2.0
  * Cirrus: Fix bud tests failing to apply patches
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2
  * build(deps): bump github.com/coreos/stream-metadata-go
  * Vendor in latest containers/storage
  * buildah-bud tests: don't sudo when rootless is desired
  * Temporarily disable version-check
  * CI: new rootless buildah-bud tests (cron only)
  * sqlite: fix volume lookups with partial names
  * sqlite: fix container lookups with partial IDs
  * sqlite: fix LookupPod
  * sqlite: fix pod create/rm
  * sqlite: LookupContainer: update error message
  * sqlite: AddContainerExitCode: allow to replace
  * system: add warning when running rootless on cgroupv1
  * sqlite: fix AllContainers with state
  * sqlite: fix "UPDATE TABLE" typos
  * sqlite: SaveVolume: fix syntax error updating the volumes table
  * sqlite: exit code: allow -1
  * sqlite: fix typo when removing exec sessions
  * sqlite: AllContainers: fix inner join
  * sqlite: move migration after table creation
  * sqlite: implement pod methods
  * Quadlet - use the default runtime
  * docs: context is not optional for build
  * Fix an incorrect comment on NewSqliteState
  * Add support for containers.conf database setting
  * Add support for volume operations to SQLite state
  * Implement exec session handling in SQL database
  * Various fixes from code review
  * Remove `--namespace` flag from Podman root
  * Get E2E tests to pass
  * Implement network disconnect for SQLite state
  * Implement Network Connect/Modify for SQLite state
  * Fix various lint issues
  * Some further work on SQLite state
  * Remove concept of Namespaces from BoltDB
  * Add initial SQLite-backed state implementation
  * Cirrus: Support runc testing on debian VMs
  * Skip all pasta tests
  * Skip buildah-bud test
  * Skip buildx test with VFS podman storage driver
  * Skip 'podman kube --network' test for rootless CGv1
  * Skip tests which fail with CGv1 &amp; runc
  * Skip rootless CGv1 quadlet tests due to issue
  * Makefile: Define SHELL
  * Machine refactor for QEMU/AppleHV
  * machine refactoring preparations for hyperv
  * [CI:BUILD] spec.rpkg: trim dependency list
  * Logs follow-until tests: loosen checks
  * [CI:DOCS] Windows/Mac docs link update
  * Doc update for docker network options via CLI
  * compat API: network create return 409 for duplicate
  * Apply suggestions to man page
  * vendor c/common@852ca05a1fbb
  * Quadlet: Add support for LogDriver key in container and kube units
  * machine refactoring preparations for hyperv
  * libpod: always use direct mapping
  * netavark: only use aardvark ip as nameserver
  * build(deps): bump github.com/container-orchestrated-devices/container-device-interface
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * make docs: sanity check for broken man pages
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.6 to 8.2.0
  * build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1
  * kube: rm secret on down, print secret on play
  * Fix spacing typo that triggered OCD &amp; indent units in podman-systemd.unit(5)
  * Update remote_client.md
  * [CI:DOCS] Add restriction to option README
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0
  * kube play: only enforce passthrough in Quadlet
  * journald: remove initializeJournal()
  * auto-update: support pods
  * Emergency fix for man pages: check for broken includes
  * System tests: assert(): friendlier failure messages
  * Cirrus: Fix version-check to only run on `main` job
  * CI: Temporarily disable all AWS EC2-based tasks
  * build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18
  * volume,container: chroot to source before exporting content
  * Support sysctl configs via podman kube play
  * [CI:BUILD] copr: podman.spec.rpkg cleanups
  * quadlet system tests: add useful defaults, logging
  * libpod: support relative positions for idmaps
  * Experimental workaround for cdn03.quay.io flake
  * system tests: prevent leading tabs
  * Introduce podman machine os apply
  * create: add support for --group-entry
  * fix != filter in volume prune
  * Allow specification of podman --remote build -f -
  * Quadlet use crun specified in containers.conf
  * build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0
  * Vendor c/image after https://github.com/containers/image/pull/1847
  * Don't set hostPort when generating a service
  * man page --format xref: tighten the autocompletion check
  * add support for limiting tmpfs size for systemd-specific mnts
  * build(deps): bump golang.org/x/text from 0.6.0 to 0.7.0
  * Add ulimit annotation to kube gen &amp; play
  * man page xref: validate displayed man page names
  * quadlet: add ExecStop
  * install sigproxy before start/attach
  * build(deps): bump golang.org/x/tools from 0.5.0 to 0.6.0 in /test/tools
  * Fix typos
  * Cirrus: Make benchmarks .env file easier to load
  * Cirrus: Omit functions in env. file
  * kube play: set service container as main PID when possible
  * Fix typos. Improve language.
  * events + container inspect test: RHEL fixes
  * Add ctrName to network alias during kube play
  * Run codespell on codebase
  * podman image scp: added identity for ssh.Exec
  * [CI:DOCS] Clarify nomap constrains
  * [CI:DOCS] man-page checker: include --format (Go templates)
  * Vendor c/image after https://github.com/containers/image/pull/1816
  * [CI:DOCS] Cleanup some man pages to display options with line breaks
  * [CI:DOCS] Add tables to podman-systemd.unit man page
  * github: remove prefix from bugs/features
  * Quadlet: Add support for the Secret key in Container group
  * [CI:DOCS] OWNERS: add @ygalblum and @alexlarsson
  * build(deps): bump golang.org/x/term from 0.4.0 to 0.5.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.1.6
  * Sort quadlet keys to make it easier to read
  * e2e: fix some tests on remote
  * kube play: do not teardown unconditionally on error
  * Fix typos in comments
  * Resolve symlink path for qemu directory if possible
  * #17363 Fix contradicting documentation podman-commit
  * Fix a potential UID/GID collision in unit tests
  * golangci-lint: show all errors at once
  * update golangci-lint to version 1.51.1
  * [CI:DOCS] events: document journald identifiers
  * Quadlet: exit 0 when there are no files to process
  * network ls: handle removed container
  * e2e: adapt play kube test on remote rootless
  * docs/podman-systemd.unit: Explicitely mention network &amp; kube units
  * docs/podman-systemd.unit: Update example to work out of the box
  * [CI:BUILD] Cirrus: Fix GraphQL ownerRepository:null error
  * Add missing return after errors
  * Revert "Cirrus: Emergency fix to un-stuck PRs"
  * pasta: Fix ICMPv6 Echo test, skip it for the moment
  * pasta: Fix ICMP Echo Request (IPv4) test
  * pasta: Use two connections instead of three in TCP range forward tests
  * Add SELinux label types support to quadlet
  * Add quadlet support for rootfs= containers
  * Cirrus: Emergency fix to un-stuck PRs
  * Move clean-binaries before podman-remote in podman-remote-docs target
  * oci: bind mount /sys with --userns=(auto|pod:)
  * Cleanup podman-systemd.unit file
  * Install podman-systemd.unit  man page, make quadlet discoverable
  * libpod: allow userns=keep-id for root
  * system-reset: use CleanCacheMount to clear build cache
  * vendor: bump buildah to v1.29.1-0.20230201192322-e56eb25575c7
  * system tests: fix noexistent labels test in the remote
  * Expose Podman named pipe in Inspect output
  * libpod: support idmap for --rootfs
  * test: adapt test to work on cgroupv1
  * Bump to v4.5.0-dev
  * Update main to reflect v4.4.0 release
  * Update from /github.com/vbauerster/mpb/v7 to /v8
  * hack/perf: cleanup after benchmarks
  * hack/perf/bz-2162111.sh: use custom network
  * Update bug_report.yaml
  * Handle filetype field in kubernetes.yaml files
  * hack/perf/bz-2162111.sh: measure stop
  * make hack/markdown-preprocess parallel-safe
  * system tests: fix volume exec/noexec test
  * system tests: minor fix for RHEL8 incompatibility
  * Cirrus: Use versionable IMAGE_SUFFIX
  * utils: new conversion method
  * libpod: use GraphRoot for overlay upper dir
  * vendor: update containers/storage
  * Do not mount /dev/tty into rootless containers
  * build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7
  * e2e: fix run_staticip_test about no_proxy
  * docs: specify order preference for FROM
  * Fixes port collision issue on use of --publish-all
  * Support for Windows paths in the source position of the volume mounts
  * e2e tests: fix incorrect os.User.Name
  * Log data that we failed to unmarshal
  * [CI:DOCS] hack/perf: add script for BZ 216111
  * container rm: save once for exec removal and state change
  * [DOCS:CI] podman-events: document verbose create events
  * e2e: Avoid hard-coding included in quadlet test
  * e2e: Avoid hard-coding ImageCacheDir
  * Making gvproxy.exe optional for building Windows installer
  * Add gvproxy to Windows packages
  * Add comment to clarify error handling intention
  * fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
  * Fix usage of absolute windows paths with --image-path
  * Match VT device paths to be blocked from mounting exactly
  * Fix default handling of pids-limit
  * Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
  * journald: podman logs only show logs for current user
  * journald: podman events only show events for current user
  * e2e: Remove the cache with "podman unshare rm" when a rootless user
  * Clean up more language for inclusiveness
  * e2e: Remove some directories at SynchronizedAfterSuite
  * fix: don't output "ago" when container is currently up and running
  * fix: running check error when podman is default in wsl
  * fix CI: test fail due to merge
  * Bump Bulidah to v1.29.0
  * e2e: reduce dependency on /tmp for e2e tests
  * Bump cirrus image with easier dependency management
  * quadlet: Add device support for .volume files
  * remote,build: error if containerignore is symlink
  * DB: make loading container states optional
  * ps: do not sync container
  * Set runAsNonRoot=true in gen kube
  * WSL refactoring
  * kube-play: add support for HostIPC in pod.Spec
  * Allow --device-cgroup-rule to be passed in by docker API</changelog>
  <changelog author="danish.prakash@suse.com" date="1685361600">- Update to version 4.5.1:
  * Release v4.5.1
  * [CI:DOCS] Final release notes for v4.5.1
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * Revert "Resolve symlink path for qemu directory if possible"
  * no need for podman-next rpm test on maint branch
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * network create/update: allow dns servers comma separated
  * machine: fix default connection URL to use 127.0.0.1
  * compat: accept tag in /images/create?fromSrc
  * compat container create: match duplicate mounts correctly
  * machine: qemu only remove connection after confirmation
  * windows: podman save allow the use of stdout
  * remote: exec inspect update exec session status
  * podman-remote logs: handle server error correctly
  * libpod: stop containers with --restart=always
  * Do not include image annotations when building spec
  * [v4.5] system tests: fix race in kube-play read-only
  * api: fix parsing filters
  * Support systemd optional prefix '-' for devices.
  * *: migrate image registry to registry.k8s.io
  * Makefile: include `release-artifacts` target
  * [CI:BUILD] Packit: Initial Enablement
  * Bump to v4.5.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
</package>
<package pkgid="6a01ba3ba75afd26c0d7ec9f04ae2d340aaa096bd932f74d9ba909e1f908115b" name="podman" arch="x86_64">
  <version epoch="0" ver="4.7.2" rel="150500.3.3.1"/>
  <changelog author="danish.prakash@suse.com" date="1677240000">- Update to version 4.4.2:
  * Bump to v4.4.2
  * Release notes for v4.4.2
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * kube play: only enforce passthrough in Quadlet
  * Emergency fix for man pages: check for broken includes
  * CI: Temporarily disable all AWS EC2-based tasks
  * quadlet system tests: add useful defaults, logging
  * volume,container: chroot to source before exporting content
  * install sigproxy before start/attach
  * Update to c/image 5.24.1
  * events + container inspect test: RHEL fixes
  * Bump to v4.4.2-dev
- Remove patches (merged upstream):
  * volume-container-chroot-to-source-before-exporting-content.patch
- podman.spec: add `crun` requirement for quadlet
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add patch to let quadlet use the default runtime
  Added patch:
  * Quadlet-use-the-default-runtime.patch
  =&gt; Remove dependency on crun</changelog>
  <changelog author="danish.prakash@suse.com" date="1679659200">- Update to version 4.4.3:
  * Bump to v4.4.3
  * Release notes for v4.4.3
  * compat: /auth: parse server address correctly
  * vendor github.com/containers/common@v0.51.1
  * pkginstaller: bump Qemu to version 7.2.0
  * podman machine: Adjust Chrony makestep config
  * [v4.4] fix --health-on-failure=restart in transient unit
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * journald: remove initializeJournal()
  * netavark: only use aardvark ip as nameserver
  * compat API: network create return 409 for duplicate
  * fix "podman logs --since --follow" flake
  * system service --log-level=trace: support hijack
  * podman-mac-helper: exit 1 on error
  * bump golang.org/x/net to v0.8.0
  * Fix package restore
  * Quadlet - use the default runtime
  * Bump to v4.4.3-dev
- Remove patch (merged upstream):
  * Quadlet-use-the-default-runtime.patch
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="danish.prakash@suse.com" date="1680004800">- Update to version 4.4.4:
  * Bump to v4.4.4
  * Release notes for v4.4.4
  * libpod: always use direct mapping
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * Bump to v4.4.4-dev
- spec: Bump required version for libcontainers-common (bsc#1209495)</changelog>
  <changelog author="dcermak@suse.com" date="1681473600">- Don't build against EoL go versions, fixes bsc#1210299</changelog>
  <changelog author="danish.prakash@suse.com" date="1681819200">- Update to version 4.5.0:
  * Release v4.5.0
  * [CI:DOCS] Final release notes for v4.5.0
  * Quadlet - do not set log-driver by default
  * Return title fields as a list
  * Bump to v4.5.0-dev
  * Bump to v4.5.0-RC2
  * Final release notes for v4.5.0-RC2
  * test/e2e: remove unnecessary SkipIfNetavark() calls
  * test/e2e: deduplicated network test
  * docs: update podman-network-create.1
  * network create: add --interface-name
  * test/system/252-quadlet.bats: fix flake
  * Read kube_generate_type from containers.conf
  * Debian setup: workaround for runc /dev/char/10:200 bug
  * pkg/rootless: use catatonit from /usr/libexec/podman
  * rootless: make sure we only use a single pause process
  * Use atomic config writing strategy for podman machine config files
  * Add remaining release notes for v4.5.0-RC2
  * GHA: Use version instead of SHA for actions
  * chore(deps): update dependency containers/automation_images to v20230405
  * build: pass env by reference
  * test: retrofit error message
  * test/system: expect 12 char for short id
  * vendor: bump containers/(storage, common, buildah, image)
  * [skip-ci] Update actions/upload-artifact action to v3
  * [skip-ci] Update actions/stale action to v8
  * [skip-ci] Update actions/setup-go action to v4
  * [skip-ci] Update github/issue-labeler action to v2.6
  * Fix up codespell errors
  * Capitalize all uid,gid and id words that are not options in docs
  * build(deps): bump golang.org/x/tools from 0.7.0 to 0.8.0 in /test/tools
  * Properly remove the service container during kube down
  * quadlet: add `UserNS` option key
  * [CI:DOCS] Release notes for 4.5.0 Part 1
  * "podman pull by digest and list --all" test: untag instead of rmi
  * build(deps): bump golang.org/x/text from 0.8.0 to 0.9.0
  * Add renovate.json configuration
  * CI: postbuild step: skip under nightly treadmill
  * The `--ulimit` option accepts the name with an `RLIMIT_` prefix both upper and lower case
  * test/e2e: use custom network config dir where needed
  * chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml`
  * update completion scripts for cobra v1.7.0
  * libpod.storageService.CreateContainerStorage(): retrieve ID maps
  * Fix invalid pod name and hostname during kube generate
  * e2e tests: fix racy flakes
  * Cirrus: Enable labeling of EC2 VMs
  * Cirrus: Fix aarch64 clone_script 404 errors
  * e2e: GinkgoParallelNode() -&gt; ...Process()
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
  * [CI:DOCS] --creds and registries
  * Copr: fix build deps for /usr/bin/envsubst
  * Don't error when removing non-existant env vars
  * e2e: healthcheck on stopped container: fix flake
  * test/apiv2/80-kube.at
  * test/apiv2/80-kube.at
  * system service: do not close Body
  * rm `hack/release.sh`
  * build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6
  * add `quadlet -version` flag
  * add version/rawversion package
  * quadlet: use `Flag` suffix for variables
  * quadlet: implement `Tmpfs` option
  * Bump to v4.5.0-dev
  * Bump to 4.5.0-rc1
  * Update release notes from 4.4 branch
  * rootless netns: recover from invalid netns
  * System tests: unverbosify a flake log
  * Add support for secret exists
  * Fix Win install task failures with large PR bodies
  * docs: add `starting` to `HealthCheckResults.Status`
  * Add support for cgroup_config from containers.conf
  * libpod: mount safely subpaths
  * Support Deployment generation with kube generate
  * Use secret.items to create volume mounts if present
  * [CI:DOCS] fix typo in --systemd option
  * rootless: drop preexec hook error message
  * Edit the docker wrapper to use the install prefix
  * Update podman-for-windows.md
  * Quadlet: RemapUsers documentation fixes
  * speed up image listing
  * vendor containers/common@e27c30ee9b1b
  * fix volume-plugin-test flake
  * Document building Podman remote on Windows hosts
  * test/e2e: gpg keep stdout/err attached
  * auto-update: stop+start instead of restart sytemd units
  * [CI:DOCS] Improve basic tutorial
  * Update docs/source/markdown/podman-network.1.md
  * Add debug to --wait test
  * fix slirp4netns resolv.conf ip with a userns
  * Quadlet: add support for keep-id with mapping values
  * Quadlet E2E test - run quadlet as user generator
  * sqlite: do not `Ping()` after connecting
  * Quadlet - treat paths starting with systemd specifiers as absolute
  * Update docs/source/markdown/podman-kube-play.1.md.in
  * system tests: use CONTAINERS_CONF_OVERRIDE
  * implement podman machine set for hyperv
  * [CI:DOCS] Add network subnets info to network man page
  * CI: retry the golangci install
  * system tests: fix racey sdnotify test
  * hyperv: lookup machine on local filesystem first
  * fix os.IsNotExist() CI check
  * Ensure that SQLite state handles name-ID collisions
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * build(deps): bump github.com/onsi/gomega from 1.27.4 to 1.27.5
  * Fix a race around SQLite DB config validation
  * add CONTAINERS_CONF_OVERRIDE
  * vendor containers/common@main
  * docs: minor grammar fix in `--volume` description
  * sqlite: do not use shared cache
  * test: podman checkpoint/restore the latest container
  * stats compat API: return "id" lowercase
  * Run make codespell
  * Drop SQLite max connections
  * sqlite: set connection attributes on open
  * Fix database locked errors with SQLite
  * quadlet tests: skip on RHEL8 rootless
  * Kube Play Doc: Document the support for K8S Secret
  * New ulimit test: bump up minimum nfiles
  * logformatter: hide --db-backend, and friendlyize quadlet
  * Quadlet - add support for relative path in Volume key in .container file
  * Add service ctr cleanup to PlayKubeDown
  * fix --health-on-failure=restart in transient unit
  * Quadlet Doc: Suggest the kill operation for HealthOnFailure
  * Quadlet - Add support for health checks configuration in .container files
  * Makefile: allow specifying /lib dir location
  * Fix option --opts -&gt; --opt
  * basic hypverv machine implementation
  * Fix SQLite DB schema migration code
  * Add support for oom_score_adj value from containers.conf
  * Use default_ulimits field in containers.conf
  * CI: test and confirm DESIRED_DATABASE
  * build(deps): bump github.com/openshift/imagebuilder
  * logformatter: futureproof output filename
  * Vendor in latest containers/(storage, common, image)
  * build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.30.0
  * test/system/255-auto-update.bats: add debug logs
  * Revert "Revert "pasta: Use two connections instead of three in TCP range forward tests""
  * Add information for secret inspect
  * Add format to podman volume ls
  * Add format to podman volume inspect
  * Add format to podman secret ls
  * Add format to podman system df
  * Add format to podman machine info
  * Add format table to podman image inspect man page
  * Cirrus: Store podman machine benchmark data
  * Update Cirrus display names, and fix get-ci-vm script
  * Ensure SQLite places uses the runroot in transient mode
  * Fix various integration test issues with SQLite state
  * Remove test for pod/container name global uniqueness
  * Improve handling of existing container names in SQLite
  * Add SQLite job to CI
  * buildah treadmill: also run rootless tests
  * build(deps): bump github.com/vbatts/git-validation in /test/tools
  * auto update: return restart error
  * fix: Document removing anonymous volumes
  * events: no duplicates when streaming during a log rotation
  * Add search --cert-dir, --creds
  * podman-mac-helper: exit 1 on error
  * system service --log-level=trace: support hijack
  * test/system: fix wait_for_port() to wait for bind
  * cgroupns: private cgroupns on cgroupv1 breaks --systemd
  * libpod: remove error stutter
  * podman events: unhide --stream
  * test/system/255-auto-update.bats: multiple services
  * 255-auto-update.bats: turn off rollback where needed
  * Use append() to add elements to a slice
  * Revert "pasta: Use two connections instead of three in TCP range forward tests"
  * Support running nested SELinux container separation
  * bud tests: rootless remote: use correct socket path
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.2.1 to 8.3.0
  * compat: /auth: parse server address correctly
  * docs: fix cmd `set DOCKER_HOST` suggestion
  * test: reenable idmap test
  * Must use mountlabel when creating builtin volumes
  * podman.spec.rpkg: distro conditionals for modulesloaddir
  * build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0
  * podman inspect list network when using --net=host or none
  * pasta: Re-enable "Local forwarder, IPv4" test, accept NXDOMAIN as response
  * build(deps): bump golang.org/x/tools from 0.6.0 to 0.7.0 in /test/tools
  * CI: Switch to c20230307t192532z-f37f36d12 images
  * Cirrus: Run system &amp; integration tests in parallel
  * Update checkpointctl v0.1.0
  * Quadlet: add support for setting --ip and --ip6
  * build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0
  * build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0
  * libpod: avoid nil pointer dereference in (*Container).Cleanup
  * [CI:DOCS] Add image not found info to troubleshooting
  * cmd: do not require userns for "version"
  * cmd: drop special handling for "scp"
  * cmd: clarify meaning of ParentNSRequired
  * Fix package restore
  * [CI:DOCS] Fix docs/version-check always requesting updates
  * sqlite: add a hidden --db-backend flag
  * fix: update the default machine value when the previously set default machine is deleted
  * podman machine: Adjust Chrony makestep config
  * sqlite: add container short ID to network aliases
  * sqlite: remove dead code
  * sqlite: addContainer: add named volume only once
  * sqlite: implement RewriteVolumeConfig
  * sqlite: LookupVolume: fix partial name match
  * sqlite: LookupVolume: wrap error
  * sqlite: fix type rewriting container config
  * sqlite: return correct error on pod-name conflict
  * sqlite: RewritePodConfig: update error message
  * test/system/255-auto-update.bats: wait 10 for update to finish
  * auto-update test: wait for service to be ready
  * Vendor in latest containers/(common, storage, image)
  * play kube: Add --wait option
  * Cirrus: Fix git config permission denied
  * Quadlet: Add support for the Mount key in .container files
  * build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2
  * fix "podman logs --since --follow" flake
  * Clarify that replicas are ignored in kubernetes deployment
  * Revert "Skip all pasta tests"
  * CI: Switch to c20230223t153813z-f37f36d12 images
  * Fix user socket path
  * pkginstaller: bump Qemu to version 7.2.0
  * Cirrus: Fix bud tests failing to apply patches
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2
  * build(deps): bump github.com/coreos/stream-metadata-go
  * Vendor in latest containers/storage
  * buildah-bud tests: don't sudo when rootless is desired
  * Temporarily disable version-check
  * CI: new rootless buildah-bud tests (cron only)
  * sqlite: fix volume lookups with partial names
  * sqlite: fix container lookups with partial IDs
  * sqlite: fix LookupPod
  * sqlite: fix pod create/rm
  * sqlite: LookupContainer: update error message
  * sqlite: AddContainerExitCode: allow to replace
  * system: add warning when running rootless on cgroupv1
  * sqlite: fix AllContainers with state
  * sqlite: fix "UPDATE TABLE" typos
  * sqlite: SaveVolume: fix syntax error updating the volumes table
  * sqlite: exit code: allow -1
  * sqlite: fix typo when removing exec sessions
  * sqlite: AllContainers: fix inner join
  * sqlite: move migration after table creation
  * sqlite: implement pod methods
  * Quadlet - use the default runtime
  * docs: context is not optional for build
  * Fix an incorrect comment on NewSqliteState
  * Add support for containers.conf database setting
  * Add support for volume operations to SQLite state
  * Implement exec session handling in SQL database
  * Various fixes from code review
  * Remove `--namespace` flag from Podman root
  * Get E2E tests to pass
  * Implement network disconnect for SQLite state
  * Implement Network Connect/Modify for SQLite state
  * Fix various lint issues
  * Some further work on SQLite state
  * Remove concept of Namespaces from BoltDB
  * Add initial SQLite-backed state implementation
  * Cirrus: Support runc testing on debian VMs
  * Skip all pasta tests
  * Skip buildah-bud test
  * Skip buildx test with VFS podman storage driver
  * Skip 'podman kube --network' test for rootless CGv1
  * Skip tests which fail with CGv1 &amp; runc
  * Skip rootless CGv1 quadlet tests due to issue
  * Makefile: Define SHELL
  * Machine refactor for QEMU/AppleHV
  * machine refactoring preparations for hyperv
  * [CI:BUILD] spec.rpkg: trim dependency list
  * Logs follow-until tests: loosen checks
  * [CI:DOCS] Windows/Mac docs link update
  * Doc update for docker network options via CLI
  * compat API: network create return 409 for duplicate
  * Apply suggestions to man page
  * vendor c/common@852ca05a1fbb
  * Quadlet: Add support for LogDriver key in container and kube units
  * machine refactoring preparations for hyperv
  * libpod: always use direct mapping
  * netavark: only use aardvark ip as nameserver
  * build(deps): bump github.com/container-orchestrated-devices/container-device-interface
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * make docs: sanity check for broken man pages
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.6 to 8.2.0
  * build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1
  * kube: rm secret on down, print secret on play
  * Fix spacing typo that triggered OCD &amp; indent units in podman-systemd.unit(5)
  * Update remote_client.md
  * [CI:DOCS] Add restriction to option README
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0
  * kube play: only enforce passthrough in Quadlet
  * journald: remove initializeJournal()
  * auto-update: support pods
  * Emergency fix for man pages: check for broken includes
  * System tests: assert(): friendlier failure messages
  * Cirrus: Fix version-check to only run on `main` job
  * CI: Temporarily disable all AWS EC2-based tasks
  * build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18
  * volume,container: chroot to source before exporting content
  * Support sysctl configs via podman kube play
  * [CI:BUILD] copr: podman.spec.rpkg cleanups
  * quadlet system tests: add useful defaults, logging
  * libpod: support relative positions for idmaps
  * Experimental workaround for cdn03.quay.io flake
  * system tests: prevent leading tabs
  * Introduce podman machine os apply
  * create: add support for --group-entry
  * fix != filter in volume prune
  * Allow specification of podman --remote build -f -
  * Quadlet use crun specified in containers.conf
  * build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0
  * Vendor c/image after https://github.com/containers/image/pull/1847
  * Don't set hostPort when generating a service
  * man page --format xref: tighten the autocompletion check
  * add support for limiting tmpfs size for systemd-specific mnts
  * build(deps): bump golang.org/x/text from 0.6.0 to 0.7.0
  * Add ulimit annotation to kube gen &amp; play
  * man page xref: validate displayed man page names
  * quadlet: add ExecStop
  * install sigproxy before start/attach
  * build(deps): bump golang.org/x/tools from 0.5.0 to 0.6.0 in /test/tools
  * Fix typos
  * Cirrus: Make benchmarks .env file easier to load
  * Cirrus: Omit functions in env. file
  * kube play: set service container as main PID when possible
  * Fix typos. Improve language.
  * events + container inspect test: RHEL fixes
  * Add ctrName to network alias during kube play
  * Run codespell on codebase
  * podman image scp: added identity for ssh.Exec
  * [CI:DOCS] Clarify nomap constrains
  * [CI:DOCS] man-page checker: include --format (Go templates)
  * Vendor c/image after https://github.com/containers/image/pull/1816
  * [CI:DOCS] Cleanup some man pages to display options with line breaks
  * [CI:DOCS] Add tables to podman-systemd.unit man page
  * github: remove prefix from bugs/features
  * Quadlet: Add support for the Secret key in Container group
  * [CI:DOCS] OWNERS: add @ygalblum and @alexlarsson
  * build(deps): bump golang.org/x/term from 0.4.0 to 0.5.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.1.6
  * Sort quadlet keys to make it easier to read
  * e2e: fix some tests on remote
  * kube play: do not teardown unconditionally on error
  * Fix typos in comments
  * Resolve symlink path for qemu directory if possible
  * #17363 Fix contradicting documentation podman-commit
  * Fix a potential UID/GID collision in unit tests
  * golangci-lint: show all errors at once
  * update golangci-lint to version 1.51.1
  * [CI:DOCS] events: document journald identifiers
  * Quadlet: exit 0 when there are no files to process
  * network ls: handle removed container
  * e2e: adapt play kube test on remote rootless
  * docs/podman-systemd.unit: Explicitely mention network &amp; kube units
  * docs/podman-systemd.unit: Update example to work out of the box
  * [CI:BUILD] Cirrus: Fix GraphQL ownerRepository:null error
  * Add missing return after errors
  * Revert "Cirrus: Emergency fix to un-stuck PRs"
  * pasta: Fix ICMPv6 Echo test, skip it for the moment
  * pasta: Fix ICMP Echo Request (IPv4) test
  * pasta: Use two connections instead of three in TCP range forward tests
  * Add SELinux label types support to quadlet
  * Add quadlet support for rootfs= containers
  * Cirrus: Emergency fix to un-stuck PRs
  * Move clean-binaries before podman-remote in podman-remote-docs target
  * oci: bind mount /sys with --userns=(auto|pod:)
  * Cleanup podman-systemd.unit file
  * Install podman-systemd.unit  man page, make quadlet discoverable
  * libpod: allow userns=keep-id for root
  * system-reset: use CleanCacheMount to clear build cache
  * vendor: bump buildah to v1.29.1-0.20230201192322-e56eb25575c7
  * system tests: fix noexistent labels test in the remote
  * Expose Podman named pipe in Inspect output
  * libpod: support idmap for --rootfs
  * test: adapt test to work on cgroupv1
  * Bump to v4.5.0-dev
  * Update main to reflect v4.4.0 release
  * Update from /github.com/vbauerster/mpb/v7 to /v8
  * hack/perf: cleanup after benchmarks
  * hack/perf/bz-2162111.sh: use custom network
  * Update bug_report.yaml
  * Handle filetype field in kubernetes.yaml files
  * hack/perf/bz-2162111.sh: measure stop
  * make hack/markdown-preprocess parallel-safe
  * system tests: fix volume exec/noexec test
  * system tests: minor fix for RHEL8 incompatibility
  * Cirrus: Use versionable IMAGE_SUFFIX
  * utils: new conversion method
  * libpod: use GraphRoot for overlay upper dir
  * vendor: update containers/storage
  * Do not mount /dev/tty into rootless containers
  * build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7
  * e2e: fix run_staticip_test about no_proxy
  * docs: specify order preference for FROM
  * Fixes port collision issue on use of --publish-all
  * Support for Windows paths in the source position of the volume mounts
  * e2e tests: fix incorrect os.User.Name
  * Log data that we failed to unmarshal
  * [CI:DOCS] hack/perf: add script for BZ 216111
  * container rm: save once for exec removal and state change
  * [DOCS:CI] podman-events: document verbose create events
  * e2e: Avoid hard-coding included in quadlet test
  * e2e: Avoid hard-coding ImageCacheDir
  * Making gvproxy.exe optional for building Windows installer
  * Add gvproxy to Windows packages
  * Add comment to clarify error handling intention
  * fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
  * Fix usage of absolute windows paths with --image-path
  * Match VT device paths to be blocked from mounting exactly
  * Fix default handling of pids-limit
  * Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
  * journald: podman logs only show logs for current user
  * journald: podman events only show events for current user
  * e2e: Remove the cache with "podman unshare rm" when a rootless user
  * Clean up more language for inclusiveness
  * e2e: Remove some directories at SynchronizedAfterSuite
  * fix: don't output "ago" when container is currently up and running
  * fix: running check error when podman is default in wsl
  * fix CI: test fail due to merge
  * Bump Bulidah to v1.29.0
  * e2e: reduce dependency on /tmp for e2e tests
  * Bump cirrus image with easier dependency management
  * quadlet: Add device support for .volume files
  * remote,build: error if containerignore is symlink
  * DB: make loading container states optional
  * ps: do not sync container
  * Set runAsNonRoot=true in gen kube
  * WSL refactoring
  * kube-play: add support for HostIPC in pod.Spec
  * Allow --device-cgroup-rule to be passed in by docker API</changelog>
  <changelog author="danish.prakash@suse.com" date="1685361600">- Update to version 4.5.1:
  * Release v4.5.1
  * [CI:DOCS] Final release notes for v4.5.1
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * Revert "Resolve symlink path for qemu directory if possible"
  * no need for podman-next rpm test on maint branch
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * network create/update: allow dns servers comma separated
  * machine: fix default connection URL to use 127.0.0.1
  * compat: accept tag in /images/create?fromSrc
  * compat container create: match duplicate mounts correctly
  * machine: qemu only remove connection after confirmation
  * windows: podman save allow the use of stdout
  * remote: exec inspect update exec session status
  * podman-remote logs: handle server error correctly
  * libpod: stop containers with --restart=always
  * Do not include image annotations when building spec
  * [v4.5] system tests: fix race in kube-play read-only
  * api: fix parsing filters
  * Support systemd optional prefix '-' for devices.
  * *: migrate image registry to registry.k8s.io
  * Makefile: include `release-artifacts` target
  * [CI:BUILD] Packit: Initial Enablement
  * Bump to v4.5.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
</package>
<package pkgid="c159f38bcd4233b6b45c2797bc3b5aa57cad921b70280eabaf4041a6146bf0bc" name="podman" arch="aarch64">
  <version epoch="0" ver="4.8.3" rel="150500.3.6.1"/>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
</package>
<package pkgid="54cc0e705ba8c63f74346007172ce7c9820e2b24e306c85346e0e28548bb2989" name="podman" arch="ppc64le">
  <version epoch="0" ver="4.8.3" rel="150500.3.6.1"/>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
</package>
<package pkgid="b5b1e7ab9fdb9b1cedc1dd5658a3d75e4a8956b8a3115a6c97c8b636dcc27d34" name="podman" arch="s390x">
  <version epoch="0" ver="4.8.3" rel="150500.3.6.1"/>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
</package>
<package pkgid="c38f7a6c8a735591f9fdd2bd445d8979e098856bd8b990bc38be1d2f666868fa" name="podman" arch="src">
  <version epoch="0" ver="4.8.3" rel="150500.3.6.1"/>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
</package>
<package pkgid="0bfb1a043a9e6fac53b33c17458378a3168e10d75f37dd28dfd7c6115801173e" name="podman" arch="x86_64">
  <version epoch="0" ver="4.8.3" rel="150500.3.6.1"/>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
</package>
<package pkgid="4bc0df6c4e7df0728d8acba01e78ee95d9e753ed493ab7f41b2370267f184a09" name="podman-docker" arch="noarch">
  <version epoch="0" ver="4.7.2" rel="150500.3.3.1"/>
  <changelog author="danish.prakash@suse.com" date="1677240000">- Update to version 4.4.2:
  * Bump to v4.4.2
  * Release notes for v4.4.2
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * kube play: only enforce passthrough in Quadlet
  * Emergency fix for man pages: check for broken includes
  * CI: Temporarily disable all AWS EC2-based tasks
  * quadlet system tests: add useful defaults, logging
  * volume,container: chroot to source before exporting content
  * install sigproxy before start/attach
  * Update to c/image 5.24.1
  * events + container inspect test: RHEL fixes
  * Bump to v4.4.2-dev
- Remove patches (merged upstream):
  * volume-container-chroot-to-source-before-exporting-content.patch
- podman.spec: add `crun` requirement for quadlet
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add patch to let quadlet use the default runtime
  Added patch:
  * Quadlet-use-the-default-runtime.patch
  =&gt; Remove dependency on crun</changelog>
  <changelog author="danish.prakash@suse.com" date="1679659200">- Update to version 4.4.3:
  * Bump to v4.4.3
  * Release notes for v4.4.3
  * compat: /auth: parse server address correctly
  * vendor github.com/containers/common@v0.51.1
  * pkginstaller: bump Qemu to version 7.2.0
  * podman machine: Adjust Chrony makestep config
  * [v4.4] fix --health-on-failure=restart in transient unit
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * journald: remove initializeJournal()
  * netavark: only use aardvark ip as nameserver
  * compat API: network create return 409 for duplicate
  * fix "podman logs --since --follow" flake
  * system service --log-level=trace: support hijack
  * podman-mac-helper: exit 1 on error
  * bump golang.org/x/net to v0.8.0
  * Fix package restore
  * Quadlet - use the default runtime
  * Bump to v4.4.3-dev
- Remove patch (merged upstream):
  * Quadlet-use-the-default-runtime.patch
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="danish.prakash@suse.com" date="1680004800">- Update to version 4.4.4:
  * Bump to v4.4.4
  * Release notes for v4.4.4
  * libpod: always use direct mapping
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * Bump to v4.4.4-dev
- spec: Bump required version for libcontainers-common (bsc#1209495)</changelog>
  <changelog author="dcermak@suse.com" date="1681473600">- Don't build against EoL go versions, fixes bsc#1210299</changelog>
  <changelog author="danish.prakash@suse.com" date="1681819200">- Update to version 4.5.0:
  * Release v4.5.0
  * [CI:DOCS] Final release notes for v4.5.0
  * Quadlet - do not set log-driver by default
  * Return title fields as a list
  * Bump to v4.5.0-dev
  * Bump to v4.5.0-RC2
  * Final release notes for v4.5.0-RC2
  * test/e2e: remove unnecessary SkipIfNetavark() calls
  * test/e2e: deduplicated network test
  * docs: update podman-network-create.1
  * network create: add --interface-name
  * test/system/252-quadlet.bats: fix flake
  * Read kube_generate_type from containers.conf
  * Debian setup: workaround for runc /dev/char/10:200 bug
  * pkg/rootless: use catatonit from /usr/libexec/podman
  * rootless: make sure we only use a single pause process
  * Use atomic config writing strategy for podman machine config files
  * Add remaining release notes for v4.5.0-RC2
  * GHA: Use version instead of SHA for actions
  * chore(deps): update dependency containers/automation_images to v20230405
  * build: pass env by reference
  * test: retrofit error message
  * test/system: expect 12 char for short id
  * vendor: bump containers/(storage, common, buildah, image)
  * [skip-ci] Update actions/upload-artifact action to v3
  * [skip-ci] Update actions/stale action to v8
  * [skip-ci] Update actions/setup-go action to v4
  * [skip-ci] Update github/issue-labeler action to v2.6
  * Fix up codespell errors
  * Capitalize all uid,gid and id words that are not options in docs
  * build(deps): bump golang.org/x/tools from 0.7.0 to 0.8.0 in /test/tools
  * Properly remove the service container during kube down
  * quadlet: add `UserNS` option key
  * [CI:DOCS] Release notes for 4.5.0 Part 1
  * "podman pull by digest and list --all" test: untag instead of rmi
  * build(deps): bump golang.org/x/text from 0.8.0 to 0.9.0
  * Add renovate.json configuration
  * CI: postbuild step: skip under nightly treadmill
  * The `--ulimit` option accepts the name with an `RLIMIT_` prefix both upper and lower case
  * test/e2e: use custom network config dir where needed
  * chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml`
  * update completion scripts for cobra v1.7.0
  * libpod.storageService.CreateContainerStorage(): retrieve ID maps
  * Fix invalid pod name and hostname during kube generate
  * e2e tests: fix racy flakes
  * Cirrus: Enable labeling of EC2 VMs
  * Cirrus: Fix aarch64 clone_script 404 errors
  * e2e: GinkgoParallelNode() -&gt; ...Process()
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
  * [CI:DOCS] --creds and registries
  * Copr: fix build deps for /usr/bin/envsubst
  * Don't error when removing non-existant env vars
  * e2e: healthcheck on stopped container: fix flake
  * test/apiv2/80-kube.at
  * test/apiv2/80-kube.at
  * system service: do not close Body
  * rm `hack/release.sh`
  * build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6
  * add `quadlet -version` flag
  * add version/rawversion package
  * quadlet: use `Flag` suffix for variables
  * quadlet: implement `Tmpfs` option
  * Bump to v4.5.0-dev
  * Bump to 4.5.0-rc1
  * Update release notes from 4.4 branch
  * rootless netns: recover from invalid netns
  * System tests: unverbosify a flake log
  * Add support for secret exists
  * Fix Win install task failures with large PR bodies
  * docs: add `starting` to `HealthCheckResults.Status`
  * Add support for cgroup_config from containers.conf
  * libpod: mount safely subpaths
  * Support Deployment generation with kube generate
  * Use secret.items to create volume mounts if present
  * [CI:DOCS] fix typo in --systemd option
  * rootless: drop preexec hook error message
  * Edit the docker wrapper to use the install prefix
  * Update podman-for-windows.md
  * Quadlet: RemapUsers documentation fixes
  * speed up image listing
  * vendor containers/common@e27c30ee9b1b
  * fix volume-plugin-test flake
  * Document building Podman remote on Windows hosts
  * test/e2e: gpg keep stdout/err attached
  * auto-update: stop+start instead of restart sytemd units
  * [CI:DOCS] Improve basic tutorial
  * Update docs/source/markdown/podman-network.1.md
  * Add debug to --wait test
  * fix slirp4netns resolv.conf ip with a userns
  * Quadlet: add support for keep-id with mapping values
  * Quadlet E2E test - run quadlet as user generator
  * sqlite: do not `Ping()` after connecting
  * Quadlet - treat paths starting with systemd specifiers as absolute
  * Update docs/source/markdown/podman-kube-play.1.md.in
  * system tests: use CONTAINERS_CONF_OVERRIDE
  * implement podman machine set for hyperv
  * [CI:DOCS] Add network subnets info to network man page
  * CI: retry the golangci install
  * system tests: fix racey sdnotify test
  * hyperv: lookup machine on local filesystem first
  * fix os.IsNotExist() CI check
  * Ensure that SQLite state handles name-ID collisions
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * build(deps): bump github.com/onsi/gomega from 1.27.4 to 1.27.5
  * Fix a race around SQLite DB config validation
  * add CONTAINERS_CONF_OVERRIDE
  * vendor containers/common@main
  * docs: minor grammar fix in `--volume` description
  * sqlite: do not use shared cache
  * test: podman checkpoint/restore the latest container
  * stats compat API: return "id" lowercase
  * Run make codespell
  * Drop SQLite max connections
  * sqlite: set connection attributes on open
  * Fix database locked errors with SQLite
  * quadlet tests: skip on RHEL8 rootless
  * Kube Play Doc: Document the support for K8S Secret
  * New ulimit test: bump up minimum nfiles
  * logformatter: hide --db-backend, and friendlyize quadlet
  * Quadlet - add support for relative path in Volume key in .container file
  * Add service ctr cleanup to PlayKubeDown
  * fix --health-on-failure=restart in transient unit
  * Quadlet Doc: Suggest the kill operation for HealthOnFailure
  * Quadlet - Add support for health checks configuration in .container files
  * Makefile: allow specifying /lib dir location
  * Fix option --opts -&gt; --opt
  * basic hypverv machine implementation
  * Fix SQLite DB schema migration code
  * Add support for oom_score_adj value from containers.conf
  * Use default_ulimits field in containers.conf
  * CI: test and confirm DESIRED_DATABASE
  * build(deps): bump github.com/openshift/imagebuilder
  * logformatter: futureproof output filename
  * Vendor in latest containers/(storage, common, image)
  * build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.30.0
  * test/system/255-auto-update.bats: add debug logs
  * Revert "Revert "pasta: Use two connections instead of three in TCP range forward tests""
  * Add information for secret inspect
  * Add format to podman volume ls
  * Add format to podman volume inspect
  * Add format to podman secret ls
  * Add format to podman system df
  * Add format to podman machine info
  * Add format table to podman image inspect man page
  * Cirrus: Store podman machine benchmark data
  * Update Cirrus display names, and fix get-ci-vm script
  * Ensure SQLite places uses the runroot in transient mode
  * Fix various integration test issues with SQLite state
  * Remove test for pod/container name global uniqueness
  * Improve handling of existing container names in SQLite
  * Add SQLite job to CI
  * buildah treadmill: also run rootless tests
  * build(deps): bump github.com/vbatts/git-validation in /test/tools
  * auto update: return restart error
  * fix: Document removing anonymous volumes
  * events: no duplicates when streaming during a log rotation
  * Add search --cert-dir, --creds
  * podman-mac-helper: exit 1 on error
  * system service --log-level=trace: support hijack
  * test/system: fix wait_for_port() to wait for bind
  * cgroupns: private cgroupns on cgroupv1 breaks --systemd
  * libpod: remove error stutter
  * podman events: unhide --stream
  * test/system/255-auto-update.bats: multiple services
  * 255-auto-update.bats: turn off rollback where needed
  * Use append() to add elements to a slice
  * Revert "pasta: Use two connections instead of three in TCP range forward tests"
  * Support running nested SELinux container separation
  * bud tests: rootless remote: use correct socket path
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.2.1 to 8.3.0
  * compat: /auth: parse server address correctly
  * docs: fix cmd `set DOCKER_HOST` suggestion
  * test: reenable idmap test
  * Must use mountlabel when creating builtin volumes
  * podman.spec.rpkg: distro conditionals for modulesloaddir
  * build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0
  * podman inspect list network when using --net=host or none
  * pasta: Re-enable "Local forwarder, IPv4" test, accept NXDOMAIN as response
  * build(deps): bump golang.org/x/tools from 0.6.0 to 0.7.0 in /test/tools
  * CI: Switch to c20230307t192532z-f37f36d12 images
  * Cirrus: Run system &amp; integration tests in parallel
  * Update checkpointctl v0.1.0
  * Quadlet: add support for setting --ip and --ip6
  * build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0
  * build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0
  * libpod: avoid nil pointer dereference in (*Container).Cleanup
  * [CI:DOCS] Add image not found info to troubleshooting
  * cmd: do not require userns for "version"
  * cmd: drop special handling for "scp"
  * cmd: clarify meaning of ParentNSRequired
  * Fix package restore
  * [CI:DOCS] Fix docs/version-check always requesting updates
  * sqlite: add a hidden --db-backend flag
  * fix: update the default machine value when the previously set default machine is deleted
  * podman machine: Adjust Chrony makestep config
  * sqlite: add container short ID to network aliases
  * sqlite: remove dead code
  * sqlite: addContainer: add named volume only once
  * sqlite: implement RewriteVolumeConfig
  * sqlite: LookupVolume: fix partial name match
  * sqlite: LookupVolume: wrap error
  * sqlite: fix type rewriting container config
  * sqlite: return correct error on pod-name conflict
  * sqlite: RewritePodConfig: update error message
  * test/system/255-auto-update.bats: wait 10 for update to finish
  * auto-update test: wait for service to be ready
  * Vendor in latest containers/(common, storage, image)
  * play kube: Add --wait option
  * Cirrus: Fix git config permission denied
  * Quadlet: Add support for the Mount key in .container files
  * build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2
  * fix "podman logs --since --follow" flake
  * Clarify that replicas are ignored in kubernetes deployment
  * Revert "Skip all pasta tests"
  * CI: Switch to c20230223t153813z-f37f36d12 images
  * Fix user socket path
  * pkginstaller: bump Qemu to version 7.2.0
  * Cirrus: Fix bud tests failing to apply patches
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2
  * build(deps): bump github.com/coreos/stream-metadata-go
  * Vendor in latest containers/storage
  * buildah-bud tests: don't sudo when rootless is desired
  * Temporarily disable version-check
  * CI: new rootless buildah-bud tests (cron only)
  * sqlite: fix volume lookups with partial names
  * sqlite: fix container lookups with partial IDs
  * sqlite: fix LookupPod
  * sqlite: fix pod create/rm
  * sqlite: LookupContainer: update error message
  * sqlite: AddContainerExitCode: allow to replace
  * system: add warning when running rootless on cgroupv1
  * sqlite: fix AllContainers with state
  * sqlite: fix "UPDATE TABLE" typos
  * sqlite: SaveVolume: fix syntax error updating the volumes table
  * sqlite: exit code: allow -1
  * sqlite: fix typo when removing exec sessions
  * sqlite: AllContainers: fix inner join
  * sqlite: move migration after table creation
  * sqlite: implement pod methods
  * Quadlet - use the default runtime
  * docs: context is not optional for build
  * Fix an incorrect comment on NewSqliteState
  * Add support for containers.conf database setting
  * Add support for volume operations to SQLite state
  * Implement exec session handling in SQL database
  * Various fixes from code review
  * Remove `--namespace` flag from Podman root
  * Get E2E tests to pass
  * Implement network disconnect for SQLite state
  * Implement Network Connect/Modify for SQLite state
  * Fix various lint issues
  * Some further work on SQLite state
  * Remove concept of Namespaces from BoltDB
  * Add initial SQLite-backed state implementation
  * Cirrus: Support runc testing on debian VMs
  * Skip all pasta tests
  * Skip buildah-bud test
  * Skip buildx test with VFS podman storage driver
  * Skip 'podman kube --network' test for rootless CGv1
  * Skip tests which fail with CGv1 &amp; runc
  * Skip rootless CGv1 quadlet tests due to issue
  * Makefile: Define SHELL
  * Machine refactor for QEMU/AppleHV
  * machine refactoring preparations for hyperv
  * [CI:BUILD] spec.rpkg: trim dependency list
  * Logs follow-until tests: loosen checks
  * [CI:DOCS] Windows/Mac docs link update
  * Doc update for docker network options via CLI
  * compat API: network create return 409 for duplicate
  * Apply suggestions to man page
  * vendor c/common@852ca05a1fbb
  * Quadlet: Add support for LogDriver key in container and kube units
  * machine refactoring preparations for hyperv
  * libpod: always use direct mapping
  * netavark: only use aardvark ip as nameserver
  * build(deps): bump github.com/container-orchestrated-devices/container-device-interface
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * make docs: sanity check for broken man pages
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.6 to 8.2.0
  * build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1
  * kube: rm secret on down, print secret on play
  * Fix spacing typo that triggered OCD &amp; indent units in podman-systemd.unit(5)
  * Update remote_client.md
  * [CI:DOCS] Add restriction to option README
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0
  * kube play: only enforce passthrough in Quadlet
  * journald: remove initializeJournal()
  * auto-update: support pods
  * Emergency fix for man pages: check for broken includes
  * System tests: assert(): friendlier failure messages
  * Cirrus: Fix version-check to only run on `main` job
  * CI: Temporarily disable all AWS EC2-based tasks
  * build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18
  * volume,container: chroot to source before exporting content
  * Support sysctl configs via podman kube play
  * [CI:BUILD] copr: podman.spec.rpkg cleanups
  * quadlet system tests: add useful defaults, logging
  * libpod: support relative positions for idmaps
  * Experimental workaround for cdn03.quay.io flake
  * system tests: prevent leading tabs
  * Introduce podman machine os apply
  * create: add support for --group-entry
  * fix != filter in volume prune
  * Allow specification of podman --remote build -f -
  * Quadlet use crun specified in containers.conf
  * build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0
  * Vendor c/image after https://github.com/containers/image/pull/1847
  * Don't set hostPort when generating a service
  * man page --format xref: tighten the autocompletion check
  * add support for limiting tmpfs size for systemd-specific mnts
  * build(deps): bump golang.org/x/text from 0.6.0 to 0.7.0
  * Add ulimit annotation to kube gen &amp; play
  * man page xref: validate displayed man page names
  * quadlet: add ExecStop
  * install sigproxy before start/attach
  * build(deps): bump golang.org/x/tools from 0.5.0 to 0.6.0 in /test/tools
  * Fix typos
  * Cirrus: Make benchmarks .env file easier to load
  * Cirrus: Omit functions in env. file
  * kube play: set service container as main PID when possible
  * Fix typos. Improve language.
  * events + container inspect test: RHEL fixes
  * Add ctrName to network alias during kube play
  * Run codespell on codebase
  * podman image scp: added identity for ssh.Exec
  * [CI:DOCS] Clarify nomap constrains
  * [CI:DOCS] man-page checker: include --format (Go templates)
  * Vendor c/image after https://github.com/containers/image/pull/1816
  * [CI:DOCS] Cleanup some man pages to display options with line breaks
  * [CI:DOCS] Add tables to podman-systemd.unit man page
  * github: remove prefix from bugs/features
  * Quadlet: Add support for the Secret key in Container group
  * [CI:DOCS] OWNERS: add @ygalblum and @alexlarsson
  * build(deps): bump golang.org/x/term from 0.4.0 to 0.5.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.1.6
  * Sort quadlet keys to make it easier to read
  * e2e: fix some tests on remote
  * kube play: do not teardown unconditionally on error
  * Fix typos in comments
  * Resolve symlink path for qemu directory if possible
  * #17363 Fix contradicting documentation podman-commit
  * Fix a potential UID/GID collision in unit tests
  * golangci-lint: show all errors at once
  * update golangci-lint to version 1.51.1
  * [CI:DOCS] events: document journald identifiers
  * Quadlet: exit 0 when there are no files to process
  * network ls: handle removed container
  * e2e: adapt play kube test on remote rootless
  * docs/podman-systemd.unit: Explicitely mention network &amp; kube units
  * docs/podman-systemd.unit: Update example to work out of the box
  * [CI:BUILD] Cirrus: Fix GraphQL ownerRepository:null error
  * Add missing return after errors
  * Revert "Cirrus: Emergency fix to un-stuck PRs"
  * pasta: Fix ICMPv6 Echo test, skip it for the moment
  * pasta: Fix ICMP Echo Request (IPv4) test
  * pasta: Use two connections instead of three in TCP range forward tests
  * Add SELinux label types support to quadlet
  * Add quadlet support for rootfs= containers
  * Cirrus: Emergency fix to un-stuck PRs
  * Move clean-binaries before podman-remote in podman-remote-docs target
  * oci: bind mount /sys with --userns=(auto|pod:)
  * Cleanup podman-systemd.unit file
  * Install podman-systemd.unit  man page, make quadlet discoverable
  * libpod: allow userns=keep-id for root
  * system-reset: use CleanCacheMount to clear build cache
  * vendor: bump buildah to v1.29.1-0.20230201192322-e56eb25575c7
  * system tests: fix noexistent labels test in the remote
  * Expose Podman named pipe in Inspect output
  * libpod: support idmap for --rootfs
  * test: adapt test to work on cgroupv1
  * Bump to v4.5.0-dev
  * Update main to reflect v4.4.0 release
  * Update from /github.com/vbauerster/mpb/v7 to /v8
  * hack/perf: cleanup after benchmarks
  * hack/perf/bz-2162111.sh: use custom network
  * Update bug_report.yaml
  * Handle filetype field in kubernetes.yaml files
  * hack/perf/bz-2162111.sh: measure stop
  * make hack/markdown-preprocess parallel-safe
  * system tests: fix volume exec/noexec test
  * system tests: minor fix for RHEL8 incompatibility
  * Cirrus: Use versionable IMAGE_SUFFIX
  * utils: new conversion method
  * libpod: use GraphRoot for overlay upper dir
  * vendor: update containers/storage
  * Do not mount /dev/tty into rootless containers
  * build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7
  * e2e: fix run_staticip_test about no_proxy
  * docs: specify order preference for FROM
  * Fixes port collision issue on use of --publish-all
  * Support for Windows paths in the source position of the volume mounts
  * e2e tests: fix incorrect os.User.Name
  * Log data that we failed to unmarshal
  * [CI:DOCS] hack/perf: add script for BZ 216111
  * container rm: save once for exec removal and state change
  * [DOCS:CI] podman-events: document verbose create events
  * e2e: Avoid hard-coding included in quadlet test
  * e2e: Avoid hard-coding ImageCacheDir
  * Making gvproxy.exe optional for building Windows installer
  * Add gvproxy to Windows packages
  * Add comment to clarify error handling intention
  * fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
  * Fix usage of absolute windows paths with --image-path
  * Match VT device paths to be blocked from mounting exactly
  * Fix default handling of pids-limit
  * Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
  * journald: podman logs only show logs for current user
  * journald: podman events only show events for current user
  * e2e: Remove the cache with "podman unshare rm" when a rootless user
  * Clean up more language for inclusiveness
  * e2e: Remove some directories at SynchronizedAfterSuite
  * fix: don't output "ago" when container is currently up and running
  * fix: running check error when podman is default in wsl
  * fix CI: test fail due to merge
  * Bump Bulidah to v1.29.0
  * e2e: reduce dependency on /tmp for e2e tests
  * Bump cirrus image with easier dependency management
  * quadlet: Add device support for .volume files
  * remote,build: error if containerignore is symlink
  * DB: make loading container states optional
  * ps: do not sync container
  * Set runAsNonRoot=true in gen kube
  * WSL refactoring
  * kube-play: add support for HostIPC in pod.Spec
  * Allow --device-cgroup-rule to be passed in by docker API</changelog>
  <changelog author="danish.prakash@suse.com" date="1685361600">- Update to version 4.5.1:
  * Release v4.5.1
  * [CI:DOCS] Final release notes for v4.5.1
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * Revert "Resolve symlink path for qemu directory if possible"
  * no need for podman-next rpm test on maint branch
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * network create/update: allow dns servers comma separated
  * machine: fix default connection URL to use 127.0.0.1
  * compat: accept tag in /images/create?fromSrc
  * compat container create: match duplicate mounts correctly
  * machine: qemu only remove connection after confirmation
  * windows: podman save allow the use of stdout
  * remote: exec inspect update exec session status
  * podman-remote logs: handle server error correctly
  * libpod: stop containers with --restart=always
  * Do not include image annotations when building spec
  * [v4.5] system tests: fix race in kube-play read-only
  * api: fix parsing filters
  * Support systemd optional prefix '-' for devices.
  * *: migrate image registry to registry.k8s.io
  * Makefile: include `release-artifacts` target
  * [CI:BUILD] Packit: Initial Enablement
  * Bump to v4.5.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
</package>
<package pkgid="4ab94c3c3998902d4724644c5ddd9a4990a2b180cd70a9cfcdb42df159b2c0ad" name="podman-docker" arch="noarch">
  <version epoch="0" ver="4.8.3" rel="150500.3.6.1"/>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
</package>
<package pkgid="9c9bae1492dd1dbc4fc75cc932e941aac718f40eda00f34346e119a82da4d01c" name="podman-remote" arch="aarch64">
  <version epoch="0" ver="4.7.2" rel="150500.3.3.1"/>
  <changelog author="danish.prakash@suse.com" date="1677240000">- Update to version 4.4.2:
  * Bump to v4.4.2
  * Release notes for v4.4.2
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * kube play: only enforce passthrough in Quadlet
  * Emergency fix for man pages: check for broken includes
  * CI: Temporarily disable all AWS EC2-based tasks
  * quadlet system tests: add useful defaults, logging
  * volume,container: chroot to source before exporting content
  * install sigproxy before start/attach
  * Update to c/image 5.24.1
  * events + container inspect test: RHEL fixes
  * Bump to v4.4.2-dev
- Remove patches (merged upstream):
  * volume-container-chroot-to-source-before-exporting-content.patch
- podman.spec: add `crun` requirement for quadlet
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add patch to let quadlet use the default runtime
  Added patch:
  * Quadlet-use-the-default-runtime.patch
  =&gt; Remove dependency on crun</changelog>
  <changelog author="danish.prakash@suse.com" date="1679659200">- Update to version 4.4.3:
  * Bump to v4.4.3
  * Release notes for v4.4.3
  * compat: /auth: parse server address correctly
  * vendor github.com/containers/common@v0.51.1
  * pkginstaller: bump Qemu to version 7.2.0
  * podman machine: Adjust Chrony makestep config
  * [v4.4] fix --health-on-failure=restart in transient unit
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * journald: remove initializeJournal()
  * netavark: only use aardvark ip as nameserver
  * compat API: network create return 409 for duplicate
  * fix "podman logs --since --follow" flake
  * system service --log-level=trace: support hijack
  * podman-mac-helper: exit 1 on error
  * bump golang.org/x/net to v0.8.0
  * Fix package restore
  * Quadlet - use the default runtime
  * Bump to v4.4.3-dev
- Remove patch (merged upstream):
  * Quadlet-use-the-default-runtime.patch
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="danish.prakash@suse.com" date="1680004800">- Update to version 4.4.4:
  * Bump to v4.4.4
  * Release notes for v4.4.4
  * libpod: always use direct mapping
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * Bump to v4.4.4-dev
- spec: Bump required version for libcontainers-common (bsc#1209495)</changelog>
  <changelog author="dcermak@suse.com" date="1681473600">- Don't build against EoL go versions, fixes bsc#1210299</changelog>
  <changelog author="danish.prakash@suse.com" date="1681819200">- Update to version 4.5.0:
  * Release v4.5.0
  * [CI:DOCS] Final release notes for v4.5.0
  * Quadlet - do not set log-driver by default
  * Return title fields as a list
  * Bump to v4.5.0-dev
  * Bump to v4.5.0-RC2
  * Final release notes for v4.5.0-RC2
  * test/e2e: remove unnecessary SkipIfNetavark() calls
  * test/e2e: deduplicated network test
  * docs: update podman-network-create.1
  * network create: add --interface-name
  * test/system/252-quadlet.bats: fix flake
  * Read kube_generate_type from containers.conf
  * Debian setup: workaround for runc /dev/char/10:200 bug
  * pkg/rootless: use catatonit from /usr/libexec/podman
  * rootless: make sure we only use a single pause process
  * Use atomic config writing strategy for podman machine config files
  * Add remaining release notes for v4.5.0-RC2
  * GHA: Use version instead of SHA for actions
  * chore(deps): update dependency containers/automation_images to v20230405
  * build: pass env by reference
  * test: retrofit error message
  * test/system: expect 12 char for short id
  * vendor: bump containers/(storage, common, buildah, image)
  * [skip-ci] Update actions/upload-artifact action to v3
  * [skip-ci] Update actions/stale action to v8
  * [skip-ci] Update actions/setup-go action to v4
  * [skip-ci] Update github/issue-labeler action to v2.6
  * Fix up codespell errors
  * Capitalize all uid,gid and id words that are not options in docs
  * build(deps): bump golang.org/x/tools from 0.7.0 to 0.8.0 in /test/tools
  * Properly remove the service container during kube down
  * quadlet: add `UserNS` option key
  * [CI:DOCS] Release notes for 4.5.0 Part 1
  * "podman pull by digest and list --all" test: untag instead of rmi
  * build(deps): bump golang.org/x/text from 0.8.0 to 0.9.0
  * Add renovate.json configuration
  * CI: postbuild step: skip under nightly treadmill
  * The `--ulimit` option accepts the name with an `RLIMIT_` prefix both upper and lower case
  * test/e2e: use custom network config dir where needed
  * chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml`
  * update completion scripts for cobra v1.7.0
  * libpod.storageService.CreateContainerStorage(): retrieve ID maps
  * Fix invalid pod name and hostname during kube generate
  * e2e tests: fix racy flakes
  * Cirrus: Enable labeling of EC2 VMs
  * Cirrus: Fix aarch64 clone_script 404 errors
  * e2e: GinkgoParallelNode() -&gt; ...Process()
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
  * [CI:DOCS] --creds and registries
  * Copr: fix build deps for /usr/bin/envsubst
  * Don't error when removing non-existant env vars
  * e2e: healthcheck on stopped container: fix flake
  * test/apiv2/80-kube.at
  * test/apiv2/80-kube.at
  * system service: do not close Body
  * rm `hack/release.sh`
  * build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6
  * add `quadlet -version` flag
  * add version/rawversion package
  * quadlet: use `Flag` suffix for variables
  * quadlet: implement `Tmpfs` option
  * Bump to v4.5.0-dev
  * Bump to 4.5.0-rc1
  * Update release notes from 4.4 branch
  * rootless netns: recover from invalid netns
  * System tests: unverbosify a flake log
  * Add support for secret exists
  * Fix Win install task failures with large PR bodies
  * docs: add `starting` to `HealthCheckResults.Status`
  * Add support for cgroup_config from containers.conf
  * libpod: mount safely subpaths
  * Support Deployment generation with kube generate
  * Use secret.items to create volume mounts if present
  * [CI:DOCS] fix typo in --systemd option
  * rootless: drop preexec hook error message
  * Edit the docker wrapper to use the install prefix
  * Update podman-for-windows.md
  * Quadlet: RemapUsers documentation fixes
  * speed up image listing
  * vendor containers/common@e27c30ee9b1b
  * fix volume-plugin-test flake
  * Document building Podman remote on Windows hosts
  * test/e2e: gpg keep stdout/err attached
  * auto-update: stop+start instead of restart sytemd units
  * [CI:DOCS] Improve basic tutorial
  * Update docs/source/markdown/podman-network.1.md
  * Add debug to --wait test
  * fix slirp4netns resolv.conf ip with a userns
  * Quadlet: add support for keep-id with mapping values
  * Quadlet E2E test - run quadlet as user generator
  * sqlite: do not `Ping()` after connecting
  * Quadlet - treat paths starting with systemd specifiers as absolute
  * Update docs/source/markdown/podman-kube-play.1.md.in
  * system tests: use CONTAINERS_CONF_OVERRIDE
  * implement podman machine set for hyperv
  * [CI:DOCS] Add network subnets info to network man page
  * CI: retry the golangci install
  * system tests: fix racey sdnotify test
  * hyperv: lookup machine on local filesystem first
  * fix os.IsNotExist() CI check
  * Ensure that SQLite state handles name-ID collisions
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * build(deps): bump github.com/onsi/gomega from 1.27.4 to 1.27.5
  * Fix a race around SQLite DB config validation
  * add CONTAINERS_CONF_OVERRIDE
  * vendor containers/common@main
  * docs: minor grammar fix in `--volume` description
  * sqlite: do not use shared cache
  * test: podman checkpoint/restore the latest container
  * stats compat API: return "id" lowercase
  * Run make codespell
  * Drop SQLite max connections
  * sqlite: set connection attributes on open
  * Fix database locked errors with SQLite
  * quadlet tests: skip on RHEL8 rootless
  * Kube Play Doc: Document the support for K8S Secret
  * New ulimit test: bump up minimum nfiles
  * logformatter: hide --db-backend, and friendlyize quadlet
  * Quadlet - add support for relative path in Volume key in .container file
  * Add service ctr cleanup to PlayKubeDown
  * fix --health-on-failure=restart in transient unit
  * Quadlet Doc: Suggest the kill operation for HealthOnFailure
  * Quadlet - Add support for health checks configuration in .container files
  * Makefile: allow specifying /lib dir location
  * Fix option --opts -&gt; --opt
  * basic hypverv machine implementation
  * Fix SQLite DB schema migration code
  * Add support for oom_score_adj value from containers.conf
  * Use default_ulimits field in containers.conf
  * CI: test and confirm DESIRED_DATABASE
  * build(deps): bump github.com/openshift/imagebuilder
  * logformatter: futureproof output filename
  * Vendor in latest containers/(storage, common, image)
  * build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.30.0
  * test/system/255-auto-update.bats: add debug logs
  * Revert "Revert "pasta: Use two connections instead of three in TCP range forward tests""
  * Add information for secret inspect
  * Add format to podman volume ls
  * Add format to podman volume inspect
  * Add format to podman secret ls
  * Add format to podman system df
  * Add format to podman machine info
  * Add format table to podman image inspect man page
  * Cirrus: Store podman machine benchmark data
  * Update Cirrus display names, and fix get-ci-vm script
  * Ensure SQLite places uses the runroot in transient mode
  * Fix various integration test issues with SQLite state
  * Remove test for pod/container name global uniqueness
  * Improve handling of existing container names in SQLite
  * Add SQLite job to CI
  * buildah treadmill: also run rootless tests
  * build(deps): bump github.com/vbatts/git-validation in /test/tools
  * auto update: return restart error
  * fix: Document removing anonymous volumes
  * events: no duplicates when streaming during a log rotation
  * Add search --cert-dir, --creds
  * podman-mac-helper: exit 1 on error
  * system service --log-level=trace: support hijack
  * test/system: fix wait_for_port() to wait for bind
  * cgroupns: private cgroupns on cgroupv1 breaks --systemd
  * libpod: remove error stutter
  * podman events: unhide --stream
  * test/system/255-auto-update.bats: multiple services
  * 255-auto-update.bats: turn off rollback where needed
  * Use append() to add elements to a slice
  * Revert "pasta: Use two connections instead of three in TCP range forward tests"
  * Support running nested SELinux container separation
  * bud tests: rootless remote: use correct socket path
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.2.1 to 8.3.0
  * compat: /auth: parse server address correctly
  * docs: fix cmd `set DOCKER_HOST` suggestion
  * test: reenable idmap test
  * Must use mountlabel when creating builtin volumes
  * podman.spec.rpkg: distro conditionals for modulesloaddir
  * build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0
  * podman inspect list network when using --net=host or none
  * pasta: Re-enable "Local forwarder, IPv4" test, accept NXDOMAIN as response
  * build(deps): bump golang.org/x/tools from 0.6.0 to 0.7.0 in /test/tools
  * CI: Switch to c20230307t192532z-f37f36d12 images
  * Cirrus: Run system &amp; integration tests in parallel
  * Update checkpointctl v0.1.0
  * Quadlet: add support for setting --ip and --ip6
  * build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0
  * build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0
  * libpod: avoid nil pointer dereference in (*Container).Cleanup
  * [CI:DOCS] Add image not found info to troubleshooting
  * cmd: do not require userns for "version"
  * cmd: drop special handling for "scp"
  * cmd: clarify meaning of ParentNSRequired
  * Fix package restore
  * [CI:DOCS] Fix docs/version-check always requesting updates
  * sqlite: add a hidden --db-backend flag
  * fix: update the default machine value when the previously set default machine is deleted
  * podman machine: Adjust Chrony makestep config
  * sqlite: add container short ID to network aliases
  * sqlite: remove dead code
  * sqlite: addContainer: add named volume only once
  * sqlite: implement RewriteVolumeConfig
  * sqlite: LookupVolume: fix partial name match
  * sqlite: LookupVolume: wrap error
  * sqlite: fix type rewriting container config
  * sqlite: return correct error on pod-name conflict
  * sqlite: RewritePodConfig: update error message
  * test/system/255-auto-update.bats: wait 10 for update to finish
  * auto-update test: wait for service to be ready
  * Vendor in latest containers/(common, storage, image)
  * play kube: Add --wait option
  * Cirrus: Fix git config permission denied
  * Quadlet: Add support for the Mount key in .container files
  * build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2
  * fix "podman logs --since --follow" flake
  * Clarify that replicas are ignored in kubernetes deployment
  * Revert "Skip all pasta tests"
  * CI: Switch to c20230223t153813z-f37f36d12 images
  * Fix user socket path
  * pkginstaller: bump Qemu to version 7.2.0
  * Cirrus: Fix bud tests failing to apply patches
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2
  * build(deps): bump github.com/coreos/stream-metadata-go
  * Vendor in latest containers/storage
  * buildah-bud tests: don't sudo when rootless is desired
  * Temporarily disable version-check
  * CI: new rootless buildah-bud tests (cron only)
  * sqlite: fix volume lookups with partial names
  * sqlite: fix container lookups with partial IDs
  * sqlite: fix LookupPod
  * sqlite: fix pod create/rm
  * sqlite: LookupContainer: update error message
  * sqlite: AddContainerExitCode: allow to replace
  * system: add warning when running rootless on cgroupv1
  * sqlite: fix AllContainers with state
  * sqlite: fix "UPDATE TABLE" typos
  * sqlite: SaveVolume: fix syntax error updating the volumes table
  * sqlite: exit code: allow -1
  * sqlite: fix typo when removing exec sessions
  * sqlite: AllContainers: fix inner join
  * sqlite: move migration after table creation
  * sqlite: implement pod methods
  * Quadlet - use the default runtime
  * docs: context is not optional for build
  * Fix an incorrect comment on NewSqliteState
  * Add support for containers.conf database setting
  * Add support for volume operations to SQLite state
  * Implement exec session handling in SQL database
  * Various fixes from code review
  * Remove `--namespace` flag from Podman root
  * Get E2E tests to pass
  * Implement network disconnect for SQLite state
  * Implement Network Connect/Modify for SQLite state
  * Fix various lint issues
  * Some further work on SQLite state
  * Remove concept of Namespaces from BoltDB
  * Add initial SQLite-backed state implementation
  * Cirrus: Support runc testing on debian VMs
  * Skip all pasta tests
  * Skip buildah-bud test
  * Skip buildx test with VFS podman storage driver
  * Skip 'podman kube --network' test for rootless CGv1
  * Skip tests which fail with CGv1 &amp; runc
  * Skip rootless CGv1 quadlet tests due to issue
  * Makefile: Define SHELL
  * Machine refactor for QEMU/AppleHV
  * machine refactoring preparations for hyperv
  * [CI:BUILD] spec.rpkg: trim dependency list
  * Logs follow-until tests: loosen checks
  * [CI:DOCS] Windows/Mac docs link update
  * Doc update for docker network options via CLI
  * compat API: network create return 409 for duplicate
  * Apply suggestions to man page
  * vendor c/common@852ca05a1fbb
  * Quadlet: Add support for LogDriver key in container and kube units
  * machine refactoring preparations for hyperv
  * libpod: always use direct mapping
  * netavark: only use aardvark ip as nameserver
  * build(deps): bump github.com/container-orchestrated-devices/container-device-interface
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * make docs: sanity check for broken man pages
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.6 to 8.2.0
  * build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1
  * kube: rm secret on down, print secret on play
  * Fix spacing typo that triggered OCD &amp; indent units in podman-systemd.unit(5)
  * Update remote_client.md
  * [CI:DOCS] Add restriction to option README
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0
  * kube play: only enforce passthrough in Quadlet
  * journald: remove initializeJournal()
  * auto-update: support pods
  * Emergency fix for man pages: check for broken includes
  * System tests: assert(): friendlier failure messages
  * Cirrus: Fix version-check to only run on `main` job
  * CI: Temporarily disable all AWS EC2-based tasks
  * build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18
  * volume,container: chroot to source before exporting content
  * Support sysctl configs via podman kube play
  * [CI:BUILD] copr: podman.spec.rpkg cleanups
  * quadlet system tests: add useful defaults, logging
  * libpod: support relative positions for idmaps
  * Experimental workaround for cdn03.quay.io flake
  * system tests: prevent leading tabs
  * Introduce podman machine os apply
  * create: add support for --group-entry
  * fix != filter in volume prune
  * Allow specification of podman --remote build -f -
  * Quadlet use crun specified in containers.conf
  * build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0
  * Vendor c/image after https://github.com/containers/image/pull/1847
  * Don't set hostPort when generating a service
  * man page --format xref: tighten the autocompletion check
  * add support for limiting tmpfs size for systemd-specific mnts
  * build(deps): bump golang.org/x/text from 0.6.0 to 0.7.0
  * Add ulimit annotation to kube gen &amp; play
  * man page xref: validate displayed man page names
  * quadlet: add ExecStop
  * install sigproxy before start/attach
  * build(deps): bump golang.org/x/tools from 0.5.0 to 0.6.0 in /test/tools
  * Fix typos
  * Cirrus: Make benchmarks .env file easier to load
  * Cirrus: Omit functions in env. file
  * kube play: set service container as main PID when possible
  * Fix typos. Improve language.
  * events + container inspect test: RHEL fixes
  * Add ctrName to network alias during kube play
  * Run codespell on codebase
  * podman image scp: added identity for ssh.Exec
  * [CI:DOCS] Clarify nomap constrains
  * [CI:DOCS] man-page checker: include --format (Go templates)
  * Vendor c/image after https://github.com/containers/image/pull/1816
  * [CI:DOCS] Cleanup some man pages to display options with line breaks
  * [CI:DOCS] Add tables to podman-systemd.unit man page
  * github: remove prefix from bugs/features
  * Quadlet: Add support for the Secret key in Container group
  * [CI:DOCS] OWNERS: add @ygalblum and @alexlarsson
  * build(deps): bump golang.org/x/term from 0.4.0 to 0.5.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.1.6
  * Sort quadlet keys to make it easier to read
  * e2e: fix some tests on remote
  * kube play: do not teardown unconditionally on error
  * Fix typos in comments
  * Resolve symlink path for qemu directory if possible
  * #17363 Fix contradicting documentation podman-commit
  * Fix a potential UID/GID collision in unit tests
  * golangci-lint: show all errors at once
  * update golangci-lint to version 1.51.1
  * [CI:DOCS] events: document journald identifiers
  * Quadlet: exit 0 when there are no files to process
  * network ls: handle removed container
  * e2e: adapt play kube test on remote rootless
  * docs/podman-systemd.unit: Explicitely mention network &amp; kube units
  * docs/podman-systemd.unit: Update example to work out of the box
  * [CI:BUILD] Cirrus: Fix GraphQL ownerRepository:null error
  * Add missing return after errors
  * Revert "Cirrus: Emergency fix to un-stuck PRs"
  * pasta: Fix ICMPv6 Echo test, skip it for the moment
  * pasta: Fix ICMP Echo Request (IPv4) test
  * pasta: Use two connections instead of three in TCP range forward tests
  * Add SELinux label types support to quadlet
  * Add quadlet support for rootfs= containers
  * Cirrus: Emergency fix to un-stuck PRs
  * Move clean-binaries before podman-remote in podman-remote-docs target
  * oci: bind mount /sys with --userns=(auto|pod:)
  * Cleanup podman-systemd.unit file
  * Install podman-systemd.unit  man page, make quadlet discoverable
  * libpod: allow userns=keep-id for root
  * system-reset: use CleanCacheMount to clear build cache
  * vendor: bump buildah to v1.29.1-0.20230201192322-e56eb25575c7
  * system tests: fix noexistent labels test in the remote
  * Expose Podman named pipe in Inspect output
  * libpod: support idmap for --rootfs
  * test: adapt test to work on cgroupv1
  * Bump to v4.5.0-dev
  * Update main to reflect v4.4.0 release
  * Update from /github.com/vbauerster/mpb/v7 to /v8
  * hack/perf: cleanup after benchmarks
  * hack/perf/bz-2162111.sh: use custom network
  * Update bug_report.yaml
  * Handle filetype field in kubernetes.yaml files
  * hack/perf/bz-2162111.sh: measure stop
  * make hack/markdown-preprocess parallel-safe
  * system tests: fix volume exec/noexec test
  * system tests: minor fix for RHEL8 incompatibility
  * Cirrus: Use versionable IMAGE_SUFFIX
  * utils: new conversion method
  * libpod: use GraphRoot for overlay upper dir
  * vendor: update containers/storage
  * Do not mount /dev/tty into rootless containers
  * build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7
  * e2e: fix run_staticip_test about no_proxy
  * docs: specify order preference for FROM
  * Fixes port collision issue on use of --publish-all
  * Support for Windows paths in the source position of the volume mounts
  * e2e tests: fix incorrect os.User.Name
  * Log data that we failed to unmarshal
  * [CI:DOCS] hack/perf: add script for BZ 216111
  * container rm: save once for exec removal and state change
  * [DOCS:CI] podman-events: document verbose create events
  * e2e: Avoid hard-coding included in quadlet test
  * e2e: Avoid hard-coding ImageCacheDir
  * Making gvproxy.exe optional for building Windows installer
  * Add gvproxy to Windows packages
  * Add comment to clarify error handling intention
  * fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
  * Fix usage of absolute windows paths with --image-path
  * Match VT device paths to be blocked from mounting exactly
  * Fix default handling of pids-limit
  * Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
  * journald: podman logs only show logs for current user
  * journald: podman events only show events for current user
  * e2e: Remove the cache with "podman unshare rm" when a rootless user
  * Clean up more language for inclusiveness
  * e2e: Remove some directories at SynchronizedAfterSuite
  * fix: don't output "ago" when container is currently up and running
  * fix: running check error when podman is default in wsl
  * fix CI: test fail due to merge
  * Bump Bulidah to v1.29.0
  * e2e: reduce dependency on /tmp for e2e tests
  * Bump cirrus image with easier dependency management
  * quadlet: Add device support for .volume files
  * remote,build: error if containerignore is symlink
  * DB: make loading container states optional
  * ps: do not sync container
  * Set runAsNonRoot=true in gen kube
  * WSL refactoring
  * kube-play: add support for HostIPC in pod.Spec
  * Allow --device-cgroup-rule to be passed in by docker API</changelog>
  <changelog author="danish.prakash@suse.com" date="1685361600">- Update to version 4.5.1:
  * Release v4.5.1
  * [CI:DOCS] Final release notes for v4.5.1
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * Revert "Resolve symlink path for qemu directory if possible"
  * no need for podman-next rpm test on maint branch
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * network create/update: allow dns servers comma separated
  * machine: fix default connection URL to use 127.0.0.1
  * compat: accept tag in /images/create?fromSrc
  * compat container create: match duplicate mounts correctly
  * machine: qemu only remove connection after confirmation
  * windows: podman save allow the use of stdout
  * remote: exec inspect update exec session status
  * podman-remote logs: handle server error correctly
  * libpod: stop containers with --restart=always
  * Do not include image annotations when building spec
  * [v4.5] system tests: fix race in kube-play read-only
  * api: fix parsing filters
  * Support systemd optional prefix '-' for devices.
  * *: migrate image registry to registry.k8s.io
  * Makefile: include `release-artifacts` target
  * [CI:BUILD] Packit: Initial Enablement
  * Bump to v4.5.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
</package>
<package pkgid="3af5b62c5df304a3a00a87ec781b08cf98199b846479fce2494fad36fa446b35" name="podman-remote" arch="ppc64le">
  <version epoch="0" ver="4.7.2" rel="150500.3.3.1"/>
  <changelog author="danish.prakash@suse.com" date="1677240000">- Update to version 4.4.2:
  * Bump to v4.4.2
  * Release notes for v4.4.2
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * kube play: only enforce passthrough in Quadlet
  * Emergency fix for man pages: check for broken includes
  * CI: Temporarily disable all AWS EC2-based tasks
  * quadlet system tests: add useful defaults, logging
  * volume,container: chroot to source before exporting content
  * install sigproxy before start/attach
  * Update to c/image 5.24.1
  * events + container inspect test: RHEL fixes
  * Bump to v4.4.2-dev
- Remove patches (merged upstream):
  * volume-container-chroot-to-source-before-exporting-content.patch
- podman.spec: add `crun` requirement for quadlet
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add patch to let quadlet use the default runtime
  Added patch:
  * Quadlet-use-the-default-runtime.patch
  =&gt; Remove dependency on crun</changelog>
  <changelog author="danish.prakash@suse.com" date="1679659200">- Update to version 4.4.3:
  * Bump to v4.4.3
  * Release notes for v4.4.3
  * compat: /auth: parse server address correctly
  * vendor github.com/containers/common@v0.51.1
  * pkginstaller: bump Qemu to version 7.2.0
  * podman machine: Adjust Chrony makestep config
  * [v4.4] fix --health-on-failure=restart in transient unit
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * journald: remove initializeJournal()
  * netavark: only use aardvark ip as nameserver
  * compat API: network create return 409 for duplicate
  * fix "podman logs --since --follow" flake
  * system service --log-level=trace: support hijack
  * podman-mac-helper: exit 1 on error
  * bump golang.org/x/net to v0.8.0
  * Fix package restore
  * Quadlet - use the default runtime
  * Bump to v4.4.3-dev
- Remove patch (merged upstream):
  * Quadlet-use-the-default-runtime.patch
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="danish.prakash@suse.com" date="1680004800">- Update to version 4.4.4:
  * Bump to v4.4.4
  * Release notes for v4.4.4
  * libpod: always use direct mapping
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * Bump to v4.4.4-dev
- spec: Bump required version for libcontainers-common (bsc#1209495)</changelog>
  <changelog author="dcermak@suse.com" date="1681473600">- Don't build against EoL go versions, fixes bsc#1210299</changelog>
  <changelog author="danish.prakash@suse.com" date="1681819200">- Update to version 4.5.0:
  * Release v4.5.0
  * [CI:DOCS] Final release notes for v4.5.0
  * Quadlet - do not set log-driver by default
  * Return title fields as a list
  * Bump to v4.5.0-dev
  * Bump to v4.5.0-RC2
  * Final release notes for v4.5.0-RC2
  * test/e2e: remove unnecessary SkipIfNetavark() calls
  * test/e2e: deduplicated network test
  * docs: update podman-network-create.1
  * network create: add --interface-name
  * test/system/252-quadlet.bats: fix flake
  * Read kube_generate_type from containers.conf
  * Debian setup: workaround for runc /dev/char/10:200 bug
  * pkg/rootless: use catatonit from /usr/libexec/podman
  * rootless: make sure we only use a single pause process
  * Use atomic config writing strategy for podman machine config files
  * Add remaining release notes for v4.5.0-RC2
  * GHA: Use version instead of SHA for actions
  * chore(deps): update dependency containers/automation_images to v20230405
  * build: pass env by reference
  * test: retrofit error message
  * test/system: expect 12 char for short id
  * vendor: bump containers/(storage, common, buildah, image)
  * [skip-ci] Update actions/upload-artifact action to v3
  * [skip-ci] Update actions/stale action to v8
  * [skip-ci] Update actions/setup-go action to v4
  * [skip-ci] Update github/issue-labeler action to v2.6
  * Fix up codespell errors
  * Capitalize all uid,gid and id words that are not options in docs
  * build(deps): bump golang.org/x/tools from 0.7.0 to 0.8.0 in /test/tools
  * Properly remove the service container during kube down
  * quadlet: add `UserNS` option key
  * [CI:DOCS] Release notes for 4.5.0 Part 1
  * "podman pull by digest and list --all" test: untag instead of rmi
  * build(deps): bump golang.org/x/text from 0.8.0 to 0.9.0
  * Add renovate.json configuration
  * CI: postbuild step: skip under nightly treadmill
  * The `--ulimit` option accepts the name with an `RLIMIT_` prefix both upper and lower case
  * test/e2e: use custom network config dir where needed
  * chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml`
  * update completion scripts for cobra v1.7.0
  * libpod.storageService.CreateContainerStorage(): retrieve ID maps
  * Fix invalid pod name and hostname during kube generate
  * e2e tests: fix racy flakes
  * Cirrus: Enable labeling of EC2 VMs
  * Cirrus: Fix aarch64 clone_script 404 errors
  * e2e: GinkgoParallelNode() -&gt; ...Process()
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
  * [CI:DOCS] --creds and registries
  * Copr: fix build deps for /usr/bin/envsubst
  * Don't error when removing non-existant env vars
  * e2e: healthcheck on stopped container: fix flake
  * test/apiv2/80-kube.at
  * test/apiv2/80-kube.at
  * system service: do not close Body
  * rm `hack/release.sh`
  * build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6
  * add `quadlet -version` flag
  * add version/rawversion package
  * quadlet: use `Flag` suffix for variables
  * quadlet: implement `Tmpfs` option
  * Bump to v4.5.0-dev
  * Bump to 4.5.0-rc1
  * Update release notes from 4.4 branch
  * rootless netns: recover from invalid netns
  * System tests: unverbosify a flake log
  * Add support for secret exists
  * Fix Win install task failures with large PR bodies
  * docs: add `starting` to `HealthCheckResults.Status`
  * Add support for cgroup_config from containers.conf
  * libpod: mount safely subpaths
  * Support Deployment generation with kube generate
  * Use secret.items to create volume mounts if present
  * [CI:DOCS] fix typo in --systemd option
  * rootless: drop preexec hook error message
  * Edit the docker wrapper to use the install prefix
  * Update podman-for-windows.md
  * Quadlet: RemapUsers documentation fixes
  * speed up image listing
  * vendor containers/common@e27c30ee9b1b
  * fix volume-plugin-test flake
  * Document building Podman remote on Windows hosts
  * test/e2e: gpg keep stdout/err attached
  * auto-update: stop+start instead of restart sytemd units
  * [CI:DOCS] Improve basic tutorial
  * Update docs/source/markdown/podman-network.1.md
  * Add debug to --wait test
  * fix slirp4netns resolv.conf ip with a userns
  * Quadlet: add support for keep-id with mapping values
  * Quadlet E2E test - run quadlet as user generator
  * sqlite: do not `Ping()` after connecting
  * Quadlet - treat paths starting with systemd specifiers as absolute
  * Update docs/source/markdown/podman-kube-play.1.md.in
  * system tests: use CONTAINERS_CONF_OVERRIDE
  * implement podman machine set for hyperv
  * [CI:DOCS] Add network subnets info to network man page
  * CI: retry the golangci install
  * system tests: fix racey sdnotify test
  * hyperv: lookup machine on local filesystem first
  * fix os.IsNotExist() CI check
  * Ensure that SQLite state handles name-ID collisions
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * build(deps): bump github.com/onsi/gomega from 1.27.4 to 1.27.5
  * Fix a race around SQLite DB config validation
  * add CONTAINERS_CONF_OVERRIDE
  * vendor containers/common@main
  * docs: minor grammar fix in `--volume` description
  * sqlite: do not use shared cache
  * test: podman checkpoint/restore the latest container
  * stats compat API: return "id" lowercase
  * Run make codespell
  * Drop SQLite max connections
  * sqlite: set connection attributes on open
  * Fix database locked errors with SQLite
  * quadlet tests: skip on RHEL8 rootless
  * Kube Play Doc: Document the support for K8S Secret
  * New ulimit test: bump up minimum nfiles
  * logformatter: hide --db-backend, and friendlyize quadlet
  * Quadlet - add support for relative path in Volume key in .container file
  * Add service ctr cleanup to PlayKubeDown
  * fix --health-on-failure=restart in transient unit
  * Quadlet Doc: Suggest the kill operation for HealthOnFailure
  * Quadlet - Add support for health checks configuration in .container files
  * Makefile: allow specifying /lib dir location
  * Fix option --opts -&gt; --opt
  * basic hypverv machine implementation
  * Fix SQLite DB schema migration code
  * Add support for oom_score_adj value from containers.conf
  * Use default_ulimits field in containers.conf
  * CI: test and confirm DESIRED_DATABASE
  * build(deps): bump github.com/openshift/imagebuilder
  * logformatter: futureproof output filename
  * Vendor in latest containers/(storage, common, image)
  * build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.30.0
  * test/system/255-auto-update.bats: add debug logs
  * Revert "Revert "pasta: Use two connections instead of three in TCP range forward tests""
  * Add information for secret inspect
  * Add format to podman volume ls
  * Add format to podman volume inspect
  * Add format to podman secret ls
  * Add format to podman system df
  * Add format to podman machine info
  * Add format table to podman image inspect man page
  * Cirrus: Store podman machine benchmark data
  * Update Cirrus display names, and fix get-ci-vm script
  * Ensure SQLite places uses the runroot in transient mode
  * Fix various integration test issues with SQLite state
  * Remove test for pod/container name global uniqueness
  * Improve handling of existing container names in SQLite
  * Add SQLite job to CI
  * buildah treadmill: also run rootless tests
  * build(deps): bump github.com/vbatts/git-validation in /test/tools
  * auto update: return restart error
  * fix: Document removing anonymous volumes
  * events: no duplicates when streaming during a log rotation
  * Add search --cert-dir, --creds
  * podman-mac-helper: exit 1 on error
  * system service --log-level=trace: support hijack
  * test/system: fix wait_for_port() to wait for bind
  * cgroupns: private cgroupns on cgroupv1 breaks --systemd
  * libpod: remove error stutter
  * podman events: unhide --stream
  * test/system/255-auto-update.bats: multiple services
  * 255-auto-update.bats: turn off rollback where needed
  * Use append() to add elements to a slice
  * Revert "pasta: Use two connections instead of three in TCP range forward tests"
  * Support running nested SELinux container separation
  * bud tests: rootless remote: use correct socket path
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.2.1 to 8.3.0
  * compat: /auth: parse server address correctly
  * docs: fix cmd `set DOCKER_HOST` suggestion
  * test: reenable idmap test
  * Must use mountlabel when creating builtin volumes
  * podman.spec.rpkg: distro conditionals for modulesloaddir
  * build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0
  * podman inspect list network when using --net=host or none
  * pasta: Re-enable "Local forwarder, IPv4" test, accept NXDOMAIN as response
  * build(deps): bump golang.org/x/tools from 0.6.0 to 0.7.0 in /test/tools
  * CI: Switch to c20230307t192532z-f37f36d12 images
  * Cirrus: Run system &amp; integration tests in parallel
  * Update checkpointctl v0.1.0
  * Quadlet: add support for setting --ip and --ip6
  * build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0
  * build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0
  * libpod: avoid nil pointer dereference in (*Container).Cleanup
  * [CI:DOCS] Add image not found info to troubleshooting
  * cmd: do not require userns for "version"
  * cmd: drop special handling for "scp"
  * cmd: clarify meaning of ParentNSRequired
  * Fix package restore
  * [CI:DOCS] Fix docs/version-check always requesting updates
  * sqlite: add a hidden --db-backend flag
  * fix: update the default machine value when the previously set default machine is deleted
  * podman machine: Adjust Chrony makestep config
  * sqlite: add container short ID to network aliases
  * sqlite: remove dead code
  * sqlite: addContainer: add named volume only once
  * sqlite: implement RewriteVolumeConfig
  * sqlite: LookupVolume: fix partial name match
  * sqlite: LookupVolume: wrap error
  * sqlite: fix type rewriting container config
  * sqlite: return correct error on pod-name conflict
  * sqlite: RewritePodConfig: update error message
  * test/system/255-auto-update.bats: wait 10 for update to finish
  * auto-update test: wait for service to be ready
  * Vendor in latest containers/(common, storage, image)
  * play kube: Add --wait option
  * Cirrus: Fix git config permission denied
  * Quadlet: Add support for the Mount key in .container files
  * build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2
  * fix "podman logs --since --follow" flake
  * Clarify that replicas are ignored in kubernetes deployment
  * Revert "Skip all pasta tests"
  * CI: Switch to c20230223t153813z-f37f36d12 images
  * Fix user socket path
  * pkginstaller: bump Qemu to version 7.2.0
  * Cirrus: Fix bud tests failing to apply patches
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2
  * build(deps): bump github.com/coreos/stream-metadata-go
  * Vendor in latest containers/storage
  * buildah-bud tests: don't sudo when rootless is desired
  * Temporarily disable version-check
  * CI: new rootless buildah-bud tests (cron only)
  * sqlite: fix volume lookups with partial names
  * sqlite: fix container lookups with partial IDs
  * sqlite: fix LookupPod
  * sqlite: fix pod create/rm
  * sqlite: LookupContainer: update error message
  * sqlite: AddContainerExitCode: allow to replace
  * system: add warning when running rootless on cgroupv1
  * sqlite: fix AllContainers with state
  * sqlite: fix "UPDATE TABLE" typos
  * sqlite: SaveVolume: fix syntax error updating the volumes table
  * sqlite: exit code: allow -1
  * sqlite: fix typo when removing exec sessions
  * sqlite: AllContainers: fix inner join
  * sqlite: move migration after table creation
  * sqlite: implement pod methods
  * Quadlet - use the default runtime
  * docs: context is not optional for build
  * Fix an incorrect comment on NewSqliteState
  * Add support for containers.conf database setting
  * Add support for volume operations to SQLite state
  * Implement exec session handling in SQL database
  * Various fixes from code review
  * Remove `--namespace` flag from Podman root
  * Get E2E tests to pass
  * Implement network disconnect for SQLite state
  * Implement Network Connect/Modify for SQLite state
  * Fix various lint issues
  * Some further work on SQLite state
  * Remove concept of Namespaces from BoltDB
  * Add initial SQLite-backed state implementation
  * Cirrus: Support runc testing on debian VMs
  * Skip all pasta tests
  * Skip buildah-bud test
  * Skip buildx test with VFS podman storage driver
  * Skip 'podman kube --network' test for rootless CGv1
  * Skip tests which fail with CGv1 &amp; runc
  * Skip rootless CGv1 quadlet tests due to issue
  * Makefile: Define SHELL
  * Machine refactor for QEMU/AppleHV
  * machine refactoring preparations for hyperv
  * [CI:BUILD] spec.rpkg: trim dependency list
  * Logs follow-until tests: loosen checks
  * [CI:DOCS] Windows/Mac docs link update
  * Doc update for docker network options via CLI
  * compat API: network create return 409 for duplicate
  * Apply suggestions to man page
  * vendor c/common@852ca05a1fbb
  * Quadlet: Add support for LogDriver key in container and kube units
  * machine refactoring preparations for hyperv
  * libpod: always use direct mapping
  * netavark: only use aardvark ip as nameserver
  * build(deps): bump github.com/container-orchestrated-devices/container-device-interface
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * make docs: sanity check for broken man pages
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.6 to 8.2.0
  * build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1
  * kube: rm secret on down, print secret on play
  * Fix spacing typo that triggered OCD &amp; indent units in podman-systemd.unit(5)
  * Update remote_client.md
  * [CI:DOCS] Add restriction to option README
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0
  * kube play: only enforce passthrough in Quadlet
  * journald: remove initializeJournal()
  * auto-update: support pods
  * Emergency fix for man pages: check for broken includes
  * System tests: assert(): friendlier failure messages
  * Cirrus: Fix version-check to only run on `main` job
  * CI: Temporarily disable all AWS EC2-based tasks
  * build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18
  * volume,container: chroot to source before exporting content
  * Support sysctl configs via podman kube play
  * [CI:BUILD] copr: podman.spec.rpkg cleanups
  * quadlet system tests: add useful defaults, logging
  * libpod: support relative positions for idmaps
  * Experimental workaround for cdn03.quay.io flake
  * system tests: prevent leading tabs
  * Introduce podman machine os apply
  * create: add support for --group-entry
  * fix != filter in volume prune
  * Allow specification of podman --remote build -f -
  * Quadlet use crun specified in containers.conf
  * build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0
  * Vendor c/image after https://github.com/containers/image/pull/1847
  * Don't set hostPort when generating a service
  * man page --format xref: tighten the autocompletion check
  * add support for limiting tmpfs size for systemd-specific mnts
  * build(deps): bump golang.org/x/text from 0.6.0 to 0.7.0
  * Add ulimit annotation to kube gen &amp; play
  * man page xref: validate displayed man page names
  * quadlet: add ExecStop
  * install sigproxy before start/attach
  * build(deps): bump golang.org/x/tools from 0.5.0 to 0.6.0 in /test/tools
  * Fix typos
  * Cirrus: Make benchmarks .env file easier to load
  * Cirrus: Omit functions in env. file
  * kube play: set service container as main PID when possible
  * Fix typos. Improve language.
  * events + container inspect test: RHEL fixes
  * Add ctrName to network alias during kube play
  * Run codespell on codebase
  * podman image scp: added identity for ssh.Exec
  * [CI:DOCS] Clarify nomap constrains
  * [CI:DOCS] man-page checker: include --format (Go templates)
  * Vendor c/image after https://github.com/containers/image/pull/1816
  * [CI:DOCS] Cleanup some man pages to display options with line breaks
  * [CI:DOCS] Add tables to podman-systemd.unit man page
  * github: remove prefix from bugs/features
  * Quadlet: Add support for the Secret key in Container group
  * [CI:DOCS] OWNERS: add @ygalblum and @alexlarsson
  * build(deps): bump golang.org/x/term from 0.4.0 to 0.5.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.1.6
  * Sort quadlet keys to make it easier to read
  * e2e: fix some tests on remote
  * kube play: do not teardown unconditionally on error
  * Fix typos in comments
  * Resolve symlink path for qemu directory if possible
  * #17363 Fix contradicting documentation podman-commit
  * Fix a potential UID/GID collision in unit tests
  * golangci-lint: show all errors at once
  * update golangci-lint to version 1.51.1
  * [CI:DOCS] events: document journald identifiers
  * Quadlet: exit 0 when there are no files to process
  * network ls: handle removed container
  * e2e: adapt play kube test on remote rootless
  * docs/podman-systemd.unit: Explicitely mention network &amp; kube units
  * docs/podman-systemd.unit: Update example to work out of the box
  * [CI:BUILD] Cirrus: Fix GraphQL ownerRepository:null error
  * Add missing return after errors
  * Revert "Cirrus: Emergency fix to un-stuck PRs"
  * pasta: Fix ICMPv6 Echo test, skip it for the moment
  * pasta: Fix ICMP Echo Request (IPv4) test
  * pasta: Use two connections instead of three in TCP range forward tests
  * Add SELinux label types support to quadlet
  * Add quadlet support for rootfs= containers
  * Cirrus: Emergency fix to un-stuck PRs
  * Move clean-binaries before podman-remote in podman-remote-docs target
  * oci: bind mount /sys with --userns=(auto|pod:)
  * Cleanup podman-systemd.unit file
  * Install podman-systemd.unit  man page, make quadlet discoverable
  * libpod: allow userns=keep-id for root
  * system-reset: use CleanCacheMount to clear build cache
  * vendor: bump buildah to v1.29.1-0.20230201192322-e56eb25575c7
  * system tests: fix noexistent labels test in the remote
  * Expose Podman named pipe in Inspect output
  * libpod: support idmap for --rootfs
  * test: adapt test to work on cgroupv1
  * Bump to v4.5.0-dev
  * Update main to reflect v4.4.0 release
  * Update from /github.com/vbauerster/mpb/v7 to /v8
  * hack/perf: cleanup after benchmarks
  * hack/perf/bz-2162111.sh: use custom network
  * Update bug_report.yaml
  * Handle filetype field in kubernetes.yaml files
  * hack/perf/bz-2162111.sh: measure stop
  * make hack/markdown-preprocess parallel-safe
  * system tests: fix volume exec/noexec test
  * system tests: minor fix for RHEL8 incompatibility
  * Cirrus: Use versionable IMAGE_SUFFIX
  * utils: new conversion method
  * libpod: use GraphRoot for overlay upper dir
  * vendor: update containers/storage
  * Do not mount /dev/tty into rootless containers
  * build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7
  * e2e: fix run_staticip_test about no_proxy
  * docs: specify order preference for FROM
  * Fixes port collision issue on use of --publish-all
  * Support for Windows paths in the source position of the volume mounts
  * e2e tests: fix incorrect os.User.Name
  * Log data that we failed to unmarshal
  * [CI:DOCS] hack/perf: add script for BZ 216111
  * container rm: save once for exec removal and state change
  * [DOCS:CI] podman-events: document verbose create events
  * e2e: Avoid hard-coding included in quadlet test
  * e2e: Avoid hard-coding ImageCacheDir
  * Making gvproxy.exe optional for building Windows installer
  * Add gvproxy to Windows packages
  * Add comment to clarify error handling intention
  * fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
  * Fix usage of absolute windows paths with --image-path
  * Match VT device paths to be blocked from mounting exactly
  * Fix default handling of pids-limit
  * Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
  * journald: podman logs only show logs for current user
  * journald: podman events only show events for current user
  * e2e: Remove the cache with "podman unshare rm" when a rootless user
  * Clean up more language for inclusiveness
  * e2e: Remove some directories at SynchronizedAfterSuite
  * fix: don't output "ago" when container is currently up and running
  * fix: running check error when podman is default in wsl
  * fix CI: test fail due to merge
  * Bump Bulidah to v1.29.0
  * e2e: reduce dependency on /tmp for e2e tests
  * Bump cirrus image with easier dependency management
  * quadlet: Add device support for .volume files
  * remote,build: error if containerignore is symlink
  * DB: make loading container states optional
  * ps: do not sync container
  * Set runAsNonRoot=true in gen kube
  * WSL refactoring
  * kube-play: add support for HostIPC in pod.Spec
  * Allow --device-cgroup-rule to be passed in by docker API</changelog>
  <changelog author="danish.prakash@suse.com" date="1685361600">- Update to version 4.5.1:
  * Release v4.5.1
  * [CI:DOCS] Final release notes for v4.5.1
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * Revert "Resolve symlink path for qemu directory if possible"
  * no need for podman-next rpm test on maint branch
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * network create/update: allow dns servers comma separated
  * machine: fix default connection URL to use 127.0.0.1
  * compat: accept tag in /images/create?fromSrc
  * compat container create: match duplicate mounts correctly
  * machine: qemu only remove connection after confirmation
  * windows: podman save allow the use of stdout
  * remote: exec inspect update exec session status
  * podman-remote logs: handle server error correctly
  * libpod: stop containers with --restart=always
  * Do not include image annotations when building spec
  * [v4.5] system tests: fix race in kube-play read-only
  * api: fix parsing filters
  * Support systemd optional prefix '-' for devices.
  * *: migrate image registry to registry.k8s.io
  * Makefile: include `release-artifacts` target
  * [CI:BUILD] Packit: Initial Enablement
  * Bump to v4.5.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
</package>
<package pkgid="3383333f4219b7973733dd734389341701842d7cb0a1c8c74b82859dab393c19" name="podman-remote" arch="s390x">
  <version epoch="0" ver="4.7.2" rel="150500.3.3.1"/>
  <changelog author="danish.prakash@suse.com" date="1677240000">- Update to version 4.4.2:
  * Bump to v4.4.2
  * Release notes for v4.4.2
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * kube play: only enforce passthrough in Quadlet
  * Emergency fix for man pages: check for broken includes
  * CI: Temporarily disable all AWS EC2-based tasks
  * quadlet system tests: add useful defaults, logging
  * volume,container: chroot to source before exporting content
  * install sigproxy before start/attach
  * Update to c/image 5.24.1
  * events + container inspect test: RHEL fixes
  * Bump to v4.4.2-dev
- Remove patches (merged upstream):
  * volume-container-chroot-to-source-before-exporting-content.patch
- podman.spec: add `crun` requirement for quadlet
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add patch to let quadlet use the default runtime
  Added patch:
  * Quadlet-use-the-default-runtime.patch
  =&gt; Remove dependency on crun</changelog>
  <changelog author="danish.prakash@suse.com" date="1679659200">- Update to version 4.4.3:
  * Bump to v4.4.3
  * Release notes for v4.4.3
  * compat: /auth: parse server address correctly
  * vendor github.com/containers/common@v0.51.1
  * pkginstaller: bump Qemu to version 7.2.0
  * podman machine: Adjust Chrony makestep config
  * [v4.4] fix --health-on-failure=restart in transient unit
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * journald: remove initializeJournal()
  * netavark: only use aardvark ip as nameserver
  * compat API: network create return 409 for duplicate
  * fix "podman logs --since --follow" flake
  * system service --log-level=trace: support hijack
  * podman-mac-helper: exit 1 on error
  * bump golang.org/x/net to v0.8.0
  * Fix package restore
  * Quadlet - use the default runtime
  * Bump to v4.4.3-dev
- Remove patch (merged upstream):
  * Quadlet-use-the-default-runtime.patch
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="danish.prakash@suse.com" date="1680004800">- Update to version 4.4.4:
  * Bump to v4.4.4
  * Release notes for v4.4.4
  * libpod: always use direct mapping
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * Bump to v4.4.4-dev
- spec: Bump required version for libcontainers-common (bsc#1209495)</changelog>
  <changelog author="dcermak@suse.com" date="1681473600">- Don't build against EoL go versions, fixes bsc#1210299</changelog>
  <changelog author="danish.prakash@suse.com" date="1681819200">- Update to version 4.5.0:
  * Release v4.5.0
  * [CI:DOCS] Final release notes for v4.5.0
  * Quadlet - do not set log-driver by default
  * Return title fields as a list
  * Bump to v4.5.0-dev
  * Bump to v4.5.0-RC2
  * Final release notes for v4.5.0-RC2
  * test/e2e: remove unnecessary SkipIfNetavark() calls
  * test/e2e: deduplicated network test
  * docs: update podman-network-create.1
  * network create: add --interface-name
  * test/system/252-quadlet.bats: fix flake
  * Read kube_generate_type from containers.conf
  * Debian setup: workaround for runc /dev/char/10:200 bug
  * pkg/rootless: use catatonit from /usr/libexec/podman
  * rootless: make sure we only use a single pause process
  * Use atomic config writing strategy for podman machine config files
  * Add remaining release notes for v4.5.0-RC2
  * GHA: Use version instead of SHA for actions
  * chore(deps): update dependency containers/automation_images to v20230405
  * build: pass env by reference
  * test: retrofit error message
  * test/system: expect 12 char for short id
  * vendor: bump containers/(storage, common, buildah, image)
  * [skip-ci] Update actions/upload-artifact action to v3
  * [skip-ci] Update actions/stale action to v8
  * [skip-ci] Update actions/setup-go action to v4
  * [skip-ci] Update github/issue-labeler action to v2.6
  * Fix up codespell errors
  * Capitalize all uid,gid and id words that are not options in docs
  * build(deps): bump golang.org/x/tools from 0.7.0 to 0.8.0 in /test/tools
  * Properly remove the service container during kube down
  * quadlet: add `UserNS` option key
  * [CI:DOCS] Release notes for 4.5.0 Part 1
  * "podman pull by digest and list --all" test: untag instead of rmi
  * build(deps): bump golang.org/x/text from 0.8.0 to 0.9.0
  * Add renovate.json configuration
  * CI: postbuild step: skip under nightly treadmill
  * The `--ulimit` option accepts the name with an `RLIMIT_` prefix both upper and lower case
  * test/e2e: use custom network config dir where needed
  * chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml`
  * update completion scripts for cobra v1.7.0
  * libpod.storageService.CreateContainerStorage(): retrieve ID maps
  * Fix invalid pod name and hostname during kube generate
  * e2e tests: fix racy flakes
  * Cirrus: Enable labeling of EC2 VMs
  * Cirrus: Fix aarch64 clone_script 404 errors
  * e2e: GinkgoParallelNode() -&gt; ...Process()
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
  * [CI:DOCS] --creds and registries
  * Copr: fix build deps for /usr/bin/envsubst
  * Don't error when removing non-existant env vars
  * e2e: healthcheck on stopped container: fix flake
  * test/apiv2/80-kube.at
  * test/apiv2/80-kube.at
  * system service: do not close Body
  * rm `hack/release.sh`
  * build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6
  * add `quadlet -version` flag
  * add version/rawversion package
  * quadlet: use `Flag` suffix for variables
  * quadlet: implement `Tmpfs` option
  * Bump to v4.5.0-dev
  * Bump to 4.5.0-rc1
  * Update release notes from 4.4 branch
  * rootless netns: recover from invalid netns
  * System tests: unverbosify a flake log
  * Add support for secret exists
  * Fix Win install task failures with large PR bodies
  * docs: add `starting` to `HealthCheckResults.Status`
  * Add support for cgroup_config from containers.conf
  * libpod: mount safely subpaths
  * Support Deployment generation with kube generate
  * Use secret.items to create volume mounts if present
  * [CI:DOCS] fix typo in --systemd option
  * rootless: drop preexec hook error message
  * Edit the docker wrapper to use the install prefix
  * Update podman-for-windows.md
  * Quadlet: RemapUsers documentation fixes
  * speed up image listing
  * vendor containers/common@e27c30ee9b1b
  * fix volume-plugin-test flake
  * Document building Podman remote on Windows hosts
  * test/e2e: gpg keep stdout/err attached
  * auto-update: stop+start instead of restart sytemd units
  * [CI:DOCS] Improve basic tutorial
  * Update docs/source/markdown/podman-network.1.md
  * Add debug to --wait test
  * fix slirp4netns resolv.conf ip with a userns
  * Quadlet: add support for keep-id with mapping values
  * Quadlet E2E test - run quadlet as user generator
  * sqlite: do not `Ping()` after connecting
  * Quadlet - treat paths starting with systemd specifiers as absolute
  * Update docs/source/markdown/podman-kube-play.1.md.in
  * system tests: use CONTAINERS_CONF_OVERRIDE
  * implement podman machine set for hyperv
  * [CI:DOCS] Add network subnets info to network man page
  * CI: retry the golangci install
  * system tests: fix racey sdnotify test
  * hyperv: lookup machine on local filesystem first
  * fix os.IsNotExist() CI check
  * Ensure that SQLite state handles name-ID collisions
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * build(deps): bump github.com/onsi/gomega from 1.27.4 to 1.27.5
  * Fix a race around SQLite DB config validation
  * add CONTAINERS_CONF_OVERRIDE
  * vendor containers/common@main
  * docs: minor grammar fix in `--volume` description
  * sqlite: do not use shared cache
  * test: podman checkpoint/restore the latest container
  * stats compat API: return "id" lowercase
  * Run make codespell
  * Drop SQLite max connections
  * sqlite: set connection attributes on open
  * Fix database locked errors with SQLite
  * quadlet tests: skip on RHEL8 rootless
  * Kube Play Doc: Document the support for K8S Secret
  * New ulimit test: bump up minimum nfiles
  * logformatter: hide --db-backend, and friendlyize quadlet
  * Quadlet - add support for relative path in Volume key in .container file
  * Add service ctr cleanup to PlayKubeDown
  * fix --health-on-failure=restart in transient unit
  * Quadlet Doc: Suggest the kill operation for HealthOnFailure
  * Quadlet - Add support for health checks configuration in .container files
  * Makefile: allow specifying /lib dir location
  * Fix option --opts -&gt; --opt
  * basic hypverv machine implementation
  * Fix SQLite DB schema migration code
  * Add support for oom_score_adj value from containers.conf
  * Use default_ulimits field in containers.conf
  * CI: test and confirm DESIRED_DATABASE
  * build(deps): bump github.com/openshift/imagebuilder
  * logformatter: futureproof output filename
  * Vendor in latest containers/(storage, common, image)
  * build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.30.0
  * test/system/255-auto-update.bats: add debug logs
  * Revert "Revert "pasta: Use two connections instead of three in TCP range forward tests""
  * Add information for secret inspect
  * Add format to podman volume ls
  * Add format to podman volume inspect
  * Add format to podman secret ls
  * Add format to podman system df
  * Add format to podman machine info
  * Add format table to podman image inspect man page
  * Cirrus: Store podman machine benchmark data
  * Update Cirrus display names, and fix get-ci-vm script
  * Ensure SQLite places uses the runroot in transient mode
  * Fix various integration test issues with SQLite state
  * Remove test for pod/container name global uniqueness
  * Improve handling of existing container names in SQLite
  * Add SQLite job to CI
  * buildah treadmill: also run rootless tests
  * build(deps): bump github.com/vbatts/git-validation in /test/tools
  * auto update: return restart error
  * fix: Document removing anonymous volumes
  * events: no duplicates when streaming during a log rotation
  * Add search --cert-dir, --creds
  * podman-mac-helper: exit 1 on error
  * system service --log-level=trace: support hijack
  * test/system: fix wait_for_port() to wait for bind
  * cgroupns: private cgroupns on cgroupv1 breaks --systemd
  * libpod: remove error stutter
  * podman events: unhide --stream
  * test/system/255-auto-update.bats: multiple services
  * 255-auto-update.bats: turn off rollback where needed
  * Use append() to add elements to a slice
  * Revert "pasta: Use two connections instead of three in TCP range forward tests"
  * Support running nested SELinux container separation
  * bud tests: rootless remote: use correct socket path
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.2.1 to 8.3.0
  * compat: /auth: parse server address correctly
  * docs: fix cmd `set DOCKER_HOST` suggestion
  * test: reenable idmap test
  * Must use mountlabel when creating builtin volumes
  * podman.spec.rpkg: distro conditionals for modulesloaddir
  * build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0
  * podman inspect list network when using --net=host or none
  * pasta: Re-enable "Local forwarder, IPv4" test, accept NXDOMAIN as response
  * build(deps): bump golang.org/x/tools from 0.6.0 to 0.7.0 in /test/tools
  * CI: Switch to c20230307t192532z-f37f36d12 images
  * Cirrus: Run system &amp; integration tests in parallel
  * Update checkpointctl v0.1.0
  * Quadlet: add support for setting --ip and --ip6
  * build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0
  * build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0
  * libpod: avoid nil pointer dereference in (*Container).Cleanup
  * [CI:DOCS] Add image not found info to troubleshooting
  * cmd: do not require userns for "version"
  * cmd: drop special handling for "scp"
  * cmd: clarify meaning of ParentNSRequired
  * Fix package restore
  * [CI:DOCS] Fix docs/version-check always requesting updates
  * sqlite: add a hidden --db-backend flag
  * fix: update the default machine value when the previously set default machine is deleted
  * podman machine: Adjust Chrony makestep config
  * sqlite: add container short ID to network aliases
  * sqlite: remove dead code
  * sqlite: addContainer: add named volume only once
  * sqlite: implement RewriteVolumeConfig
  * sqlite: LookupVolume: fix partial name match
  * sqlite: LookupVolume: wrap error
  * sqlite: fix type rewriting container config
  * sqlite: return correct error on pod-name conflict
  * sqlite: RewritePodConfig: update error message
  * test/system/255-auto-update.bats: wait 10 for update to finish
  * auto-update test: wait for service to be ready
  * Vendor in latest containers/(common, storage, image)
  * play kube: Add --wait option
  * Cirrus: Fix git config permission denied
  * Quadlet: Add support for the Mount key in .container files
  * build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2
  * fix "podman logs --since --follow" flake
  * Clarify that replicas are ignored in kubernetes deployment
  * Revert "Skip all pasta tests"
  * CI: Switch to c20230223t153813z-f37f36d12 images
  * Fix user socket path
  * pkginstaller: bump Qemu to version 7.2.0
  * Cirrus: Fix bud tests failing to apply patches
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2
  * build(deps): bump github.com/coreos/stream-metadata-go
  * Vendor in latest containers/storage
  * buildah-bud tests: don't sudo when rootless is desired
  * Temporarily disable version-check
  * CI: new rootless buildah-bud tests (cron only)
  * sqlite: fix volume lookups with partial names
  * sqlite: fix container lookups with partial IDs
  * sqlite: fix LookupPod
  * sqlite: fix pod create/rm
  * sqlite: LookupContainer: update error message
  * sqlite: AddContainerExitCode: allow to replace
  * system: add warning when running rootless on cgroupv1
  * sqlite: fix AllContainers with state
  * sqlite: fix "UPDATE TABLE" typos
  * sqlite: SaveVolume: fix syntax error updating the volumes table
  * sqlite: exit code: allow -1
  * sqlite: fix typo when removing exec sessions
  * sqlite: AllContainers: fix inner join
  * sqlite: move migration after table creation
  * sqlite: implement pod methods
  * Quadlet - use the default runtime
  * docs: context is not optional for build
  * Fix an incorrect comment on NewSqliteState
  * Add support for containers.conf database setting
  * Add support for volume operations to SQLite state
  * Implement exec session handling in SQL database
  * Various fixes from code review
  * Remove `--namespace` flag from Podman root
  * Get E2E tests to pass
  * Implement network disconnect for SQLite state
  * Implement Network Connect/Modify for SQLite state
  * Fix various lint issues
  * Some further work on SQLite state
  * Remove concept of Namespaces from BoltDB
  * Add initial SQLite-backed state implementation
  * Cirrus: Support runc testing on debian VMs
  * Skip all pasta tests
  * Skip buildah-bud test
  * Skip buildx test with VFS podman storage driver
  * Skip 'podman kube --network' test for rootless CGv1
  * Skip tests which fail with CGv1 &amp; runc
  * Skip rootless CGv1 quadlet tests due to issue
  * Makefile: Define SHELL
  * Machine refactor for QEMU/AppleHV
  * machine refactoring preparations for hyperv
  * [CI:BUILD] spec.rpkg: trim dependency list
  * Logs follow-until tests: loosen checks
  * [CI:DOCS] Windows/Mac docs link update
  * Doc update for docker network options via CLI
  * compat API: network create return 409 for duplicate
  * Apply suggestions to man page
  * vendor c/common@852ca05a1fbb
  * Quadlet: Add support for LogDriver key in container and kube units
  * machine refactoring preparations for hyperv
  * libpod: always use direct mapping
  * netavark: only use aardvark ip as nameserver
  * build(deps): bump github.com/container-orchestrated-devices/container-device-interface
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * make docs: sanity check for broken man pages
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.6 to 8.2.0
  * build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1
  * kube: rm secret on down, print secret on play
  * Fix spacing typo that triggered OCD &amp; indent units in podman-systemd.unit(5)
  * Update remote_client.md
  * [CI:DOCS] Add restriction to option README
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0
  * kube play: only enforce passthrough in Quadlet
  * journald: remove initializeJournal()
  * auto-update: support pods
  * Emergency fix for man pages: check for broken includes
  * System tests: assert(): friendlier failure messages
  * Cirrus: Fix version-check to only run on `main` job
  * CI: Temporarily disable all AWS EC2-based tasks
  * build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18
  * volume,container: chroot to source before exporting content
  * Support sysctl configs via podman kube play
  * [CI:BUILD] copr: podman.spec.rpkg cleanups
  * quadlet system tests: add useful defaults, logging
  * libpod: support relative positions for idmaps
  * Experimental workaround for cdn03.quay.io flake
  * system tests: prevent leading tabs
  * Introduce podman machine os apply
  * create: add support for --group-entry
  * fix != filter in volume prune
  * Allow specification of podman --remote build -f -
  * Quadlet use crun specified in containers.conf
  * build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0
  * Vendor c/image after https://github.com/containers/image/pull/1847
  * Don't set hostPort when generating a service
  * man page --format xref: tighten the autocompletion check
  * add support for limiting tmpfs size for systemd-specific mnts
  * build(deps): bump golang.org/x/text from 0.6.0 to 0.7.0
  * Add ulimit annotation to kube gen &amp; play
  * man page xref: validate displayed man page names
  * quadlet: add ExecStop
  * install sigproxy before start/attach
  * build(deps): bump golang.org/x/tools from 0.5.0 to 0.6.0 in /test/tools
  * Fix typos
  * Cirrus: Make benchmarks .env file easier to load
  * Cirrus: Omit functions in env. file
  * kube play: set service container as main PID when possible
  * Fix typos. Improve language.
  * events + container inspect test: RHEL fixes
  * Add ctrName to network alias during kube play
  * Run codespell on codebase
  * podman image scp: added identity for ssh.Exec
  * [CI:DOCS] Clarify nomap constrains
  * [CI:DOCS] man-page checker: include --format (Go templates)
  * Vendor c/image after https://github.com/containers/image/pull/1816
  * [CI:DOCS] Cleanup some man pages to display options with line breaks
  * [CI:DOCS] Add tables to podman-systemd.unit man page
  * github: remove prefix from bugs/features
  * Quadlet: Add support for the Secret key in Container group
  * [CI:DOCS] OWNERS: add @ygalblum and @alexlarsson
  * build(deps): bump golang.org/x/term from 0.4.0 to 0.5.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.1.6
  * Sort quadlet keys to make it easier to read
  * e2e: fix some tests on remote
  * kube play: do not teardown unconditionally on error
  * Fix typos in comments
  * Resolve symlink path for qemu directory if possible
  * #17363 Fix contradicting documentation podman-commit
  * Fix a potential UID/GID collision in unit tests
  * golangci-lint: show all errors at once
  * update golangci-lint to version 1.51.1
  * [CI:DOCS] events: document journald identifiers
  * Quadlet: exit 0 when there are no files to process
  * network ls: handle removed container
  * e2e: adapt play kube test on remote rootless
  * docs/podman-systemd.unit: Explicitely mention network &amp; kube units
  * docs/podman-systemd.unit: Update example to work out of the box
  * [CI:BUILD] Cirrus: Fix GraphQL ownerRepository:null error
  * Add missing return after errors
  * Revert "Cirrus: Emergency fix to un-stuck PRs"
  * pasta: Fix ICMPv6 Echo test, skip it for the moment
  * pasta: Fix ICMP Echo Request (IPv4) test
  * pasta: Use two connections instead of three in TCP range forward tests
  * Add SELinux label types support to quadlet
  * Add quadlet support for rootfs= containers
  * Cirrus: Emergency fix to un-stuck PRs
  * Move clean-binaries before podman-remote in podman-remote-docs target
  * oci: bind mount /sys with --userns=(auto|pod:)
  * Cleanup podman-systemd.unit file
  * Install podman-systemd.unit  man page, make quadlet discoverable
  * libpod: allow userns=keep-id for root
  * system-reset: use CleanCacheMount to clear build cache
  * vendor: bump buildah to v1.29.1-0.20230201192322-e56eb25575c7
  * system tests: fix noexistent labels test in the remote
  * Expose Podman named pipe in Inspect output
  * libpod: support idmap for --rootfs
  * test: adapt test to work on cgroupv1
  * Bump to v4.5.0-dev
  * Update main to reflect v4.4.0 release
  * Update from /github.com/vbauerster/mpb/v7 to /v8
  * hack/perf: cleanup after benchmarks
  * hack/perf/bz-2162111.sh: use custom network
  * Update bug_report.yaml
  * Handle filetype field in kubernetes.yaml files
  * hack/perf/bz-2162111.sh: measure stop
  * make hack/markdown-preprocess parallel-safe
  * system tests: fix volume exec/noexec test
  * system tests: minor fix for RHEL8 incompatibility
  * Cirrus: Use versionable IMAGE_SUFFIX
  * utils: new conversion method
  * libpod: use GraphRoot for overlay upper dir
  * vendor: update containers/storage
  * Do not mount /dev/tty into rootless containers
  * build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7
  * e2e: fix run_staticip_test about no_proxy
  * docs: specify order preference for FROM
  * Fixes port collision issue on use of --publish-all
  * Support for Windows paths in the source position of the volume mounts
  * e2e tests: fix incorrect os.User.Name
  * Log data that we failed to unmarshal
  * [CI:DOCS] hack/perf: add script for BZ 216111
  * container rm: save once for exec removal and state change
  * [DOCS:CI] podman-events: document verbose create events
  * e2e: Avoid hard-coding included in quadlet test
  * e2e: Avoid hard-coding ImageCacheDir
  * Making gvproxy.exe optional for building Windows installer
  * Add gvproxy to Windows packages
  * Add comment to clarify error handling intention
  * fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
  * Fix usage of absolute windows paths with --image-path
  * Match VT device paths to be blocked from mounting exactly
  * Fix default handling of pids-limit
  * Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
  * journald: podman logs only show logs for current user
  * journald: podman events only show events for current user
  * e2e: Remove the cache with "podman unshare rm" when a rootless user
  * Clean up more language for inclusiveness
  * e2e: Remove some directories at SynchronizedAfterSuite
  * fix: don't output "ago" when container is currently up and running
  * fix: running check error when podman is default in wsl
  * fix CI: test fail due to merge
  * Bump Bulidah to v1.29.0
  * e2e: reduce dependency on /tmp for e2e tests
  * Bump cirrus image with easier dependency management
  * quadlet: Add device support for .volume files
  * remote,build: error if containerignore is symlink
  * DB: make loading container states optional
  * ps: do not sync container
  * Set runAsNonRoot=true in gen kube
  * WSL refactoring
  * kube-play: add support for HostIPC in pod.Spec
  * Allow --device-cgroup-rule to be passed in by docker API</changelog>
  <changelog author="danish.prakash@suse.com" date="1685361600">- Update to version 4.5.1:
  * Release v4.5.1
  * [CI:DOCS] Final release notes for v4.5.1
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * Revert "Resolve symlink path for qemu directory if possible"
  * no need for podman-next rpm test on maint branch
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * network create/update: allow dns servers comma separated
  * machine: fix default connection URL to use 127.0.0.1
  * compat: accept tag in /images/create?fromSrc
  * compat container create: match duplicate mounts correctly
  * machine: qemu only remove connection after confirmation
  * windows: podman save allow the use of stdout
  * remote: exec inspect update exec session status
  * podman-remote logs: handle server error correctly
  * libpod: stop containers with --restart=always
  * Do not include image annotations when building spec
  * [v4.5] system tests: fix race in kube-play read-only
  * api: fix parsing filters
  * Support systemd optional prefix '-' for devices.
  * *: migrate image registry to registry.k8s.io
  * Makefile: include `release-artifacts` target
  * [CI:BUILD] Packit: Initial Enablement
  * Bump to v4.5.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
</package>
<package pkgid="16009cb693401a096ce0e1e3af966cecbcd689992b8d02074b7f974466a33dc5" name="podman-remote" arch="x86_64">
  <version epoch="0" ver="4.7.2" rel="150500.3.3.1"/>
  <changelog author="danish.prakash@suse.com" date="1677240000">- Update to version 4.4.2:
  * Bump to v4.4.2
  * Release notes for v4.4.2
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * kube play: only enforce passthrough in Quadlet
  * Emergency fix for man pages: check for broken includes
  * CI: Temporarily disable all AWS EC2-based tasks
  * quadlet system tests: add useful defaults, logging
  * volume,container: chroot to source before exporting content
  * install sigproxy before start/attach
  * Update to c/image 5.24.1
  * events + container inspect test: RHEL fixes
  * Bump to v4.4.2-dev
- Remove patches (merged upstream):
  * volume-container-chroot-to-source-before-exporting-content.patch
- podman.spec: add `crun` requirement for quadlet
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add patch to let quadlet use the default runtime
  Added patch:
  * Quadlet-use-the-default-runtime.patch
  =&gt; Remove dependency on crun</changelog>
  <changelog author="danish.prakash@suse.com" date="1679659200">- Update to version 4.4.3:
  * Bump to v4.4.3
  * Release notes for v4.4.3
  * compat: /auth: parse server address correctly
  * vendor github.com/containers/common@v0.51.1
  * pkginstaller: bump Qemu to version 7.2.0
  * podman machine: Adjust Chrony makestep config
  * [v4.4] fix --health-on-failure=restart in transient unit
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * journald: remove initializeJournal()
  * netavark: only use aardvark ip as nameserver
  * compat API: network create return 409 for duplicate
  * fix "podman logs --since --follow" flake
  * system service --log-level=trace: support hijack
  * podman-mac-helper: exit 1 on error
  * bump golang.org/x/net to v0.8.0
  * Fix package restore
  * Quadlet - use the default runtime
  * Bump to v4.4.3-dev
- Remove patch (merged upstream):
  * Quadlet-use-the-default-runtime.patch
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="danish.prakash@suse.com" date="1680004800">- Update to version 4.4.4:
  * Bump to v4.4.4
  * Release notes for v4.4.4
  * libpod: always use direct mapping
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * Bump to v4.4.4-dev
- spec: Bump required version for libcontainers-common (bsc#1209495)</changelog>
  <changelog author="dcermak@suse.com" date="1681473600">- Don't build against EoL go versions, fixes bsc#1210299</changelog>
  <changelog author="danish.prakash@suse.com" date="1681819200">- Update to version 4.5.0:
  * Release v4.5.0
  * [CI:DOCS] Final release notes for v4.5.0
  * Quadlet - do not set log-driver by default
  * Return title fields as a list
  * Bump to v4.5.0-dev
  * Bump to v4.5.0-RC2
  * Final release notes for v4.5.0-RC2
  * test/e2e: remove unnecessary SkipIfNetavark() calls
  * test/e2e: deduplicated network test
  * docs: update podman-network-create.1
  * network create: add --interface-name
  * test/system/252-quadlet.bats: fix flake
  * Read kube_generate_type from containers.conf
  * Debian setup: workaround for runc /dev/char/10:200 bug
  * pkg/rootless: use catatonit from /usr/libexec/podman
  * rootless: make sure we only use a single pause process
  * Use atomic config writing strategy for podman machine config files
  * Add remaining release notes for v4.5.0-RC2
  * GHA: Use version instead of SHA for actions
  * chore(deps): update dependency containers/automation_images to v20230405
  * build: pass env by reference
  * test: retrofit error message
  * test/system: expect 12 char for short id
  * vendor: bump containers/(storage, common, buildah, image)
  * [skip-ci] Update actions/upload-artifact action to v3
  * [skip-ci] Update actions/stale action to v8
  * [skip-ci] Update actions/setup-go action to v4
  * [skip-ci] Update github/issue-labeler action to v2.6
  * Fix up codespell errors
  * Capitalize all uid,gid and id words that are not options in docs
  * build(deps): bump golang.org/x/tools from 0.7.0 to 0.8.0 in /test/tools
  * Properly remove the service container during kube down
  * quadlet: add `UserNS` option key
  * [CI:DOCS] Release notes for 4.5.0 Part 1
  * "podman pull by digest and list --all" test: untag instead of rmi
  * build(deps): bump golang.org/x/text from 0.8.0 to 0.9.0
  * Add renovate.json configuration
  * CI: postbuild step: skip under nightly treadmill
  * The `--ulimit` option accepts the name with an `RLIMIT_` prefix both upper and lower case
  * test/e2e: use custom network config dir where needed
  * chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml`
  * update completion scripts for cobra v1.7.0
  * libpod.storageService.CreateContainerStorage(): retrieve ID maps
  * Fix invalid pod name and hostname during kube generate
  * e2e tests: fix racy flakes
  * Cirrus: Enable labeling of EC2 VMs
  * Cirrus: Fix aarch64 clone_script 404 errors
  * e2e: GinkgoParallelNode() -&gt; ...Process()
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
  * [CI:DOCS] --creds and registries
  * Copr: fix build deps for /usr/bin/envsubst
  * Don't error when removing non-existant env vars
  * e2e: healthcheck on stopped container: fix flake
  * test/apiv2/80-kube.at
  * test/apiv2/80-kube.at
  * system service: do not close Body
  * rm `hack/release.sh`
  * build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6
  * add `quadlet -version` flag
  * add version/rawversion package
  * quadlet: use `Flag` suffix for variables
  * quadlet: implement `Tmpfs` option
  * Bump to v4.5.0-dev
  * Bump to 4.5.0-rc1
  * Update release notes from 4.4 branch
  * rootless netns: recover from invalid netns
  * System tests: unverbosify a flake log
  * Add support for secret exists
  * Fix Win install task failures with large PR bodies
  * docs: add `starting` to `HealthCheckResults.Status`
  * Add support for cgroup_config from containers.conf
  * libpod: mount safely subpaths
  * Support Deployment generation with kube generate
  * Use secret.items to create volume mounts if present
  * [CI:DOCS] fix typo in --systemd option
  * rootless: drop preexec hook error message
  * Edit the docker wrapper to use the install prefix
  * Update podman-for-windows.md
  * Quadlet: RemapUsers documentation fixes
  * speed up image listing
  * vendor containers/common@e27c30ee9b1b
  * fix volume-plugin-test flake
  * Document building Podman remote on Windows hosts
  * test/e2e: gpg keep stdout/err attached
  * auto-update: stop+start instead of restart sytemd units
  * [CI:DOCS] Improve basic tutorial
  * Update docs/source/markdown/podman-network.1.md
  * Add debug to --wait test
  * fix slirp4netns resolv.conf ip with a userns
  * Quadlet: add support for keep-id with mapping values
  * Quadlet E2E test - run quadlet as user generator
  * sqlite: do not `Ping()` after connecting
  * Quadlet - treat paths starting with systemd specifiers as absolute
  * Update docs/source/markdown/podman-kube-play.1.md.in
  * system tests: use CONTAINERS_CONF_OVERRIDE
  * implement podman machine set for hyperv
  * [CI:DOCS] Add network subnets info to network man page
  * CI: retry the golangci install
  * system tests: fix racey sdnotify test
  * hyperv: lookup machine on local filesystem first
  * fix os.IsNotExist() CI check
  * Ensure that SQLite state handles name-ID collisions
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * build(deps): bump github.com/onsi/gomega from 1.27.4 to 1.27.5
  * Fix a race around SQLite DB config validation
  * add CONTAINERS_CONF_OVERRIDE
  * vendor containers/common@main
  * docs: minor grammar fix in `--volume` description
  * sqlite: do not use shared cache
  * test: podman checkpoint/restore the latest container
  * stats compat API: return "id" lowercase
  * Run make codespell
  * Drop SQLite max connections
  * sqlite: set connection attributes on open
  * Fix database locked errors with SQLite
  * quadlet tests: skip on RHEL8 rootless
  * Kube Play Doc: Document the support for K8S Secret
  * New ulimit test: bump up minimum nfiles
  * logformatter: hide --db-backend, and friendlyize quadlet
  * Quadlet - add support for relative path in Volume key in .container file
  * Add service ctr cleanup to PlayKubeDown
  * fix --health-on-failure=restart in transient unit
  * Quadlet Doc: Suggest the kill operation for HealthOnFailure
  * Quadlet - Add support for health checks configuration in .container files
  * Makefile: allow specifying /lib dir location
  * Fix option --opts -&gt; --opt
  * basic hypverv machine implementation
  * Fix SQLite DB schema migration code
  * Add support for oom_score_adj value from containers.conf
  * Use default_ulimits field in containers.conf
  * CI: test and confirm DESIRED_DATABASE
  * build(deps): bump github.com/openshift/imagebuilder
  * logformatter: futureproof output filename
  * Vendor in latest containers/(storage, common, image)
  * build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.30.0
  * test/system/255-auto-update.bats: add debug logs
  * Revert "Revert "pasta: Use two connections instead of three in TCP range forward tests""
  * Add information for secret inspect
  * Add format to podman volume ls
  * Add format to podman volume inspect
  * Add format to podman secret ls
  * Add format to podman system df
  * Add format to podman machine info
  * Add format table to podman image inspect man page
  * Cirrus: Store podman machine benchmark data
  * Update Cirrus display names, and fix get-ci-vm script
  * Ensure SQLite places uses the runroot in transient mode
  * Fix various integration test issues with SQLite state
  * Remove test for pod/container name global uniqueness
  * Improve handling of existing container names in SQLite
  * Add SQLite job to CI
  * buildah treadmill: also run rootless tests
  * build(deps): bump github.com/vbatts/git-validation in /test/tools
  * auto update: return restart error
  * fix: Document removing anonymous volumes
  * events: no duplicates when streaming during a log rotation
  * Add search --cert-dir, --creds
  * podman-mac-helper: exit 1 on error
  * system service --log-level=trace: support hijack
  * test/system: fix wait_for_port() to wait for bind
  * cgroupns: private cgroupns on cgroupv1 breaks --systemd
  * libpod: remove error stutter
  * podman events: unhide --stream
  * test/system/255-auto-update.bats: multiple services
  * 255-auto-update.bats: turn off rollback where needed
  * Use append() to add elements to a slice
  * Revert "pasta: Use two connections instead of three in TCP range forward tests"
  * Support running nested SELinux container separation
  * bud tests: rootless remote: use correct socket path
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.2.1 to 8.3.0
  * compat: /auth: parse server address correctly
  * docs: fix cmd `set DOCKER_HOST` suggestion
  * test: reenable idmap test
  * Must use mountlabel when creating builtin volumes
  * podman.spec.rpkg: distro conditionals for modulesloaddir
  * build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0
  * podman inspect list network when using --net=host or none
  * pasta: Re-enable "Local forwarder, IPv4" test, accept NXDOMAIN as response
  * build(deps): bump golang.org/x/tools from 0.6.0 to 0.7.0 in /test/tools
  * CI: Switch to c20230307t192532z-f37f36d12 images
  * Cirrus: Run system &amp; integration tests in parallel
  * Update checkpointctl v0.1.0
  * Quadlet: add support for setting --ip and --ip6
  * build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0
  * build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0
  * libpod: avoid nil pointer dereference in (*Container).Cleanup
  * [CI:DOCS] Add image not found info to troubleshooting
  * cmd: do not require userns for "version"
  * cmd: drop special handling for "scp"
  * cmd: clarify meaning of ParentNSRequired
  * Fix package restore
  * [CI:DOCS] Fix docs/version-check always requesting updates
  * sqlite: add a hidden --db-backend flag
  * fix: update the default machine value when the previously set default machine is deleted
  * podman machine: Adjust Chrony makestep config
  * sqlite: add container short ID to network aliases
  * sqlite: remove dead code
  * sqlite: addContainer: add named volume only once
  * sqlite: implement RewriteVolumeConfig
  * sqlite: LookupVolume: fix partial name match
  * sqlite: LookupVolume: wrap error
  * sqlite: fix type rewriting container config
  * sqlite: return correct error on pod-name conflict
  * sqlite: RewritePodConfig: update error message
  * test/system/255-auto-update.bats: wait 10 for update to finish
  * auto-update test: wait for service to be ready
  * Vendor in latest containers/(common, storage, image)
  * play kube: Add --wait option
  * Cirrus: Fix git config permission denied
  * Quadlet: Add support for the Mount key in .container files
  * build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2
  * fix "podman logs --since --follow" flake
  * Clarify that replicas are ignored in kubernetes deployment
  * Revert "Skip all pasta tests"
  * CI: Switch to c20230223t153813z-f37f36d12 images
  * Fix user socket path
  * pkginstaller: bump Qemu to version 7.2.0
  * Cirrus: Fix bud tests failing to apply patches
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2
  * build(deps): bump github.com/coreos/stream-metadata-go
  * Vendor in latest containers/storage
  * buildah-bud tests: don't sudo when rootless is desired
  * Temporarily disable version-check
  * CI: new rootless buildah-bud tests (cron only)
  * sqlite: fix volume lookups with partial names
  * sqlite: fix container lookups with partial IDs
  * sqlite: fix LookupPod
  * sqlite: fix pod create/rm
  * sqlite: LookupContainer: update error message
  * sqlite: AddContainerExitCode: allow to replace
  * system: add warning when running rootless on cgroupv1
  * sqlite: fix AllContainers with state
  * sqlite: fix "UPDATE TABLE" typos
  * sqlite: SaveVolume: fix syntax error updating the volumes table
  * sqlite: exit code: allow -1
  * sqlite: fix typo when removing exec sessions
  * sqlite: AllContainers: fix inner join
  * sqlite: move migration after table creation
  * sqlite: implement pod methods
  * Quadlet - use the default runtime
  * docs: context is not optional for build
  * Fix an incorrect comment on NewSqliteState
  * Add support for containers.conf database setting
  * Add support for volume operations to SQLite state
  * Implement exec session handling in SQL database
  * Various fixes from code review
  * Remove `--namespace` flag from Podman root
  * Get E2E tests to pass
  * Implement network disconnect for SQLite state
  * Implement Network Connect/Modify for SQLite state
  * Fix various lint issues
  * Some further work on SQLite state
  * Remove concept of Namespaces from BoltDB
  * Add initial SQLite-backed state implementation
  * Cirrus: Support runc testing on debian VMs
  * Skip all pasta tests
  * Skip buildah-bud test
  * Skip buildx test with VFS podman storage driver
  * Skip 'podman kube --network' test for rootless CGv1
  * Skip tests which fail with CGv1 &amp; runc
  * Skip rootless CGv1 quadlet tests due to issue
  * Makefile: Define SHELL
  * Machine refactor for QEMU/AppleHV
  * machine refactoring preparations for hyperv
  * [CI:BUILD] spec.rpkg: trim dependency list
  * Logs follow-until tests: loosen checks
  * [CI:DOCS] Windows/Mac docs link update
  * Doc update for docker network options via CLI
  * compat API: network create return 409 for duplicate
  * Apply suggestions to man page
  * vendor c/common@852ca05a1fbb
  * Quadlet: Add support for LogDriver key in container and kube units
  * machine refactoring preparations for hyperv
  * libpod: always use direct mapping
  * netavark: only use aardvark ip as nameserver
  * build(deps): bump github.com/container-orchestrated-devices/container-device-interface
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * make docs: sanity check for broken man pages
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.6 to 8.2.0
  * build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1
  * kube: rm secret on down, print secret on play
  * Fix spacing typo that triggered OCD &amp; indent units in podman-systemd.unit(5)
  * Update remote_client.md
  * [CI:DOCS] Add restriction to option README
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0
  * kube play: only enforce passthrough in Quadlet
  * journald: remove initializeJournal()
  * auto-update: support pods
  * Emergency fix for man pages: check for broken includes
  * System tests: assert(): friendlier failure messages
  * Cirrus: Fix version-check to only run on `main` job
  * CI: Temporarily disable all AWS EC2-based tasks
  * build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18
  * volume,container: chroot to source before exporting content
  * Support sysctl configs via podman kube play
  * [CI:BUILD] copr: podman.spec.rpkg cleanups
  * quadlet system tests: add useful defaults, logging
  * libpod: support relative positions for idmaps
  * Experimental workaround for cdn03.quay.io flake
  * system tests: prevent leading tabs
  * Introduce podman machine os apply
  * create: add support for --group-entry
  * fix != filter in volume prune
  * Allow specification of podman --remote build -f -
  * Quadlet use crun specified in containers.conf
  * build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0
  * Vendor c/image after https://github.com/containers/image/pull/1847
  * Don't set hostPort when generating a service
  * man page --format xref: tighten the autocompletion check
  * add support for limiting tmpfs size for systemd-specific mnts
  * build(deps): bump golang.org/x/text from 0.6.0 to 0.7.0
  * Add ulimit annotation to kube gen &amp; play
  * man page xref: validate displayed man page names
  * quadlet: add ExecStop
  * install sigproxy before start/attach
  * build(deps): bump golang.org/x/tools from 0.5.0 to 0.6.0 in /test/tools
  * Fix typos
  * Cirrus: Make benchmarks .env file easier to load
  * Cirrus: Omit functions in env. file
  * kube play: set service container as main PID when possible
  * Fix typos. Improve language.
  * events + container inspect test: RHEL fixes
  * Add ctrName to network alias during kube play
  * Run codespell on codebase
  * podman image scp: added identity for ssh.Exec
  * [CI:DOCS] Clarify nomap constrains
  * [CI:DOCS] man-page checker: include --format (Go templates)
  * Vendor c/image after https://github.com/containers/image/pull/1816
  * [CI:DOCS] Cleanup some man pages to display options with line breaks
  * [CI:DOCS] Add tables to podman-systemd.unit man page
  * github: remove prefix from bugs/features
  * Quadlet: Add support for the Secret key in Container group
  * [CI:DOCS] OWNERS: add @ygalblum and @alexlarsson
  * build(deps): bump golang.org/x/term from 0.4.0 to 0.5.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.1.6
  * Sort quadlet keys to make it easier to read
  * e2e: fix some tests on remote
  * kube play: do not teardown unconditionally on error
  * Fix typos in comments
  * Resolve symlink path for qemu directory if possible
  * #17363 Fix contradicting documentation podman-commit
  * Fix a potential UID/GID collision in unit tests
  * golangci-lint: show all errors at once
  * update golangci-lint to version 1.51.1
  * [CI:DOCS] events: document journald identifiers
  * Quadlet: exit 0 when there are no files to process
  * network ls: handle removed container
  * e2e: adapt play kube test on remote rootless
  * docs/podman-systemd.unit: Explicitely mention network &amp; kube units
  * docs/podman-systemd.unit: Update example to work out of the box
  * [CI:BUILD] Cirrus: Fix GraphQL ownerRepository:null error
  * Add missing return after errors
  * Revert "Cirrus: Emergency fix to un-stuck PRs"
  * pasta: Fix ICMPv6 Echo test, skip it for the moment
  * pasta: Fix ICMP Echo Request (IPv4) test
  * pasta: Use two connections instead of three in TCP range forward tests
  * Add SELinux label types support to quadlet
  * Add quadlet support for rootfs= containers
  * Cirrus: Emergency fix to un-stuck PRs
  * Move clean-binaries before podman-remote in podman-remote-docs target
  * oci: bind mount /sys with --userns=(auto|pod:)
  * Cleanup podman-systemd.unit file
  * Install podman-systemd.unit  man page, make quadlet discoverable
  * libpod: allow userns=keep-id for root
  * system-reset: use CleanCacheMount to clear build cache
  * vendor: bump buildah to v1.29.1-0.20230201192322-e56eb25575c7
  * system tests: fix noexistent labels test in the remote
  * Expose Podman named pipe in Inspect output
  * libpod: support idmap for --rootfs
  * test: adapt test to work on cgroupv1
  * Bump to v4.5.0-dev
  * Update main to reflect v4.4.0 release
  * Update from /github.com/vbauerster/mpb/v7 to /v8
  * hack/perf: cleanup after benchmarks
  * hack/perf/bz-2162111.sh: use custom network
  * Update bug_report.yaml
  * Handle filetype field in kubernetes.yaml files
  * hack/perf/bz-2162111.sh: measure stop
  * make hack/markdown-preprocess parallel-safe
  * system tests: fix volume exec/noexec test
  * system tests: minor fix for RHEL8 incompatibility
  * Cirrus: Use versionable IMAGE_SUFFIX
  * utils: new conversion method
  * libpod: use GraphRoot for overlay upper dir
  * vendor: update containers/storage
  * Do not mount /dev/tty into rootless containers
  * build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7
  * e2e: fix run_staticip_test about no_proxy
  * docs: specify order preference for FROM
  * Fixes port collision issue on use of --publish-all
  * Support for Windows paths in the source position of the volume mounts
  * e2e tests: fix incorrect os.User.Name
  * Log data that we failed to unmarshal
  * [CI:DOCS] hack/perf: add script for BZ 216111
  * container rm: save once for exec removal and state change
  * [DOCS:CI] podman-events: document verbose create events
  * e2e: Avoid hard-coding included in quadlet test
  * e2e: Avoid hard-coding ImageCacheDir
  * Making gvproxy.exe optional for building Windows installer
  * Add gvproxy to Windows packages
  * Add comment to clarify error handling intention
  * fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
  * Fix usage of absolute windows paths with --image-path
  * Match VT device paths to be blocked from mounting exactly
  * Fix default handling of pids-limit
  * Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
  * journald: podman logs only show logs for current user
  * journald: podman events only show events for current user
  * e2e: Remove the cache with "podman unshare rm" when a rootless user
  * Clean up more language for inclusiveness
  * e2e: Remove some directories at SynchronizedAfterSuite
  * fix: don't output "ago" when container is currently up and running
  * fix: running check error when podman is default in wsl
  * fix CI: test fail due to merge
  * Bump Bulidah to v1.29.0
  * e2e: reduce dependency on /tmp for e2e tests
  * Bump cirrus image with easier dependency management
  * quadlet: Add device support for .volume files
  * remote,build: error if containerignore is symlink
  * DB: make loading container states optional
  * ps: do not sync container
  * Set runAsNonRoot=true in gen kube
  * WSL refactoring
  * kube-play: add support for HostIPC in pod.Spec
  * Allow --device-cgroup-rule to be passed in by docker API</changelog>
  <changelog author="danish.prakash@suse.com" date="1685361600">- Update to version 4.5.1:
  * Release v4.5.1
  * [CI:DOCS] Final release notes for v4.5.1
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * Revert "Resolve symlink path for qemu directory if possible"
  * no need for podman-next rpm test on maint branch
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * network create/update: allow dns servers comma separated
  * machine: fix default connection URL to use 127.0.0.1
  * compat: accept tag in /images/create?fromSrc
  * compat container create: match duplicate mounts correctly
  * machine: qemu only remove connection after confirmation
  * windows: podman save allow the use of stdout
  * remote: exec inspect update exec session status
  * podman-remote logs: handle server error correctly
  * libpod: stop containers with --restart=always
  * Do not include image annotations when building spec
  * [v4.5] system tests: fix race in kube-play read-only
  * api: fix parsing filters
  * Support systemd optional prefix '-' for devices.
  * *: migrate image registry to registry.k8s.io
  * Makefile: include `release-artifacts` target
  * [CI:BUILD] Packit: Initial Enablement
  * Bump to v4.5.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
</package>
<package pkgid="9d32061aed29f241b310e9d602b997d6a85d742ab7d894810dbdef3fe1e26ad7" name="podman-remote" arch="aarch64">
  <version epoch="0" ver="4.8.3" rel="150500.3.6.1"/>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
</package>
<package pkgid="fca068c6ba1fd62a4039f7da90e8c9edce728457a314c62b80b8897d101d0cd4" name="podman-remote" arch="ppc64le">
  <version epoch="0" ver="4.8.3" rel="150500.3.6.1"/>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
</package>
<package pkgid="4785afb62ddc52f50a8580b935ec02b000a77096e7670e013b6eb78ec74287e2" name="podman-remote" arch="s390x">
  <version epoch="0" ver="4.8.3" rel="150500.3.6.1"/>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
</package>
<package pkgid="cad7f44ddd7d897177de8ab5689e4a725134e6563069ef2e87e963299fe3460f" name="podman-remote" arch="x86_64">
  <version epoch="0" ver="4.8.3" rel="150500.3.6.1"/>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
</package>
<package pkgid="90d7599145a7f1ead36044b115f2ca7f2d4b08f73ba648f8d16a396f3d2378bd" name="podmansh" arch="aarch64">
  <version epoch="0" ver="4.7.2" rel="150500.3.3.1"/>
  <changelog author="danish.prakash@suse.com" date="1677240000">- Update to version 4.4.2:
  * Bump to v4.4.2
  * Release notes for v4.4.2
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * kube play: only enforce passthrough in Quadlet
  * Emergency fix for man pages: check for broken includes
  * CI: Temporarily disable all AWS EC2-based tasks
  * quadlet system tests: add useful defaults, logging
  * volume,container: chroot to source before exporting content
  * install sigproxy before start/attach
  * Update to c/image 5.24.1
  * events + container inspect test: RHEL fixes
  * Bump to v4.4.2-dev
- Remove patches (merged upstream):
  * volume-container-chroot-to-source-before-exporting-content.patch
- podman.spec: add `crun` requirement for quadlet
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add patch to let quadlet use the default runtime
  Added patch:
  * Quadlet-use-the-default-runtime.patch
  =&gt; Remove dependency on crun</changelog>
  <changelog author="danish.prakash@suse.com" date="1679659200">- Update to version 4.4.3:
  * Bump to v4.4.3
  * Release notes for v4.4.3
  * compat: /auth: parse server address correctly
  * vendor github.com/containers/common@v0.51.1
  * pkginstaller: bump Qemu to version 7.2.0
  * podman machine: Adjust Chrony makestep config
  * [v4.4] fix --health-on-failure=restart in transient unit
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * journald: remove initializeJournal()
  * netavark: only use aardvark ip as nameserver
  * compat API: network create return 409 for duplicate
  * fix "podman logs --since --follow" flake
  * system service --log-level=trace: support hijack
  * podman-mac-helper: exit 1 on error
  * bump golang.org/x/net to v0.8.0
  * Fix package restore
  * Quadlet - use the default runtime
  * Bump to v4.4.3-dev
- Remove patch (merged upstream):
  * Quadlet-use-the-default-runtime.patch
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="danish.prakash@suse.com" date="1680004800">- Update to version 4.4.4:
  * Bump to v4.4.4
  * Release notes for v4.4.4
  * libpod: always use direct mapping
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * Bump to v4.4.4-dev
- spec: Bump required version for libcontainers-common (bsc#1209495)</changelog>
  <changelog author="dcermak@suse.com" date="1681473600">- Don't build against EoL go versions, fixes bsc#1210299</changelog>
  <changelog author="danish.prakash@suse.com" date="1681819200">- Update to version 4.5.0:
  * Release v4.5.0
  * [CI:DOCS] Final release notes for v4.5.0
  * Quadlet - do not set log-driver by default
  * Return title fields as a list
  * Bump to v4.5.0-dev
  * Bump to v4.5.0-RC2
  * Final release notes for v4.5.0-RC2
  * test/e2e: remove unnecessary SkipIfNetavark() calls
  * test/e2e: deduplicated network test
  * docs: update podman-network-create.1
  * network create: add --interface-name
  * test/system/252-quadlet.bats: fix flake
  * Read kube_generate_type from containers.conf
  * Debian setup: workaround for runc /dev/char/10:200 bug
  * pkg/rootless: use catatonit from /usr/libexec/podman
  * rootless: make sure we only use a single pause process
  * Use atomic config writing strategy for podman machine config files
  * Add remaining release notes for v4.5.0-RC2
  * GHA: Use version instead of SHA for actions
  * chore(deps): update dependency containers/automation_images to v20230405
  * build: pass env by reference
  * test: retrofit error message
  * test/system: expect 12 char for short id
  * vendor: bump containers/(storage, common, buildah, image)
  * [skip-ci] Update actions/upload-artifact action to v3
  * [skip-ci] Update actions/stale action to v8
  * [skip-ci] Update actions/setup-go action to v4
  * [skip-ci] Update github/issue-labeler action to v2.6
  * Fix up codespell errors
  * Capitalize all uid,gid and id words that are not options in docs
  * build(deps): bump golang.org/x/tools from 0.7.0 to 0.8.0 in /test/tools
  * Properly remove the service container during kube down
  * quadlet: add `UserNS` option key
  * [CI:DOCS] Release notes for 4.5.0 Part 1
  * "podman pull by digest and list --all" test: untag instead of rmi
  * build(deps): bump golang.org/x/text from 0.8.0 to 0.9.0
  * Add renovate.json configuration
  * CI: postbuild step: skip under nightly treadmill
  * The `--ulimit` option accepts the name with an `RLIMIT_` prefix both upper and lower case
  * test/e2e: use custom network config dir where needed
  * chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml`
  * update completion scripts for cobra v1.7.0
  * libpod.storageService.CreateContainerStorage(): retrieve ID maps
  * Fix invalid pod name and hostname during kube generate
  * e2e tests: fix racy flakes
  * Cirrus: Enable labeling of EC2 VMs
  * Cirrus: Fix aarch64 clone_script 404 errors
  * e2e: GinkgoParallelNode() -&gt; ...Process()
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
  * [CI:DOCS] --creds and registries
  * Copr: fix build deps for /usr/bin/envsubst
  * Don't error when removing non-existant env vars
  * e2e: healthcheck on stopped container: fix flake
  * test/apiv2/80-kube.at
  * test/apiv2/80-kube.at
  * system service: do not close Body
  * rm `hack/release.sh`
  * build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6
  * add `quadlet -version` flag
  * add version/rawversion package
  * quadlet: use `Flag` suffix for variables
  * quadlet: implement `Tmpfs` option
  * Bump to v4.5.0-dev
  * Bump to 4.5.0-rc1
  * Update release notes from 4.4 branch
  * rootless netns: recover from invalid netns
  * System tests: unverbosify a flake log
  * Add support for secret exists
  * Fix Win install task failures with large PR bodies
  * docs: add `starting` to `HealthCheckResults.Status`
  * Add support for cgroup_config from containers.conf
  * libpod: mount safely subpaths
  * Support Deployment generation with kube generate
  * Use secret.items to create volume mounts if present
  * [CI:DOCS] fix typo in --systemd option
  * rootless: drop preexec hook error message
  * Edit the docker wrapper to use the install prefix
  * Update podman-for-windows.md
  * Quadlet: RemapUsers documentation fixes
  * speed up image listing
  * vendor containers/common@e27c30ee9b1b
  * fix volume-plugin-test flake
  * Document building Podman remote on Windows hosts
  * test/e2e: gpg keep stdout/err attached
  * auto-update: stop+start instead of restart sytemd units
  * [CI:DOCS] Improve basic tutorial
  * Update docs/source/markdown/podman-network.1.md
  * Add debug to --wait test
  * fix slirp4netns resolv.conf ip with a userns
  * Quadlet: add support for keep-id with mapping values
  * Quadlet E2E test - run quadlet as user generator
  * sqlite: do not `Ping()` after connecting
  * Quadlet - treat paths starting with systemd specifiers as absolute
  * Update docs/source/markdown/podman-kube-play.1.md.in
  * system tests: use CONTAINERS_CONF_OVERRIDE
  * implement podman machine set for hyperv
  * [CI:DOCS] Add network subnets info to network man page
  * CI: retry the golangci install
  * system tests: fix racey sdnotify test
  * hyperv: lookup machine on local filesystem first
  * fix os.IsNotExist() CI check
  * Ensure that SQLite state handles name-ID collisions
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * build(deps): bump github.com/onsi/gomega from 1.27.4 to 1.27.5
  * Fix a race around SQLite DB config validation
  * add CONTAINERS_CONF_OVERRIDE
  * vendor containers/common@main
  * docs: minor grammar fix in `--volume` description
  * sqlite: do not use shared cache
  * test: podman checkpoint/restore the latest container
  * stats compat API: return "id" lowercase
  * Run make codespell
  * Drop SQLite max connections
  * sqlite: set connection attributes on open
  * Fix database locked errors with SQLite
  * quadlet tests: skip on RHEL8 rootless
  * Kube Play Doc: Document the support for K8S Secret
  * New ulimit test: bump up minimum nfiles
  * logformatter: hide --db-backend, and friendlyize quadlet
  * Quadlet - add support for relative path in Volume key in .container file
  * Add service ctr cleanup to PlayKubeDown
  * fix --health-on-failure=restart in transient unit
  * Quadlet Doc: Suggest the kill operation for HealthOnFailure
  * Quadlet - Add support for health checks configuration in .container files
  * Makefile: allow specifying /lib dir location
  * Fix option --opts -&gt; --opt
  * basic hypverv machine implementation
  * Fix SQLite DB schema migration code
  * Add support for oom_score_adj value from containers.conf
  * Use default_ulimits field in containers.conf
  * CI: test and confirm DESIRED_DATABASE
  * build(deps): bump github.com/openshift/imagebuilder
  * logformatter: futureproof output filename
  * Vendor in latest containers/(storage, common, image)
  * build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.30.0
  * test/system/255-auto-update.bats: add debug logs
  * Revert "Revert "pasta: Use two connections instead of three in TCP range forward tests""
  * Add information for secret inspect
  * Add format to podman volume ls
  * Add format to podman volume inspect
  * Add format to podman secret ls
  * Add format to podman system df
  * Add format to podman machine info
  * Add format table to podman image inspect man page
  * Cirrus: Store podman machine benchmark data
  * Update Cirrus display names, and fix get-ci-vm script
  * Ensure SQLite places uses the runroot in transient mode
  * Fix various integration test issues with SQLite state
  * Remove test for pod/container name global uniqueness
  * Improve handling of existing container names in SQLite
  * Add SQLite job to CI
  * buildah treadmill: also run rootless tests
  * build(deps): bump github.com/vbatts/git-validation in /test/tools
  * auto update: return restart error
  * fix: Document removing anonymous volumes
  * events: no duplicates when streaming during a log rotation
  * Add search --cert-dir, --creds
  * podman-mac-helper: exit 1 on error
  * system service --log-level=trace: support hijack
  * test/system: fix wait_for_port() to wait for bind
  * cgroupns: private cgroupns on cgroupv1 breaks --systemd
  * libpod: remove error stutter
  * podman events: unhide --stream
  * test/system/255-auto-update.bats: multiple services
  * 255-auto-update.bats: turn off rollback where needed
  * Use append() to add elements to a slice
  * Revert "pasta: Use two connections instead of three in TCP range forward tests"
  * Support running nested SELinux container separation
  * bud tests: rootless remote: use correct socket path
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.2.1 to 8.3.0
  * compat: /auth: parse server address correctly
  * docs: fix cmd `set DOCKER_HOST` suggestion
  * test: reenable idmap test
  * Must use mountlabel when creating builtin volumes
  * podman.spec.rpkg: distro conditionals for modulesloaddir
  * build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0
  * podman inspect list network when using --net=host or none
  * pasta: Re-enable "Local forwarder, IPv4" test, accept NXDOMAIN as response
  * build(deps): bump golang.org/x/tools from 0.6.0 to 0.7.0 in /test/tools
  * CI: Switch to c20230307t192532z-f37f36d12 images
  * Cirrus: Run system &amp; integration tests in parallel
  * Update checkpointctl v0.1.0
  * Quadlet: add support for setting --ip and --ip6
  * build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0
  * build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0
  * libpod: avoid nil pointer dereference in (*Container).Cleanup
  * [CI:DOCS] Add image not found info to troubleshooting
  * cmd: do not require userns for "version"
  * cmd: drop special handling for "scp"
  * cmd: clarify meaning of ParentNSRequired
  * Fix package restore
  * [CI:DOCS] Fix docs/version-check always requesting updates
  * sqlite: add a hidden --db-backend flag
  * fix: update the default machine value when the previously set default machine is deleted
  * podman machine: Adjust Chrony makestep config
  * sqlite: add container short ID to network aliases
  * sqlite: remove dead code
  * sqlite: addContainer: add named volume only once
  * sqlite: implement RewriteVolumeConfig
  * sqlite: LookupVolume: fix partial name match
  * sqlite: LookupVolume: wrap error
  * sqlite: fix type rewriting container config
  * sqlite: return correct error on pod-name conflict
  * sqlite: RewritePodConfig: update error message
  * test/system/255-auto-update.bats: wait 10 for update to finish
  * auto-update test: wait for service to be ready
  * Vendor in latest containers/(common, storage, image)
  * play kube: Add --wait option
  * Cirrus: Fix git config permission denied
  * Quadlet: Add support for the Mount key in .container files
  * build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2
  * fix "podman logs --since --follow" flake
  * Clarify that replicas are ignored in kubernetes deployment
  * Revert "Skip all pasta tests"
  * CI: Switch to c20230223t153813z-f37f36d12 images
  * Fix user socket path
  * pkginstaller: bump Qemu to version 7.2.0
  * Cirrus: Fix bud tests failing to apply patches
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2
  * build(deps): bump github.com/coreos/stream-metadata-go
  * Vendor in latest containers/storage
  * buildah-bud tests: don't sudo when rootless is desired
  * Temporarily disable version-check
  * CI: new rootless buildah-bud tests (cron only)
  * sqlite: fix volume lookups with partial names
  * sqlite: fix container lookups with partial IDs
  * sqlite: fix LookupPod
  * sqlite: fix pod create/rm
  * sqlite: LookupContainer: update error message
  * sqlite: AddContainerExitCode: allow to replace
  * system: add warning when running rootless on cgroupv1
  * sqlite: fix AllContainers with state
  * sqlite: fix "UPDATE TABLE" typos
  * sqlite: SaveVolume: fix syntax error updating the volumes table
  * sqlite: exit code: allow -1
  * sqlite: fix typo when removing exec sessions
  * sqlite: AllContainers: fix inner join
  * sqlite: move migration after table creation
  * sqlite: implement pod methods
  * Quadlet - use the default runtime
  * docs: context is not optional for build
  * Fix an incorrect comment on NewSqliteState
  * Add support for containers.conf database setting
  * Add support for volume operations to SQLite state
  * Implement exec session handling in SQL database
  * Various fixes from code review
  * Remove `--namespace` flag from Podman root
  * Get E2E tests to pass
  * Implement network disconnect for SQLite state
  * Implement Network Connect/Modify for SQLite state
  * Fix various lint issues
  * Some further work on SQLite state
  * Remove concept of Namespaces from BoltDB
  * Add initial SQLite-backed state implementation
  * Cirrus: Support runc testing on debian VMs
  * Skip all pasta tests
  * Skip buildah-bud test
  * Skip buildx test with VFS podman storage driver
  * Skip 'podman kube --network' test for rootless CGv1
  * Skip tests which fail with CGv1 &amp; runc
  * Skip rootless CGv1 quadlet tests due to issue
  * Makefile: Define SHELL
  * Machine refactor for QEMU/AppleHV
  * machine refactoring preparations for hyperv
  * [CI:BUILD] spec.rpkg: trim dependency list
  * Logs follow-until tests: loosen checks
  * [CI:DOCS] Windows/Mac docs link update
  * Doc update for docker network options via CLI
  * compat API: network create return 409 for duplicate
  * Apply suggestions to man page
  * vendor c/common@852ca05a1fbb
  * Quadlet: Add support for LogDriver key in container and kube units
  * machine refactoring preparations for hyperv
  * libpod: always use direct mapping
  * netavark: only use aardvark ip as nameserver
  * build(deps): bump github.com/container-orchestrated-devices/container-device-interface
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * make docs: sanity check for broken man pages
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.6 to 8.2.0
  * build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1
  * kube: rm secret on down, print secret on play
  * Fix spacing typo that triggered OCD &amp; indent units in podman-systemd.unit(5)
  * Update remote_client.md
  * [CI:DOCS] Add restriction to option README
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0
  * kube play: only enforce passthrough in Quadlet
  * journald: remove initializeJournal()
  * auto-update: support pods
  * Emergency fix for man pages: check for broken includes
  * System tests: assert(): friendlier failure messages
  * Cirrus: Fix version-check to only run on `main` job
  * CI: Temporarily disable all AWS EC2-based tasks
  * build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18
  * volume,container: chroot to source before exporting content
  * Support sysctl configs via podman kube play
  * [CI:BUILD] copr: podman.spec.rpkg cleanups
  * quadlet system tests: add useful defaults, logging
  * libpod: support relative positions for idmaps
  * Experimental workaround for cdn03.quay.io flake
  * system tests: prevent leading tabs
  * Introduce podman machine os apply
  * create: add support for --group-entry
  * fix != filter in volume prune
  * Allow specification of podman --remote build -f -
  * Quadlet use crun specified in containers.conf
  * build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0
  * Vendor c/image after https://github.com/containers/image/pull/1847
  * Don't set hostPort when generating a service
  * man page --format xref: tighten the autocompletion check
  * add support for limiting tmpfs size for systemd-specific mnts
  * build(deps): bump golang.org/x/text from 0.6.0 to 0.7.0
  * Add ulimit annotation to kube gen &amp; play
  * man page xref: validate displayed man page names
  * quadlet: add ExecStop
  * install sigproxy before start/attach
  * build(deps): bump golang.org/x/tools from 0.5.0 to 0.6.0 in /test/tools
  * Fix typos
  * Cirrus: Make benchmarks .env file easier to load
  * Cirrus: Omit functions in env. file
  * kube play: set service container as main PID when possible
  * Fix typos. Improve language.
  * events + container inspect test: RHEL fixes
  * Add ctrName to network alias during kube play
  * Run codespell on codebase
  * podman image scp: added identity for ssh.Exec
  * [CI:DOCS] Clarify nomap constrains
  * [CI:DOCS] man-page checker: include --format (Go templates)
  * Vendor c/image after https://github.com/containers/image/pull/1816
  * [CI:DOCS] Cleanup some man pages to display options with line breaks
  * [CI:DOCS] Add tables to podman-systemd.unit man page
  * github: remove prefix from bugs/features
  * Quadlet: Add support for the Secret key in Container group
  * [CI:DOCS] OWNERS: add @ygalblum and @alexlarsson
  * build(deps): bump golang.org/x/term from 0.4.0 to 0.5.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.1.6
  * Sort quadlet keys to make it easier to read
  * e2e: fix some tests on remote
  * kube play: do not teardown unconditionally on error
  * Fix typos in comments
  * Resolve symlink path for qemu directory if possible
  * #17363 Fix contradicting documentation podman-commit
  * Fix a potential UID/GID collision in unit tests
  * golangci-lint: show all errors at once
  * update golangci-lint to version 1.51.1
  * [CI:DOCS] events: document journald identifiers
  * Quadlet: exit 0 when there are no files to process
  * network ls: handle removed container
  * e2e: adapt play kube test on remote rootless
  * docs/podman-systemd.unit: Explicitely mention network &amp; kube units
  * docs/podman-systemd.unit: Update example to work out of the box
  * [CI:BUILD] Cirrus: Fix GraphQL ownerRepository:null error
  * Add missing return after errors
  * Revert "Cirrus: Emergency fix to un-stuck PRs"
  * pasta: Fix ICMPv6 Echo test, skip it for the moment
  * pasta: Fix ICMP Echo Request (IPv4) test
  * pasta: Use two connections instead of three in TCP range forward tests
  * Add SELinux label types support to quadlet
  * Add quadlet support for rootfs= containers
  * Cirrus: Emergency fix to un-stuck PRs
  * Move clean-binaries before podman-remote in podman-remote-docs target
  * oci: bind mount /sys with --userns=(auto|pod:)
  * Cleanup podman-systemd.unit file
  * Install podman-systemd.unit  man page, make quadlet discoverable
  * libpod: allow userns=keep-id for root
  * system-reset: use CleanCacheMount to clear build cache
  * vendor: bump buildah to v1.29.1-0.20230201192322-e56eb25575c7
  * system tests: fix noexistent labels test in the remote
  * Expose Podman named pipe in Inspect output
  * libpod: support idmap for --rootfs
  * test: adapt test to work on cgroupv1
  * Bump to v4.5.0-dev
  * Update main to reflect v4.4.0 release
  * Update from /github.com/vbauerster/mpb/v7 to /v8
  * hack/perf: cleanup after benchmarks
  * hack/perf/bz-2162111.sh: use custom network
  * Update bug_report.yaml
  * Handle filetype field in kubernetes.yaml files
  * hack/perf/bz-2162111.sh: measure stop
  * make hack/markdown-preprocess parallel-safe
  * system tests: fix volume exec/noexec test
  * system tests: minor fix for RHEL8 incompatibility
  * Cirrus: Use versionable IMAGE_SUFFIX
  * utils: new conversion method
  * libpod: use GraphRoot for overlay upper dir
  * vendor: update containers/storage
  * Do not mount /dev/tty into rootless containers
  * build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7
  * e2e: fix run_staticip_test about no_proxy
  * docs: specify order preference for FROM
  * Fixes port collision issue on use of --publish-all
  * Support for Windows paths in the source position of the volume mounts
  * e2e tests: fix incorrect os.User.Name
  * Log data that we failed to unmarshal
  * [CI:DOCS] hack/perf: add script for BZ 216111
  * container rm: save once for exec removal and state change
  * [DOCS:CI] podman-events: document verbose create events
  * e2e: Avoid hard-coding included in quadlet test
  * e2e: Avoid hard-coding ImageCacheDir
  * Making gvproxy.exe optional for building Windows installer
  * Add gvproxy to Windows packages
  * Add comment to clarify error handling intention
  * fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
  * Fix usage of absolute windows paths with --image-path
  * Match VT device paths to be blocked from mounting exactly
  * Fix default handling of pids-limit
  * Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
  * journald: podman logs only show logs for current user
  * journald: podman events only show events for current user
  * e2e: Remove the cache with "podman unshare rm" when a rootless user
  * Clean up more language for inclusiveness
  * e2e: Remove some directories at SynchronizedAfterSuite
  * fix: don't output "ago" when container is currently up and running
  * fix: running check error when podman is default in wsl
  * fix CI: test fail due to merge
  * Bump Bulidah to v1.29.0
  * e2e: reduce dependency on /tmp for e2e tests
  * Bump cirrus image with easier dependency management
  * quadlet: Add device support for .volume files
  * remote,build: error if containerignore is symlink
  * DB: make loading container states optional
  * ps: do not sync container
  * Set runAsNonRoot=true in gen kube
  * WSL refactoring
  * kube-play: add support for HostIPC in pod.Spec
  * Allow --device-cgroup-rule to be passed in by docker API</changelog>
  <changelog author="danish.prakash@suse.com" date="1685361600">- Update to version 4.5.1:
  * Release v4.5.1
  * [CI:DOCS] Final release notes for v4.5.1
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * Revert "Resolve symlink path for qemu directory if possible"
  * no need for podman-next rpm test on maint branch
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * network create/update: allow dns servers comma separated
  * machine: fix default connection URL to use 127.0.0.1
  * compat: accept tag in /images/create?fromSrc
  * compat container create: match duplicate mounts correctly
  * machine: qemu only remove connection after confirmation
  * windows: podman save allow the use of stdout
  * remote: exec inspect update exec session status
  * podman-remote logs: handle server error correctly
  * libpod: stop containers with --restart=always
  * Do not include image annotations when building spec
  * [v4.5] system tests: fix race in kube-play read-only
  * api: fix parsing filters
  * Support systemd optional prefix '-' for devices.
  * *: migrate image registry to registry.k8s.io
  * Makefile: include `release-artifacts` target
  * [CI:BUILD] Packit: Initial Enablement
  * Bump to v4.5.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
</package>
<package pkgid="d0acc092a55faa505825906b5b29902280fe6b0c0a30edcc4f262f0f01d6aa63" name="podmansh" arch="ppc64le">
  <version epoch="0" ver="4.7.2" rel="150500.3.3.1"/>
  <changelog author="danish.prakash@suse.com" date="1677240000">- Update to version 4.4.2:
  * Bump to v4.4.2
  * Release notes for v4.4.2
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * kube play: only enforce passthrough in Quadlet
  * Emergency fix for man pages: check for broken includes
  * CI: Temporarily disable all AWS EC2-based tasks
  * quadlet system tests: add useful defaults, logging
  * volume,container: chroot to source before exporting content
  * install sigproxy before start/attach
  * Update to c/image 5.24.1
  * events + container inspect test: RHEL fixes
  * Bump to v4.4.2-dev
- Remove patches (merged upstream):
  * volume-container-chroot-to-source-before-exporting-content.patch
- podman.spec: add `crun` requirement for quadlet
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add patch to let quadlet use the default runtime
  Added patch:
  * Quadlet-use-the-default-runtime.patch
  =&gt; Remove dependency on crun</changelog>
  <changelog author="danish.prakash@suse.com" date="1679659200">- Update to version 4.4.3:
  * Bump to v4.4.3
  * Release notes for v4.4.3
  * compat: /auth: parse server address correctly
  * vendor github.com/containers/common@v0.51.1
  * pkginstaller: bump Qemu to version 7.2.0
  * podman machine: Adjust Chrony makestep config
  * [v4.4] fix --health-on-failure=restart in transient unit
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * journald: remove initializeJournal()
  * netavark: only use aardvark ip as nameserver
  * compat API: network create return 409 for duplicate
  * fix "podman logs --since --follow" flake
  * system service --log-level=trace: support hijack
  * podman-mac-helper: exit 1 on error
  * bump golang.org/x/net to v0.8.0
  * Fix package restore
  * Quadlet - use the default runtime
  * Bump to v4.4.3-dev
- Remove patch (merged upstream):
  * Quadlet-use-the-default-runtime.patch
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="danish.prakash@suse.com" date="1680004800">- Update to version 4.4.4:
  * Bump to v4.4.4
  * Release notes for v4.4.4
  * libpod: always use direct mapping
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * Bump to v4.4.4-dev
- spec: Bump required version for libcontainers-common (bsc#1209495)</changelog>
  <changelog author="dcermak@suse.com" date="1681473600">- Don't build against EoL go versions, fixes bsc#1210299</changelog>
  <changelog author="danish.prakash@suse.com" date="1681819200">- Update to version 4.5.0:
  * Release v4.5.0
  * [CI:DOCS] Final release notes for v4.5.0
  * Quadlet - do not set log-driver by default
  * Return title fields as a list
  * Bump to v4.5.0-dev
  * Bump to v4.5.0-RC2
  * Final release notes for v4.5.0-RC2
  * test/e2e: remove unnecessary SkipIfNetavark() calls
  * test/e2e: deduplicated network test
  * docs: update podman-network-create.1
  * network create: add --interface-name
  * test/system/252-quadlet.bats: fix flake
  * Read kube_generate_type from containers.conf
  * Debian setup: workaround for runc /dev/char/10:200 bug
  * pkg/rootless: use catatonit from /usr/libexec/podman
  * rootless: make sure we only use a single pause process
  * Use atomic config writing strategy for podman machine config files
  * Add remaining release notes for v4.5.0-RC2
  * GHA: Use version instead of SHA for actions
  * chore(deps): update dependency containers/automation_images to v20230405
  * build: pass env by reference
  * test: retrofit error message
  * test/system: expect 12 char for short id
  * vendor: bump containers/(storage, common, buildah, image)
  * [skip-ci] Update actions/upload-artifact action to v3
  * [skip-ci] Update actions/stale action to v8
  * [skip-ci] Update actions/setup-go action to v4
  * [skip-ci] Update github/issue-labeler action to v2.6
  * Fix up codespell errors
  * Capitalize all uid,gid and id words that are not options in docs
  * build(deps): bump golang.org/x/tools from 0.7.0 to 0.8.0 in /test/tools
  * Properly remove the service container during kube down
  * quadlet: add `UserNS` option key
  * [CI:DOCS] Release notes for 4.5.0 Part 1
  * "podman pull by digest and list --all" test: untag instead of rmi
  * build(deps): bump golang.org/x/text from 0.8.0 to 0.9.0
  * Add renovate.json configuration
  * CI: postbuild step: skip under nightly treadmill
  * The `--ulimit` option accepts the name with an `RLIMIT_` prefix both upper and lower case
  * test/e2e: use custom network config dir where needed
  * chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml`
  * update completion scripts for cobra v1.7.0
  * libpod.storageService.CreateContainerStorage(): retrieve ID maps
  * Fix invalid pod name and hostname during kube generate
  * e2e tests: fix racy flakes
  * Cirrus: Enable labeling of EC2 VMs
  * Cirrus: Fix aarch64 clone_script 404 errors
  * e2e: GinkgoParallelNode() -&gt; ...Process()
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
  * [CI:DOCS] --creds and registries
  * Copr: fix build deps for /usr/bin/envsubst
  * Don't error when removing non-existant env vars
  * e2e: healthcheck on stopped container: fix flake
  * test/apiv2/80-kube.at
  * test/apiv2/80-kube.at
  * system service: do not close Body
  * rm `hack/release.sh`
  * build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6
  * add `quadlet -version` flag
  * add version/rawversion package
  * quadlet: use `Flag` suffix for variables
  * quadlet: implement `Tmpfs` option
  * Bump to v4.5.0-dev
  * Bump to 4.5.0-rc1
  * Update release notes from 4.4 branch
  * rootless netns: recover from invalid netns
  * System tests: unverbosify a flake log
  * Add support for secret exists
  * Fix Win install task failures with large PR bodies
  * docs: add `starting` to `HealthCheckResults.Status`
  * Add support for cgroup_config from containers.conf
  * libpod: mount safely subpaths
  * Support Deployment generation with kube generate
  * Use secret.items to create volume mounts if present
  * [CI:DOCS] fix typo in --systemd option
  * rootless: drop preexec hook error message
  * Edit the docker wrapper to use the install prefix
  * Update podman-for-windows.md
  * Quadlet: RemapUsers documentation fixes
  * speed up image listing
  * vendor containers/common@e27c30ee9b1b
  * fix volume-plugin-test flake
  * Document building Podman remote on Windows hosts
  * test/e2e: gpg keep stdout/err attached
  * auto-update: stop+start instead of restart sytemd units
  * [CI:DOCS] Improve basic tutorial
  * Update docs/source/markdown/podman-network.1.md
  * Add debug to --wait test
  * fix slirp4netns resolv.conf ip with a userns
  * Quadlet: add support for keep-id with mapping values
  * Quadlet E2E test - run quadlet as user generator
  * sqlite: do not `Ping()` after connecting
  * Quadlet - treat paths starting with systemd specifiers as absolute
  * Update docs/source/markdown/podman-kube-play.1.md.in
  * system tests: use CONTAINERS_CONF_OVERRIDE
  * implement podman machine set for hyperv
  * [CI:DOCS] Add network subnets info to network man page
  * CI: retry the golangci install
  * system tests: fix racey sdnotify test
  * hyperv: lookup machine on local filesystem first
  * fix os.IsNotExist() CI check
  * Ensure that SQLite state handles name-ID collisions
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * build(deps): bump github.com/onsi/gomega from 1.27.4 to 1.27.5
  * Fix a race around SQLite DB config validation
  * add CONTAINERS_CONF_OVERRIDE
  * vendor containers/common@main
  * docs: minor grammar fix in `--volume` description
  * sqlite: do not use shared cache
  * test: podman checkpoint/restore the latest container
  * stats compat API: return "id" lowercase
  * Run make codespell
  * Drop SQLite max connections
  * sqlite: set connection attributes on open
  * Fix database locked errors with SQLite
  * quadlet tests: skip on RHEL8 rootless
  * Kube Play Doc: Document the support for K8S Secret
  * New ulimit test: bump up minimum nfiles
  * logformatter: hide --db-backend, and friendlyize quadlet
  * Quadlet - add support for relative path in Volume key in .container file
  * Add service ctr cleanup to PlayKubeDown
  * fix --health-on-failure=restart in transient unit
  * Quadlet Doc: Suggest the kill operation for HealthOnFailure
  * Quadlet - Add support for health checks configuration in .container files
  * Makefile: allow specifying /lib dir location
  * Fix option --opts -&gt; --opt
  * basic hypverv machine implementation
  * Fix SQLite DB schema migration code
  * Add support for oom_score_adj value from containers.conf
  * Use default_ulimits field in containers.conf
  * CI: test and confirm DESIRED_DATABASE
  * build(deps): bump github.com/openshift/imagebuilder
  * logformatter: futureproof output filename
  * Vendor in latest containers/(storage, common, image)
  * build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.30.0
  * test/system/255-auto-update.bats: add debug logs
  * Revert "Revert "pasta: Use two connections instead of three in TCP range forward tests""
  * Add information for secret inspect
  * Add format to podman volume ls
  * Add format to podman volume inspect
  * Add format to podman secret ls
  * Add format to podman system df
  * Add format to podman machine info
  * Add format table to podman image inspect man page
  * Cirrus: Store podman machine benchmark data
  * Update Cirrus display names, and fix get-ci-vm script
  * Ensure SQLite places uses the runroot in transient mode
  * Fix various integration test issues with SQLite state
  * Remove test for pod/container name global uniqueness
  * Improve handling of existing container names in SQLite
  * Add SQLite job to CI
  * buildah treadmill: also run rootless tests
  * build(deps): bump github.com/vbatts/git-validation in /test/tools
  * auto update: return restart error
  * fix: Document removing anonymous volumes
  * events: no duplicates when streaming during a log rotation
  * Add search --cert-dir, --creds
  * podman-mac-helper: exit 1 on error
  * system service --log-level=trace: support hijack
  * test/system: fix wait_for_port() to wait for bind
  * cgroupns: private cgroupns on cgroupv1 breaks --systemd
  * libpod: remove error stutter
  * podman events: unhide --stream
  * test/system/255-auto-update.bats: multiple services
  * 255-auto-update.bats: turn off rollback where needed
  * Use append() to add elements to a slice
  * Revert "pasta: Use two connections instead of three in TCP range forward tests"
  * Support running nested SELinux container separation
  * bud tests: rootless remote: use correct socket path
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.2.1 to 8.3.0
  * compat: /auth: parse server address correctly
  * docs: fix cmd `set DOCKER_HOST` suggestion
  * test: reenable idmap test
  * Must use mountlabel when creating builtin volumes
  * podman.spec.rpkg: distro conditionals for modulesloaddir
  * build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0
  * podman inspect list network when using --net=host or none
  * pasta: Re-enable "Local forwarder, IPv4" test, accept NXDOMAIN as response
  * build(deps): bump golang.org/x/tools from 0.6.0 to 0.7.0 in /test/tools
  * CI: Switch to c20230307t192532z-f37f36d12 images
  * Cirrus: Run system &amp; integration tests in parallel
  * Update checkpointctl v0.1.0
  * Quadlet: add support for setting --ip and --ip6
  * build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0
  * build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0
  * libpod: avoid nil pointer dereference in (*Container).Cleanup
  * [CI:DOCS] Add image not found info to troubleshooting
  * cmd: do not require userns for "version"
  * cmd: drop special handling for "scp"
  * cmd: clarify meaning of ParentNSRequired
  * Fix package restore
  * [CI:DOCS] Fix docs/version-check always requesting updates
  * sqlite: add a hidden --db-backend flag
  * fix: update the default machine value when the previously set default machine is deleted
  * podman machine: Adjust Chrony makestep config
  * sqlite: add container short ID to network aliases
  * sqlite: remove dead code
  * sqlite: addContainer: add named volume only once
  * sqlite: implement RewriteVolumeConfig
  * sqlite: LookupVolume: fix partial name match
  * sqlite: LookupVolume: wrap error
  * sqlite: fix type rewriting container config
  * sqlite: return correct error on pod-name conflict
  * sqlite: RewritePodConfig: update error message
  * test/system/255-auto-update.bats: wait 10 for update to finish
  * auto-update test: wait for service to be ready
  * Vendor in latest containers/(common, storage, image)
  * play kube: Add --wait option
  * Cirrus: Fix git config permission denied
  * Quadlet: Add support for the Mount key in .container files
  * build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2
  * fix "podman logs --since --follow" flake
  * Clarify that replicas are ignored in kubernetes deployment
  * Revert "Skip all pasta tests"
  * CI: Switch to c20230223t153813z-f37f36d12 images
  * Fix user socket path
  * pkginstaller: bump Qemu to version 7.2.0
  * Cirrus: Fix bud tests failing to apply patches
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2
  * build(deps): bump github.com/coreos/stream-metadata-go
  * Vendor in latest containers/storage
  * buildah-bud tests: don't sudo when rootless is desired
  * Temporarily disable version-check
  * CI: new rootless buildah-bud tests (cron only)
  * sqlite: fix volume lookups with partial names
  * sqlite: fix container lookups with partial IDs
  * sqlite: fix LookupPod
  * sqlite: fix pod create/rm
  * sqlite: LookupContainer: update error message
  * sqlite: AddContainerExitCode: allow to replace
  * system: add warning when running rootless on cgroupv1
  * sqlite: fix AllContainers with state
  * sqlite: fix "UPDATE TABLE" typos
  * sqlite: SaveVolume: fix syntax error updating the volumes table
  * sqlite: exit code: allow -1
  * sqlite: fix typo when removing exec sessions
  * sqlite: AllContainers: fix inner join
  * sqlite: move migration after table creation
  * sqlite: implement pod methods
  * Quadlet - use the default runtime
  * docs: context is not optional for build
  * Fix an incorrect comment on NewSqliteState
  * Add support for containers.conf database setting
  * Add support for volume operations to SQLite state
  * Implement exec session handling in SQL database
  * Various fixes from code review
  * Remove `--namespace` flag from Podman root
  * Get E2E tests to pass
  * Implement network disconnect for SQLite state
  * Implement Network Connect/Modify for SQLite state
  * Fix various lint issues
  * Some further work on SQLite state
  * Remove concept of Namespaces from BoltDB
  * Add initial SQLite-backed state implementation
  * Cirrus: Support runc testing on debian VMs
  * Skip all pasta tests
  * Skip buildah-bud test
  * Skip buildx test with VFS podman storage driver
  * Skip 'podman kube --network' test for rootless CGv1
  * Skip tests which fail with CGv1 &amp; runc
  * Skip rootless CGv1 quadlet tests due to issue
  * Makefile: Define SHELL
  * Machine refactor for QEMU/AppleHV
  * machine refactoring preparations for hyperv
  * [CI:BUILD] spec.rpkg: trim dependency list
  * Logs follow-until tests: loosen checks
  * [CI:DOCS] Windows/Mac docs link update
  * Doc update for docker network options via CLI
  * compat API: network create return 409 for duplicate
  * Apply suggestions to man page
  * vendor c/common@852ca05a1fbb
  * Quadlet: Add support for LogDriver key in container and kube units
  * machine refactoring preparations for hyperv
  * libpod: always use direct mapping
  * netavark: only use aardvark ip as nameserver
  * build(deps): bump github.com/container-orchestrated-devices/container-device-interface
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * make docs: sanity check for broken man pages
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.6 to 8.2.0
  * build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1
  * kube: rm secret on down, print secret on play
  * Fix spacing typo that triggered OCD &amp; indent units in podman-systemd.unit(5)
  * Update remote_client.md
  * [CI:DOCS] Add restriction to option README
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0
  * kube play: only enforce passthrough in Quadlet
  * journald: remove initializeJournal()
  * auto-update: support pods
  * Emergency fix for man pages: check for broken includes
  * System tests: assert(): friendlier failure messages
  * Cirrus: Fix version-check to only run on `main` job
  * CI: Temporarily disable all AWS EC2-based tasks
  * build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18
  * volume,container: chroot to source before exporting content
  * Support sysctl configs via podman kube play
  * [CI:BUILD] copr: podman.spec.rpkg cleanups
  * quadlet system tests: add useful defaults, logging
  * libpod: support relative positions for idmaps
  * Experimental workaround for cdn03.quay.io flake
  * system tests: prevent leading tabs
  * Introduce podman machine os apply
  * create: add support for --group-entry
  * fix != filter in volume prune
  * Allow specification of podman --remote build -f -
  * Quadlet use crun specified in containers.conf
  * build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0
  * Vendor c/image after https://github.com/containers/image/pull/1847
  * Don't set hostPort when generating a service
  * man page --format xref: tighten the autocompletion check
  * add support for limiting tmpfs size for systemd-specific mnts
  * build(deps): bump golang.org/x/text from 0.6.0 to 0.7.0
  * Add ulimit annotation to kube gen &amp; play
  * man page xref: validate displayed man page names
  * quadlet: add ExecStop
  * install sigproxy before start/attach
  * build(deps): bump golang.org/x/tools from 0.5.0 to 0.6.0 in /test/tools
  * Fix typos
  * Cirrus: Make benchmarks .env file easier to load
  * Cirrus: Omit functions in env. file
  * kube play: set service container as main PID when possible
  * Fix typos. Improve language.
  * events + container inspect test: RHEL fixes
  * Add ctrName to network alias during kube play
  * Run codespell on codebase
  * podman image scp: added identity for ssh.Exec
  * [CI:DOCS] Clarify nomap constrains
  * [CI:DOCS] man-page checker: include --format (Go templates)
  * Vendor c/image after https://github.com/containers/image/pull/1816
  * [CI:DOCS] Cleanup some man pages to display options with line breaks
  * [CI:DOCS] Add tables to podman-systemd.unit man page
  * github: remove prefix from bugs/features
  * Quadlet: Add support for the Secret key in Container group
  * [CI:DOCS] OWNERS: add @ygalblum and @alexlarsson
  * build(deps): bump golang.org/x/term from 0.4.0 to 0.5.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.1.6
  * Sort quadlet keys to make it easier to read
  * e2e: fix some tests on remote
  * kube play: do not teardown unconditionally on error
  * Fix typos in comments
  * Resolve symlink path for qemu directory if possible
  * #17363 Fix contradicting documentation podman-commit
  * Fix a potential UID/GID collision in unit tests
  * golangci-lint: show all errors at once
  * update golangci-lint to version 1.51.1
  * [CI:DOCS] events: document journald identifiers
  * Quadlet: exit 0 when there are no files to process
  * network ls: handle removed container
  * e2e: adapt play kube test on remote rootless
  * docs/podman-systemd.unit: Explicitely mention network &amp; kube units
  * docs/podman-systemd.unit: Update example to work out of the box
  * [CI:BUILD] Cirrus: Fix GraphQL ownerRepository:null error
  * Add missing return after errors
  * Revert "Cirrus: Emergency fix to un-stuck PRs"
  * pasta: Fix ICMPv6 Echo test, skip it for the moment
  * pasta: Fix ICMP Echo Request (IPv4) test
  * pasta: Use two connections instead of three in TCP range forward tests
  * Add SELinux label types support to quadlet
  * Add quadlet support for rootfs= containers
  * Cirrus: Emergency fix to un-stuck PRs
  * Move clean-binaries before podman-remote in podman-remote-docs target
  * oci: bind mount /sys with --userns=(auto|pod:)
  * Cleanup podman-systemd.unit file
  * Install podman-systemd.unit  man page, make quadlet discoverable
  * libpod: allow userns=keep-id for root
  * system-reset: use CleanCacheMount to clear build cache
  * vendor: bump buildah to v1.29.1-0.20230201192322-e56eb25575c7
  * system tests: fix noexistent labels test in the remote
  * Expose Podman named pipe in Inspect output
  * libpod: support idmap for --rootfs
  * test: adapt test to work on cgroupv1
  * Bump to v4.5.0-dev
  * Update main to reflect v4.4.0 release
  * Update from /github.com/vbauerster/mpb/v7 to /v8
  * hack/perf: cleanup after benchmarks
  * hack/perf/bz-2162111.sh: use custom network
  * Update bug_report.yaml
  * Handle filetype field in kubernetes.yaml files
  * hack/perf/bz-2162111.sh: measure stop
  * make hack/markdown-preprocess parallel-safe
  * system tests: fix volume exec/noexec test
  * system tests: minor fix for RHEL8 incompatibility
  * Cirrus: Use versionable IMAGE_SUFFIX
  * utils: new conversion method
  * libpod: use GraphRoot for overlay upper dir
  * vendor: update containers/storage
  * Do not mount /dev/tty into rootless containers
  * build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7
  * e2e: fix run_staticip_test about no_proxy
  * docs: specify order preference for FROM
  * Fixes port collision issue on use of --publish-all
  * Support for Windows paths in the source position of the volume mounts
  * e2e tests: fix incorrect os.User.Name
  * Log data that we failed to unmarshal
  * [CI:DOCS] hack/perf: add script for BZ 216111
  * container rm: save once for exec removal and state change
  * [DOCS:CI] podman-events: document verbose create events
  * e2e: Avoid hard-coding included in quadlet test
  * e2e: Avoid hard-coding ImageCacheDir
  * Making gvproxy.exe optional for building Windows installer
  * Add gvproxy to Windows packages
  * Add comment to clarify error handling intention
  * fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
  * Fix usage of absolute windows paths with --image-path
  * Match VT device paths to be blocked from mounting exactly
  * Fix default handling of pids-limit
  * Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
  * journald: podman logs only show logs for current user
  * journald: podman events only show events for current user
  * e2e: Remove the cache with "podman unshare rm" when a rootless user
  * Clean up more language for inclusiveness
  * e2e: Remove some directories at SynchronizedAfterSuite
  * fix: don't output "ago" when container is currently up and running
  * fix: running check error when podman is default in wsl
  * fix CI: test fail due to merge
  * Bump Bulidah to v1.29.0
  * e2e: reduce dependency on /tmp for e2e tests
  * Bump cirrus image with easier dependency management
  * quadlet: Add device support for .volume files
  * remote,build: error if containerignore is symlink
  * DB: make loading container states optional
  * ps: do not sync container
  * Set runAsNonRoot=true in gen kube
  * WSL refactoring
  * kube-play: add support for HostIPC in pod.Spec
  * Allow --device-cgroup-rule to be passed in by docker API</changelog>
  <changelog author="danish.prakash@suse.com" date="1685361600">- Update to version 4.5.1:
  * Release v4.5.1
  * [CI:DOCS] Final release notes for v4.5.1
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * Revert "Resolve symlink path for qemu directory if possible"
  * no need for podman-next rpm test on maint branch
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * network create/update: allow dns servers comma separated
  * machine: fix default connection URL to use 127.0.0.1
  * compat: accept tag in /images/create?fromSrc
  * compat container create: match duplicate mounts correctly
  * machine: qemu only remove connection after confirmation
  * windows: podman save allow the use of stdout
  * remote: exec inspect update exec session status
  * podman-remote logs: handle server error correctly
  * libpod: stop containers with --restart=always
  * Do not include image annotations when building spec
  * [v4.5] system tests: fix race in kube-play read-only
  * api: fix parsing filters
  * Support systemd optional prefix '-' for devices.
  * *: migrate image registry to registry.k8s.io
  * Makefile: include `release-artifacts` target
  * [CI:BUILD] Packit: Initial Enablement
  * Bump to v4.5.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
</package>
<package pkgid="01426f963c26eff3a35da47d1c59eefb0ce7b4365d5b8239bb8a6c22bbb0f5e9" name="podmansh" arch="s390x">
  <version epoch="0" ver="4.7.2" rel="150500.3.3.1"/>
  <changelog author="danish.prakash@suse.com" date="1677240000">- Update to version 4.4.2:
  * Bump to v4.4.2
  * Release notes for v4.4.2
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * kube play: only enforce passthrough in Quadlet
  * Emergency fix for man pages: check for broken includes
  * CI: Temporarily disable all AWS EC2-based tasks
  * quadlet system tests: add useful defaults, logging
  * volume,container: chroot to source before exporting content
  * install sigproxy before start/attach
  * Update to c/image 5.24.1
  * events + container inspect test: RHEL fixes
  * Bump to v4.4.2-dev
- Remove patches (merged upstream):
  * volume-container-chroot-to-source-before-exporting-content.patch
- podman.spec: add `crun` requirement for quadlet
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add patch to let quadlet use the default runtime
  Added patch:
  * Quadlet-use-the-default-runtime.patch
  =&gt; Remove dependency on crun</changelog>
  <changelog author="danish.prakash@suse.com" date="1679659200">- Update to version 4.4.3:
  * Bump to v4.4.3
  * Release notes for v4.4.3
  * compat: /auth: parse server address correctly
  * vendor github.com/containers/common@v0.51.1
  * pkginstaller: bump Qemu to version 7.2.0
  * podman machine: Adjust Chrony makestep config
  * [v4.4] fix --health-on-failure=restart in transient unit
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * journald: remove initializeJournal()
  * netavark: only use aardvark ip as nameserver
  * compat API: network create return 409 for duplicate
  * fix "podman logs --since --follow" flake
  * system service --log-level=trace: support hijack
  * podman-mac-helper: exit 1 on error
  * bump golang.org/x/net to v0.8.0
  * Fix package restore
  * Quadlet - use the default runtime
  * Bump to v4.4.3-dev
- Remove patch (merged upstream):
  * Quadlet-use-the-default-runtime.patch
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="danish.prakash@suse.com" date="1680004800">- Update to version 4.4.4:
  * Bump to v4.4.4
  * Release notes for v4.4.4
  * libpod: always use direct mapping
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * Bump to v4.4.4-dev
- spec: Bump required version for libcontainers-common (bsc#1209495)</changelog>
  <changelog author="dcermak@suse.com" date="1681473600">- Don't build against EoL go versions, fixes bsc#1210299</changelog>
  <changelog author="danish.prakash@suse.com" date="1681819200">- Update to version 4.5.0:
  * Release v4.5.0
  * [CI:DOCS] Final release notes for v4.5.0
  * Quadlet - do not set log-driver by default
  * Return title fields as a list
  * Bump to v4.5.0-dev
  * Bump to v4.5.0-RC2
  * Final release notes for v4.5.0-RC2
  * test/e2e: remove unnecessary SkipIfNetavark() calls
  * test/e2e: deduplicated network test
  * docs: update podman-network-create.1
  * network create: add --interface-name
  * test/system/252-quadlet.bats: fix flake
  * Read kube_generate_type from containers.conf
  * Debian setup: workaround for runc /dev/char/10:200 bug
  * pkg/rootless: use catatonit from /usr/libexec/podman
  * rootless: make sure we only use a single pause process
  * Use atomic config writing strategy for podman machine config files
  * Add remaining release notes for v4.5.0-RC2
  * GHA: Use version instead of SHA for actions
  * chore(deps): update dependency containers/automation_images to v20230405
  * build: pass env by reference
  * test: retrofit error message
  * test/system: expect 12 char for short id
  * vendor: bump containers/(storage, common, buildah, image)
  * [skip-ci] Update actions/upload-artifact action to v3
  * [skip-ci] Update actions/stale action to v8
  * [skip-ci] Update actions/setup-go action to v4
  * [skip-ci] Update github/issue-labeler action to v2.6
  * Fix up codespell errors
  * Capitalize all uid,gid and id words that are not options in docs
  * build(deps): bump golang.org/x/tools from 0.7.0 to 0.8.0 in /test/tools
  * Properly remove the service container during kube down
  * quadlet: add `UserNS` option key
  * [CI:DOCS] Release notes for 4.5.0 Part 1
  * "podman pull by digest and list --all" test: untag instead of rmi
  * build(deps): bump golang.org/x/text from 0.8.0 to 0.9.0
  * Add renovate.json configuration
  * CI: postbuild step: skip under nightly treadmill
  * The `--ulimit` option accepts the name with an `RLIMIT_` prefix both upper and lower case
  * test/e2e: use custom network config dir where needed
  * chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml`
  * update completion scripts for cobra v1.7.0
  * libpod.storageService.CreateContainerStorage(): retrieve ID maps
  * Fix invalid pod name and hostname during kube generate
  * e2e tests: fix racy flakes
  * Cirrus: Enable labeling of EC2 VMs
  * Cirrus: Fix aarch64 clone_script 404 errors
  * e2e: GinkgoParallelNode() -&gt; ...Process()
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
  * [CI:DOCS] --creds and registries
  * Copr: fix build deps for /usr/bin/envsubst
  * Don't error when removing non-existant env vars
  * e2e: healthcheck on stopped container: fix flake
  * test/apiv2/80-kube.at
  * test/apiv2/80-kube.at
  * system service: do not close Body
  * rm `hack/release.sh`
  * build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6
  * add `quadlet -version` flag
  * add version/rawversion package
  * quadlet: use `Flag` suffix for variables
  * quadlet: implement `Tmpfs` option
  * Bump to v4.5.0-dev
  * Bump to 4.5.0-rc1
  * Update release notes from 4.4 branch
  * rootless netns: recover from invalid netns
  * System tests: unverbosify a flake log
  * Add support for secret exists
  * Fix Win install task failures with large PR bodies
  * docs: add `starting` to `HealthCheckResults.Status`
  * Add support for cgroup_config from containers.conf
  * libpod: mount safely subpaths
  * Support Deployment generation with kube generate
  * Use secret.items to create volume mounts if present
  * [CI:DOCS] fix typo in --systemd option
  * rootless: drop preexec hook error message
  * Edit the docker wrapper to use the install prefix
  * Update podman-for-windows.md
  * Quadlet: RemapUsers documentation fixes
  * speed up image listing
  * vendor containers/common@e27c30ee9b1b
  * fix volume-plugin-test flake
  * Document building Podman remote on Windows hosts
  * test/e2e: gpg keep stdout/err attached
  * auto-update: stop+start instead of restart sytemd units
  * [CI:DOCS] Improve basic tutorial
  * Update docs/source/markdown/podman-network.1.md
  * Add debug to --wait test
  * fix slirp4netns resolv.conf ip with a userns
  * Quadlet: add support for keep-id with mapping values
  * Quadlet E2E test - run quadlet as user generator
  * sqlite: do not `Ping()` after connecting
  * Quadlet - treat paths starting with systemd specifiers as absolute
  * Update docs/source/markdown/podman-kube-play.1.md.in
  * system tests: use CONTAINERS_CONF_OVERRIDE
  * implement podman machine set for hyperv
  * [CI:DOCS] Add network subnets info to network man page
  * CI: retry the golangci install
  * system tests: fix racey sdnotify test
  * hyperv: lookup machine on local filesystem first
  * fix os.IsNotExist() CI check
  * Ensure that SQLite state handles name-ID collisions
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * build(deps): bump github.com/onsi/gomega from 1.27.4 to 1.27.5
  * Fix a race around SQLite DB config validation
  * add CONTAINERS_CONF_OVERRIDE
  * vendor containers/common@main
  * docs: minor grammar fix in `--volume` description
  * sqlite: do not use shared cache
  * test: podman checkpoint/restore the latest container
  * stats compat API: return "id" lowercase
  * Run make codespell
  * Drop SQLite max connections
  * sqlite: set connection attributes on open
  * Fix database locked errors with SQLite
  * quadlet tests: skip on RHEL8 rootless
  * Kube Play Doc: Document the support for K8S Secret
  * New ulimit test: bump up minimum nfiles
  * logformatter: hide --db-backend, and friendlyize quadlet
  * Quadlet - add support for relative path in Volume key in .container file
  * Add service ctr cleanup to PlayKubeDown
  * fix --health-on-failure=restart in transient unit
  * Quadlet Doc: Suggest the kill operation for HealthOnFailure
  * Quadlet - Add support for health checks configuration in .container files
  * Makefile: allow specifying /lib dir location
  * Fix option --opts -&gt; --opt
  * basic hypverv machine implementation
  * Fix SQLite DB schema migration code
  * Add support for oom_score_adj value from containers.conf
  * Use default_ulimits field in containers.conf
  * CI: test and confirm DESIRED_DATABASE
  * build(deps): bump github.com/openshift/imagebuilder
  * logformatter: futureproof output filename
  * Vendor in latest containers/(storage, common, image)
  * build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.30.0
  * test/system/255-auto-update.bats: add debug logs
  * Revert "Revert "pasta: Use two connections instead of three in TCP range forward tests""
  * Add information for secret inspect
  * Add format to podman volume ls
  * Add format to podman volume inspect
  * Add format to podman secret ls
  * Add format to podman system df
  * Add format to podman machine info
  * Add format table to podman image inspect man page
  * Cirrus: Store podman machine benchmark data
  * Update Cirrus display names, and fix get-ci-vm script
  * Ensure SQLite places uses the runroot in transient mode
  * Fix various integration test issues with SQLite state
  * Remove test for pod/container name global uniqueness
  * Improve handling of existing container names in SQLite
  * Add SQLite job to CI
  * buildah treadmill: also run rootless tests
  * build(deps): bump github.com/vbatts/git-validation in /test/tools
  * auto update: return restart error
  * fix: Document removing anonymous volumes
  * events: no duplicates when streaming during a log rotation
  * Add search --cert-dir, --creds
  * podman-mac-helper: exit 1 on error
  * system service --log-level=trace: support hijack
  * test/system: fix wait_for_port() to wait for bind
  * cgroupns: private cgroupns on cgroupv1 breaks --systemd
  * libpod: remove error stutter
  * podman events: unhide --stream
  * test/system/255-auto-update.bats: multiple services
  * 255-auto-update.bats: turn off rollback where needed
  * Use append() to add elements to a slice
  * Revert "pasta: Use two connections instead of three in TCP range forward tests"
  * Support running nested SELinux container separation
  * bud tests: rootless remote: use correct socket path
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.2.1 to 8.3.0
  * compat: /auth: parse server address correctly
  * docs: fix cmd `set DOCKER_HOST` suggestion
  * test: reenable idmap test
  * Must use mountlabel when creating builtin volumes
  * podman.spec.rpkg: distro conditionals for modulesloaddir
  * build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0
  * podman inspect list network when using --net=host or none
  * pasta: Re-enable "Local forwarder, IPv4" test, accept NXDOMAIN as response
  * build(deps): bump golang.org/x/tools from 0.6.0 to 0.7.0 in /test/tools
  * CI: Switch to c20230307t192532z-f37f36d12 images
  * Cirrus: Run system &amp; integration tests in parallel
  * Update checkpointctl v0.1.0
  * Quadlet: add support for setting --ip and --ip6
  * build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0
  * build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0
  * libpod: avoid nil pointer dereference in (*Container).Cleanup
  * [CI:DOCS] Add image not found info to troubleshooting
  * cmd: do not require userns for "version"
  * cmd: drop special handling for "scp"
  * cmd: clarify meaning of ParentNSRequired
  * Fix package restore
  * [CI:DOCS] Fix docs/version-check always requesting updates
  * sqlite: add a hidden --db-backend flag
  * fix: update the default machine value when the previously set default machine is deleted
  * podman machine: Adjust Chrony makestep config
  * sqlite: add container short ID to network aliases
  * sqlite: remove dead code
  * sqlite: addContainer: add named volume only once
  * sqlite: implement RewriteVolumeConfig
  * sqlite: LookupVolume: fix partial name match
  * sqlite: LookupVolume: wrap error
  * sqlite: fix type rewriting container config
  * sqlite: return correct error on pod-name conflict
  * sqlite: RewritePodConfig: update error message
  * test/system/255-auto-update.bats: wait 10 for update to finish
  * auto-update test: wait for service to be ready
  * Vendor in latest containers/(common, storage, image)
  * play kube: Add --wait option
  * Cirrus: Fix git config permission denied
  * Quadlet: Add support for the Mount key in .container files
  * build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2
  * fix "podman logs --since --follow" flake
  * Clarify that replicas are ignored in kubernetes deployment
  * Revert "Skip all pasta tests"
  * CI: Switch to c20230223t153813z-f37f36d12 images
  * Fix user socket path
  * pkginstaller: bump Qemu to version 7.2.0
  * Cirrus: Fix bud tests failing to apply patches
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2
  * build(deps): bump github.com/coreos/stream-metadata-go
  * Vendor in latest containers/storage
  * buildah-bud tests: don't sudo when rootless is desired
  * Temporarily disable version-check
  * CI: new rootless buildah-bud tests (cron only)
  * sqlite: fix volume lookups with partial names
  * sqlite: fix container lookups with partial IDs
  * sqlite: fix LookupPod
  * sqlite: fix pod create/rm
  * sqlite: LookupContainer: update error message
  * sqlite: AddContainerExitCode: allow to replace
  * system: add warning when running rootless on cgroupv1
  * sqlite: fix AllContainers with state
  * sqlite: fix "UPDATE TABLE" typos
  * sqlite: SaveVolume: fix syntax error updating the volumes table
  * sqlite: exit code: allow -1
  * sqlite: fix typo when removing exec sessions
  * sqlite: AllContainers: fix inner join
  * sqlite: move migration after table creation
  * sqlite: implement pod methods
  * Quadlet - use the default runtime
  * docs: context is not optional for build
  * Fix an incorrect comment on NewSqliteState
  * Add support for containers.conf database setting
  * Add support for volume operations to SQLite state
  * Implement exec session handling in SQL database
  * Various fixes from code review
  * Remove `--namespace` flag from Podman root
  * Get E2E tests to pass
  * Implement network disconnect for SQLite state
  * Implement Network Connect/Modify for SQLite state
  * Fix various lint issues
  * Some further work on SQLite state
  * Remove concept of Namespaces from BoltDB
  * Add initial SQLite-backed state implementation
  * Cirrus: Support runc testing on debian VMs
  * Skip all pasta tests
  * Skip buildah-bud test
  * Skip buildx test with VFS podman storage driver
  * Skip 'podman kube --network' test for rootless CGv1
  * Skip tests which fail with CGv1 &amp; runc
  * Skip rootless CGv1 quadlet tests due to issue
  * Makefile: Define SHELL
  * Machine refactor for QEMU/AppleHV
  * machine refactoring preparations for hyperv
  * [CI:BUILD] spec.rpkg: trim dependency list
  * Logs follow-until tests: loosen checks
  * [CI:DOCS] Windows/Mac docs link update
  * Doc update for docker network options via CLI
  * compat API: network create return 409 for duplicate
  * Apply suggestions to man page
  * vendor c/common@852ca05a1fbb
  * Quadlet: Add support for LogDriver key in container and kube units
  * machine refactoring preparations for hyperv
  * libpod: always use direct mapping
  * netavark: only use aardvark ip as nameserver
  * build(deps): bump github.com/container-orchestrated-devices/container-device-interface
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * make docs: sanity check for broken man pages
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.6 to 8.2.0
  * build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1
  * kube: rm secret on down, print secret on play
  * Fix spacing typo that triggered OCD &amp; indent units in podman-systemd.unit(5)
  * Update remote_client.md
  * [CI:DOCS] Add restriction to option README
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0
  * kube play: only enforce passthrough in Quadlet
  * journald: remove initializeJournal()
  * auto-update: support pods
  * Emergency fix for man pages: check for broken includes
  * System tests: assert(): friendlier failure messages
  * Cirrus: Fix version-check to only run on `main` job
  * CI: Temporarily disable all AWS EC2-based tasks
  * build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18
  * volume,container: chroot to source before exporting content
  * Support sysctl configs via podman kube play
  * [CI:BUILD] copr: podman.spec.rpkg cleanups
  * quadlet system tests: add useful defaults, logging
  * libpod: support relative positions for idmaps
  * Experimental workaround for cdn03.quay.io flake
  * system tests: prevent leading tabs
  * Introduce podman machine os apply
  * create: add support for --group-entry
  * fix != filter in volume prune
  * Allow specification of podman --remote build -f -
  * Quadlet use crun specified in containers.conf
  * build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0
  * Vendor c/image after https://github.com/containers/image/pull/1847
  * Don't set hostPort when generating a service
  * man page --format xref: tighten the autocompletion check
  * add support for limiting tmpfs size for systemd-specific mnts
  * build(deps): bump golang.org/x/text from 0.6.0 to 0.7.0
  * Add ulimit annotation to kube gen &amp; play
  * man page xref: validate displayed man page names
  * quadlet: add ExecStop
  * install sigproxy before start/attach
  * build(deps): bump golang.org/x/tools from 0.5.0 to 0.6.0 in /test/tools
  * Fix typos
  * Cirrus: Make benchmarks .env file easier to load
  * Cirrus: Omit functions in env. file
  * kube play: set service container as main PID when possible
  * Fix typos. Improve language.
  * events + container inspect test: RHEL fixes
  * Add ctrName to network alias during kube play
  * Run codespell on codebase
  * podman image scp: added identity for ssh.Exec
  * [CI:DOCS] Clarify nomap constrains
  * [CI:DOCS] man-page checker: include --format (Go templates)
  * Vendor c/image after https://github.com/containers/image/pull/1816
  * [CI:DOCS] Cleanup some man pages to display options with line breaks
  * [CI:DOCS] Add tables to podman-systemd.unit man page
  * github: remove prefix from bugs/features
  * Quadlet: Add support for the Secret key in Container group
  * [CI:DOCS] OWNERS: add @ygalblum and @alexlarsson
  * build(deps): bump golang.org/x/term from 0.4.0 to 0.5.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.1.6
  * Sort quadlet keys to make it easier to read
  * e2e: fix some tests on remote
  * kube play: do not teardown unconditionally on error
  * Fix typos in comments
  * Resolve symlink path for qemu directory if possible
  * #17363 Fix contradicting documentation podman-commit
  * Fix a potential UID/GID collision in unit tests
  * golangci-lint: show all errors at once
  * update golangci-lint to version 1.51.1
  * [CI:DOCS] events: document journald identifiers
  * Quadlet: exit 0 when there are no files to process
  * network ls: handle removed container
  * e2e: adapt play kube test on remote rootless
  * docs/podman-systemd.unit: Explicitely mention network &amp; kube units
  * docs/podman-systemd.unit: Update example to work out of the box
  * [CI:BUILD] Cirrus: Fix GraphQL ownerRepository:null error
  * Add missing return after errors
  * Revert "Cirrus: Emergency fix to un-stuck PRs"
  * pasta: Fix ICMPv6 Echo test, skip it for the moment
  * pasta: Fix ICMP Echo Request (IPv4) test
  * pasta: Use two connections instead of three in TCP range forward tests
  * Add SELinux label types support to quadlet
  * Add quadlet support for rootfs= containers
  * Cirrus: Emergency fix to un-stuck PRs
  * Move clean-binaries before podman-remote in podman-remote-docs target
  * oci: bind mount /sys with --userns=(auto|pod:)
  * Cleanup podman-systemd.unit file
  * Install podman-systemd.unit  man page, make quadlet discoverable
  * libpod: allow userns=keep-id for root
  * system-reset: use CleanCacheMount to clear build cache
  * vendor: bump buildah to v1.29.1-0.20230201192322-e56eb25575c7
  * system tests: fix noexistent labels test in the remote
  * Expose Podman named pipe in Inspect output
  * libpod: support idmap for --rootfs
  * test: adapt test to work on cgroupv1
  * Bump to v4.5.0-dev
  * Update main to reflect v4.4.0 release
  * Update from /github.com/vbauerster/mpb/v7 to /v8
  * hack/perf: cleanup after benchmarks
  * hack/perf/bz-2162111.sh: use custom network
  * Update bug_report.yaml
  * Handle filetype field in kubernetes.yaml files
  * hack/perf/bz-2162111.sh: measure stop
  * make hack/markdown-preprocess parallel-safe
  * system tests: fix volume exec/noexec test
  * system tests: minor fix for RHEL8 incompatibility
  * Cirrus: Use versionable IMAGE_SUFFIX
  * utils: new conversion method
  * libpod: use GraphRoot for overlay upper dir
  * vendor: update containers/storage
  * Do not mount /dev/tty into rootless containers
  * build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7
  * e2e: fix run_staticip_test about no_proxy
  * docs: specify order preference for FROM
  * Fixes port collision issue on use of --publish-all
  * Support for Windows paths in the source position of the volume mounts
  * e2e tests: fix incorrect os.User.Name
  * Log data that we failed to unmarshal
  * [CI:DOCS] hack/perf: add script for BZ 216111
  * container rm: save once for exec removal and state change
  * [DOCS:CI] podman-events: document verbose create events
  * e2e: Avoid hard-coding included in quadlet test
  * e2e: Avoid hard-coding ImageCacheDir
  * Making gvproxy.exe optional for building Windows installer
  * Add gvproxy to Windows packages
  * Add comment to clarify error handling intention
  * fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
  * Fix usage of absolute windows paths with --image-path
  * Match VT device paths to be blocked from mounting exactly
  * Fix default handling of pids-limit
  * Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
  * journald: podman logs only show logs for current user
  * journald: podman events only show events for current user
  * e2e: Remove the cache with "podman unshare rm" when a rootless user
  * Clean up more language for inclusiveness
  * e2e: Remove some directories at SynchronizedAfterSuite
  * fix: don't output "ago" when container is currently up and running
  * fix: running check error when podman is default in wsl
  * fix CI: test fail due to merge
  * Bump Bulidah to v1.29.0
  * e2e: reduce dependency on /tmp for e2e tests
  * Bump cirrus image with easier dependency management
  * quadlet: Add device support for .volume files
  * remote,build: error if containerignore is symlink
  * DB: make loading container states optional
  * ps: do not sync container
  * Set runAsNonRoot=true in gen kube
  * WSL refactoring
  * kube-play: add support for HostIPC in pod.Spec
  * Allow --device-cgroup-rule to be passed in by docker API</changelog>
  <changelog author="danish.prakash@suse.com" date="1685361600">- Update to version 4.5.1:
  * Release v4.5.1
  * [CI:DOCS] Final release notes for v4.5.1
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * Revert "Resolve symlink path for qemu directory if possible"
  * no need for podman-next rpm test on maint branch
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * network create/update: allow dns servers comma separated
  * machine: fix default connection URL to use 127.0.0.1
  * compat: accept tag in /images/create?fromSrc
  * compat container create: match duplicate mounts correctly
  * machine: qemu only remove connection after confirmation
  * windows: podman save allow the use of stdout
  * remote: exec inspect update exec session status
  * podman-remote logs: handle server error correctly
  * libpod: stop containers with --restart=always
  * Do not include image annotations when building spec
  * [v4.5] system tests: fix race in kube-play read-only
  * api: fix parsing filters
  * Support systemd optional prefix '-' for devices.
  * *: migrate image registry to registry.k8s.io
  * Makefile: include `release-artifacts` target
  * [CI:BUILD] Packit: Initial Enablement
  * Bump to v4.5.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
</package>
<package pkgid="d7854ba07cb1432481ce58225bf5dff70fdc0175f42f1b79a0089c13df32e5dc" name="podmansh" arch="x86_64">
  <version epoch="0" ver="4.7.2" rel="150500.3.3.1"/>
  <changelog author="danish.prakash@suse.com" date="1677240000">- Update to version 4.4.2:
  * Bump to v4.4.2
  * Release notes for v4.4.2
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * kube play: only enforce passthrough in Quadlet
  * Emergency fix for man pages: check for broken includes
  * CI: Temporarily disable all AWS EC2-based tasks
  * quadlet system tests: add useful defaults, logging
  * volume,container: chroot to source before exporting content
  * install sigproxy before start/attach
  * Update to c/image 5.24.1
  * events + container inspect test: RHEL fixes
  * Bump to v4.4.2-dev
- Remove patches (merged upstream):
  * volume-container-chroot-to-source-before-exporting-content.patch
- podman.spec: add `crun` requirement for quadlet
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add patch to let quadlet use the default runtime
  Added patch:
  * Quadlet-use-the-default-runtime.patch
  =&gt; Remove dependency on crun</changelog>
  <changelog author="danish.prakash@suse.com" date="1679659200">- Update to version 4.4.3:
  * Bump to v4.4.3
  * Release notes for v4.4.3
  * compat: /auth: parse server address correctly
  * vendor github.com/containers/common@v0.51.1
  * pkginstaller: bump Qemu to version 7.2.0
  * podman machine: Adjust Chrony makestep config
  * [v4.4] fix --health-on-failure=restart in transient unit
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * journald: remove initializeJournal()
  * netavark: only use aardvark ip as nameserver
  * compat API: network create return 409 for duplicate
  * fix "podman logs --since --follow" flake
  * system service --log-level=trace: support hijack
  * podman-mac-helper: exit 1 on error
  * bump golang.org/x/net to v0.8.0
  * Fix package restore
  * Quadlet - use the default runtime
  * Bump to v4.4.3-dev
- Remove patch (merged upstream):
  * Quadlet-use-the-default-runtime.patch
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="danish.prakash@suse.com" date="1680004800">- Update to version 4.4.4:
  * Bump to v4.4.4
  * Release notes for v4.4.4
  * libpod: always use direct mapping
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * Bump to v4.4.4-dev
- spec: Bump required version for libcontainers-common (bsc#1209495)</changelog>
  <changelog author="dcermak@suse.com" date="1681473600">- Don't build against EoL go versions, fixes bsc#1210299</changelog>
  <changelog author="danish.prakash@suse.com" date="1681819200">- Update to version 4.5.0:
  * Release v4.5.0
  * [CI:DOCS] Final release notes for v4.5.0
  * Quadlet - do not set log-driver by default
  * Return title fields as a list
  * Bump to v4.5.0-dev
  * Bump to v4.5.0-RC2
  * Final release notes for v4.5.0-RC2
  * test/e2e: remove unnecessary SkipIfNetavark() calls
  * test/e2e: deduplicated network test
  * docs: update podman-network-create.1
  * network create: add --interface-name
  * test/system/252-quadlet.bats: fix flake
  * Read kube_generate_type from containers.conf
  * Debian setup: workaround for runc /dev/char/10:200 bug
  * pkg/rootless: use catatonit from /usr/libexec/podman
  * rootless: make sure we only use a single pause process
  * Use atomic config writing strategy for podman machine config files
  * Add remaining release notes for v4.5.0-RC2
  * GHA: Use version instead of SHA for actions
  * chore(deps): update dependency containers/automation_images to v20230405
  * build: pass env by reference
  * test: retrofit error message
  * test/system: expect 12 char for short id
  * vendor: bump containers/(storage, common, buildah, image)
  * [skip-ci] Update actions/upload-artifact action to v3
  * [skip-ci] Update actions/stale action to v8
  * [skip-ci] Update actions/setup-go action to v4
  * [skip-ci] Update github/issue-labeler action to v2.6
  * Fix up codespell errors
  * Capitalize all uid,gid and id words that are not options in docs
  * build(deps): bump golang.org/x/tools from 0.7.0 to 0.8.0 in /test/tools
  * Properly remove the service container during kube down
  * quadlet: add `UserNS` option key
  * [CI:DOCS] Release notes for 4.5.0 Part 1
  * "podman pull by digest and list --all" test: untag instead of rmi
  * build(deps): bump golang.org/x/text from 0.8.0 to 0.9.0
  * Add renovate.json configuration
  * CI: postbuild step: skip under nightly treadmill
  * The `--ulimit` option accepts the name with an `RLIMIT_` prefix both upper and lower case
  * test/e2e: use custom network config dir where needed
  * chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml`
  * update completion scripts for cobra v1.7.0
  * libpod.storageService.CreateContainerStorage(): retrieve ID maps
  * Fix invalid pod name and hostname during kube generate
  * e2e tests: fix racy flakes
  * Cirrus: Enable labeling of EC2 VMs
  * Cirrus: Fix aarch64 clone_script 404 errors
  * e2e: GinkgoParallelNode() -&gt; ...Process()
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
  * [CI:DOCS] --creds and registries
  * Copr: fix build deps for /usr/bin/envsubst
  * Don't error when removing non-existant env vars
  * e2e: healthcheck on stopped container: fix flake
  * test/apiv2/80-kube.at
  * test/apiv2/80-kube.at
  * system service: do not close Body
  * rm `hack/release.sh`
  * build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6
  * add `quadlet -version` flag
  * add version/rawversion package
  * quadlet: use `Flag` suffix for variables
  * quadlet: implement `Tmpfs` option
  * Bump to v4.5.0-dev
  * Bump to 4.5.0-rc1
  * Update release notes from 4.4 branch
  * rootless netns: recover from invalid netns
  * System tests: unverbosify a flake log
  * Add support for secret exists
  * Fix Win install task failures with large PR bodies
  * docs: add `starting` to `HealthCheckResults.Status`
  * Add support for cgroup_config from containers.conf
  * libpod: mount safely subpaths
  * Support Deployment generation with kube generate
  * Use secret.items to create volume mounts if present
  * [CI:DOCS] fix typo in --systemd option
  * rootless: drop preexec hook error message
  * Edit the docker wrapper to use the install prefix
  * Update podman-for-windows.md
  * Quadlet: RemapUsers documentation fixes
  * speed up image listing
  * vendor containers/common@e27c30ee9b1b
  * fix volume-plugin-test flake
  * Document building Podman remote on Windows hosts
  * test/e2e: gpg keep stdout/err attached
  * auto-update: stop+start instead of restart sytemd units
  * [CI:DOCS] Improve basic tutorial
  * Update docs/source/markdown/podman-network.1.md
  * Add debug to --wait test
  * fix slirp4netns resolv.conf ip with a userns
  * Quadlet: add support for keep-id with mapping values
  * Quadlet E2E test - run quadlet as user generator
  * sqlite: do not `Ping()` after connecting
  * Quadlet - treat paths starting with systemd specifiers as absolute
  * Update docs/source/markdown/podman-kube-play.1.md.in
  * system tests: use CONTAINERS_CONF_OVERRIDE
  * implement podman machine set for hyperv
  * [CI:DOCS] Add network subnets info to network man page
  * CI: retry the golangci install
  * system tests: fix racey sdnotify test
  * hyperv: lookup machine on local filesystem first
  * fix os.IsNotExist() CI check
  * Ensure that SQLite state handles name-ID collisions
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * build(deps): bump github.com/onsi/gomega from 1.27.4 to 1.27.5
  * Fix a race around SQLite DB config validation
  * add CONTAINERS_CONF_OVERRIDE
  * vendor containers/common@main
  * docs: minor grammar fix in `--volume` description
  * sqlite: do not use shared cache
  * test: podman checkpoint/restore the latest container
  * stats compat API: return "id" lowercase
  * Run make codespell
  * Drop SQLite max connections
  * sqlite: set connection attributes on open
  * Fix database locked errors with SQLite
  * quadlet tests: skip on RHEL8 rootless
  * Kube Play Doc: Document the support for K8S Secret
  * New ulimit test: bump up minimum nfiles
  * logformatter: hide --db-backend, and friendlyize quadlet
  * Quadlet - add support for relative path in Volume key in .container file
  * Add service ctr cleanup to PlayKubeDown
  * fix --health-on-failure=restart in transient unit
  * Quadlet Doc: Suggest the kill operation for HealthOnFailure
  * Quadlet - Add support for health checks configuration in .container files
  * Makefile: allow specifying /lib dir location
  * Fix option --opts -&gt; --opt
  * basic hypverv machine implementation
  * Fix SQLite DB schema migration code
  * Add support for oom_score_adj value from containers.conf
  * Use default_ulimits field in containers.conf
  * CI: test and confirm DESIRED_DATABASE
  * build(deps): bump github.com/openshift/imagebuilder
  * logformatter: futureproof output filename
  * Vendor in latest containers/(storage, common, image)
  * build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.30.0
  * test/system/255-auto-update.bats: add debug logs
  * Revert "Revert "pasta: Use two connections instead of three in TCP range forward tests""
  * Add information for secret inspect
  * Add format to podman volume ls
  * Add format to podman volume inspect
  * Add format to podman secret ls
  * Add format to podman system df
  * Add format to podman machine info
  * Add format table to podman image inspect man page
  * Cirrus: Store podman machine benchmark data
  * Update Cirrus display names, and fix get-ci-vm script
  * Ensure SQLite places uses the runroot in transient mode
  * Fix various integration test issues with SQLite state
  * Remove test for pod/container name global uniqueness
  * Improve handling of existing container names in SQLite
  * Add SQLite job to CI
  * buildah treadmill: also run rootless tests
  * build(deps): bump github.com/vbatts/git-validation in /test/tools
  * auto update: return restart error
  * fix: Document removing anonymous volumes
  * events: no duplicates when streaming during a log rotation
  * Add search --cert-dir, --creds
  * podman-mac-helper: exit 1 on error
  * system service --log-level=trace: support hijack
  * test/system: fix wait_for_port() to wait for bind
  * cgroupns: private cgroupns on cgroupv1 breaks --systemd
  * libpod: remove error stutter
  * podman events: unhide --stream
  * test/system/255-auto-update.bats: multiple services
  * 255-auto-update.bats: turn off rollback where needed
  * Use append() to add elements to a slice
  * Revert "pasta: Use two connections instead of three in TCP range forward tests"
  * Support running nested SELinux container separation
  * bud tests: rootless remote: use correct socket path
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.2.1 to 8.3.0
  * compat: /auth: parse server address correctly
  * docs: fix cmd `set DOCKER_HOST` suggestion
  * test: reenable idmap test
  * Must use mountlabel when creating builtin volumes
  * podman.spec.rpkg: distro conditionals for modulesloaddir
  * build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0
  * podman inspect list network when using --net=host or none
  * pasta: Re-enable "Local forwarder, IPv4" test, accept NXDOMAIN as response
  * build(deps): bump golang.org/x/tools from 0.6.0 to 0.7.0 in /test/tools
  * CI: Switch to c20230307t192532z-f37f36d12 images
  * Cirrus: Run system &amp; integration tests in parallel
  * Update checkpointctl v0.1.0
  * Quadlet: add support for setting --ip and --ip6
  * build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0
  * build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0
  * libpod: avoid nil pointer dereference in (*Container).Cleanup
  * [CI:DOCS] Add image not found info to troubleshooting
  * cmd: do not require userns for "version"
  * cmd: drop special handling for "scp"
  * cmd: clarify meaning of ParentNSRequired
  * Fix package restore
  * [CI:DOCS] Fix docs/version-check always requesting updates
  * sqlite: add a hidden --db-backend flag
  * fix: update the default machine value when the previously set default machine is deleted
  * podman machine: Adjust Chrony makestep config
  * sqlite: add container short ID to network aliases
  * sqlite: remove dead code
  * sqlite: addContainer: add named volume only once
  * sqlite: implement RewriteVolumeConfig
  * sqlite: LookupVolume: fix partial name match
  * sqlite: LookupVolume: wrap error
  * sqlite: fix type rewriting container config
  * sqlite: return correct error on pod-name conflict
  * sqlite: RewritePodConfig: update error message
  * test/system/255-auto-update.bats: wait 10 for update to finish
  * auto-update test: wait for service to be ready
  * Vendor in latest containers/(common, storage, image)
  * play kube: Add --wait option
  * Cirrus: Fix git config permission denied
  * Quadlet: Add support for the Mount key in .container files
  * build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2
  * fix "podman logs --since --follow" flake
  * Clarify that replicas are ignored in kubernetes deployment
  * Revert "Skip all pasta tests"
  * CI: Switch to c20230223t153813z-f37f36d12 images
  * Fix user socket path
  * pkginstaller: bump Qemu to version 7.2.0
  * Cirrus: Fix bud tests failing to apply patches
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2
  * build(deps): bump github.com/coreos/stream-metadata-go
  * Vendor in latest containers/storage
  * buildah-bud tests: don't sudo when rootless is desired
  * Temporarily disable version-check
  * CI: new rootless buildah-bud tests (cron only)
  * sqlite: fix volume lookups with partial names
  * sqlite: fix container lookups with partial IDs
  * sqlite: fix LookupPod
  * sqlite: fix pod create/rm
  * sqlite: LookupContainer: update error message
  * sqlite: AddContainerExitCode: allow to replace
  * system: add warning when running rootless on cgroupv1
  * sqlite: fix AllContainers with state
  * sqlite: fix "UPDATE TABLE" typos
  * sqlite: SaveVolume: fix syntax error updating the volumes table
  * sqlite: exit code: allow -1
  * sqlite: fix typo when removing exec sessions
  * sqlite: AllContainers: fix inner join
  * sqlite: move migration after table creation
  * sqlite: implement pod methods
  * Quadlet - use the default runtime
  * docs: context is not optional for build
  * Fix an incorrect comment on NewSqliteState
  * Add support for containers.conf database setting
  * Add support for volume operations to SQLite state
  * Implement exec session handling in SQL database
  * Various fixes from code review
  * Remove `--namespace` flag from Podman root
  * Get E2E tests to pass
  * Implement network disconnect for SQLite state
  * Implement Network Connect/Modify for SQLite state
  * Fix various lint issues
  * Some further work on SQLite state
  * Remove concept of Namespaces from BoltDB
  * Add initial SQLite-backed state implementation
  * Cirrus: Support runc testing on debian VMs
  * Skip all pasta tests
  * Skip buildah-bud test
  * Skip buildx test with VFS podman storage driver
  * Skip 'podman kube --network' test for rootless CGv1
  * Skip tests which fail with CGv1 &amp; runc
  * Skip rootless CGv1 quadlet tests due to issue
  * Makefile: Define SHELL
  * Machine refactor for QEMU/AppleHV
  * machine refactoring preparations for hyperv
  * [CI:BUILD] spec.rpkg: trim dependency list
  * Logs follow-until tests: loosen checks
  * [CI:DOCS] Windows/Mac docs link update
  * Doc update for docker network options via CLI
  * compat API: network create return 409 for duplicate
  * Apply suggestions to man page
  * vendor c/common@852ca05a1fbb
  * Quadlet: Add support for LogDriver key in container and kube units
  * machine refactoring preparations for hyperv
  * libpod: always use direct mapping
  * netavark: only use aardvark ip as nameserver
  * build(deps): bump github.com/container-orchestrated-devices/container-device-interface
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * make docs: sanity check for broken man pages
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.6 to 8.2.0
  * build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1
  * kube: rm secret on down, print secret on play
  * Fix spacing typo that triggered OCD &amp; indent units in podman-systemd.unit(5)
  * Update remote_client.md
  * [CI:DOCS] Add restriction to option README
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0
  * kube play: only enforce passthrough in Quadlet
  * journald: remove initializeJournal()
  * auto-update: support pods
  * Emergency fix for man pages: check for broken includes
  * System tests: assert(): friendlier failure messages
  * Cirrus: Fix version-check to only run on `main` job
  * CI: Temporarily disable all AWS EC2-based tasks
  * build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18
  * volume,container: chroot to source before exporting content
  * Support sysctl configs via podman kube play
  * [CI:BUILD] copr: podman.spec.rpkg cleanups
  * quadlet system tests: add useful defaults, logging
  * libpod: support relative positions for idmaps
  * Experimental workaround for cdn03.quay.io flake
  * system tests: prevent leading tabs
  * Introduce podman machine os apply
  * create: add support for --group-entry
  * fix != filter in volume prune
  * Allow specification of podman --remote build -f -
  * Quadlet use crun specified in containers.conf
  * build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0
  * Vendor c/image after https://github.com/containers/image/pull/1847
  * Don't set hostPort when generating a service
  * man page --format xref: tighten the autocompletion check
  * add support for limiting tmpfs size for systemd-specific mnts
  * build(deps): bump golang.org/x/text from 0.6.0 to 0.7.0
  * Add ulimit annotation to kube gen &amp; play
  * man page xref: validate displayed man page names
  * quadlet: add ExecStop
  * install sigproxy before start/attach
  * build(deps): bump golang.org/x/tools from 0.5.0 to 0.6.0 in /test/tools
  * Fix typos
  * Cirrus: Make benchmarks .env file easier to load
  * Cirrus: Omit functions in env. file
  * kube play: set service container as main PID when possible
  * Fix typos. Improve language.
  * events + container inspect test: RHEL fixes
  * Add ctrName to network alias during kube play
  * Run codespell on codebase
  * podman image scp: added identity for ssh.Exec
  * [CI:DOCS] Clarify nomap constrains
  * [CI:DOCS] man-page checker: include --format (Go templates)
  * Vendor c/image after https://github.com/containers/image/pull/1816
  * [CI:DOCS] Cleanup some man pages to display options with line breaks
  * [CI:DOCS] Add tables to podman-systemd.unit man page
  * github: remove prefix from bugs/features
  * Quadlet: Add support for the Secret key in Container group
  * [CI:DOCS] OWNERS: add @ygalblum and @alexlarsson
  * build(deps): bump golang.org/x/term from 0.4.0 to 0.5.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.1.6
  * Sort quadlet keys to make it easier to read
  * e2e: fix some tests on remote
  * kube play: do not teardown unconditionally on error
  * Fix typos in comments
  * Resolve symlink path for qemu directory if possible
  * #17363 Fix contradicting documentation podman-commit
  * Fix a potential UID/GID collision in unit tests
  * golangci-lint: show all errors at once
  * update golangci-lint to version 1.51.1
  * [CI:DOCS] events: document journald identifiers
  * Quadlet: exit 0 when there are no files to process
  * network ls: handle removed container
  * e2e: adapt play kube test on remote rootless
  * docs/podman-systemd.unit: Explicitely mention network &amp; kube units
  * docs/podman-systemd.unit: Update example to work out of the box
  * [CI:BUILD] Cirrus: Fix GraphQL ownerRepository:null error
  * Add missing return after errors
  * Revert "Cirrus: Emergency fix to un-stuck PRs"
  * pasta: Fix ICMPv6 Echo test, skip it for the moment
  * pasta: Fix ICMP Echo Request (IPv4) test
  * pasta: Use two connections instead of three in TCP range forward tests
  * Add SELinux label types support to quadlet
  * Add quadlet support for rootfs= containers
  * Cirrus: Emergency fix to un-stuck PRs
  * Move clean-binaries before podman-remote in podman-remote-docs target
  * oci: bind mount /sys with --userns=(auto|pod:)
  * Cleanup podman-systemd.unit file
  * Install podman-systemd.unit  man page, make quadlet discoverable
  * libpod: allow userns=keep-id for root
  * system-reset: use CleanCacheMount to clear build cache
  * vendor: bump buildah to v1.29.1-0.20230201192322-e56eb25575c7
  * system tests: fix noexistent labels test in the remote
  * Expose Podman named pipe in Inspect output
  * libpod: support idmap for --rootfs
  * test: adapt test to work on cgroupv1
  * Bump to v4.5.0-dev
  * Update main to reflect v4.4.0 release
  * Update from /github.com/vbauerster/mpb/v7 to /v8
  * hack/perf: cleanup after benchmarks
  * hack/perf/bz-2162111.sh: use custom network
  * Update bug_report.yaml
  * Handle filetype field in kubernetes.yaml files
  * hack/perf/bz-2162111.sh: measure stop
  * make hack/markdown-preprocess parallel-safe
  * system tests: fix volume exec/noexec test
  * system tests: minor fix for RHEL8 incompatibility
  * Cirrus: Use versionable IMAGE_SUFFIX
  * utils: new conversion method
  * libpod: use GraphRoot for overlay upper dir
  * vendor: update containers/storage
  * Do not mount /dev/tty into rootless containers
  * build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7
  * e2e: fix run_staticip_test about no_proxy
  * docs: specify order preference for FROM
  * Fixes port collision issue on use of --publish-all
  * Support for Windows paths in the source position of the volume mounts
  * e2e tests: fix incorrect os.User.Name
  * Log data that we failed to unmarshal
  * [CI:DOCS] hack/perf: add script for BZ 216111
  * container rm: save once for exec removal and state change
  * [DOCS:CI] podman-events: document verbose create events
  * e2e: Avoid hard-coding included in quadlet test
  * e2e: Avoid hard-coding ImageCacheDir
  * Making gvproxy.exe optional for building Windows installer
  * Add gvproxy to Windows packages
  * Add comment to clarify error handling intention
  * fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
  * Fix usage of absolute windows paths with --image-path
  * Match VT device paths to be blocked from mounting exactly
  * Fix default handling of pids-limit
  * Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
  * journald: podman logs only show logs for current user
  * journald: podman events only show events for current user
  * e2e: Remove the cache with "podman unshare rm" when a rootless user
  * Clean up more language for inclusiveness
  * e2e: Remove some directories at SynchronizedAfterSuite
  * fix: don't output "ago" when container is currently up and running
  * fix: running check error when podman is default in wsl
  * fix CI: test fail due to merge
  * Bump Bulidah to v1.29.0
  * e2e: reduce dependency on /tmp for e2e tests
  * Bump cirrus image with easier dependency management
  * quadlet: Add device support for .volume files
  * remote,build: error if containerignore is symlink
  * DB: make loading container states optional
  * ps: do not sync container
  * Set runAsNonRoot=true in gen kube
  * WSL refactoring
  * kube-play: add support for HostIPC in pod.Spec
  * Allow --device-cgroup-rule to be passed in by docker API</changelog>
  <changelog author="danish.prakash@suse.com" date="1685361600">- Update to version 4.5.1:
  * Release v4.5.1
  * [CI:DOCS] Final release notes for v4.5.1
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * Revert "Resolve symlink path for qemu directory if possible"
  * no need for podman-next rpm test on maint branch
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * network create/update: allow dns servers comma separated
  * machine: fix default connection URL to use 127.0.0.1
  * compat: accept tag in /images/create?fromSrc
  * compat container create: match duplicate mounts correctly
  * machine: qemu only remove connection after confirmation
  * windows: podman save allow the use of stdout
  * remote: exec inspect update exec session status
  * podman-remote logs: handle server error correctly
  * libpod: stop containers with --restart=always
  * Do not include image annotations when building spec
  * [v4.5] system tests: fix race in kube-play read-only
  * api: fix parsing filters
  * Support systemd optional prefix '-' for devices.
  * *: migrate image registry to registry.k8s.io
  * Makefile: include `release-artifacts` target
  * [CI:BUILD] Packit: Initial Enablement
  * Bump to v4.5.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
</package>
<package pkgid="ec5c93eb620aa0ed35e77f84af592fefeb7dcc1a0f163e2be72beec502b2e8fc" name="podmansh" arch="aarch64">
  <version epoch="0" ver="4.8.3" rel="150500.3.6.1"/>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
</package>
<package pkgid="068f7d5088d54126300e6571b4fb2e7a1bca681bb21511e2f223ffc064a644ca" name="podmansh" arch="ppc64le">
  <version epoch="0" ver="4.8.3" rel="150500.3.6.1"/>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
</package>
<package pkgid="753c4e2254b2b71d95a7486fad8e31e6cee57aaa26d09491c00f06c240266bb3" name="podmansh" arch="s390x">
  <version epoch="0" ver="4.8.3" rel="150500.3.6.1"/>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
</package>
<package pkgid="d7f9fcb4ba21f379c4a48b6ca1eb14ebfecf807864517f9875d1ff757442b2dc" name="podmansh" arch="x86_64">
  <version epoch="0" ver="4.8.3" rel="150500.3.6.1"/>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
</package>
<package pkgid="5fd478f6f1f5b0b8792c5cb07e1bdd820179ddaf88116adba1fa3909b81e98c1" name="ppp" arch="aarch64">
  <version epoch="0" ver="2.4.7" rel="150000.5.13.1"/>
  <changelog author="ledest@gmail.com" date="1416398400">- fix bashisms in redialer script
- add patches:
  * ppp-2.4.7-fix-bashisms.patch</changelog>
  <changelog author="max@suse.com" date="1447416000">- Added ppp-CVE-2015-3310.patch:
  Fix for bnc#927841, CVE-2015-3310: Fix buffer overflow in radius
  plug-in's rc_mksid().</changelog>
  <changelog author="schwab@suse.de" date="1476705600">- fix-header-conflict.patch: avoid conflict with kernel headers</changelog>
  <changelog author="max@suse.com" date="1481284800">- Use system-wide libatm instead of local copy (boo#1013567).</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- ppp-2.4.2-pie.patch: also enable PIE for /usr/sbin/pppstats</changelog>
  <changelog author="kukuk@suse.com" date="1497355200">- Add /etc/ppp, this directory is no longer part of filesystem.
  Most likely requiring sysconfig would be necessary.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1511438400">- Add Requires group(dialout) (boo#1067511).</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1511524800">- Refresh spec-file via spec-cleaner.
- Add ppp-modem package for automatic redial to mobile provider.</changelog>
  <changelog author="max@suse.com" date="1581076800">- CVE-2020-8597, bsc#1162610, ppp-CVE-2020-8597.patch: rhostname
  buffer overflow in the eap_request and eap_response functions.</changelog>
  <changelog author="max@suse.com" date="1648728000">- bsc#1197799: Add ppp-2.4.7-DES-openssl.patch to fix build on
  SLE-15-SP3 and SP4.</changelog>
  <changelog author="max@suse.com" date="1703073600">- bsc#1218251, CVE-2022-4603, ppp-CVE-2022-4603.patch: improper
  validation of array index of the component pppdump.</changelog>
</package>
<package pkgid="1e0b97e9a9985569ff581d12b29c1e4fb102d12092c7fc42a9983397f31be8c0" name="ppp" arch="s390x">
  <version epoch="0" ver="2.4.7" rel="150000.5.13.1"/>
  <changelog author="ledest@gmail.com" date="1416398400">- fix bashisms in redialer script
- add patches:
  * ppp-2.4.7-fix-bashisms.patch</changelog>
  <changelog author="max@suse.com" date="1447416000">- Added ppp-CVE-2015-3310.patch:
  Fix for bnc#927841, CVE-2015-3310: Fix buffer overflow in radius
  plug-in's rc_mksid().</changelog>
  <changelog author="schwab@suse.de" date="1476705600">- fix-header-conflict.patch: avoid conflict with kernel headers</changelog>
  <changelog author="max@suse.com" date="1481284800">- Use system-wide libatm instead of local copy (boo#1013567).</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- ppp-2.4.2-pie.patch: also enable PIE for /usr/sbin/pppstats</changelog>
  <changelog author="kukuk@suse.com" date="1497355200">- Add /etc/ppp, this directory is no longer part of filesystem.
  Most likely requiring sysconfig would be necessary.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1511438400">- Add Requires group(dialout) (boo#1067511).</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1511524800">- Refresh spec-file via spec-cleaner.
- Add ppp-modem package for automatic redial to mobile provider.</changelog>
  <changelog author="max@suse.com" date="1581076800">- CVE-2020-8597, bsc#1162610, ppp-CVE-2020-8597.patch: rhostname
  buffer overflow in the eap_request and eap_response functions.</changelog>
  <changelog author="max@suse.com" date="1648728000">- bsc#1197799: Add ppp-2.4.7-DES-openssl.patch to fix build on
  SLE-15-SP3 and SP4.</changelog>
  <changelog author="max@suse.com" date="1703073600">- bsc#1218251, CVE-2022-4603, ppp-CVE-2022-4603.patch: improper
  validation of array index of the component pppdump.</changelog>
</package>
<package pkgid="fbd40727e45265d28b3557057b8269c3a4f6202f245c074afefc34355c33f63a" name="ppp" arch="src">
  <version epoch="0" ver="2.4.7" rel="150000.5.13.1"/>
  <changelog author="aj@suse.de" date="1294228800">- Fix build of pppol2tp - remove local copy of if_pppol2tp.h
  that is out of sync with kernel definition.
- Remove ppp-makedevice.patch, it is obsolete.</changelog>
  <changelog author="coolo@novell.com" date="1294228801">- refresh patch</changelog>
  <changelog author="coolo@novell.com" date="1313150400">- remove extra dependencies from doc files</changelog>
  <changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
  <changelog author="cfarrell@suse.com" date="1362139200">- license update: BSD-3-Clause and LGPL-2.1+ and GPL-2.0+
  GPL-2.0 matches found in ppp-2.4.5/include/linux/if_pppol2tp.h</changelog>
  <changelog author="max@suse.com" date="1374667200">- ppp-send-padt.patch: Send PADT at the end of a PPPoE session.</changelog>
  <changelog author="max@suse.com" date="1378123200">- Add ppp-terminate-correct.patch, fix the pppd's hang after exit
  (bnc#693469).</changelog>
  <changelog author="aj@ajaissle.de" date="1395316800">- Update to 2.4.6
  + Man page updates.
  + Several bug fixes.
  + Options files can now set and unset environment variables for
    scripts.
  + The timeout for chat scripts can now be taken from an environment
    variable.
  + There is a new option, master_detach, which allows pppd to detach
    from the controlling terminal when it is the multilink bundle master
    but its own link has terminated, even if the nodetach option has
    been given.
- Removed the following patches;
  - ppp-2.4.2-logwtmp.diff -- now checks for HAVE_LOGWTMP
  - ppp-2.4.3-demand-fix.diff -- using 'status'
  - ppp-terminate-correct.patch -- upstream inclusion
- Rebased the following patches:
  * ppp-2.4.3-make.diff as ppp-2.4.6-make.diff
  * ppp-2.4.2-misc.diff as ppp-2.4.6-misc.diff
  * ppp-2.4.2-ifname.diff as ppp-2.4.6-ifname.diff
  * ppp-2.4.4-lib64.patch as ppp-2.4.6-lib64.patch
- Url changed to ppp.samba.org
- Use macros in spec file
- We dont need to cleanup the buildroot</changelog>
  <changelog author="max@suse.com" date="1408622400">- Update to 2.4.7:
  * Fixed a potential security issue in parsing option files
    (CVE-2014-3158, bnc#891489).
  * There is a new "stop-bits" option, which takes an argument of
    1 or 2, indicating the number of stop bits to use for async serial
    ports.
  * Various bug fixes.</changelog>
  <changelog author="ledest@gmail.com" date="1416398400">- fix bashisms in redialer script
- add patches:
  * ppp-2.4.7-fix-bashisms.patch</changelog>
  <changelog author="max@suse.com" date="1447416000">- Added ppp-CVE-2015-3310.patch:
  Fix for bnc#927841, CVE-2015-3310: Fix buffer overflow in radius
  plug-in's rc_mksid().</changelog>
  <changelog author="schwab@suse.de" date="1476705600">- fix-header-conflict.patch: avoid conflict with kernel headers</changelog>
  <changelog author="max@suse.com" date="1481284800">- Use system-wide libatm instead of local copy (boo#1013567).</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- ppp-2.4.2-pie.patch: also enable PIE for /usr/sbin/pppstats</changelog>
  <changelog author="kukuk@suse.com" date="1497355200">- Add /etc/ppp, this directory is no longer part of filesystem.
  Most likely requiring sysconfig would be necessary.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1511438400">- Add Requires group(dialout) (boo#1067511).</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1511524800">- Refresh spec-file via spec-cleaner.
- Add ppp-modem package for automatic redial to mobile provider.</changelog>
  <changelog author="max@suse.com" date="1581076800">- CVE-2020-8597, bsc#1162610, ppp-CVE-2020-8597.patch: rhostname
  buffer overflow in the eap_request and eap_response functions.</changelog>
  <changelog author="max@suse.com" date="1648728000">- bsc#1197799: Add ppp-2.4.7-DES-openssl.patch to fix build on
  SLE-15-SP3 and SP4.</changelog>
  <changelog author="max@suse.com" date="1703073600">- bsc#1218251, CVE-2022-4603, ppp-CVE-2022-4603.patch: improper
  validation of array index of the component pppdump.</changelog>
</package>
<package pkgid="adc806b7ba73104dece500e155e383e6ee57756389c6ceded5fb814505a8416d" name="ppp" arch="x86_64">
  <version epoch="0" ver="2.4.7" rel="150000.5.13.1"/>
  <changelog author="ledest@gmail.com" date="1416398400">- fix bashisms in redialer script
- add patches:
  * ppp-2.4.7-fix-bashisms.patch</changelog>
  <changelog author="max@suse.com" date="1447416000">- Added ppp-CVE-2015-3310.patch:
  Fix for bnc#927841, CVE-2015-3310: Fix buffer overflow in radius
  plug-in's rc_mksid().</changelog>
  <changelog author="schwab@suse.de" date="1476705600">- fix-header-conflict.patch: avoid conflict with kernel headers</changelog>
  <changelog author="max@suse.com" date="1481284800">- Use system-wide libatm instead of local copy (boo#1013567).</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- ppp-2.4.2-pie.patch: also enable PIE for /usr/sbin/pppstats</changelog>
  <changelog author="kukuk@suse.com" date="1497355200">- Add /etc/ppp, this directory is no longer part of filesystem.
  Most likely requiring sysconfig would be necessary.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1511438400">- Add Requires group(dialout) (boo#1067511).</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1511524800">- Refresh spec-file via spec-cleaner.
- Add ppp-modem package for automatic redial to mobile provider.</changelog>
  <changelog author="max@suse.com" date="1581076800">- CVE-2020-8597, bsc#1162610, ppp-CVE-2020-8597.patch: rhostname
  buffer overflow in the eap_request and eap_response functions.</changelog>
  <changelog author="max@suse.com" date="1648728000">- bsc#1197799: Add ppp-2.4.7-DES-openssl.patch to fix build on
  SLE-15-SP3 and SP4.</changelog>
  <changelog author="max@suse.com" date="1703073600">- bsc#1218251, CVE-2022-4603, ppp-CVE-2022-4603.patch: improper
  validation of array index of the component pppdump.</changelog>
</package>
<package pkgid="2abfdd2efbe0404dbbef5aeedc82097b65d683cca64ac7c2196fa0c7b56b9e26" name="procps" arch="aarch64">
  <version epoch="0" ver="3.3.17" rel="150000.7.37.1"/>
  <changelog author="mliska@suse.cz" date="1602072000">- Add upstream procps-check-sanity-of-SC_ARG_MAX.patch in order to fix
  pgrep: cannot allocate 4611686018427387903 bytes when ulimit -s is unlimited.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612267200">- Package translations in procps-lang.</changelog>
  <changelog author="werner@suse.de" date="1612958400">- Update to procps-ng-3.3.17
  * library: Incremented to 8:3:0
    (no removals or additions, internal changes only)
  * all: properly handle utf8 cmdline translations         issue #176
  * kill: Pass int to signalled process                    merge #32
  * pgrep: Pass int to signalled process                   merge #32
  * pgrep: Check sanity of SG_ARG_MAX                      issue #152
  * pgrep: Add older than selection                        merge #79
  * pidof: Quiet mode                                      merge #83
  * pidof: show worker threads                             Redhat #1803640
  * ps.1: Mention stime alias                              issue #164
  * ps: check also match on truncated 16 char comm names
  * ps: Add exe output option                              Redhat #1399206
  * ps: A lot more sorting available                       merge #99
  * pwait: New command waits for a process                 merge #97
  * sysctl: Match systemd directory order                  Debian #950788
  * sysctl: Document directory order                       Debian #951550
  * top: ensure config file backward compatibility         Debian #951335
  * top: add command line 'e' for symmetry with 'E'        issue #165
  * top: add '4' toggle for two abreast cpu display        issue #172
  * top: add '!' toggle for combining multiple cpus
  * top: fix potential SEGV involving -p switch            merge #114
  * vmstat: Wide mode gives wider proc columns             merge #48
  * watch: Add environment variable for interval           merge #62
  * watch: Add no linewrap option                          issue #182
  * watch: Support more colors                             merge #106,#109
  * free,uptime,slabtop: complain about extra ops          issue #181
- Remove now obsolete upstream patches
  * procps-check-sanity-of-SC_ARG_MAX.patch
  * procps-ng-3e1c00d0.patch
- Port patches
  * procps-ng-3.3.10-integer-overflow.patch
  * procps-ng-3.3.10-large_pcpu.patch
  * procps-ng-3.3.8-accuracy.dif
  * procps-ng-3.3.8-bnc634840.patch
  * procps-ng-3.3.8-petabytes.patch
  * procps-ng-3.3.8-tinfo.dif
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612958401">- Fix directory for Ukrainian man pages translations.
- Move localized man pages to lang package.
- Remove obsolete conditionals.
- Remove obsolete --enable-oomem option.
- Run spec-cleaner.</changelog>
  <changelog author="werner@suse.de" date="1613044800">- Add /usr/share/man/uk dir to file list for lang sub package</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1613995200">- Remove /usr/share/man/uk dir to file list for lang sub package:
  It's now provided by filesystem.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1615377600">- Don't install translated man pages for non-installed binaries
  (uptime, kill).</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1625227200">- Skip test suite on emulated riscv64 systems as the qemu process
  is unexpected on the command lines of processes</changelog>
  <changelog author="werner@suse.de" date="1642680000">- Correct used URLs</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Some older products do not know about /usr/share/man/uk</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
  <changelog author="kukuk@suse.com" date="1692187200">- procps-ng-3.3.17-logind.patch: Backport from 4.x git, prefer
  logind over utmp (jsc#PED-3144)</changelog>
  <changelog author="werner@suse.de" date="1692360000">- Modify patches
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-ng-3.3.17-logind.patch
  to real to not truncate output of w with option -n</changelog>
  <changelog author="werner@suse.de" date="1695211200">- Submit latest procps 3.3.17 to SLE-15 tree for jira#PED-3244
  and jira#PED-6369
- The patches now upstream had been dropped meanwhile
  * procps-vmstat-1b9ea611.patch (bsc#1185417)
  - For support up to 2048 CPU as well
  * bsc1209122-a6c0795d.patch (bnc#1209122)
  - allow `-´ as leading character to ignore possible errors
    on systctl entries
  * patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753)
  - was a backport of an upstream fix to get the first CPU
    summary correct
- Enable pidof for SLE-15 as this is provided by sysvinit-tools
- Use a check on syscall __NR_pidfd_open to decide if
  the pwait tool and its manual page will be build</changelog>
</package>
<package pkgid="1635fb05c9843f06e08d1d9cca2bd45d8b9775ba32ff75a79d45d95d2d81ee18" name="procps" arch="s390x">
  <version epoch="0" ver="3.3.17" rel="150000.7.37.1"/>
  <changelog author="mliska@suse.cz" date="1602072000">- Add upstream procps-check-sanity-of-SC_ARG_MAX.patch in order to fix
  pgrep: cannot allocate 4611686018427387903 bytes when ulimit -s is unlimited.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612267200">- Package translations in procps-lang.</changelog>
  <changelog author="werner@suse.de" date="1612958400">- Update to procps-ng-3.3.17
  * library: Incremented to 8:3:0
    (no removals or additions, internal changes only)
  * all: properly handle utf8 cmdline translations         issue #176
  * kill: Pass int to signalled process                    merge #32
  * pgrep: Pass int to signalled process                   merge #32
  * pgrep: Check sanity of SG_ARG_MAX                      issue #152
  * pgrep: Add older than selection                        merge #79
  * pidof: Quiet mode                                      merge #83
  * pidof: show worker threads                             Redhat #1803640
  * ps.1: Mention stime alias                              issue #164
  * ps: check also match on truncated 16 char comm names
  * ps: Add exe output option                              Redhat #1399206
  * ps: A lot more sorting available                       merge #99
  * pwait: New command waits for a process                 merge #97
  * sysctl: Match systemd directory order                  Debian #950788
  * sysctl: Document directory order                       Debian #951550
  * top: ensure config file backward compatibility         Debian #951335
  * top: add command line 'e' for symmetry with 'E'        issue #165
  * top: add '4' toggle for two abreast cpu display        issue #172
  * top: add '!' toggle for combining multiple cpus
  * top: fix potential SEGV involving -p switch            merge #114
  * vmstat: Wide mode gives wider proc columns             merge #48
  * watch: Add environment variable for interval           merge #62
  * watch: Add no linewrap option                          issue #182
  * watch: Support more colors                             merge #106,#109
  * free,uptime,slabtop: complain about extra ops          issue #181
- Remove now obsolete upstream patches
  * procps-check-sanity-of-SC_ARG_MAX.patch
  * procps-ng-3e1c00d0.patch
- Port patches
  * procps-ng-3.3.10-integer-overflow.patch
  * procps-ng-3.3.10-large_pcpu.patch
  * procps-ng-3.3.8-accuracy.dif
  * procps-ng-3.3.8-bnc634840.patch
  * procps-ng-3.3.8-petabytes.patch
  * procps-ng-3.3.8-tinfo.dif
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612958401">- Fix directory for Ukrainian man pages translations.
- Move localized man pages to lang package.
- Remove obsolete conditionals.
- Remove obsolete --enable-oomem option.
- Run spec-cleaner.</changelog>
  <changelog author="werner@suse.de" date="1613044800">- Add /usr/share/man/uk dir to file list for lang sub package</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1613995200">- Remove /usr/share/man/uk dir to file list for lang sub package:
  It's now provided by filesystem.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1615377600">- Don't install translated man pages for non-installed binaries
  (uptime, kill).</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1625227200">- Skip test suite on emulated riscv64 systems as the qemu process
  is unexpected on the command lines of processes</changelog>
  <changelog author="werner@suse.de" date="1642680000">- Correct used URLs</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Some older products do not know about /usr/share/man/uk</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
  <changelog author="kukuk@suse.com" date="1692187200">- procps-ng-3.3.17-logind.patch: Backport from 4.x git, prefer
  logind over utmp (jsc#PED-3144)</changelog>
  <changelog author="werner@suse.de" date="1692360000">- Modify patches
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-ng-3.3.17-logind.patch
  to real to not truncate output of w with option -n</changelog>
  <changelog author="werner@suse.de" date="1695211200">- Submit latest procps 3.3.17 to SLE-15 tree for jira#PED-3244
  and jira#PED-6369
- The patches now upstream had been dropped meanwhile
  * procps-vmstat-1b9ea611.patch (bsc#1185417)
  - For support up to 2048 CPU as well
  * bsc1209122-a6c0795d.patch (bnc#1209122)
  - allow `-´ as leading character to ignore possible errors
    on systctl entries
  * patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753)
  - was a backport of an upstream fix to get the first CPU
    summary correct
- Enable pidof for SLE-15 as this is provided by sysvinit-tools
- Use a check on syscall __NR_pidfd_open to decide if
  the pwait tool and its manual page will be build</changelog>
</package>
<package pkgid="e2189f2198af7034ccdd2076095e87e3818ec279c084b1aae6104e90022f8ba3" name="procps" arch="src">
  <version epoch="0" ver="3.3.17" rel="150000.7.37.1"/>
  <changelog author="mliska@suse.cz" date="1602072000">- Add upstream procps-check-sanity-of-SC_ARG_MAX.patch in order to fix
  pgrep: cannot allocate 4611686018427387903 bytes when ulimit -s is unlimited.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612267200">- Package translations in procps-lang.</changelog>
  <changelog author="werner@suse.de" date="1612958400">- Update to procps-ng-3.3.17
  * library: Incremented to 8:3:0
    (no removals or additions, internal changes only)
  * all: properly handle utf8 cmdline translations         issue #176
  * kill: Pass int to signalled process                    merge #32
  * pgrep: Pass int to signalled process                   merge #32
  * pgrep: Check sanity of SG_ARG_MAX                      issue #152
  * pgrep: Add older than selection                        merge #79
  * pidof: Quiet mode                                      merge #83
  * pidof: show worker threads                             Redhat #1803640
  * ps.1: Mention stime alias                              issue #164
  * ps: check also match on truncated 16 char comm names
  * ps: Add exe output option                              Redhat #1399206
  * ps: A lot more sorting available                       merge #99
  * pwait: New command waits for a process                 merge #97
  * sysctl: Match systemd directory order                  Debian #950788
  * sysctl: Document directory order                       Debian #951550
  * top: ensure config file backward compatibility         Debian #951335
  * top: add command line 'e' for symmetry with 'E'        issue #165
  * top: add '4' toggle for two abreast cpu display        issue #172
  * top: add '!' toggle for combining multiple cpus
  * top: fix potential SEGV involving -p switch            merge #114
  * vmstat: Wide mode gives wider proc columns             merge #48
  * watch: Add environment variable for interval           merge #62
  * watch: Add no linewrap option                          issue #182
  * watch: Support more colors                             merge #106,#109
  * free,uptime,slabtop: complain about extra ops          issue #181
- Remove now obsolete upstream patches
  * procps-check-sanity-of-SC_ARG_MAX.patch
  * procps-ng-3e1c00d0.patch
- Port patches
  * procps-ng-3.3.10-integer-overflow.patch
  * procps-ng-3.3.10-large_pcpu.patch
  * procps-ng-3.3.8-accuracy.dif
  * procps-ng-3.3.8-bnc634840.patch
  * procps-ng-3.3.8-petabytes.patch
  * procps-ng-3.3.8-tinfo.dif
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612958401">- Fix directory for Ukrainian man pages translations.
- Move localized man pages to lang package.
- Remove obsolete conditionals.
- Remove obsolete --enable-oomem option.
- Run spec-cleaner.</changelog>
  <changelog author="werner@suse.de" date="1613044800">- Add /usr/share/man/uk dir to file list for lang sub package</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1613995200">- Remove /usr/share/man/uk dir to file list for lang sub package:
  It's now provided by filesystem.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1615377600">- Don't install translated man pages for non-installed binaries
  (uptime, kill).</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1625227200">- Skip test suite on emulated riscv64 systems as the qemu process
  is unexpected on the command lines of processes</changelog>
  <changelog author="werner@suse.de" date="1642680000">- Correct used URLs</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Some older products do not know about /usr/share/man/uk</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
  <changelog author="kukuk@suse.com" date="1692187200">- procps-ng-3.3.17-logind.patch: Backport from 4.x git, prefer
  logind over utmp (jsc#PED-3144)</changelog>
  <changelog author="werner@suse.de" date="1692360000">- Modify patches
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-ng-3.3.17-logind.patch
  to real to not truncate output of w with option -n</changelog>
  <changelog author="werner@suse.de" date="1695211200">- Submit latest procps 3.3.17 to SLE-15 tree for jira#PED-3244
  and jira#PED-6369
- The patches now upstream had been dropped meanwhile
  * procps-vmstat-1b9ea611.patch (bsc#1185417)
  - For support up to 2048 CPU as well
  * bsc1209122-a6c0795d.patch (bnc#1209122)
  - allow `-´ as leading character to ignore possible errors
    on systctl entries
  * patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753)
  - was a backport of an upstream fix to get the first CPU
    summary correct
- Enable pidof for SLE-15 as this is provided by sysvinit-tools
- Use a check on syscall __NR_pidfd_open to decide if
  the pwait tool and its manual page will be build</changelog>
</package>
<package pkgid="ec3b00c5c38b8dcc8e6d48cf96f7a2e74deddb1091548ea77e14bfd9e79c1936" name="procps" arch="x86_64">
  <version epoch="0" ver="3.3.17" rel="150000.7.37.1"/>
  <changelog author="mliska@suse.cz" date="1602072000">- Add upstream procps-check-sanity-of-SC_ARG_MAX.patch in order to fix
  pgrep: cannot allocate 4611686018427387903 bytes when ulimit -s is unlimited.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612267200">- Package translations in procps-lang.</changelog>
  <changelog author="werner@suse.de" date="1612958400">- Update to procps-ng-3.3.17
  * library: Incremented to 8:3:0
    (no removals or additions, internal changes only)
  * all: properly handle utf8 cmdline translations         issue #176
  * kill: Pass int to signalled process                    merge #32
  * pgrep: Pass int to signalled process                   merge #32
  * pgrep: Check sanity of SG_ARG_MAX                      issue #152
  * pgrep: Add older than selection                        merge #79
  * pidof: Quiet mode                                      merge #83
  * pidof: show worker threads                             Redhat #1803640
  * ps.1: Mention stime alias                              issue #164
  * ps: check also match on truncated 16 char comm names
  * ps: Add exe output option                              Redhat #1399206
  * ps: A lot more sorting available                       merge #99
  * pwait: New command waits for a process                 merge #97
  * sysctl: Match systemd directory order                  Debian #950788
  * sysctl: Document directory order                       Debian #951550
  * top: ensure config file backward compatibility         Debian #951335
  * top: add command line 'e' for symmetry with 'E'        issue #165
  * top: add '4' toggle for two abreast cpu display        issue #172
  * top: add '!' toggle for combining multiple cpus
  * top: fix potential SEGV involving -p switch            merge #114
  * vmstat: Wide mode gives wider proc columns             merge #48
  * watch: Add environment variable for interval           merge #62
  * watch: Add no linewrap option                          issue #182
  * watch: Support more colors                             merge #106,#109
  * free,uptime,slabtop: complain about extra ops          issue #181
- Remove now obsolete upstream patches
  * procps-check-sanity-of-SC_ARG_MAX.patch
  * procps-ng-3e1c00d0.patch
- Port patches
  * procps-ng-3.3.10-integer-overflow.patch
  * procps-ng-3.3.10-large_pcpu.patch
  * procps-ng-3.3.8-accuracy.dif
  * procps-ng-3.3.8-bnc634840.patch
  * procps-ng-3.3.8-petabytes.patch
  * procps-ng-3.3.8-tinfo.dif
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612958401">- Fix directory for Ukrainian man pages translations.
- Move localized man pages to lang package.
- Remove obsolete conditionals.
- Remove obsolete --enable-oomem option.
- Run spec-cleaner.</changelog>
  <changelog author="werner@suse.de" date="1613044800">- Add /usr/share/man/uk dir to file list for lang sub package</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1613995200">- Remove /usr/share/man/uk dir to file list for lang sub package:
  It's now provided by filesystem.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1615377600">- Don't install translated man pages for non-installed binaries
  (uptime, kill).</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1625227200">- Skip test suite on emulated riscv64 systems as the qemu process
  is unexpected on the command lines of processes</changelog>
  <changelog author="werner@suse.de" date="1642680000">- Correct used URLs</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Some older products do not know about /usr/share/man/uk</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
  <changelog author="kukuk@suse.com" date="1692187200">- procps-ng-3.3.17-logind.patch: Backport from 4.x git, prefer
  logind over utmp (jsc#PED-3144)</changelog>
  <changelog author="werner@suse.de" date="1692360000">- Modify patches
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-ng-3.3.17-logind.patch
  to real to not truncate output of w with option -n</changelog>
  <changelog author="werner@suse.de" date="1695211200">- Submit latest procps 3.3.17 to SLE-15 tree for jira#PED-3244
  and jira#PED-6369
- The patches now upstream had been dropped meanwhile
  * procps-vmstat-1b9ea611.patch (bsc#1185417)
  - For support up to 2048 CPU as well
  * bsc1209122-a6c0795d.patch (bnc#1209122)
  - allow `-´ as leading character to ignore possible errors
    on systctl entries
  * patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753)
  - was a backport of an upstream fix to get the first CPU
    summary correct
- Enable pidof for SLE-15 as this is provided by sysvinit-tools
- Use a check on syscall __NR_pidfd_open to decide if
  the pwait tool and its manual page will be build</changelog>
</package>
<package pkgid="c19420815f2ae5f1abcd2169722b913aa683dce8ea7a09d2656137182658d57a" name="protobuf" arch="src">
  <version epoch="0" ver="25.1" rel="150400.9.3.1"/>
  <changelog author="dmueller@suse.com" date="1659614400">- add 10355.patch to fix soversioning</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 21.5:
  PHP
  * Added getContainingOneof and getRealContainingOneof to descriptor.
  * fix PHP readonly legacy files for nested messages
  Python
  * Fixed comparison of maps in Python.</changelog>
  <changelog author="dmueller@suse.com" date="1663588800">- update to 21.6:
  C++:
  * Reduce memory consumption of MessageSet parsing</changelog>
  <changelog author="dmueller@suse.com" date="1667044800">- update to 21.9:
  * Ruby
  * Replace libc strdup usage with internal impl to restore musl compat (#10818)
  * Auto capitalize enums name in Ruby (#10454) (#10763)
  * Other
  * Fix for grpc.tools #17995 &amp; protobuf #7474 (handle UTF-8 paths in argumentfile) (#10721)
  * C++
  * 21.x No longer define no_threadlocal on OpenBSD (#10743)
  * Java
  * Mark default instance as immutable first to avoid race during static initialization of default instances (#10771)
  * Refactoring java full runtime to reuse sub-message builders and prepare to
    migrate parsing logic from parse constructor to builder.
  * Move proto wireformat parsing functionality from the private "parsing
    constructor" to the Builder class.
  * Change the Lite runtime to prefer merging from the wireformat into mutable
    messages rather than building up a new immutable object before merging. This
    way results in fewer allocations and copy operations.
  * Make message-type extensions merge from wire-format instead of building up
    instances and merging afterwards. This has much better performance.
  * Fix TextFormat parser to build up recurring (but supposedly not repeated)
    sub-messages directly from text rather than building a new sub-message and
    merging the fully formed message into the existing field.</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 21.10:
  * Java
  * Use bit-field int values in buildPartial to skip work on unset groups of
    fields. (#10960)
  * Mark nested builder as clean after clear is called (#10984)</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- update to 21.11:
  * Python
  * Add license file to pypi wheels (#10936)
  * Fix round-trip bug (#10158)</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- update to v21.12:
  * Python
  * Fix broken enum ranges (#11171)
  * Stop requiring extension fields to have a sythetic oneof (#11091)
  * Python runtime 4.21.10 not works generated code can not load valid
    proto.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO (boo#1133277).</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to v22.3
  UPB (Python/PHP/Ruby C-Extension)
  * Remove src prefix from proto import
  * Fix .gitmodules to use the correct absl branch
  * Remove erroneous dependency on googletest
- update to 22.2:
  Java
  * Add version to intra proto dependencies and add kotlin stdlib
    dependency
  * Add $ back for osgi header
  * Remove $ in pom files
- update to 22.1:
  * Add visibility of plugin.proto to python directory
  * Strip "src" from file name of plugin.proto
  * Add OSGi headers to pom files.
  * Remove errorprone dependency from kotlin protos.
  * Version protoc according to the compiler version number.
- update to 22.0:
  * This version includes breaking changes to: Cpp.
    Please refer to the migration guide for information:
    https://protobuf.dev/support/migration/#compiler-22
  * [Cpp] Migrate to Abseil's logging library.
  * [Cpp] `proto2::Map::value_type` changes to `std::pair`.
  * [Cpp] Mark final ZeroCopyInputStream, ZeroCopyOutputStream,
    and DefaultFieldComparator classes.
  * [Cpp] Add a dependency on Abseil (#10416)
  * [Cpp] Remove all autotools usage (#10132)
  * [Cpp] Add C++20 reserved keywords
  * [Cpp] Dropped C++11 Support
  * [Cpp] Delete Arena::Init
  * [Cpp] Replace JSON parser with new implementation
  * [Cpp] Make RepeatedField::GetArena non-const in order to
    support split RepeatedFields.
  * long list of bindings specific fixes see
    https://github.com/protocolbuffers/protobuf/releases/tag/v22.0
- python sub packages version is set 4.22.3 as defined in
  python/google/protobuf/__init__.py to stay compatible
- skip python2 builds by default
- drop patches:
  * 10355.patch,
  * gcc12-disable-__constinit-with-c++-11.patch (merged upstream)
- added patches:
  * add-missing-stdint-header.patch   added for compile fixes</changelog>
  <changelog author="fstrba@suse.com" date="1682596800">- Make possible to build on older systems, like SLE12 that miss
  some of the used macros.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Mention the rpmlintrc file in the spec.</changelog>
  <changelog author="mpluskal@suse.com" date="1683633600">- Fix confusion in versions</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- drop python2 handling
- fix version handling and package the private libs again</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 22.5:
  C++
  * Add missing cstdint header
  * Fix: missing -DPROTOBUF_USE_DLLS in pkg-config (#12700)
  * Avoid using string(JOIN..., which requires cmake 3.12
  * Explicitly include GTest package in examples
  * Bump Abseil submodule to 20230125.3 (#12660)
- update to 22.4:
  C++
  * Fix libprotoc: export useful symbols from .so
  * Fix btree issue in map tests.
  Python
  * Fix bug in _internal_copy_files where the rule would fail in
    downstream repositories.
  Other
  * Bump utf8_range to version with working pkg-config (#12584)
  * Fix declared dependencies for pkg-config
  * Update abseil dependency and reorder dependencies to ensure
    we use the version specified in protobuf_deps.
  * Turn off clang::musttail on i386</changelog>
  <changelog author="fvogt@suse.com" date="1686744000">- Add patch to fix linking ThreadSafeArena:
  * 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch
- Drop the protobuf-source package, no longer used</changelog>
  <changelog author="dmueller@suse.com" date="1688385600">- update to 23.3:
  C++
  * Regenerate stale files
  * Use the same ABI for static and shared libraries on non-
    Windows platforms
  * Add a workaround for GCC constexpr bug
  Objective-C
  * Regenerate stale files
  UPB (Python/PHP/Ruby C-Extension)
  * Fixed a bug in `upb_Map_Delete()` that caused crashes in
    map.delete(k) for Ruby when string-keyed maps were in use.
  Compiler
  * Add missing header to Objective-c generator
  * Add a workaround for GCC constexpr bug
  Java
  * Rollback of: Simplify protobuf Java message builder by
    removing methods that calls the super class only.
  Csharp
  * [C#] Replace regex that validates descriptor names
- drop 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1688731200">- update to 23.4:
  * Add dllexport_decl for generated default instance.
  * Deps: Update Guava to 32.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1698667200">- Build with source and target levels 8
  * fixes build with JDK21
- Install the pom file with the new %%mvn_install_pom macro
- Do not install the pom-only artifacts, since the %%mvn_install_pom
  macro resolves the variables at the install time</changelog>
  <changelog author="dmueller@suse.com" date="1703160000">- build against modern python on sle15</changelog>
  <changelog author="dmueller@suse.com" date="1704196800">- update to 25.1:
  * Raise warnings for deprecated python syntax usages
  * Add support for extensions in CRuby, JRuby, and FFI Ruby
  * Add support for options in CRuby, JRuby and FFI (#14594)
- update to 25.0:
  * Implement proto2/proto3 with editions
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Editions: Introduce functionality to protoc for generating
    edition feature set defaults.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Publish extension declarations with declaration
    verifications.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Protoc: parser rejects explicit use of map_entry option
  * Protoc: validate that reserved range start is before end
  * Protoc: support identifiers as reserved names in addition to
    string literals (only in editions)
  * Drop support for Bazel 5.
  * Allow code generators to specify whether or not they support
    editions.
  [#] C++
  * Set `PROTOBUF_EXPORT` on
    `InternalOutOfLineDeleteMessageLite()`
  * Update stale checked-in files
  * Apply PROTOBUF_NOINLINE to declarations of some functions
    that want it.
  * Implement proto2/proto3 with editions
  * Make JSON UTF-8 boundary check inclusive of the largest
    possible UTF-8 character.
  * Reduce `Map::size_type` to 32-bits. Protobuf containers can't
    have more than that
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Fix bug in reflection based Swap of map fields.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Add prefetching to arena allocations.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    repeated and map field accessors.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    string field accessors.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Fixes for 32-bit MSVC.
  * Publish extension declarations with declaration
    verifications.
  * Export the constants in protobuf's any.h to support DLL
    builds.
  * Implement AbslStringify for the Descriptor family of types.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    message field accessors.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Introduce C++ feature for UTF8 validation.
  * Protoc: validate that reserved range start is before end
  * Remove option to disable the table-driven parser in protoc.
  * Lock down ctype=CORD in proto file.
  * Support split repeated fields.
  * In OSS mode omit some extern template specializations.
  * Allow code generators to specify whether or not they support
    editions.
  [#] Java
  * Implement proto2/proto3 with editions
  * Remove synthetic oneofs from Java gencode field accessor
    tables.
  * Timestamps.parse: Add error handling for invalid
    hours/minutes in the timezone offset.
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Add missing debugging version info to Protobuf Java gencode
    when multiple files are generated.
  * Fix a bad cast in putBuilderIfAbsent when already present due
    to using the result of put() directly (which is null if it
    currently has no value)
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Fix a NPE in putBuilderIfAbsent due to using the result of
    put() directly (which is null if it currently has no value)
  * Update Kotlin compiler to escape package names
  * Add MapFieldBuilder and change codegen to generate it and the
    put{field}BuilderIfAbsent method.
  * Introduce recursion limit in Java text format parsing
  * Consider the protobuf.Any invalid if typeUrl.split("/")
    returns an empty array.
  * Mark `FieldDescriptor.hasOptionalKeyword()` as deprecated.
  * Fixed Python memory leak in map lookup.
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Ensure Timestamp.ToDatetime(tz) has correct offset
  * Do not check required field for upb python MergeFrom
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Emit __slots__ in pyi output as a tuple rather than a list
    for --pyi_out.
  * Fix a bug that strips options from descriptor.proto in
    Python.
  * Raise warings for message.UnknownFields() usages and navigate
    to the new add
  * Add protobuf python keyword support in path for stub
    generator.
  * Add tuple support to set Struct
  * ### Python C-Extension (Default)
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Check that ffi-compiler loads before using it to define
    tasks.
  [#] UPB (Python/PHP/Ruby C-Extension)
  * Include .inc files directly instead of through a filegroup
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Add utf8_validation feature back to the global feature set.
  * Do not check required field for upb python MergeFrom
  * Merge the protobuf and upb Bazel repos
  * Added malloc_trim() calls to Python allocator so RSS will
    decrease when memory is freed
  * Upb: fix a Python memory leak in ByteSize()
  * Support ASAN detection on clang
  * Upb: bugfix for importing a proto3 enum from within a proto2
    file
  * Expose methods needed by Ruby FFI using UPB_API
  * Fix `PyUpb_Message_MergeInternal` segfault</changelog>
</package>
<package pkgid="87b1e4bb8be7090e984b90e935adc06e6fd13ed8a62a1a2ce24340e1fe3307dc" name="psmisc" arch="aarch64">
  <version epoch="0" ver="23.0" rel="150000.6.25.1"/>
  <changelog author="schwab@suse.de" date="1432209600">- Replace negative list %nopeek with positive list %have_peekfd</changelog>
  <changelog author="werner@suse.de" date="1497960000">- Modify psmisc-22.21.dif to enforce the usage of `m' flag in
  sscanf() instead of `a' for allocation. Also avoid to small
  buffers and include sys/sysmacros.h for makedev macro.
- Add the patch psmisc-22.21-lessnfs.patch to support device
  files of mount points as well (boo#1044638)
- Add the patch psmisc-22.21-mntpt.patch to do strinfg comparision
  only for NFS shares</changelog>
  <changelog author="werner@suse.de" date="1497960001">- Update to version 23.0
  * killall: Fix process age race condition !11 Debian #822861
  * killall: only use scope of current namespace by default
  * killall: better parsing of command names
  * pstree: add cgroup namespaces !10
  * peekfd: Help give long options too !5
  * killall: correctly report when 32+ procs match !8
  * prtat: Remove duplicate options in man page !3 Debian #846387
  * pslog: New program to check what logs are open merge !1
  * fuser: increase path length for octal escaping SF [#37]
  * Make usage of linked lists of devices found in
    /proc/self/mountinfo optional
  * Make timeout() in timeout.c work with shared mmap to
    reduce the load due write/read the stat buffers
  * Add list_sort() to lists.h to be able to sort lists
  * fuser: Fixed typo for  -M flag. Debian #740275
  * pstree: by default doesn't show threadnames, use -t to show
    as it disables compaction. SF [#33] Debian #815902
  * pstree: Removed need for PATH_MAX Debian #750405
  * pstree: ignores disappeared processes. SF [#34]
  * killall: -o and -y work with -r flags. SF [#64]
  * m4/gettext.m4: Upgrade to gettext-0.19.4.
  * m4/iconv.m4: Upgrade to gettext-0.19.4.
  * m4/lib-ld.m4: Upgrade to gettext-0.19.4.
  * m4/lib-link.m4: Upgrade to gettext-0.19.4.
  * m4/lib-prefix.m4: Upgrade to gettext-0.19.4.
  * m4/nls.m4: Upgrade to gettext-0.19.4.
  * m4/po.m4: Upgrade to gettext-0.19.4.
  * m4/progtest.m4: Upgrade to gettext-0.19.4.
  * configure.ac (AM_GNU_GETTEXT_VERSION): Bump to 0.19.4.
- Make it build, that is create a po/POTFILES.in
- Remove obsolete patches
  * psmisc-22.21-boo908063.patch
  * psmisc-22.12-tigetstr.patch
  * psmisc-22.21-upstream.patch
  * psmisc-git-3638cc55b4d08851faba46635d737b24d016665b.patch
- Rename patch psmisc-22.21.dif which becomes psmisc-23.0.dif
- Make /bin/fuser a symblic link of /usr/bin/fuser (boo#1029973)
- Last revision was 78</changelog>
  <changelog author="werner@suse.de" date="1498651200">- Add patch psmisc-23.0-killall.patch to remove left over debug
  output in killall utility (boo#1046237)</changelog>
  <changelog author="werner@suse.de" date="1498651201">- Add patch psmisc-23.0-net.patch to reenable network support
  broken to my own upstream commit</changelog>
  <changelog author="werner@suse.de" date="1499256000">- Remove patches
  * psmisc-22.21-lessnfs.patch
  * psmisc-22.21-mntpt.patch
  * psmisc-23.0-net.patch
- Add patch
  0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  from https://gitlab.com/bitstreamout/psmisc/tree/mountinfo
  which is a heavily rework fuser used on NFS
  * Use mountinfo to be able to use the mount identity
    which allows to distinguish different mounts with the
    same device number as it happens with NFS shares.
  * Smaller cleanup as support of chroot environments
    and older systems.
  * Add support for name_to_handle_at() system call to
    get the real mount ID for each file
- Use test suite of psmisc in %check rpm section</changelog>
  <changelog author="werner@suse.de" date="1499342400">- Update patch
  0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch</changelog>
  <changelog author="werner@suse.de" date="1505736000">- Add patch psmisc-23.0-killall-signals.patch to fix boo#1058990
  by prior scanning for signal names in the arguments of killall</changelog>
  <changelog author="werner@suse.de" date="1507896000">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to run even on older kernels missing mnt_id tag in fdinfo</changelog>
  <changelog author="werner@suse.de" date="1526558400">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to let fuser -m also work for private mounts as well (boo#1093665)</changelog>
  <changelog author="werner@suse.de" date="1529668800">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to make fuser option -m &lt;block_device&gt; work even with mountinfo
  (bsc#1098697)</changelog>
  <changelog author="werner@suse.de" date="1540296000">- Support also btrFS entries in mountinfo, that is use stat(2) to
  determine the device of the mounted subvolume (bsc#1098697, bsc#1112780)
  this modifies patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch</changelog>
  <changelog author="werner@suse.de" date="1542196800">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to handle sub volumes of the btrFS (bsc#1112780)</changelog>
  <changelog author="werner@suse.de" date="1543579200">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Always initialize head of simple linked list (bsc#1098697)
  * stat(2) on binary does not see subvol dev</changelog>
  <changelog author="werner@suse.de" date="1587988800">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Allow not unique mounts as well as not unique mountpoint (bsc#1170247)</changelog>
  <changelog author="werner@suse.de" date="1614945600">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Fix bsc#1178407: fuser does not show open kvm storage image files
    such as qcow2 files. Patch from Ali Abdallah &lt;ali.abdallah@suse.com&gt;</changelog>
  <changelog author="werner@suse.de" date="1621339200">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Fix bsc#1185208 to make private mount namespaces work as well
    as to distinguish NFS mounts from same remote device share.</changelog>
  <changelog author="werner@suse.de" date="1644840000">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Determine the namespace of a process only once to speed
    up the parsing of fdinfo (bsc#1194172).</changelog>
  <changelog author="werner@suse.de" date="1646222400">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Add a fallback if the system call name_to_handle_at() is
    not supported by the used file system.
- Add patch psmisc-22.21-semaphores.patch
  * Replace the synchronizing over pipes of the sub process for the
    stat(2) system call with mutex and conditions from pthreads(7)
    (bsc#1194172)
- Add patch psmisc-22.21-statx.patch
  * Use statx(2) or SYS_statx system call to replace the stat(2)
    system call and avoid the sub process at all (bsc#1194172)</changelog>
  <changelog author="werner@suse.de" date="1698062400">- Fix version at configure time as there was no .tarball-version</changelog>
</package>
<package pkgid="b0f86ff0194d03fcbe3d2381af283cb10b1dabd1d3fe54edff28b8c626adec76" name="psmisc" arch="s390x">
  <version epoch="0" ver="23.0" rel="150000.6.25.1"/>
  <changelog author="schwab@suse.de" date="1432209600">- Replace negative list %nopeek with positive list %have_peekfd</changelog>
  <changelog author="werner@suse.de" date="1497960000">- Modify psmisc-22.21.dif to enforce the usage of `m' flag in
  sscanf() instead of `a' for allocation. Also avoid to small
  buffers and include sys/sysmacros.h for makedev macro.
- Add the patch psmisc-22.21-lessnfs.patch to support device
  files of mount points as well (boo#1044638)
- Add the patch psmisc-22.21-mntpt.patch to do strinfg comparision
  only for NFS shares</changelog>
  <changelog author="werner@suse.de" date="1497960001">- Update to version 23.0
  * killall: Fix process age race condition !11 Debian #822861
  * killall: only use scope of current namespace by default
  * killall: better parsing of command names
  * pstree: add cgroup namespaces !10
  * peekfd: Help give long options too !5
  * killall: correctly report when 32+ procs match !8
  * prtat: Remove duplicate options in man page !3 Debian #846387
  * pslog: New program to check what logs are open merge !1
  * fuser: increase path length for octal escaping SF [#37]
  * Make usage of linked lists of devices found in
    /proc/self/mountinfo optional
  * Make timeout() in timeout.c work with shared mmap to
    reduce the load due write/read the stat buffers
  * Add list_sort() to lists.h to be able to sort lists
  * fuser: Fixed typo for  -M flag. Debian #740275
  * pstree: by default doesn't show threadnames, use -t to show
    as it disables compaction. SF [#33] Debian #815902
  * pstree: Removed need for PATH_MAX Debian #750405
  * pstree: ignores disappeared processes. SF [#34]
  * killall: -o and -y work with -r flags. SF [#64]
  * m4/gettext.m4: Upgrade to gettext-0.19.4.
  * m4/iconv.m4: Upgrade to gettext-0.19.4.
  * m4/lib-ld.m4: Upgrade to gettext-0.19.4.
  * m4/lib-link.m4: Upgrade to gettext-0.19.4.
  * m4/lib-prefix.m4: Upgrade to gettext-0.19.4.
  * m4/nls.m4: Upgrade to gettext-0.19.4.
  * m4/po.m4: Upgrade to gettext-0.19.4.
  * m4/progtest.m4: Upgrade to gettext-0.19.4.
  * configure.ac (AM_GNU_GETTEXT_VERSION): Bump to 0.19.4.
- Make it build, that is create a po/POTFILES.in
- Remove obsolete patches
  * psmisc-22.21-boo908063.patch
  * psmisc-22.12-tigetstr.patch
  * psmisc-22.21-upstream.patch
  * psmisc-git-3638cc55b4d08851faba46635d737b24d016665b.patch
- Rename patch psmisc-22.21.dif which becomes psmisc-23.0.dif
- Make /bin/fuser a symblic link of /usr/bin/fuser (boo#1029973)
- Last revision was 78</changelog>
  <changelog author="werner@suse.de" date="1498651200">- Add patch psmisc-23.0-killall.patch to remove left over debug
  output in killall utility (boo#1046237)</changelog>
  <changelog author="werner@suse.de" date="1498651201">- Add patch psmisc-23.0-net.patch to reenable network support
  broken to my own upstream commit</changelog>
  <changelog author="werner@suse.de" date="1499256000">- Remove patches
  * psmisc-22.21-lessnfs.patch
  * psmisc-22.21-mntpt.patch
  * psmisc-23.0-net.patch
- Add patch
  0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  from https://gitlab.com/bitstreamout/psmisc/tree/mountinfo
  which is a heavily rework fuser used on NFS
  * Use mountinfo to be able to use the mount identity
    which allows to distinguish different mounts with the
    same device number as it happens with NFS shares.
  * Smaller cleanup as support of chroot environments
    and older systems.
  * Add support for name_to_handle_at() system call to
    get the real mount ID for each file
- Use test suite of psmisc in %check rpm section</changelog>
  <changelog author="werner@suse.de" date="1499342400">- Update patch
  0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch</changelog>
  <changelog author="werner@suse.de" date="1505736000">- Add patch psmisc-23.0-killall-signals.patch to fix boo#1058990
  by prior scanning for signal names in the arguments of killall</changelog>
  <changelog author="werner@suse.de" date="1507896000">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to run even on older kernels missing mnt_id tag in fdinfo</changelog>
  <changelog author="werner@suse.de" date="1526558400">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to let fuser -m also work for private mounts as well (boo#1093665)</changelog>
  <changelog author="werner@suse.de" date="1529668800">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to make fuser option -m &lt;block_device&gt; work even with mountinfo
  (bsc#1098697)</changelog>
  <changelog author="werner@suse.de" date="1540296000">- Support also btrFS entries in mountinfo, that is use stat(2) to
  determine the device of the mounted subvolume (bsc#1098697, bsc#1112780)
  this modifies patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch</changelog>
  <changelog author="werner@suse.de" date="1542196800">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to handle sub volumes of the btrFS (bsc#1112780)</changelog>
  <changelog author="werner@suse.de" date="1543579200">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Always initialize head of simple linked list (bsc#1098697)
  * stat(2) on binary does not see subvol dev</changelog>
  <changelog author="werner@suse.de" date="1587988800">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Allow not unique mounts as well as not unique mountpoint (bsc#1170247)</changelog>
  <changelog author="werner@suse.de" date="1614945600">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Fix bsc#1178407: fuser does not show open kvm storage image files
    such as qcow2 files. Patch from Ali Abdallah &lt;ali.abdallah@suse.com&gt;</changelog>
  <changelog author="werner@suse.de" date="1621339200">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Fix bsc#1185208 to make private mount namespaces work as well
    as to distinguish NFS mounts from same remote device share.</changelog>
  <changelog author="werner@suse.de" date="1644840000">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Determine the namespace of a process only once to speed
    up the parsing of fdinfo (bsc#1194172).</changelog>
  <changelog author="werner@suse.de" date="1646222400">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Add a fallback if the system call name_to_handle_at() is
    not supported by the used file system.
- Add patch psmisc-22.21-semaphores.patch
  * Replace the synchronizing over pipes of the sub process for the
    stat(2) system call with mutex and conditions from pthreads(7)
    (bsc#1194172)
- Add patch psmisc-22.21-statx.patch
  * Use statx(2) or SYS_statx system call to replace the stat(2)
    system call and avoid the sub process at all (bsc#1194172)</changelog>
  <changelog author="werner@suse.de" date="1698062400">- Fix version at configure time as there was no .tarball-version</changelog>
</package>
<package pkgid="923635f6a3370a2941eeb76981310a7b4b42dcbd5b300bdfd0135f681601edbf" name="psmisc" arch="src">
  <version epoch="0" ver="23.0" rel="150000.6.25.1"/>
  <changelog author="schwab@suse.de" date="1432209600">- Replace negative list %nopeek with positive list %have_peekfd</changelog>
  <changelog author="werner@suse.de" date="1497960000">- Modify psmisc-22.21.dif to enforce the usage of `m' flag in
  sscanf() instead of `a' for allocation. Also avoid to small
  buffers and include sys/sysmacros.h for makedev macro.
- Add the patch psmisc-22.21-lessnfs.patch to support device
  files of mount points as well (boo#1044638)
- Add the patch psmisc-22.21-mntpt.patch to do strinfg comparision
  only for NFS shares</changelog>
  <changelog author="werner@suse.de" date="1497960001">- Update to version 23.0
  * killall: Fix process age race condition !11 Debian #822861
  * killall: only use scope of current namespace by default
  * killall: better parsing of command names
  * pstree: add cgroup namespaces !10
  * peekfd: Help give long options too !5
  * killall: correctly report when 32+ procs match !8
  * prtat: Remove duplicate options in man page !3 Debian #846387
  * pslog: New program to check what logs are open merge !1
  * fuser: increase path length for octal escaping SF [#37]
  * Make usage of linked lists of devices found in
    /proc/self/mountinfo optional
  * Make timeout() in timeout.c work with shared mmap to
    reduce the load due write/read the stat buffers
  * Add list_sort() to lists.h to be able to sort lists
  * fuser: Fixed typo for  -M flag. Debian #740275
  * pstree: by default doesn't show threadnames, use -t to show
    as it disables compaction. SF [#33] Debian #815902
  * pstree: Removed need for PATH_MAX Debian #750405
  * pstree: ignores disappeared processes. SF [#34]
  * killall: -o and -y work with -r flags. SF [#64]
  * m4/gettext.m4: Upgrade to gettext-0.19.4.
  * m4/iconv.m4: Upgrade to gettext-0.19.4.
  * m4/lib-ld.m4: Upgrade to gettext-0.19.4.
  * m4/lib-link.m4: Upgrade to gettext-0.19.4.
  * m4/lib-prefix.m4: Upgrade to gettext-0.19.4.
  * m4/nls.m4: Upgrade to gettext-0.19.4.
  * m4/po.m4: Upgrade to gettext-0.19.4.
  * m4/progtest.m4: Upgrade to gettext-0.19.4.
  * configure.ac (AM_GNU_GETTEXT_VERSION): Bump to 0.19.4.
- Make it build, that is create a po/POTFILES.in
- Remove obsolete patches
  * psmisc-22.21-boo908063.patch
  * psmisc-22.12-tigetstr.patch
  * psmisc-22.21-upstream.patch
  * psmisc-git-3638cc55b4d08851faba46635d737b24d016665b.patch
- Rename patch psmisc-22.21.dif which becomes psmisc-23.0.dif
- Make /bin/fuser a symblic link of /usr/bin/fuser (boo#1029973)
- Last revision was 78</changelog>
  <changelog author="werner@suse.de" date="1498651200">- Add patch psmisc-23.0-killall.patch to remove left over debug
  output in killall utility (boo#1046237)</changelog>
  <changelog author="werner@suse.de" date="1498651201">- Add patch psmisc-23.0-net.patch to reenable network support
  broken to my own upstream commit</changelog>
  <changelog author="werner@suse.de" date="1499256000">- Remove patches
  * psmisc-22.21-lessnfs.patch
  * psmisc-22.21-mntpt.patch
  * psmisc-23.0-net.patch
- Add patch
  0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  from https://gitlab.com/bitstreamout/psmisc/tree/mountinfo
  which is a heavily rework fuser used on NFS
  * Use mountinfo to be able to use the mount identity
    which allows to distinguish different mounts with the
    same device number as it happens with NFS shares.
  * Smaller cleanup as support of chroot environments
    and older systems.
  * Add support for name_to_handle_at() system call to
    get the real mount ID for each file
- Use test suite of psmisc in %check rpm section</changelog>
  <changelog author="werner@suse.de" date="1499342400">- Update patch
  0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch</changelog>
  <changelog author="werner@suse.de" date="1505736000">- Add patch psmisc-23.0-killall-signals.patch to fix boo#1058990
  by prior scanning for signal names in the arguments of killall</changelog>
  <changelog author="werner@suse.de" date="1507896000">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to run even on older kernels missing mnt_id tag in fdinfo</changelog>
  <changelog author="werner@suse.de" date="1526558400">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to let fuser -m also work for private mounts as well (boo#1093665)</changelog>
  <changelog author="werner@suse.de" date="1529668800">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to make fuser option -m &lt;block_device&gt; work even with mountinfo
  (bsc#1098697)</changelog>
  <changelog author="werner@suse.de" date="1540296000">- Support also btrFS entries in mountinfo, that is use stat(2) to
  determine the device of the mounted subvolume (bsc#1098697, bsc#1112780)
  this modifies patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch</changelog>
  <changelog author="werner@suse.de" date="1542196800">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to handle sub volumes of the btrFS (bsc#1112780)</changelog>
  <changelog author="werner@suse.de" date="1543579200">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Always initialize head of simple linked list (bsc#1098697)
  * stat(2) on binary does not see subvol dev</changelog>
  <changelog author="werner@suse.de" date="1587988800">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Allow not unique mounts as well as not unique mountpoint (bsc#1170247)</changelog>
  <changelog author="werner@suse.de" date="1614945600">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Fix bsc#1178407: fuser does not show open kvm storage image files
    such as qcow2 files. Patch from Ali Abdallah &lt;ali.abdallah@suse.com&gt;</changelog>
  <changelog author="werner@suse.de" date="1621339200">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Fix bsc#1185208 to make private mount namespaces work as well
    as to distinguish NFS mounts from same remote device share.</changelog>
  <changelog author="werner@suse.de" date="1644840000">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Determine the namespace of a process only once to speed
    up the parsing of fdinfo (bsc#1194172).</changelog>
  <changelog author="werner@suse.de" date="1646222400">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Add a fallback if the system call name_to_handle_at() is
    not supported by the used file system.
- Add patch psmisc-22.21-semaphores.patch
  * Replace the synchronizing over pipes of the sub process for the
    stat(2) system call with mutex and conditions from pthreads(7)
    (bsc#1194172)
- Add patch psmisc-22.21-statx.patch
  * Use statx(2) or SYS_statx system call to replace the stat(2)
    system call and avoid the sub process at all (bsc#1194172)</changelog>
  <changelog author="werner@suse.de" date="1698062400">- Fix version at configure time as there was no .tarball-version</changelog>
</package>
<package pkgid="7ddc64d7d38eb5278472270a1e7c1503bc9da3833579c425ab19cb404f381856" name="psmisc" arch="x86_64">
  <version epoch="0" ver="23.0" rel="150000.6.25.1"/>
  <changelog author="schwab@suse.de" date="1432209600">- Replace negative list %nopeek with positive list %have_peekfd</changelog>
  <changelog author="werner@suse.de" date="1497960000">- Modify psmisc-22.21.dif to enforce the usage of `m' flag in
  sscanf() instead of `a' for allocation. Also avoid to small
  buffers and include sys/sysmacros.h for makedev macro.
- Add the patch psmisc-22.21-lessnfs.patch to support device
  files of mount points as well (boo#1044638)
- Add the patch psmisc-22.21-mntpt.patch to do strinfg comparision
  only for NFS shares</changelog>
  <changelog author="werner@suse.de" date="1497960001">- Update to version 23.0
  * killall: Fix process age race condition !11 Debian #822861
  * killall: only use scope of current namespace by default
  * killall: better parsing of command names
  * pstree: add cgroup namespaces !10
  * peekfd: Help give long options too !5
  * killall: correctly report when 32+ procs match !8
  * prtat: Remove duplicate options in man page !3 Debian #846387
  * pslog: New program to check what logs are open merge !1
  * fuser: increase path length for octal escaping SF [#37]
  * Make usage of linked lists of devices found in
    /proc/self/mountinfo optional
  * Make timeout() in timeout.c work with shared mmap to
    reduce the load due write/read the stat buffers
  * Add list_sort() to lists.h to be able to sort lists
  * fuser: Fixed typo for  -M flag. Debian #740275
  * pstree: by default doesn't show threadnames, use -t to show
    as it disables compaction. SF [#33] Debian #815902
  * pstree: Removed need for PATH_MAX Debian #750405
  * pstree: ignores disappeared processes. SF [#34]
  * killall: -o and -y work with -r flags. SF [#64]
  * m4/gettext.m4: Upgrade to gettext-0.19.4.
  * m4/iconv.m4: Upgrade to gettext-0.19.4.
  * m4/lib-ld.m4: Upgrade to gettext-0.19.4.
  * m4/lib-link.m4: Upgrade to gettext-0.19.4.
  * m4/lib-prefix.m4: Upgrade to gettext-0.19.4.
  * m4/nls.m4: Upgrade to gettext-0.19.4.
  * m4/po.m4: Upgrade to gettext-0.19.4.
  * m4/progtest.m4: Upgrade to gettext-0.19.4.
  * configure.ac (AM_GNU_GETTEXT_VERSION): Bump to 0.19.4.
- Make it build, that is create a po/POTFILES.in
- Remove obsolete patches
  * psmisc-22.21-boo908063.patch
  * psmisc-22.12-tigetstr.patch
  * psmisc-22.21-upstream.patch
  * psmisc-git-3638cc55b4d08851faba46635d737b24d016665b.patch
- Rename patch psmisc-22.21.dif which becomes psmisc-23.0.dif
- Make /bin/fuser a symblic link of /usr/bin/fuser (boo#1029973)
- Last revision was 78</changelog>
  <changelog author="werner@suse.de" date="1498651200">- Add patch psmisc-23.0-killall.patch to remove left over debug
  output in killall utility (boo#1046237)</changelog>
  <changelog author="werner@suse.de" date="1498651201">- Add patch psmisc-23.0-net.patch to reenable network support
  broken to my own upstream commit</changelog>
  <changelog author="werner@suse.de" date="1499256000">- Remove patches
  * psmisc-22.21-lessnfs.patch
  * psmisc-22.21-mntpt.patch
  * psmisc-23.0-net.patch
- Add patch
  0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  from https://gitlab.com/bitstreamout/psmisc/tree/mountinfo
  which is a heavily rework fuser used on NFS
  * Use mountinfo to be able to use the mount identity
    which allows to distinguish different mounts with the
    same device number as it happens with NFS shares.
  * Smaller cleanup as support of chroot environments
    and older systems.
  * Add support for name_to_handle_at() system call to
    get the real mount ID for each file
- Use test suite of psmisc in %check rpm section</changelog>
  <changelog author="werner@suse.de" date="1499342400">- Update patch
  0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch</changelog>
  <changelog author="werner@suse.de" date="1505736000">- Add patch psmisc-23.0-killall-signals.patch to fix boo#1058990
  by prior scanning for signal names in the arguments of killall</changelog>
  <changelog author="werner@suse.de" date="1507896000">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to run even on older kernels missing mnt_id tag in fdinfo</changelog>
  <changelog author="werner@suse.de" date="1526558400">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to let fuser -m also work for private mounts as well (boo#1093665)</changelog>
  <changelog author="werner@suse.de" date="1529668800">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to make fuser option -m &lt;block_device&gt; work even with mountinfo
  (bsc#1098697)</changelog>
  <changelog author="werner@suse.de" date="1540296000">- Support also btrFS entries in mountinfo, that is use stat(2) to
  determine the device of the mounted subvolume (bsc#1098697, bsc#1112780)
  this modifies patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch</changelog>
  <changelog author="werner@suse.de" date="1542196800">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to handle sub volumes of the btrFS (bsc#1112780)</changelog>
  <changelog author="werner@suse.de" date="1543579200">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Always initialize head of simple linked list (bsc#1098697)
  * stat(2) on binary does not see subvol dev</changelog>
  <changelog author="werner@suse.de" date="1587988800">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Allow not unique mounts as well as not unique mountpoint (bsc#1170247)</changelog>
  <changelog author="werner@suse.de" date="1614945600">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Fix bsc#1178407: fuser does not show open kvm storage image files
    such as qcow2 files. Patch from Ali Abdallah &lt;ali.abdallah@suse.com&gt;</changelog>
  <changelog author="werner@suse.de" date="1621339200">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Fix bsc#1185208 to make private mount namespaces work as well
    as to distinguish NFS mounts from same remote device share.</changelog>
  <changelog author="werner@suse.de" date="1644840000">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Determine the namespace of a process only once to speed
    up the parsing of fdinfo (bsc#1194172).</changelog>
  <changelog author="werner@suse.de" date="1646222400">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Add a fallback if the system call name_to_handle_at() is
    not supported by the used file system.
- Add patch psmisc-22.21-semaphores.patch
  * Replace the synchronizing over pipes of the sub process for the
    stat(2) system call with mutex and conditions from pthreads(7)
    (bsc#1194172)
- Add patch psmisc-22.21-statx.patch
  * Use statx(2) or SYS_statx system call to replace the stat(2)
    system call and avoid the sub process at all (bsc#1194172)</changelog>
  <changelog author="werner@suse.de" date="1698062400">- Fix version at configure time as there was no .tarball-version</changelog>
</package>
<package pkgid="ba5ac5c40f8f246de9231cbc79b3c8bec9c302f03ad421a6f2948548108e8704" name="python-chardet" arch="src">
  <version epoch="0" ver="3.0.4" rel="150000.5.3.1"/>
  <changelog author="alexandre@exatati.com.br" date="1264420800">- Initial package (2.0.1) for openSUSE.</changelog>
  <changelog author="alexandre@exatati.com.br" date="1301140800">- Regenerate spec file with py2pack;
- Bzip2 source file.</changelog>
  <changelog author="coolo@suse.com" date="1323345600">- the license seems to be LGPL-2.1+</changelog>
  <changelog author="alexandre@exatati.com.br" date="1325073600">- Standard in spec file;
- Remove CFLAGS and %clean section from spec file.</changelog>
  <changelog author="alexandre@exatati.com.br" date="1343390400">- Update to 1.1:
  - Sorry, no changelog.</changelog>
  <changelog author="alexandre@exatati.com.br" date="1349179200">- Update to 2.1.1:
  - Sorry, no changelog.</changelog>
  <changelog author="speilicke@suse.com" date="1382616000">- Require python-setuptools instead of distribute (upstreams merged)</changelog>
  <changelog author="aloisio@gmx.com" date="1423569600">- Update to version 2.3.0
  * Added support for CP932 detection (thanks to @hashy)
  * Fixed an issue where UTF-8 with a BOM would not be detected
    as UTF-8-SIG (#8)
  * Modified chardetect to use argparse for argument parsing
  * Moved docs to a gh-pages branch. You can now access them
    at http://chardet.github.io
- Changelog on https://github.com/chardet/chardet/commits/2.3.0
- Other minor changes</changelog>
  <changelog author="arun@gmx.de" date="1431345600">- specfile:
  * added update alternative to prevent conflicts with python3 version
  * add tests</changelog>
  <changelog author="rjschwei@suse.com" date="1485777600">- Include in SLE 12 (bsc#1002895, FATE#321630)</changelog>
  <changelog author="aloisio@gmx.com" date="1489924800">- Converted to single spec.</changelog>
  <changelog author="jmatejek@suse.com" date="1490097600">- do not use %py_ver, replace with %python_version</changelog>
  <changelog author="dmueller@suse.com" date="1497096000">- update to 3.0.4</changelog>
  <changelog author="ecsos@opensuse.org" date="1498737600">- fix source link</changelog>
  <changelog author="dmueller@suse.com" date="1502798400">- add update-alternative support for py2/py3 coinstallability</changelog>
  <changelog author="tbechtold@suse.com" date="1503662400">- Fix build for Leap-42.3</changelog>
  <changelog author="dmueller@suse.com" date="1505908800">- add update-alternatives post-requires</changelog>
  <changelog author="daniel.garcia@suse.com" date="1705406400">- Fix update-alternative in %postun, bsc#1218765</changelog>
</package>
<package pkgid="8615c8b43f152a6335e69d7eb7a4620a7a14cf64bf6bb40117d66fcc7839c719" name="python-cssselect" arch="src">
  <version epoch="0" ver="1.0.3" rel="150000.3.5.1"/>
  <changelog author="iacobcatalin@gmail.com" date="1357646400">- Initial package 0.7.1</changelog>
  <changelog author="saschpe@suse.de" date="1358164800">- Minimal cleanup</changelog>
  <changelog author="arun@gmx.de" date="1364472000">- updated to 0.8
  Changelog (http://pythonhosted.org/cssselect/#changelog):
    Released on 2013-03-15.
    Improvements:
    [#22] Let extended translators override what XPathExpr class is used
    [#19] Use the built-in lang() XPath function for implementing the :lang() pseudo-class with XML documents. This is probably faster than ancestor-or-self::.
    Bug fixes:
    [#14] Fix non-ASCII pseudo-classes. (Invalid selector instead of crash.)
    [#20] As per the spec, elements containing only whitespace are not considered empty for the :empty pseudo-class.</changelog>
  <changelog author="arun@gmx.de" date="1373371200">- Packaged LICENSE file
  fixes bnc#828513
  Bug 828513 - LICENSE not packaged in python3-cssselect 0.8</changelog>
  <changelog author="p.drouand@gmail.com" date="1385208000">- Update to version 0.9.1
  + **Backward incompatible change from 0.9**:
    :meth:`~GenericTranslator.selector_to_xpath` defaults to ignoring
    pseudo-elements, as it did in 0.8 and previous versions.
    (:meth:`~GenericTranslator.css_to_xpath` doesn’t change.)
  + Drop official support for Python 2.4 and 3.1,
    as testing was becoming difficult. Nothing will break overnight,
    but future releases may on may not work on these versions.
    Older releases will remain available on PyPI.
- Changes from 0.9
  + Add parser support for :attr:`functional pseudo-elements
    &lt;Selector.pseudo_element&gt;`.
  + This version accidentally introduced a backward incompatible change:
    :meth:`~GenericTranslator.selector_to_xpath` defaults to rejecting
    pseudo-elements instead of ignoring them.
- Remove useless CFLAGS definition
- Add README.rst, CHANGES and AUTHORS in package documentation</changelog>
  <changelog author="tbechtold@suse.com" date="1490788800">- update to 1.0.1:
  * Add support for Python 3.6.
  * Documentation hosted `on Read the Docs &lt;https://cssselect.readthedocs.io/&gt;`_
  * Add code coverage reports.
  * Fix ``:nth-*(an+b)`` pseudo-classes selectors.
    (except ``*:nth-child()`` which looks untranslatable to XPath 1.0.)
  * Distribute as universal wheel.
  * Add support for Python 3.3, 3.4 and 3.5.
  * Drop support for Python 2.5 as testing is getting difficult.
  * Improve tests on pseudo-elements.
- Switch to singlespec approach</changelog>
  <changelog author="arun@gmx.de" date="1515240000">- specfile:
  * update copyright year
- update to version 1.0.3:
  * Fix artifact uploads to pypi
- changes from version 1.0.2:
  * Drop support for Python 2.6 and Python 3.3.
  * Fix deprecation warning in Python 3.6.
  * Minor cleanups.</changelog>
</package>
<package pkgid="a6bcff0fe835d8dc7db56371c2ce3400ad915c48d725f630068ca3e3f3c49fb7" name="python-jmespath" arch="src">
  <version epoch="0" ver="0.9.3" rel="150000.3.5.1"/>
  <changelog author="rschweikert@suse.com" date="1390046400">- Initial build</changelog>
  <changelog author="rschweikert@suse.com" date="1414065600">- Update to version 0.4.1
  + No upstream changelog</changelog>
  <changelog author="rschweikert@suse.com" date="1421582400">- Update to version 0.5.0
  + No upstream changelog
  + Update in support for fix of bnc#905354</changelog>
  <changelog author="aboe76@gmail.com" date="1427371200">- Updated to version 0.6.1
  + No Upstream Changelog</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1430049600">- update to version 0.7.0:
  * Add support for JEP-12, raw string literals
  * Support .whl files
- additional changes from version 0.6.2:
  * Implement JEP-10, slice projections
  * Fix bug with filter projection parsing
  * Add to_array function
  * Add merge function
  * Fix error messages for function argument type errors
- point source URL to pypi</changelog>
  <changelog author="rjschwei@suse.com" date="1432728000">- Update to version 0.7.1:
  * Rename ``bin/jp`` to ``bin/jp.py``
  * Fix issue with precedence when parsing wildcard
    projections
  * Remove ordereddict and simplejson as py2.6 dependencies.
    These were never actually used in the jmespath code base,
    only in the unit tests.  Unittests requirements are handled
    via requirements26.txt.</changelog>
  <changelog author="rjschwei@suse.com" date="1453291200">- Manage the jp executable with update-alternatives now that
  python3-jmespath exists
- spec file improvements</changelog>
  <changelog author="rjschwei@suse.com" date="1453291201">- Fix build issues for SLE 11
  + More test dependencies required</changelog>
  <changelog author="toddrme2178@gmail.com" date="1454328000">- Update to version 0.9.0
  * Add support for new lines with tokens in an expression
  * Add support for JEP 9 which introduces "and" expressions, "unary"
    expressions, "not" expressions, and "paren" expressions
  * Fix issue with hardcoded path in ``jp.py`` executable
    (issue 90, issue 88, issue 82)
- Update to version 0.8.0
  * Improve lexing performance (issue 84)
  * Fix parsing error for multiselect lists (issue 86)
  * Fix issue with escaping single quotes in literal strings (issue 85)
  * Add support for providing your own dict cls to support
    ordered dictionaries (issue 94)
  * Add map() function (issue 95)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1471262400">- Fix update-alternatives implementation.</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to version 0.9.2
  + Fix regression when using ordering comparators on strings (issue 124)
- From 0.9.1
  + Raise LexerError on invalid numbers (issue 98)
  + Add support for custom functions (#100) (issue 100)
  + Fix ZeroDivisionError for built-in function avg() on empty lists (#115)
    (issue 115)
  + Properly handle non numerical ordering operators (#117) (issue 117)</changelog>
  <changelog author="tbechtold@suse.com" date="1490788800">- Only BuildRequire unittest2 for python2</changelog>
  <changelog author="jmatejek@suse.com" date="1490788801">- properly Requires(postun) for %postun section</changelog>
  <changelog author="rjschwei@suse.com" date="1510228800">- Update to 0.9.3:
  + Fix issue where long types in py2 and Decimal types were not
    being evaluated as numbers (issue 125)
  + Handle numbers in scientific notation in to_number() function (issue 120)
  + Fix issue where custom functions would override the function
    table of the builtin function class (issue 133)</changelog>
</package>
<package pkgid="34da21f73d3da063b0fa692437800c2da2331237cff6d75e4f46abd9463e8dcb" name="python-kiwi" arch="src">
  <version epoch="0" ver="9.24.43" rel="150100.3.62.1"/>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
</package>
<package pkgid="3ec196f3fecc1cc54d082045a61b25e464b884f73f774d49186a1432f25eaef9" name="python-kiwi" arch="src">
  <version epoch="0" ver="9.24.43" rel="150100.3.65.1"/>
  <changelog author="dcassany@suse.com" date="1646222400">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
</package>
<package pkgid="27b938948a4dab88cf439f795eeb593a06944936fe3c374efc69c986f12f7512" name="python-kiwi" arch="src">
  <version epoch="0" ver="9.24.43" rel="150100.3.68.1"/>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
</package>
<package pkgid="636fa49828f21383bce26be738b1d26168ac35b80cd0fb94dfd89212f8e230d8" name="python-ply" arch="src">
  <version epoch="0" ver="3.10" rel="150000.3.5.1"/>
  <changelog author="maw@suse.de" date="1176465600">- Initial import into the build service
- Rename ply.spec to python-ply.spec as that is what the resultant
  package is called.</changelog>
  <changelog author="maw@suse.de" date="1193140800">- Don't build as noarch.</changelog>
  <changelog author="maw@suse.de" date="1205755200">- Import into autobuild
- Add a -doc subpackage
- Add python-ply-shebangs.patch</changelog>
  <changelog author="maw@suse.de" date="1217246400">- Update to version 2.5:
  + Various bug fixes
  + Some performance improvements
  + For a blow-by-blow account of changes, see the file CHANGES
    in the package python-ply-doc.</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- Use new python macros</changelog>
  <changelog author="coolo@novell.com" date="1284465600">- Update to 3.3:
  + PLY-3.3 is a minor bug fix release, it supports both Python 2
    and Python 3.
- License changed to BSD</changelog>
  <changelog author="saschpe@suse.de" date="1301400000">- Update to 3.4:
  + Minor patch to make cpp.py compatible with Python 3.
  + Fixed setup.py trove classifiers to properly list PLY as Python
    3 compatible.
- License changed to BSD3c
- Packaged more doc files
- Moved important docs (README, ..) to base package
- Fixed build for non-SUSE distros</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="highwaystar.ru@gmail.com" date="1337947200">- python3 package added</changelog>
  <changelog author="toddrme2178@gmail.com" date="1337947201">- spec file cleanups</changelog>
  <changelog author="toddrme2178@gmail.com" date="1357128000">- Fix building on SLES</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1431345600">- update to version 3.6:
  * If PLY is unable to create the 'parser.out' or 'parsetab.py'
    files due to permission issues, it now just issues a warning
    message and continues to operate
  * Fixed some issues related to use of packages and table file
    modules
- additional changes from version 3.5:
  * Added support for defaulted_states in the parser
  * Fixed debug logging in the parser
  * Added actions to be defined to character literals (Issue #32)
  * Import of the 'parsetab.py' file is now constrained to only
    consider the directory specified by the outputdir argument to
    yacc()
  * Changed default output directory to be the same as that in
    which the yacc grammar is defined
  * Changed the parsetab.py file signature slightly so that the
    parsetab won't regenerate if created on a different major
    version of Python
  * Fixed Issue #44 call_errorfunc() should return the result of
    errorfunc()
  * Support for versions of Python &lt;2.7 is officially dropped
  * Fixed bug related to calling yacc(start=...)
  * Added skipped tests for PyPy and Java
  * Added filter to make unit tests pass under 'python -3'
  * Fixed CPP_INTEGER regex in ply/cpp.py (Issue 21)
  * Fixed yacc validation bugs when from __future__ import
    unicode_literals is being used
  * Added support for Travis-CI
  * Added a .gitignore file
  * Fixed validation problems for source files that include a
    different source code encoding specifier
  * Fixed unit tests for yacc to eliminate random failures due to
    dict hash value randomization in Python 3.3
  * Fixed comment whitespace processing bugs in ply/cpp.py
  * Fixed token names in ply/ctokens.py to match rule names
  * Changes to functions available in panic mode error recover
  * Fixed some problems with line and position tracking and the use
    of error symbols
  * Change to doc string handling in lex module
  * Fixed issue #1: Fixed _tabversion. It should use __tabversion__
    instead of __version__
  * Fixed issue #8: Literals empty list causes IndexError
  * Fixed issue #12: Typo in code snippet in documentation
  * Fixed issue #10: Correctly escape t_XOREQUAL pattern.
- clean the test and example directories
- remove stray backup files in doc
- remove unneeded executable bit of testlex.py
- remove CFLAGS export: unneeded
- do not drop executable bit of everything in test since
  it contains subdirectories
- remove useless clean section
- remove README from package: not provided anymore</changelog>
  <changelog author="hpj@urpla.net" date="1444219200">- update to version 3.8:
  * Fixed issues related to Python 3.5. Patch contributed by Barry Warsaw.
- update to version 3.7
  * Fixed problems when reading table files from pickled data.
  * Fixed regression in handling of table modules if specified as module
    objects.   See https://github.com/dabeaz/ply/issues/63
- clean up spec
- add testing rig</changelog>
  <changelog author="tbechtold@suse.com" date="1472817600">- update to 3.9:
  * Exposed the parser state number as the parser.state attribute
    in productions and error functions.
  * Fixed Issue #88. Python3 compatibility with ply/cpp.
  * Fixed Issue #93. Ply can crash if SyntaxError is raised inside
    a production.   Not actually sure if the original implementation
    worked as documented at all.  Yacc has been modified to follow
    the spec as outlined in the CHANGES noted for 11/27/07 below.
  * Fixed Issue #97. Failure with code validation when the original
    source files aren't present.   Validation step now ignores
    the missing file.
  * Minor fixes to version numbers.</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10
  * Changed grammar signature computation to not involve hashing
    functions. Parts are just combined into a big string.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1499688000">- Fix wrong-script-interpreter rpmlint error.</changelog>
</package>
<package pkgid="42676d7b01f01add47a4dd44e3e1b55eba11abb73784ae4117e1f65729e2ad30" name="python-psutil" arch="src">
  <version epoch="0" ver="5.9.1" rel="150300.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Add pr_1665.patch: Future-proof disk_io_counters on Linux. Fixes
  tests with Linux 5.5.</changelog>
  <changelog author="tchvatal@suse.com" date="1584187200">- Update to 5.7.0:
  * Various fixes to build with updated kernel/etc.
- Remove merged patch pr_1665.patch and pr_1364.patch
- Update patch skip-obs.patch
- Remove skip-test-missing-warnings.patch as it can be fixed by
  properly calling the tests</changelog>
  <changelog author="mcepl@suse.com" date="1598011200">- Add skip_failing_tests.patch to skip tests failing because of
  incomplete emulation of the environment in osc build
  environment (gh#giampaolo/psutil#1635).</changelog>
  <changelog author="dmueller@suse.com" date="1600257600">- update to 5.7.2:
  * parallel tests on UNIX (make test-parallel). They're twice as fast!
  * 1741: "make build/install" is now run in parallel and it's about 15% faster on UNIX.
  * 1747: Process.wait() on POSIX returns an enum, showing the negative signal which was used to terminate the process
  * 1747: Process.wait() return value is cached so that the exit code can be retrieved on then next call.
  * 1747: Process provides more info about the process on str() and repr() (status and exit code):
  * 1757: memory leak tests are now stable.
  * 1768: [Windows] added support for Windows Nano Server. (contributed by Julien Lebot)
  * 1726: [Linux] cpu_freq() parsing should use spaces instead of tabs on ia64. (patch by Michał Górny)
  * 1760: [Linux] Process.rlimit() does not handle long long type properly.
  * 1766: [macOS] NoSuchProcess may be raised instead of ZombieProcess.
  * 1781: fix signature of callback function for getloadavg(). (patch by Ammar Askar)
  - remove skip-flaky-i586.patch (obsolete)</changelog>
  <changelog author="code@bnavigator.de" date="1604404800">- Fix shebang replacement for multiple python flavors</changelog>
  <changelog author="dmueller@suse.com" date="1606824000">- update to 5.7.3:
  - 809_: [FreeBSD] add support for `Process.rlimit()`.
  - 893_: [BSD] add support for `Process.environ()` (patch by Armin Gruner)
  - 1830_: [UNIX] `net_if_stats()`'s `isup` also checks whether the NIC is
    running (meaning Wi-Fi or ethernet cable is connected).
  - 1837_: [Linux] improved battery detection and charge "secsleft" calculation
  - 1620_: [Linux] physical cpu_count() result is incorrect on systems with more
    than one CPU socket.
  - 1738_: [macOS] Process.exe() may raise FileNotFoundError if process is still
    alive but the exe file which launched it got deleted.
  - 1791_: [macOS] fix missing include for getpagesize().
  - 1823_: [Windows] Process.open_files() may cause a segfault due to a NULL
    pointer.
  - 1838_: [Linux] sensors_battery(): if `percent` can be determined but not
    the remaining values, still return a result instead of None.
- skip-obs.patch, skip_failing_tests.patch: rediff</changelog>
  <changelog author="asn@cryptomilk.org" date="1607688000">- Add missing BR for unittest2</changelog>
  <changelog author="code@bnavigator.de" date="1607688001">- Only require unittest2 for Leap.</changelog>
  <changelog author="alarrosa@suse.com" date="1611576000">- update to 5.8.0:
  * Enhancements:
  - 1863: disk_partitions() exposes 2 extra fields: maxfile and
    maxpath, which are the maximum file name and path name
    length.
  - 1872: [Windows] added support for PyPy 2.7.
  - 1879: provide pre-compiled wheels for Linux and macOS.
  - 1880: get rid of Travis and Cirrus CI services (they are no
    longer free). CI testing is now done by GitHub Actions on
    Linux, macOS and FreeBSD (yes). AppVeyor is still being used
    for Windows CI.
  * Bug fixes:
  - 1708: [Linux] get rid of sensors_temperatures() duplicates.
    (patch by Tim Schlueter).
  - 1839: [Windows] always raise AccessDenied when failing to
    query 64 processes from 32 bit ones (NtWoW64 APIs).
  - 1866: [Windows] process exe(), cmdline(), environ() may raise
    "invalid access to memory location" on Python 3.9.
  - 1874: [Solaris] wrong swap output given when encrypted column
    is present.
  - 1875: [Windows] process username() may raise
    ERROR_NONE_MAPPED if the SID has no corresponding account
    name. In this case AccessDenied is now raised.
  - 1877: [Windows] OpenProcess may fail with ERROR_SUCCESS.
    Turn it into AccessDenied or NoSuchProcess depending on
    whether the PID is alive.
  - 1886: [macOS] EIO error may be raised on cmdline() and
    environment(). Now it gets translated into AccessDenied.
  - 1891: [macOS] get rid of deprecated getpagesize().
- Rebase patch and skip three other tests that fail on obs
  * skip-obs.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1611835200">- Add patch to skip tests related to rlimit and zombie processes
  that fail when building for python2 on i586:
  * skip_rlimit_tests_on_python2.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1611921600">- Do not install tests (and change the way they're run since they
  were run from %{buildroot})</changelog>
  <changelog author="idesmi@protonmail.com" date="1620820800">- remove the dependency on net-tools, since it conflicts with
  busybox-hostnmame which is default on MicroOS. boo#1184753</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637841600">- Update skip-obs.patch to also skip TestProcess.test_ionice_linux</changelog>
  <changelog author="dmueller@suse.com" date="1641816000">- update to 5.9.0:
  * [Linux]: `cpu_freq()`_ is slow on systems with many CPUs. Read current
    frequency values for all CPUs from ``/proc/cpuinfo`` instead of opening many
    files in ``/sys`` fs.  (patch by marxin)
  * `NoSuchProcess`_ message now specifies if the PID has been reused.
  * error classes (`NoSuchProcess`_, `AccessDenied`_, etc.) now have a better
    formatted and separated ``__repr__`` and ``__str__`` implementations.
  * [Linux]: `disk_partitions()`_: convert ``/dev/root`` device (an alias
    used on some Linux distros) to real root device path.
  * ``PSUTIL_DEBUG`` mode now prints file name and line number of the debug
    messages coming from C extension modules.
  * rewrite HISTORY.rst to use hyperlinks pointing to psutil API doc.
  * [Linux]: `wait_procs()`_ should catch ``subprocess.TimeoutExpired``
  exception.
  * [Linux]: `sensors_battery()`_ can raise ``TypeError`` on PureOS.
  * [Linux]: psutil does not handle ``ENAMETOOLONG`` when accessing process
  file descriptors in procfs.  (patch by Nikita Radchenko)
  * **[critical]**: ``memoize_when_activated`` decorator is not thread-safe.
  * **[critical]**: `process_iter()`_ is not thread safe and can raise
  ``TypeError`` if invoked from multiple threads.
  * [Linux]: `cpu_freq()`_ return order is wrong on systems with more than
  9 CPUs.</changelog>
  <changelog author="mcepl@suse.com" date="1643544000">- Add skip-partitions-erros.patch skipping tests failing on Linux
  (gh#giampaolo/psutil#2043).</changelog>
  <changelog author="mcepl@suse.com" date="1643803200">- Fix name of Patch4, it is skip-partitions-erros.patch</changelog>
  <changelog author="michael@stroeder.com" date="1653393600">- removed obsolete skip-partitions-erros.patch
- update to 5.9.1
  * Enhancements
  - 1053: drop Python 2.6 support. (patches by Matthieu Darbois and Hugo van Kemenade)
  - 2050, [Linux]: increase read(2) buffer size from 1k to 32k when reading /proc
    pseudo files line by line. This should help having more consistent results.
  - 2057, [OpenBSD]: add support for cpu_freq().
  - 2107, [Linux]: Process.memory_full_info() (reporting process USS/PSS/Swap memory)
    now reads /proc/pid/smaps_rollup instead of /proc/pids/smaps, which makes it 5 times faster.
  * Bug fixes
  - 2048: AttributeError is raised if psutil.Error class is raised manually and passed through str.
  - 2049, [Linux]: cpu_freq() erroneously returns curr value in GHz while min and max are in MHz.
  - 2050, [Linux]: virtual_memory() may raise ValueError if running in a LCX container.</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Add patch mem-used-bsc1181475.patch (bsc#1181475)
  * Adopt change of used memory calculation from upstream of procps</changelog>
  <changelog author="code@bnavigator.de" date="1657886400">- Fix tests: setuptools changed the builddir library path and does
  not find the module from it. Use the installed platlib instead
  and exclude psutil.tests only later.
- Refresh skip-obs.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1669032000">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)</changelog>
</package>
<package pkgid="29967b4694c6e33845d7e729c440cc59d74176bc30439138d653aeb3694ee364" name="python-requests" arch="src">
  <version epoch="0" ver="2.25.1" rel="150300.3.6.1"/>
  <changelog author="mcepl@suse.com" date="1546257600">- Move name ahead of version in spec file to resolve build issues
  on older distributions
- fdupe more thoroughly.</changelog>
  <changelog author="jbrownell@suse.com" date="1547035200">- Support older Red Hat platforms that don't offer "Recommends:"</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1549368000">- update to version 2.21.0:
  * Requests now supports idna v2.8.</changelog>
  <changelog author="tchvatal@suse.com" date="1550232000">- Do not depend on python-py
- Update few of the requirements</changelog>
  <changelog author="tchvatal@suse.com" date="1551096000">- Skip one more test that is flaky</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Do not hardcode version requirements in setup.py allowing us to
  update and verify functionality on our own:
  * requests-no-hardcoded-version.patch</changelog>
  <changelog author="bstephenson@suse.com" date="1558008000">- Update to version 2.20.1 (bsc#1111622)
  * Fixed bug with unintended Authorization header stripping for
    redirects using default ports (http/80, https/443).</changelog>
  <changelog author="tchvatal@suse.com" date="1558785600">- Update to 2.22.0:
  * Requests now supports urllib3 v1.25.2. (note: 1.25.0 and 1.25.1 are incompatible)
- Rebase requests-no-hardcoded-version.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1563796800">- Hardcode pytest 3.x series as upstream even in git does not work
  with newer versions (they pinned the release)</changelog>
  <changelog author="jayvdb@gmail.com" date="1572609600">- Add two patches only updating test logic to remove pytest 3 pin
  - merged_pr_5049.patch
  - pr_5251-pytest5.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576324800">- Remove python-urllib3, python-certifi and ca-certificates from
  main package BuildRequires, not required for building.
- Do not require full python, (implicit) python-base is sufficient.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582545600">- update to 2.23.0
- dropped merged_pr_5049.patch
- refreshed requests-no-hardcoded-version.patch
  * Remove defunct reference to prefetch in Session __attrs__
  * Requests no longer outputs password in basic auth usage warning</changelog>
  <changelog author="mcepl@suse.com" date="1587988800">- Switch off test_https_warnings test (bsc#1170175)</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1595505600">- remove patch pr_5251-pytest5.patch, not needed anymore.
- update to version 2.24.0:
  - pyOpenSSL TLS implementation is now only used if Python
  either doesn't have an `ssl` module or doesn't support
  SNI. Previously pyOpenSSL was unconditionally used if available.
  This applies even if pyOpenSSL is installed via the
  `requests[security]` extra (#5443)
  - Redirect resolution should now only occur when
  `allow_redirects` is True. (#5492)
  - No longer perform unnecessary Content-Length calculation for
  requests that won't use it. (#5496)</changelog>
  <changelog author="dmueller@suse.com" date="1606392000">- update to 2.25.0:
  * Added support for NETRC environment variable. (#5643)
  * Requests now supports urllib3 v1.26.
  * Requests v2.25.x will be the last release series with support for Python 3.5.
- refreshed requests-no-hardcoded-version.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1607947200">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
  <changelog author="dmueller@suse.com" date="1608379200">- update to 2.25.1:
  - Requests now treats `application/json` as `utf8` by default. Resolving
  inconsistencies between `r.text` and `r.json` output. (#5673)</changelog>
  <changelog author="code@bnavigator.de" date="1612353600">- Don't pin idna&lt;3 in the egg-info so that depending packages
  can install the new idna dropping python2</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1658404800">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1686657600">- Add CVE-2023-32681.patch to fix unintended leak of
  Proxy-Authorization header (CVE-2023-32681, bsc#1211674)
  Upstream commit: gh#psf/requests@74ea7cf7a6a2</changelog>
</package>
<package pkgid="64e40f4a9374f5a5d998b1ab2ba67e970f2a132a030cecda0f343563f4cedc39" name="python-rpm" arch="src">
  <version epoch="0" ver="4.14.3" rel="150400.59.7.1"/>
  <changelog author="ro@suse.de" date="1234440000">- adapt buildrequires</changelog>
  <changelog author="dmueller@suse.de" date="1287403200">- adapt buildrequires</changelog>
  <changelog author="coolo@novell.com" date="1287748800">- adapt second spec file to changes done to rpm.spec</changelog>
  <changelog author="mls@suse.de" date="1298462400">- drop standard python directories from filelist [bnc#229189]</changelog>
  <changelog author="coolo@suse.com" date="1323604800">- add libtool as explicit buildrequire</changelog>
  <changelog author="saschpe@suse.de" date="1326801600">- Spec file cleanup:
  * Don't rm -rf %{buildroot}
  * Removed %clean section
  * Removed authors from description</changelog>
  <changelog author="klaussfreire@gmail.com" date="1334145600">- Fix usage of deprecated AsVoidPtr Python/C API,
  replaced by Capsule API</changelog>
  <changelog author="mls@suse.de" date="1335182400">- modified capsule api diff to match rpm upstream</changelog>
  <changelog author="dmueller@suse.com" date="1357128000">- Update to 4.10.2</changelog>
  <changelog author="mls@suse.de" date="1373630400">- update to rpm-4.11.1</changelog>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="f36b59375e5cb94b56d5b5548f58d6f0d9c81d4ddd06474c5f1609ba84c21051" name="python-simplejson" arch="src">
  <version epoch="0" ver="3.17.2" rel="150300.3.4.1"/>
  <changelog author="benny.gaechter@gmail.com" date="1368014400">- Update to version 3.3.0
  * Unpaired surrogates once again pass through the decoder, to match older
    behavior and the RFC-4627 spec.
    https://github.com/simplejson/simplejson/issues/62</changelog>
  <changelog author="dmueller@suse.com" date="1382356800">- update to 3.3.1:
  * JSONDecodeError exceptions can now be pickled</changelog>
  <changelog author="speilicke@suse.com" date="1382616000">- Require python-setuptools instead of distribute (upstreams merged)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1400587200">- Update to 3.4.1
  * Fixed tests to run on Python 3.4
- Update to 3.4.0
  * Native setuptools support re-introduced
    https://github.com/simplejson/simplejson/pull/92
- Update to 3.3.3
  * Improve test suite's Python 3.4 compatibility
    https://github.com/simplejson/simplejson/issues/87
- Update to 3.3.2
  * Docstring fix for decoded string types
    https://github.com/simplejson/simplejson/pull/82</changelog>
  <changelog author="dmueller@suse.com" date="1401537600">- update to 3.5.2:
  * Fix Windows build with VS2008
  Version 3.5.1 released 2014-05-21
  * Consistently reject int_as_string_bitcount settings that are not
    positive integers
  Version 3.5.0 released 2014-05-20
  * Added int_as_string_bitcount encoder option
  * Fixed potential crash when encoder created with incorrect options</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1431432000">- update to version 3.6.5:
  * Importing bug fix for reference leak when an error occurs
    during dict encoding
    https://github.com/simplejson/simplejson/issues/109
- additional changes from version 3.6.4:
  * Important bug fix for dump when only sort_keys is set
    https://github.com/simplejson/simplejson/issues/106
- additional changes from version 3.6.3:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/103
- additional changes from version 3.6.2:
  * Documentation updates
    http://bugs.python.org/issue21514
- additional changes from version 3.6.1:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/102
- additional changes from version 3.6.0:
  * Automatically strip any UTF-8 BOM from input to more closely
    follow the latest specs
    https://github.com/simplejson/simplejson/pull/101
- additional changes from version 3.5.3:
  * Fix lower bound checking in scan_once / raw_decode API
    https://github.com/simplejson/simplejson/issues/98</changelog>
  <changelog author="dmueller@suse.com" date="1479470400">- update to 3.8.2:
  * Fix implicit cast compiler warning in _speedups.c
  * simplejson is now available as wheels for OS X and Windows thanks to Travis-CI
  and AppVeyor respectively! Many thanks to @aebrahim for getting this party
  started.
  * Fix issue with iterable_as_array and indent option
  * Fix typo in keyword argument name introduced in 3.8.0
  * New iterable_as_array encoder option to perform lazy serialization of
  any iterable objects, without having to convert to tuple or list.
  * Fix typo introduced in 3.7.0 (behavior should be indistinguishable)
  https://github.com/simplejson/simplejson/commit/e18cc09b688ea1f3305c27616fd3cadd2adc6d31#commitcomment-11443842
  * Do not cache Decimal class in encoder, only reference the decimal module.
  This may make reload work in more common scenarios.
  * Fix compilation with MSVC
  https://github.com/simplejson/simplejson/pull/119
  * simplejson no longer trusts custom str/repr methods for int, long, float
  subclasses. These instances are now formatted as if they were exact
  instances of those types.
  https://github.com/simplejson/simplejson/issues/118</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10.0
  * Add RawJSON class to allow a faster path for already encoded JSON.
- From 3.9.0
  * Workaround for bad behavior in string subclasses
  * Fix warnings flagged by -3
  * Update readthedocs documentation links
  * Add build status badge to README</changelog>
  <changelog author="jmatejek@suse.com" date="1490097600">- fix pypi url</changelog>
  <changelog author="tbechtold@suse.com" date="1502193600">- update to 3.11.1:
  * Fix issue with item_sort_key when speedups are available, and add
    auto-discovery to test suites to prevent similar regressions
  * docstring fix in JSONEncoder
  * Call PyObject_IsTrue() only once for the strict argument of scann  er
  * Fix a crash with unencodable encoding in the encoder
  * Remove unused imports
  * Remove remnants of Python 2.4 support
  * Fix argument checking errors in _speedups.c
  * Remove the `__init__` methods in extension classes
  * Fix typo in the doc for loads
  * Add Python 3.6 to testing matrix and PyPI metadata</changelog>
  <changelog author="arun@gmx.de" date="1509969600">- update to version 3.12.0:
  * Fix threaded import race condition
    https://github.com/simplejson/simplejson/issues/184
  * Move RawJSON implementation to simplejson.raw_json module
  * Move JSONDecodeError implementation to simplejson.errors module</changelog>
  <changelog author="arun@gmx.de" date="1511697600">- update to version 3.13.2:
  * Fix additional Python 2.x compilation issue on Windows
- changes from version 3.13.1 :
  * Improve CI to catch speedups build regressions
  * Fix speedups build regression in Python 2.x
    https://github.com/simplejson/simplejson/issues/193
- changes from version 3.13.0:
  * Workarounds for NamedTemporaryFile issues with Windows for tool
    tests
  * Make TypeError messages contain type name instead of a repr.
    https://github.com/simplejson/simplejson/pull/191
  * Ensure that encoding of text subtypes is consistent with or
    without speedups
    https://github.com/simplejson/simplejson/issues/185
- changes from version 3.12.1:
  * Misc updates to build infrastructure
  * Fix an assertion failure when make_encoder receives a bad encoder
    argument https://github.com/simplejson/simplejson/pull/188
  * Fix potential crash during GC
    https://github.com/simplejson/simplejson/pull/187
  * Fix a reference leak when sorting keys
    https://github.com/simplejson/simplejson/pull/186</changelog>
  <changelog author="jengelh@inai.de" date="1511784000">- Remove bias from description.</changelog>
  <changelog author="arun@gmx.de" date="1525608000">- specfile:
  * update copyright year
- update to version 3.14.0:
  * Defer is_raw_json test (performance improvement)
    https://github.com/simplejson/simplejson/pull/212
  * Avoid escaping U+2028 and U+2029 without ensure_ascii
    https://github.com/simplejson/simplejson/pull/211
  * Fix an incorrect type test in Python 2, avoiding an unnecessary
    unicode copy.  https://github.com/simplejson/simplejson/pull/210</changelog>
  <changelog author="arun@gmx.de" date="1526904000">- update to version 3.15.0:
  * Clean up the C code
  * Bypass the decode() method in bytes subclasses
  * Support builds without cStringIO
  * Allow to disable serializing bytes by default in Python 3
  * Simplify the compatibility code
  * Fix tests in Python 2.5</changelog>
  <changelog author="arun@gmx.de" date="1530532800">- specfile:
  * be more specific in %files:
    %{python_sitearch}/* -&gt; %{python_sitearch}/simplejson*
- update to version 3.16.0:
  * Restore old behavior with regard to the type of decoded empty
    strings with speedups enabled on Python 2.x
    https://github.com/simplejson/simplejson/pull/225
  * Add python_requires to setup.py to help pip
    https://github.com/simplejson/simplejson/pull/224
  * Fix CSS in docs when built locally
    https://github.com/simplejson/simplejson/pull/222</changelog>
  <changelog author="tchvatal@suse.com" date="1530532801">- Do not package tests</changelog>
  <changelog author="arun@gmx.de" date="1536408000">- update to version 3.16.1:
  * Added examples for JSON lines use cases
  * Add wheels for more Python versions and platforms</changelog>
  <changelog author="arun@gmx.de" date="1574596800">- specfile:
  * update copyright year
- update to version 3.17.0:
  * Updated documentation to be Python 3 first, and
    have removed documentation notes about version changes
    that occurred more than five years ago.
    https://github.com/simplejson/simplejson/pull/257
    https://github.com/simplejson/simplejson/pull/254
  * Update build matrix for Python 3.8
    https://github.com/simplejson/simplejson/pull/255
    https://github.com/simplejson/simplejson/pull/256</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596024000">- update to 3.17.2
- use pytest as testrunner</changelog>
</package>
<package pkgid="882401f0d532f0d6a3ceee3d563820d4c42b8385903228426ddfa9232946e2be" name="python-urllib3" arch="src">
  <version epoch="0" ver="1.25.10" rel="150300.4.6.1"/>
  <changelog author="tchvatal@suse.com" date="1559131200">- Add more test to skip as with new openssl some behaviour changed
  and we can't rely on them anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1559908800">- Skip test_source_address_error as we raise different error with
  fixes that we provide in new python2/3</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1560945600">- Fix Upgrade from Leap 42.1/42.2 by adding Obsoletes/Provides:
  python-urllib3, fixes boo#1138746</changelog>
  <changelog author="dimstar@opensuse.org" date="1561032000">- Provides/Obsoletes does not fix the issue: we have a
  directory-to-symlink switch, which cannot be handled by RPM
  internally. Assist using pre script (boo#1138715).</changelog>
  <changelog author="dimstar@opensuse.org" date="1561118400">- Fixup pre script: the migration issue happens when changing from
  python-urllib3 to python2-urllib3: the number of installed
  instances of python2-urlliib3 is at this moment 1, unlike in
  regular updates. This is due to a name change, which consists not
  of a pure package update.</changelog>
  <changelog author="tchvatal@suse.com" date="1563796800">- Use old pytest 3.x as newer do not work with this release
  * this will be fixed with next release, just spread among
    numerous fixes in the git for quick backporting</changelog>
  <changelog author="jayvdb@gmail.com" date="1568462400">- Use have/skip_python2/3 macros to allow building only one flavour</changelog>
  <changelog author="tchvatal@suse.com" date="1568980800">- Update to 1.25.5:
  * Add mitigation for BPO-37428 affecting Python &lt;3.7.4 and OpenSSL 1.1.1+ which caused certificate verification to be enabled when using cert_reqs=CERT_NONE. (Issue #1682)
  * Propagate Retry-After header settings to subsequent retries. (Pull #1607)
  * Fix edge case where Retry-After header was still respected even when explicitly opted out of. (Pull #1607)
  * Remove dependency on rfc3986 for URL parsing.
  * Fix issue where URLs containing invalid characters within Url.auth would raise an exception instead of percent-encoding those characters.
  * Add support for HTTPResponse.auto_close = False which makes HTTP responses work well with BufferedReaders and other io module features. (Pull #1652)
  * Percent-encode invalid characters in URL for HTTPConnectionPool.request() (Pull #1673)
- Drop patch urllib3-ssl-default-context.patch
- Drop patch python-urllib3-recent-date.patch the date is recent
  enough on its own</changelog>
  <changelog author="tchvatal@suse.com" date="1569585600">- Restrict the tornado dep from tom to 5 or older release as the
  6.x changed the API</changelog>
  <changelog author="tchvatal@suse.com" date="1570017600">- Updae to 1.25.6:
  * Fix issue where tilde (~) characters were incorrectly percent-encoded in the path. (Pull #1692)</changelog>
  <changelog author="rhafer@suse.de" date="1571140800">- Require a new enough release of python-six. 1.25.6 needs at least
  1.12.0 for ensure_text() and friends.</changelog>
  <changelog author="mcalabkova@suse.com" date="1581076800">- update to 1.25.8
  * Drop support for EOL Python 3.4
  * Optimize _encode_invalid_chars
  * Preserve chunked parameter on retries
  * Allow unset SERVER_SOFTWARE in App Engine
  * Fix issue where URL fragment was sent within the request target.
  * Fix issue where an empty query section in a URL would fail to parse.
  * Remove TLS 1.3 support in SecureTransport due to Apple removing support.</changelog>
  <changelog author="mcepl@suse.com" date="1587470400">- Explicitly switch off building python 2 version.</changelog>
  <changelog author="dmueller@suse.com" date="1591099200">- update to 1.25.9 (bsc#1177120, CVE-2020-26137):
  * Added ``InvalidProxyConfigurationWarning`` which is raised when
    erroneously specifying an HTTPS proxy URL. urllib3 doesn't currently
    support connecting to HTTPS proxies but will soon be able to
    and we would like users to migrate properly without much breakage.
  * Drain connection after ``PoolManager`` redirect (Pull #1817)
  * Ensure ``load_verify_locations`` raises ``SSLError`` for all backends (Pull #1812)
  * Rename ``VerifiedHTTPSConnection`` to ``HTTPSConnection`` (Pull #1805)
  * Allow the CA certificate data to be passed as a string (Pull #1804)
  * Raise ``ValueError`` if method contains control characters (Pull #1800)
  * Add ``__repr__`` to ``Timeout`` (Pull #1795)</changelog>
  <changelog author="dmueller@suse.com" date="1596542400">- update to 1.25.10:
  * Added support for ``SSLKEYLOGFILE`` environment variable for
    logging TLS session keys with use with programs like
    Wireshark for decrypting captured web traffic (Pull #1867)
  * Fixed loading of SecureTransport libraries on macOS Big Sur
    due to the new dynamic linker cache (Pull #1905)
  * Collapse chunked request bodies data and framing into one
  call to ``send()`` to reduce the number of TCP packets by 2-4x (Pull #1906)
  * Don't insert ``None`` into ``ConnectionPool`` if the pool
    was empty when requesting a connection (Pull #1866)
  * Avoid ``hasattr`` call in ``BrotliDecoder.decompress()`` (Pull #1858)</changelog>
  <changelog author="aplanas@suse.com" date="1599652800">- Generate pyc for ssl_match_hostname too</changelog>
  <changelog author="mcepl@suse.com" date="1608206400">- Add CI variable, which makes timeouts in the test suite longer
  (gh#urllib3/urllib3#2109, bsc#1176389) and
  test_timeout_errors_cause_retries should not fail.</changelog>
  <changelog author="code@bnavigator.de" date="1609502400">- Skip test for RECENT_DATE. It is a test purely for developers.
  To maintain reproducibility, keep upstreams possibly outdated
  RECENT_DATE in the source code.</changelog>
  <changelog author="johannes.grassler@suse.com" date="1623412800">- Add CVE-2021-33503.patch (bsc#1187045, CVE-2021-33503)
  * Improve performance of sub-authority splitting in URL</changelog>
  <changelog author="daniel.garcia@suse.com" date="1696852800">- Add CVE-2023-43804.patch (bsc#1215968, CVE-2023-43804)
  gh#urllib3/urllib3#3139
  * Added the Cookie header to the list of headers to strip from
    requests when redirecting to a different host. As before,
    different headers can be set via Retry.remove_headers_on_redirect.</changelog>
</package>
<package pkgid="7c3dfd62f4b79457933aeea8c579bb32899439bfbc9483ecdd712d942d107ce3" name="python-urllib3" arch="src">
  <version epoch="0" ver="1.25.10" rel="150300.4.9.1"/>
  <changelog author="tchvatal@suse.com" date="1559908800">- Skip test_source_address_error as we raise different error with
  fixes that we provide in new python2/3</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1560945600">- Fix Upgrade from Leap 42.1/42.2 by adding Obsoletes/Provides:
  python-urllib3, fixes boo#1138746</changelog>
  <changelog author="dimstar@opensuse.org" date="1561032000">- Provides/Obsoletes does not fix the issue: we have a
  directory-to-symlink switch, which cannot be handled by RPM
  internally. Assist using pre script (boo#1138715).</changelog>
  <changelog author="dimstar@opensuse.org" date="1561118400">- Fixup pre script: the migration issue happens when changing from
  python-urllib3 to python2-urllib3: the number of installed
  instances of python2-urlliib3 is at this moment 1, unlike in
  regular updates. This is due to a name change, which consists not
  of a pure package update.</changelog>
  <changelog author="tchvatal@suse.com" date="1563796800">- Use old pytest 3.x as newer do not work with this release
  * this will be fixed with next release, just spread among
    numerous fixes in the git for quick backporting</changelog>
  <changelog author="jayvdb@gmail.com" date="1568462400">- Use have/skip_python2/3 macros to allow building only one flavour</changelog>
  <changelog author="tchvatal@suse.com" date="1568980800">- Update to 1.25.5:
  * Add mitigation for BPO-37428 affecting Python &lt;3.7.4 and OpenSSL 1.1.1+ which caused certificate verification to be enabled when using cert_reqs=CERT_NONE. (Issue #1682)
  * Propagate Retry-After header settings to subsequent retries. (Pull #1607)
  * Fix edge case where Retry-After header was still respected even when explicitly opted out of. (Pull #1607)
  * Remove dependency on rfc3986 for URL parsing.
  * Fix issue where URLs containing invalid characters within Url.auth would raise an exception instead of percent-encoding those characters.
  * Add support for HTTPResponse.auto_close = False which makes HTTP responses work well with BufferedReaders and other io module features. (Pull #1652)
  * Percent-encode invalid characters in URL for HTTPConnectionPool.request() (Pull #1673)
- Drop patch urllib3-ssl-default-context.patch
- Drop patch python-urllib3-recent-date.patch the date is recent
  enough on its own</changelog>
  <changelog author="tchvatal@suse.com" date="1569585600">- Restrict the tornado dep from tom to 5 or older release as the
  6.x changed the API</changelog>
  <changelog author="tchvatal@suse.com" date="1570017600">- Updae to 1.25.6:
  * Fix issue where tilde (~) characters were incorrectly percent-encoded in the path. (Pull #1692)</changelog>
  <changelog author="rhafer@suse.de" date="1571140800">- Require a new enough release of python-six. 1.25.6 needs at least
  1.12.0 for ensure_text() and friends.</changelog>
  <changelog author="mcalabkova@suse.com" date="1581076800">- update to 1.25.8
  * Drop support for EOL Python 3.4
  * Optimize _encode_invalid_chars
  * Preserve chunked parameter on retries
  * Allow unset SERVER_SOFTWARE in App Engine
  * Fix issue where URL fragment was sent within the request target.
  * Fix issue where an empty query section in a URL would fail to parse.
  * Remove TLS 1.3 support in SecureTransport due to Apple removing support.</changelog>
  <changelog author="mcepl@suse.com" date="1587470400">- Explicitly switch off building python 2 version.</changelog>
  <changelog author="dmueller@suse.com" date="1591099200">- update to 1.25.9 (bsc#1177120, CVE-2020-26137):
  * Added ``InvalidProxyConfigurationWarning`` which is raised when
    erroneously specifying an HTTPS proxy URL. urllib3 doesn't currently
    support connecting to HTTPS proxies but will soon be able to
    and we would like users to migrate properly without much breakage.
  * Drain connection after ``PoolManager`` redirect (Pull #1817)
  * Ensure ``load_verify_locations`` raises ``SSLError`` for all backends (Pull #1812)
  * Rename ``VerifiedHTTPSConnection`` to ``HTTPSConnection`` (Pull #1805)
  * Allow the CA certificate data to be passed as a string (Pull #1804)
  * Raise ``ValueError`` if method contains control characters (Pull #1800)
  * Add ``__repr__`` to ``Timeout`` (Pull #1795)</changelog>
  <changelog author="dmueller@suse.com" date="1596542400">- update to 1.25.10:
  * Added support for ``SSLKEYLOGFILE`` environment variable for
    logging TLS session keys with use with programs like
    Wireshark for decrypting captured web traffic (Pull #1867)
  * Fixed loading of SecureTransport libraries on macOS Big Sur
    due to the new dynamic linker cache (Pull #1905)
  * Collapse chunked request bodies data and framing into one
  call to ``send()`` to reduce the number of TCP packets by 2-4x (Pull #1906)
  * Don't insert ``None`` into ``ConnectionPool`` if the pool
    was empty when requesting a connection (Pull #1866)
  * Avoid ``hasattr`` call in ``BrotliDecoder.decompress()`` (Pull #1858)</changelog>
  <changelog author="aplanas@suse.com" date="1599652800">- Generate pyc for ssl_match_hostname too</changelog>
  <changelog author="mcepl@suse.com" date="1608206400">- Add CI variable, which makes timeouts in the test suite longer
  (gh#urllib3/urllib3#2109, bsc#1176389) and
  test_timeout_errors_cause_retries should not fail.</changelog>
  <changelog author="code@bnavigator.de" date="1609502400">- Skip test for RECENT_DATE. It is a test purely for developers.
  To maintain reproducibility, keep upstreams possibly outdated
  RECENT_DATE in the source code.</changelog>
  <changelog author="johannes.grassler@suse.com" date="1623412800">- Add CVE-2021-33503.patch (bsc#1187045, CVE-2021-33503)
  * Improve performance of sub-authority splitting in URL</changelog>
  <changelog author="daniel.garcia@suse.com" date="1696852800">- Add CVE-2023-43804.patch (bsc#1215968, CVE-2023-43804)
  gh#urllib3/urllib3#3139
  * Added the Cookie header to the list of headers to strip from
    requests when redirecting to a different host. As before,
    different headers can be set via Retry.remove_headers_on_redirect.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1698235200">- Add CVE-2023-45803.patch (bsc#1216377, CVE-2023-45803)
  gh#urllib3/urllib3@4e98d57809da</changelog>
</package>
<package pkgid="1b45d0a2452d94cef9988e2731258d04b8deee2d00576e3c5c8ebd9f24640a21" name="python3" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.51.1"/>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
</package>
<package pkgid="eb60d20012544afa451688d95122c4098dbd2e1663f4e4a02aca5c3721315eeb" name="python3" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.51.1"/>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
</package>
<package pkgid="2689c2d8d0cb475d07666f9e19132b6f71deac378afcc5a56d99e9618860b177" name="python3" arch="src">
  <version epoch="0" ver="3.6.15" rel="150300.10.51.1"/>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
</package>
<package pkgid="b5450f23f7948307558bd46c936a063e4b89fd79b1d2d5115dc197aec133d286" name="python3" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.51.1"/>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
</package>
<package pkgid="16b7766f0341cd5f25bb86618ca361be7bf88fb5aff20e9bc555fb36e6614e4f" name="python3" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.54.1"/>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
</package>
<package pkgid="f75cbbaa6e5f18dd9a2032fe9c9e5ed6bde5eac116868de0f3eccbfe5b98ace2" name="python3" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.54.1"/>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
</package>
<package pkgid="688abb4b4ade249dc8c5503d4d084db2ed4d62c2989ca7789d294550d601bb3c" name="python3" arch="src">
  <version epoch="0" ver="3.6.15" rel="150300.10.54.1"/>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
</package>
<package pkgid="fba48a211368c614b7021cecc667fc1628b7b977f20d2fe668f4e3fb98fbfd02" name="python3" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.54.1"/>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
</package>
<package pkgid="9a2ee31be2f2c39dadd865b9d96b927a66dbde53e615968985a34bc11e1e9170" name="python3-M2Crypto" arch="aarch64">
  <version epoch="0" ver="0.38.0" rel="150400.10.1"/>
  <changelog author="mcepl@suse.com" date="1559908800">- Add fix_OpenSSL111c.patch patch to ensure compatibility with
  OpenSSL 1.1.1c. gl#m2crypto/m2crypto#258 and jsc#SLE-9135.</changelog>
  <changelog author="mcepl@suse.com" date="1559995200">- Replace fix_OpenSSL111c.patch with proper new release 0.35.1
  (there is really not much more in it; bsc#1149792).</changelog>
  <changelog author="mcepl@suse.com" date="1560168000">- Update to fix release 0.35.2 ... just fixing the test suite
  (bsc#1172226).</changelog>
  <changelog author="marco.strigl@suse.com" date="1583755200">- in python3.8 the fp is wrapped in a Buffer. SSL.Connection.makefile
  returns a socketIO which is no buffer.
  Added: 001-fix-buffering-for-python38.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1586347200">- Do not pull in py2 pkg on doc subpkg</changelog>
  <changelog author="mcepl@suse.com" date="1594641600">Update to 0.36.0:
  - wrap SocketIO in io.Buffered* for makefile &lt;lethliel&gt;
  - SSL.Connection.close accepts an argument to force the socket closing
    &lt;Christophe Haen&gt;
  - SSL.Connection: make the clientPostConnectionCheck an instance
    attribute &lt;Christophe Haen&gt;
  - Fixed bug with usage of unexisting method getreply at SSL_Transport
    &lt;roman-nagaev&gt;
  - Add appveyor builds for python 3.7 and 3.8 &lt;Daniel A. Wozniak&gt;
  - Fixed syntax warning on line 44. &lt;randomfox&gt;
  - Update M2Crypto.six to 1.13.0 &lt;Matěj Cepl&gt;
  - base64.decodestring() was finally removed in Python 3.8. &lt;Matěj Cepl&gt;
  - wrap SocketIO in io.Buffered* for makefile &lt;lethliel&gt;
  - NULL is legal argument for key and iv paramters of EVP_CipherInit(3)
    &lt;Matěj Cepl&gt;
  - Expose X509_V_FLAG_ALLOW_PROXY_CERTS verification flag and
    X509_STORE_SET_FLAGS function &lt;Christophe Haen&gt;
  - Stop testing for 2.6 and 3.4 on Travis. Start testing 3.8 &lt;Matěj Cepl&gt;
  - Extend test cert validity to 2049 &lt;Bernhard M. Wiedemann&gt;
  - Revert using typing module in 2.6. It is just not worthy. &lt;Matěj Cepl&gt;
  - Update Debian/stable SSL as well &lt;Matěj Cepl&gt;
  - Make tests pass again. &lt;Matěj Cepl&gt;
  - Stop using string module, which has been deprecated. &lt;Matěj Cepl&gt;
  - Tiny fixes to make pyls more happy &lt;Matěj Cepl&gt;
  - CI: Rework Fedora CI configuration &lt;Neal Gompa&gt;
- Remove upstream merged patch 001-fix-buffering-for-python38.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1607428800">- Update to 0.37.1:
  - Remove support for CentOS 6 and Python 2.6 (remove
    tests.vendor module). Python 2.7 is still fully supported.
  - Remodel CI:
  - on GitHub switched from Travis-CI to GH Actions
  - on GitLab-CI: stop testing 2.7 on Fedora, add centos7
  - update appveyor.yml
  - Stop playing with swig in setup.py, we don't support swig 1.*
    anymore.
  - Fix dereferencing of pointers (gl#m2crypto/m2crypto#281)
  - Replace deprecated PyObject_AsReadBuffer with our own shim
    (thanks to Casey Deccio for saving my bacon there).
  - Use parametrized to create parametrized tests (new external
    dependency).
  - Only use DigestSign() and DigestUpdate() with OpenSSL &gt;= 1.1.1
  - Expose all the X509_V_FLAG
  - Add support for DigestSign* and DigestVerify*</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Dr. Strangelove or: How I Learned to Stop Worrying and Love pytest</changelog>
  <changelog author="pmonreal@suse.com" date="1613563200">- Add source signature file</changelog>
  <changelog author="pmonreal@suse.com" date="1613563201">- OpenSSL allows the verificaton to continue on
  UNABLE_TO_VERIFY_LEAF_SIGNATURE
  * This unifies the behaviour of a single certificate with an
    unknown CA certificate with a self-signed certificate.
- Add python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch
  (Thanks for Debian,
  https://salsa.debian.org/python-team/packages/m2crypto/-/commit/e0e9ad5cfff8)</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">- Add 293_sslv23_padding.patch to avoid using RSA_SSLV23_PADDING
  (gl#m2crypto/m2crypto#293, gh#openssl/openssl#14216).</changelog>
  <changelog author="mcepl@suse.com" date="1619092800">- Add no-need-parameterized.patch ... we don't need run-time requirement
  of parameterized package (bsc#1185150).</changelog>
  <changelog author="mcepl@suse.com" date="1623672000">- Update to 0.38.0:
  - Remove the last use of setup.py test idiom.
  - Use m2_PyObject_AsReadBuffer instead of PyObject_AsReadBuffer.
  - Add support for arm64 big endian &lt;Steev Klimaszewski&gt;
  - Make support of RSA_SSLV23_PADDING optional (it has been deprecated).
  - Move project to src/ layout
  - Allow verify_cb_* to be called with ok=True  &lt;Casey Deccio&gt;
  - Be prepared if any of constants in x509_vfy.h is not available.
  - But we do support 3.8
  - We DO NOT support Python 2.6.
- All patches were upstreamed:
  - 293_sslv23_padding.patch
  - no-need-parameterized.patch
  - python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch</changelog>
  <changelog author="mcepl@suse.com" date="1649332800">- Add missing bug references to this changelog.</changelog>
  <changelog author="mcepl@suse.com" date="1657627200">- Add CVE-2020-25657-Bleichenbacher-attack.patch (CVE-2020-25657,
  bsc#1178829), which mitigates the Bleichenbacher timing attacks
  in the RSA decryption API.
- Add python-M2Crypto.keyring to verify GPG signature of tarball.</changelog>
  <changelog author="dmueller@suse.com" date="1659528000">- update CVE-2020-25657-Bleichenbacher-attack.patch to actually
  contain the fix rather than just being empty (CVE-2020-25657,
  bsc#1178829)</changelog>
  <changelog author="dmueller@suse.com" date="1667822400">- add openssl-stop-parsing-header.patch (bsc#1205042)
- add m2crypto-0.38-ossl3-tests.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678968000">- Adapt tests for OpenSSL v3.1.0
  * Add openssl-adapt-tests-for-3.1.0.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- add timeout_300hz.patch to accept a small deviation from time
  in the testsuite (bsc#1212757)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1706097600">- Disable broken tests with openssl 3.2, bsc#1217782</changelog>
</package>
<package pkgid="83de0b3d553a4d6b232f7f593d1826bf50cfd0a8eec3bcd31669744c74e55b4c" name="python3-M2Crypto" arch="s390x">
  <version epoch="0" ver="0.38.0" rel="150400.10.1"/>
  <changelog author="mcepl@suse.com" date="1559908800">- Add fix_OpenSSL111c.patch patch to ensure compatibility with
  OpenSSL 1.1.1c. gl#m2crypto/m2crypto#258 and jsc#SLE-9135.</changelog>
  <changelog author="mcepl@suse.com" date="1559995200">- Replace fix_OpenSSL111c.patch with proper new release 0.35.1
  (there is really not much more in it; bsc#1149792).</changelog>
  <changelog author="mcepl@suse.com" date="1560168000">- Update to fix release 0.35.2 ... just fixing the test suite
  (bsc#1172226).</changelog>
  <changelog author="marco.strigl@suse.com" date="1583755200">- in python3.8 the fp is wrapped in a Buffer. SSL.Connection.makefile
  returns a socketIO which is no buffer.
  Added: 001-fix-buffering-for-python38.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1586347200">- Do not pull in py2 pkg on doc subpkg</changelog>
  <changelog author="mcepl@suse.com" date="1594641600">Update to 0.36.0:
  - wrap SocketIO in io.Buffered* for makefile &lt;lethliel&gt;
  - SSL.Connection.close accepts an argument to force the socket closing
    &lt;Christophe Haen&gt;
  - SSL.Connection: make the clientPostConnectionCheck an instance
    attribute &lt;Christophe Haen&gt;
  - Fixed bug with usage of unexisting method getreply at SSL_Transport
    &lt;roman-nagaev&gt;
  - Add appveyor builds for python 3.7 and 3.8 &lt;Daniel A. Wozniak&gt;
  - Fixed syntax warning on line 44. &lt;randomfox&gt;
  - Update M2Crypto.six to 1.13.0 &lt;Matěj Cepl&gt;
  - base64.decodestring() was finally removed in Python 3.8. &lt;Matěj Cepl&gt;
  - wrap SocketIO in io.Buffered* for makefile &lt;lethliel&gt;
  - NULL is legal argument for key and iv paramters of EVP_CipherInit(3)
    &lt;Matěj Cepl&gt;
  - Expose X509_V_FLAG_ALLOW_PROXY_CERTS verification flag and
    X509_STORE_SET_FLAGS function &lt;Christophe Haen&gt;
  - Stop testing for 2.6 and 3.4 on Travis. Start testing 3.8 &lt;Matěj Cepl&gt;
  - Extend test cert validity to 2049 &lt;Bernhard M. Wiedemann&gt;
  - Revert using typing module in 2.6. It is just not worthy. &lt;Matěj Cepl&gt;
  - Update Debian/stable SSL as well &lt;Matěj Cepl&gt;
  - Make tests pass again. &lt;Matěj Cepl&gt;
  - Stop using string module, which has been deprecated. &lt;Matěj Cepl&gt;
  - Tiny fixes to make pyls more happy &lt;Matěj Cepl&gt;
  - CI: Rework Fedora CI configuration &lt;Neal Gompa&gt;
- Remove upstream merged patch 001-fix-buffering-for-python38.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1607428800">- Update to 0.37.1:
  - Remove support for CentOS 6 and Python 2.6 (remove
    tests.vendor module). Python 2.7 is still fully supported.
  - Remodel CI:
  - on GitHub switched from Travis-CI to GH Actions
  - on GitLab-CI: stop testing 2.7 on Fedora, add centos7
  - update appveyor.yml
  - Stop playing with swig in setup.py, we don't support swig 1.*
    anymore.
  - Fix dereferencing of pointers (gl#m2crypto/m2crypto#281)
  - Replace deprecated PyObject_AsReadBuffer with our own shim
    (thanks to Casey Deccio for saving my bacon there).
  - Use parametrized to create parametrized tests (new external
    dependency).
  - Only use DigestSign() and DigestUpdate() with OpenSSL &gt;= 1.1.1
  - Expose all the X509_V_FLAG
  - Add support for DigestSign* and DigestVerify*</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Dr. Strangelove or: How I Learned to Stop Worrying and Love pytest</changelog>
  <changelog author="pmonreal@suse.com" date="1613563200">- Add source signature file</changelog>
  <changelog author="pmonreal@suse.com" date="1613563201">- OpenSSL allows the verificaton to continue on
  UNABLE_TO_VERIFY_LEAF_SIGNATURE
  * This unifies the behaviour of a single certificate with an
    unknown CA certificate with a self-signed certificate.
- Add python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch
  (Thanks for Debian,
  https://salsa.debian.org/python-team/packages/m2crypto/-/commit/e0e9ad5cfff8)</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">- Add 293_sslv23_padding.patch to avoid using RSA_SSLV23_PADDING
  (gl#m2crypto/m2crypto#293, gh#openssl/openssl#14216).</changelog>
  <changelog author="mcepl@suse.com" date="1619092800">- Add no-need-parameterized.patch ... we don't need run-time requirement
  of parameterized package (bsc#1185150).</changelog>
  <changelog author="mcepl@suse.com" date="1623672000">- Update to 0.38.0:
  - Remove the last use of setup.py test idiom.
  - Use m2_PyObject_AsReadBuffer instead of PyObject_AsReadBuffer.
  - Add support for arm64 big endian &lt;Steev Klimaszewski&gt;
  - Make support of RSA_SSLV23_PADDING optional (it has been deprecated).
  - Move project to src/ layout
  - Allow verify_cb_* to be called with ok=True  &lt;Casey Deccio&gt;
  - Be prepared if any of constants in x509_vfy.h is not available.
  - But we do support 3.8
  - We DO NOT support Python 2.6.
- All patches were upstreamed:
  - 293_sslv23_padding.patch
  - no-need-parameterized.patch
  - python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch</changelog>
  <changelog author="mcepl@suse.com" date="1649332800">- Add missing bug references to this changelog.</changelog>
  <changelog author="mcepl@suse.com" date="1657627200">- Add CVE-2020-25657-Bleichenbacher-attack.patch (CVE-2020-25657,
  bsc#1178829), which mitigates the Bleichenbacher timing attacks
  in the RSA decryption API.
- Add python-M2Crypto.keyring to verify GPG signature of tarball.</changelog>
  <changelog author="dmueller@suse.com" date="1659528000">- update CVE-2020-25657-Bleichenbacher-attack.patch to actually
  contain the fix rather than just being empty (CVE-2020-25657,
  bsc#1178829)</changelog>
  <changelog author="dmueller@suse.com" date="1667822400">- add openssl-stop-parsing-header.patch (bsc#1205042)
- add m2crypto-0.38-ossl3-tests.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678968000">- Adapt tests for OpenSSL v3.1.0
  * Add openssl-adapt-tests-for-3.1.0.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- add timeout_300hz.patch to accept a small deviation from time
  in the testsuite (bsc#1212757)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1706097600">- Disable broken tests with openssl 3.2, bsc#1217782</changelog>
</package>
<package pkgid="52fb4d0f1e48e509332e8ab2ec7dbc5465127320fc3cc8832baf2dcc9f386c46" name="python3-M2Crypto" arch="src">
  <version epoch="0" ver="0.38.0" rel="150400.10.1"/>
  <changelog author="mcepl@suse.com" date="1559908800">- Add fix_OpenSSL111c.patch patch to ensure compatibility with
  OpenSSL 1.1.1c. gl#m2crypto/m2crypto#258 and jsc#SLE-9135.</changelog>
  <changelog author="mcepl@suse.com" date="1559995200">- Replace fix_OpenSSL111c.patch with proper new release 0.35.1
  (there is really not much more in it; bsc#1149792).</changelog>
  <changelog author="mcepl@suse.com" date="1560168000">- Update to fix release 0.35.2 ... just fixing the test suite
  (bsc#1172226).</changelog>
  <changelog author="marco.strigl@suse.com" date="1583755200">- in python3.8 the fp is wrapped in a Buffer. SSL.Connection.makefile
  returns a socketIO which is no buffer.
  Added: 001-fix-buffering-for-python38.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1586347200">- Do not pull in py2 pkg on doc subpkg</changelog>
  <changelog author="mcepl@suse.com" date="1594641600">Update to 0.36.0:
  - wrap SocketIO in io.Buffered* for makefile &lt;lethliel&gt;
  - SSL.Connection.close accepts an argument to force the socket closing
    &lt;Christophe Haen&gt;
  - SSL.Connection: make the clientPostConnectionCheck an instance
    attribute &lt;Christophe Haen&gt;
  - Fixed bug with usage of unexisting method getreply at SSL_Transport
    &lt;roman-nagaev&gt;
  - Add appveyor builds for python 3.7 and 3.8 &lt;Daniel A. Wozniak&gt;
  - Fixed syntax warning on line 44. &lt;randomfox&gt;
  - Update M2Crypto.six to 1.13.0 &lt;Matěj Cepl&gt;
  - base64.decodestring() was finally removed in Python 3.8. &lt;Matěj Cepl&gt;
  - wrap SocketIO in io.Buffered* for makefile &lt;lethliel&gt;
  - NULL is legal argument for key and iv paramters of EVP_CipherInit(3)
    &lt;Matěj Cepl&gt;
  - Expose X509_V_FLAG_ALLOW_PROXY_CERTS verification flag and
    X509_STORE_SET_FLAGS function &lt;Christophe Haen&gt;
  - Stop testing for 2.6 and 3.4 on Travis. Start testing 3.8 &lt;Matěj Cepl&gt;
  - Extend test cert validity to 2049 &lt;Bernhard M. Wiedemann&gt;
  - Revert using typing module in 2.6. It is just not worthy. &lt;Matěj Cepl&gt;
  - Update Debian/stable SSL as well &lt;Matěj Cepl&gt;
  - Make tests pass again. &lt;Matěj Cepl&gt;
  - Stop using string module, which has been deprecated. &lt;Matěj Cepl&gt;
  - Tiny fixes to make pyls more happy &lt;Matěj Cepl&gt;
  - CI: Rework Fedora CI configuration &lt;Neal Gompa&gt;
- Remove upstream merged patch 001-fix-buffering-for-python38.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1607428800">- Update to 0.37.1:
  - Remove support for CentOS 6 and Python 2.6 (remove
    tests.vendor module). Python 2.7 is still fully supported.
  - Remodel CI:
  - on GitHub switched from Travis-CI to GH Actions
  - on GitLab-CI: stop testing 2.7 on Fedora, add centos7
  - update appveyor.yml
  - Stop playing with swig in setup.py, we don't support swig 1.*
    anymore.
  - Fix dereferencing of pointers (gl#m2crypto/m2crypto#281)
  - Replace deprecated PyObject_AsReadBuffer with our own shim
    (thanks to Casey Deccio for saving my bacon there).
  - Use parametrized to create parametrized tests (new external
    dependency).
  - Only use DigestSign() and DigestUpdate() with OpenSSL &gt;= 1.1.1
  - Expose all the X509_V_FLAG
  - Add support for DigestSign* and DigestVerify*</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Dr. Strangelove or: How I Learned to Stop Worrying and Love pytest</changelog>
  <changelog author="pmonreal@suse.com" date="1613563200">- Add source signature file</changelog>
  <changelog author="pmonreal@suse.com" date="1613563201">- OpenSSL allows the verificaton to continue on
  UNABLE_TO_VERIFY_LEAF_SIGNATURE
  * This unifies the behaviour of a single certificate with an
    unknown CA certificate with a self-signed certificate.
- Add python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch
  (Thanks for Debian,
  https://salsa.debian.org/python-team/packages/m2crypto/-/commit/e0e9ad5cfff8)</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">- Add 293_sslv23_padding.patch to avoid using RSA_SSLV23_PADDING
  (gl#m2crypto/m2crypto#293, gh#openssl/openssl#14216).</changelog>
  <changelog author="mcepl@suse.com" date="1619092800">- Add no-need-parameterized.patch ... we don't need run-time requirement
  of parameterized package (bsc#1185150).</changelog>
  <changelog author="mcepl@suse.com" date="1623672000">- Update to 0.38.0:
  - Remove the last use of setup.py test idiom.
  - Use m2_PyObject_AsReadBuffer instead of PyObject_AsReadBuffer.
  - Add support for arm64 big endian &lt;Steev Klimaszewski&gt;
  - Make support of RSA_SSLV23_PADDING optional (it has been deprecated).
  - Move project to src/ layout
  - Allow verify_cb_* to be called with ok=True  &lt;Casey Deccio&gt;
  - Be prepared if any of constants in x509_vfy.h is not available.
  - But we do support 3.8
  - We DO NOT support Python 2.6.
- All patches were upstreamed:
  - 293_sslv23_padding.patch
  - no-need-parameterized.patch
  - python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch</changelog>
  <changelog author="mcepl@suse.com" date="1649332800">- Add missing bug references to this changelog.</changelog>
  <changelog author="mcepl@suse.com" date="1657627200">- Add CVE-2020-25657-Bleichenbacher-attack.patch (CVE-2020-25657,
  bsc#1178829), which mitigates the Bleichenbacher timing attacks
  in the RSA decryption API.
- Add python-M2Crypto.keyring to verify GPG signature of tarball.</changelog>
  <changelog author="dmueller@suse.com" date="1659528000">- update CVE-2020-25657-Bleichenbacher-attack.patch to actually
  contain the fix rather than just being empty (CVE-2020-25657,
  bsc#1178829)</changelog>
  <changelog author="dmueller@suse.com" date="1667822400">- add openssl-stop-parsing-header.patch (bsc#1205042)
- add m2crypto-0.38-ossl3-tests.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678968000">- Adapt tests for OpenSSL v3.1.0
  * Add openssl-adapt-tests-for-3.1.0.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- add timeout_300hz.patch to accept a small deviation from time
  in the testsuite (bsc#1212757)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1706097600">- Disable broken tests with openssl 3.2, bsc#1217782</changelog>
</package>
<package pkgid="b3ffd4d562ccca88efed68aca4db609263684060b8233c18c532a476efec1545" name="python3-M2Crypto" arch="x86_64">
  <version epoch="0" ver="0.38.0" rel="150400.10.1"/>
  <changelog author="mcepl@suse.com" date="1559908800">- Add fix_OpenSSL111c.patch patch to ensure compatibility with
  OpenSSL 1.1.1c. gl#m2crypto/m2crypto#258 and jsc#SLE-9135.</changelog>
  <changelog author="mcepl@suse.com" date="1559995200">- Replace fix_OpenSSL111c.patch with proper new release 0.35.1
  (there is really not much more in it; bsc#1149792).</changelog>
  <changelog author="mcepl@suse.com" date="1560168000">- Update to fix release 0.35.2 ... just fixing the test suite
  (bsc#1172226).</changelog>
  <changelog author="marco.strigl@suse.com" date="1583755200">- in python3.8 the fp is wrapped in a Buffer. SSL.Connection.makefile
  returns a socketIO which is no buffer.
  Added: 001-fix-buffering-for-python38.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1586347200">- Do not pull in py2 pkg on doc subpkg</changelog>
  <changelog author="mcepl@suse.com" date="1594641600">Update to 0.36.0:
  - wrap SocketIO in io.Buffered* for makefile &lt;lethliel&gt;
  - SSL.Connection.close accepts an argument to force the socket closing
    &lt;Christophe Haen&gt;
  - SSL.Connection: make the clientPostConnectionCheck an instance
    attribute &lt;Christophe Haen&gt;
  - Fixed bug with usage of unexisting method getreply at SSL_Transport
    &lt;roman-nagaev&gt;
  - Add appveyor builds for python 3.7 and 3.8 &lt;Daniel A. Wozniak&gt;
  - Fixed syntax warning on line 44. &lt;randomfox&gt;
  - Update M2Crypto.six to 1.13.0 &lt;Matěj Cepl&gt;
  - base64.decodestring() was finally removed in Python 3.8. &lt;Matěj Cepl&gt;
  - wrap SocketIO in io.Buffered* for makefile &lt;lethliel&gt;
  - NULL is legal argument for key and iv paramters of EVP_CipherInit(3)
    &lt;Matěj Cepl&gt;
  - Expose X509_V_FLAG_ALLOW_PROXY_CERTS verification flag and
    X509_STORE_SET_FLAGS function &lt;Christophe Haen&gt;
  - Stop testing for 2.6 and 3.4 on Travis. Start testing 3.8 &lt;Matěj Cepl&gt;
  - Extend test cert validity to 2049 &lt;Bernhard M. Wiedemann&gt;
  - Revert using typing module in 2.6. It is just not worthy. &lt;Matěj Cepl&gt;
  - Update Debian/stable SSL as well &lt;Matěj Cepl&gt;
  - Make tests pass again. &lt;Matěj Cepl&gt;
  - Stop using string module, which has been deprecated. &lt;Matěj Cepl&gt;
  - Tiny fixes to make pyls more happy &lt;Matěj Cepl&gt;
  - CI: Rework Fedora CI configuration &lt;Neal Gompa&gt;
- Remove upstream merged patch 001-fix-buffering-for-python38.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1607428800">- Update to 0.37.1:
  - Remove support for CentOS 6 and Python 2.6 (remove
    tests.vendor module). Python 2.7 is still fully supported.
  - Remodel CI:
  - on GitHub switched from Travis-CI to GH Actions
  - on GitLab-CI: stop testing 2.7 on Fedora, add centos7
  - update appveyor.yml
  - Stop playing with swig in setup.py, we don't support swig 1.*
    anymore.
  - Fix dereferencing of pointers (gl#m2crypto/m2crypto#281)
  - Replace deprecated PyObject_AsReadBuffer with our own shim
    (thanks to Casey Deccio for saving my bacon there).
  - Use parametrized to create parametrized tests (new external
    dependency).
  - Only use DigestSign() and DigestUpdate() with OpenSSL &gt;= 1.1.1
  - Expose all the X509_V_FLAG
  - Add support for DigestSign* and DigestVerify*</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Dr. Strangelove or: How I Learned to Stop Worrying and Love pytest</changelog>
  <changelog author="pmonreal@suse.com" date="1613563200">- Add source signature file</changelog>
  <changelog author="pmonreal@suse.com" date="1613563201">- OpenSSL allows the verificaton to continue on
  UNABLE_TO_VERIFY_LEAF_SIGNATURE
  * This unifies the behaviour of a single certificate with an
    unknown CA certificate with a self-signed certificate.
- Add python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch
  (Thanks for Debian,
  https://salsa.debian.org/python-team/packages/m2crypto/-/commit/e0e9ad5cfff8)</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">- Add 293_sslv23_padding.patch to avoid using RSA_SSLV23_PADDING
  (gl#m2crypto/m2crypto#293, gh#openssl/openssl#14216).</changelog>
  <changelog author="mcepl@suse.com" date="1619092800">- Add no-need-parameterized.patch ... we don't need run-time requirement
  of parameterized package (bsc#1185150).</changelog>
  <changelog author="mcepl@suse.com" date="1623672000">- Update to 0.38.0:
  - Remove the last use of setup.py test idiom.
  - Use m2_PyObject_AsReadBuffer instead of PyObject_AsReadBuffer.
  - Add support for arm64 big endian &lt;Steev Klimaszewski&gt;
  - Make support of RSA_SSLV23_PADDING optional (it has been deprecated).
  - Move project to src/ layout
  - Allow verify_cb_* to be called with ok=True  &lt;Casey Deccio&gt;
  - Be prepared if any of constants in x509_vfy.h is not available.
  - But we do support 3.8
  - We DO NOT support Python 2.6.
- All patches were upstreamed:
  - 293_sslv23_padding.patch
  - no-need-parameterized.patch
  - python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch</changelog>
  <changelog author="mcepl@suse.com" date="1649332800">- Add missing bug references to this changelog.</changelog>
  <changelog author="mcepl@suse.com" date="1657627200">- Add CVE-2020-25657-Bleichenbacher-attack.patch (CVE-2020-25657,
  bsc#1178829), which mitigates the Bleichenbacher timing attacks
  in the RSA decryption API.
- Add python-M2Crypto.keyring to verify GPG signature of tarball.</changelog>
  <changelog author="dmueller@suse.com" date="1659528000">- update CVE-2020-25657-Bleichenbacher-attack.patch to actually
  contain the fix rather than just being empty (CVE-2020-25657,
  bsc#1178829)</changelog>
  <changelog author="dmueller@suse.com" date="1667822400">- add openssl-stop-parsing-header.patch (bsc#1205042)
- add m2crypto-0.38-ossl3-tests.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678968000">- Adapt tests for OpenSSL v3.1.0
  * Add openssl-adapt-tests-for-3.1.0.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- add timeout_300hz.patch to accept a small deviation from time
  in the testsuite (bsc#1212757)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1706097600">- Disable broken tests with openssl 3.2, bsc#1217782</changelog>
</package>
<package pkgid="37465856a6b844fe2d6d6a1e0fbcc78f51ca38b93ebcbf36b37b97c59682b6c4" name="python3-azuremetadata" arch="noarch">
  <version epoch="0" ver="5.1.6" rel="150000.1.26.1"/>
  <changelog author="ikapelyukhin@suse.com" date="1585656000">- Version 5.0.0
- Support new Azure metadata API (bsc#1164818, bsc#1164819)
- Automatically detect root device (bsc#1158698, bsc#1158707)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1587470400">- Version 5.0.1
- Use lsblk for root device detection (bsc#1169921)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1587988800">- Version 5.1.0
- Produce well-formed JSON and XML output when multiple filters
  are specified (bsc#1170598, bsc#1170599)</changelog>
  <changelog author="rjschwei@suse.com" date="1596456000">- Update to version 5.1.2 (bsc#1173357, bsc#1174847)
  + Detect when the VM is running in ASM (Azure Classic) and handle the
    condition to generate the data we are interested in without requiring
    access to the full IMDS available only in ARM instances.
- From version 5.1.1 (bsc#1173238, bsc#1173240)
  + Add --listapis and --api latest support</changelog>
  <changelog author="rjschwei@suse.com" date="1598011200">- Fix provides directive (bsc#1175609, bsc#1175610)
  + The provides directive must set a version or update does not work
    as expected</changelog>
  <changelog author="rjschwei@suse.com" date="1598011201">- Fix provides directive (bsc#1175609, bsc#1175610)
  + The provides directive must set a version or update does not work
    as expected</changelog>
  <changelog author="jesusbv@suse.com" date="1619006400">- Version 5.1.4 (bsc#1184720, bsc#1172581)
  + Use versions endpoint to list the available versions
  + Add bypass proxy
  + Update way to check classic vms</changelog>
  <changelog author="rjschwei@suse.com" date="1642075200">- Version 5.1.5 (bsc#1194663)
  + Handle lsblk output format change. The json data now contains
    "mountpoints" instead of "mountpoint"</changelog>
  <changelog author="jesus.bv@suse.com" date="1705060800">- Version 5.1.6
  Fix empty list attributes (bsc#1218760)</changelog>
</package>
<package pkgid="30c7b88768824e3ed25070e1931bbc4c239d2f02a8af6a6dda4c4d27eb040d0d" name="python3-azuremetadata" arch="src">
  <version epoch="0" ver="5.1.6" rel="150000.1.26.1"/>
  <changelog author="ikapelyukhin@suse.com" date="1585656000">- Version 5.0.0
- Support new Azure metadata API (bsc#1164818, bsc#1164819)
- Automatically detect root device (bsc#1158698, bsc#1158707)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1587470400">- Version 5.0.1
- Use lsblk for root device detection (bsc#1169921)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1587988800">- Version 5.1.0
- Produce well-formed JSON and XML output when multiple filters
  are specified (bsc#1170598, bsc#1170599)</changelog>
  <changelog author="rjschwei@suse.com" date="1596456000">- Update to version 5.1.2 (bsc#1173357, bsc#1174847)
  + Detect when the VM is running in ASM (Azure Classic) and handle the
    condition to generate the data we are interested in without requiring
    access to the full IMDS available only in ARM instances.
- From version 5.1.1 (bsc#1173238, bsc#1173240)
  + Add --listapis and --api latest support</changelog>
  <changelog author="rjschwei@suse.com" date="1598011200">- Fix provides directive (bsc#1175609, bsc#1175610)
  + The provides directive must set a version or update does not work
    as expected</changelog>
  <changelog author="rjschwei@suse.com" date="1598011201">- Fix provides directive (bsc#1175609, bsc#1175610)
  + The provides directive must set a version or update does not work
    as expected</changelog>
  <changelog author="jesusbv@suse.com" date="1619006400">- Version 5.1.4 (bsc#1184720, bsc#1172581)
  + Use versions endpoint to list the available versions
  + Add bypass proxy
  + Update way to check classic vms</changelog>
  <changelog author="rjschwei@suse.com" date="1642075200">- Version 5.1.5 (bsc#1194663)
  + Handle lsblk output format change. The json data now contains
    "mountpoints" instead of "mountpoint"</changelog>
  <changelog author="jesus.bv@suse.com" date="1705060800">- Version 5.1.6
  Fix empty list attributes (bsc#1218760)</changelog>
</package>
<package pkgid="d77abe50f055b5701c4be560ffaa4435ebfd51512b1dead2ca94d27653c93c8f" name="python3-base" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.51.1"/>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
</package>
<package pkgid="478338586276c18b6971660fb18c82c61397cc40432412bc397277bf5bccef7c" name="python3-base" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.51.1"/>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
</package>
<package pkgid="fd1cb2e11e3e99460e422980179a7a3963002bca65976ba6e7c1cc60657287c1" name="python3-base" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.51.1"/>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
</package>
<package pkgid="a3a18afaa9586db7b466ebefd2ee59d195a3ab531dd1a56c86de4fc51697df5a" name="python3-base" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.54.1"/>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
</package>
<package pkgid="55fcba6d466c2c33c568e63e8508eb995ca383715d11c9e9d77c36a65785c3c3" name="python3-base" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.54.1"/>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
</package>
<package pkgid="72989513a8d1719213e3f54e813d81c27e9477f9ff5cefe40b5a6936de71ac4f" name="python3-base" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.54.1"/>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
</package>
<package pkgid="bd760ec2d0f05abfad9f6672e6616ce1ac28b557c2a2beb2d58efb96cc3553c6" name="python3-chardet" arch="noarch">
  <version epoch="0" ver="3.0.4" rel="150000.5.3.1"/>
  <changelog author="aloisio@gmx.com" date="1423569600">- Update to version 2.3.0
  * Added support for CP932 detection (thanks to @hashy)
  * Fixed an issue where UTF-8 with a BOM would not be detected
    as UTF-8-SIG (#8)
  * Modified chardetect to use argparse for argument parsing
  * Moved docs to a gh-pages branch. You can now access them
    at http://chardet.github.io
- Changelog on https://github.com/chardet/chardet/commits/2.3.0
- Other minor changes</changelog>
  <changelog author="arun@gmx.de" date="1431345600">- specfile:
  * added update alternative to prevent conflicts with python3 version
  * add tests</changelog>
  <changelog author="rjschwei@suse.com" date="1485777600">- Include in SLE 12 (bsc#1002895, FATE#321630)</changelog>
  <changelog author="aloisio@gmx.com" date="1489924800">- Converted to single spec.</changelog>
  <changelog author="jmatejek@suse.com" date="1490097600">- do not use %py_ver, replace with %python_version</changelog>
  <changelog author="dmueller@suse.com" date="1497096000">- update to 3.0.4</changelog>
  <changelog author="ecsos@opensuse.org" date="1498737600">- fix source link</changelog>
  <changelog author="dmueller@suse.com" date="1502798400">- add update-alternative support for py2/py3 coinstallability</changelog>
  <changelog author="tbechtold@suse.com" date="1503662400">- Fix build for Leap-42.3</changelog>
  <changelog author="dmueller@suse.com" date="1505908800">- add update-alternatives post-requires</changelog>
  <changelog author="daniel.garcia@suse.com" date="1705406400">- Fix update-alternative in %postun, bsc#1218765</changelog>
</package>
<package pkgid="dcf0de52680345e5537a143d421651f237fc4f124422bbee12fb46157d0d0c58" name="python3-core" arch="src">
  <version epoch="0" ver="3.6.15" rel="150300.10.51.1"/>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
</package>
<package pkgid="f906d3b42a81a5c1c3e9450a3c08a65be557e29ad23306564a4d856da8b21d46" name="python3-core" arch="src">
  <version epoch="0" ver="3.6.15" rel="150300.10.54.1"/>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
</package>
<package pkgid="aa91871a5ac77428fe8ef71773e2f17a39762ffc9ef7b78668dc936d8dfa8a54" name="python3-cryptography" arch="aarch64">
  <version epoch="0" ver="3.3.2" rel="150400.20.3"/>
  <changelog author="tchvatal@suse.com" date="1534852800">- Update to 2.3.1:
  * updated tests for upstream wycheproof changes
  * many other tiny test tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1544097600">- Fix fdupes call</changelog>
  <changelog author="mcepl@suse.com" date="1544097601">- Update to 2.4.1:
  * Dropped support for LibreSSL 2.4.x.
  * Deprecated OpenSSL 1.0.1 support. OpenSSL 1.0.1 is no
    longer supported by the OpenSSL project. At this time there
    is no time table for dropping support, however we strongly
    encourage all users to upgrade or install cryptography from
    a wheel.
  * Added initial :doc:`OCSP &lt;/x509/ocsp&gt;` support.
  * Added support for cryptography.x509.PrecertPoison.</changelog>
  <changelog author="mpluskal@suse.com" date="1546516800">- Update to version 2.4.2:
  * Updated Windows, macOS, and manylinux1 wheels to be compiled
    with OpenSSL 1.1.0j.</changelog>
  <changelog author="michael@stroeder.com" date="1548417600">- Dependency on python-idna changed to "Recommends" aligned with
  change in upstream source (see below)
- update to 2.5:
  * BACKWARDS INCOMPATIBLE: U-label strings were deprecated in version 2.1,
    but this version removes the default idna dependency as well. If you still
    need this deprecated path please install cryptography with the idna extra:
    pip install cryptography[idna].
  * BACKWARDS INCOMPATIBLE: The minimum supported PyPy version is now 5.4.
  * Numerous classes and functions have been updated to allow bytes-like
    types for keying material and passwords, including symmetric algorithms,
    AEAD ciphers, KDFs, loading asymmetric keys, and one time password classes.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL 1.1.1a.
  * Added support for SHA512_224 and SHA512_256 when using OpenSSL 1.1.1.
  * Added support for SHA3_224, SHA3_256, SHA3_384, and SHA3_512 when using OpenSSL 1.1.1.
  * Added support for X448 key exchange when using OpenSSL 1.1.1.
  * Added support for SHAKE128 and SHAKE256 when using OpenSSL 1.1.1.
  * Added initial support for parsing PKCS12 files with load_key_and_certificates().
  * Added support for IssuingDistributionPoint.
  * Added rfc4514_string() method to x509.Name,
    x509.RelativeDistinguishedName, and x509.NameAttribute to format the name
    or component an RFC 4514 Distinguished Name string.
  * Added from_encoded_point(), which immediately checks if the point is on
    the curve and supports compressed points. Deprecated the previous method
    from_encoded_point().
  * Added signature_hash_algorithm to OCSPResponse.
  * Updated X25519 key exchange support to allow additional serialization
    methods. Calling public_bytes() with no arguments has been deprecated.
  * Added support for encoding compressed and uncompressed points via
    public_bytes(). Deprecated the previous method encode_point().</changelog>
  <changelog author="michael@stroeder.com" date="1551355200">- update to 2.6.1:
  * BACKWARDS INCOMPATIBLE:
    Removedcryptography.hazmat.primitives.asymmetric.utils.encode_rfc6979_signature
    andcryptography.hazmat.primitives.asymmetric.utils.decode_rfc6979_signature,
    which had been deprecated for nearly 4 years. Use encode_dss_signature()
    and decode_dss_signature()instead.
  * BACKWARDS INCOMPATIBLE: Removed cryptography.x509.Certificate.serial, which
    had been deprecated for nearly 3 years. Use serial_number instead.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with
    OpenSSL 1.1.1b.
  * Added support for Ed448 signing when using OpenSSL 1.1.1b or newer.
  * Added support for Ed25519 signing when using OpenSSL 1.1.1b or newer.
  * load_ssh_public_key() can now load ed25519 public keys.
  * Add support for easily mapping an object identifier to its elliptic curve
    class viaget_curve_for_oid().
  * Add support for OpenSSL when compiled with the no-engine
    (OPENSSL_NO_ENGINE) flag.</changelog>
  <changelog author="tchvatal@suse.com" date="1559131200">- Simplify the test execution to be more understandable</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559563200">- update to 2.7
  * BACKWARDS INCOMPATIBLE: Removed the cryptography.hazmat.primitives.mac.MACContext interface.
  The CMAC and HMAC APIs have not changed, but they are no longer registered
  as MACContext instances.
  * Removed support for running our tests with setup.py test.
  * Add support for :class:`~cryptography.hazmat.primitives.poly1305.Poly1305`
  when using OpenSSL 1.1.1 or newer.
  * Support serialization with Encoding.OpenSSH and PublicFormat.OpenSSH
  in :meth:`Ed25519PublicKey.public_bytes &lt;cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PublicKey.public_bytes&gt;` .
  * Correctly allow passing a SubjectKeyIdentifier to :meth:`~cryptography.x509.AuthorityKeyIdentifier.from_issuer_subject_key_identifier`
  and deprecate passing an Extension object.</changelog>
  <changelog author="michael@stroeder.com" date="1571313600">- update to 2.8
  * Added support for Python 3.8.
  * Added class methods Poly1305.generate_tag and Poly1305.verify_tag for Poly1305 sign and verify operations.
  * Deprecated support for OpenSSL 1.0.1. Support will be removed in cryptography 2.9.
  * We now ship manylinux2010 wheels in addition to our manylinux1 wheels.
  * Added support for ed25519 and ed448 keys in the CertificateBuilder, CertificateSigningRequestBuilder, CertificateRevocationListBuilder and OCSPResponseBuilder.
  * cryptography no longer depends on asn1crypto.
  * FreshestCRL is now allowed as a CertificateRevocationList extension.</changelog>
  <changelog author="michael@stroeder.com" date="1589544000">- update to 2.9.2
  * 2.9.2 - 2020-04-22
  - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15.
  * 2.9.1 - 2020-04-21
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g.
  * 2.9 - 2020-04-02
  - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to
    low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed.
    Users on older version of OpenSSL will need to upgrade.
  - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed.
  - Removed support for calling public_bytes() with no arguments, as per
    our deprecation policy. You must now pass encoding and format.
  - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string()
    returns the RDNs as required by RFC 4514.
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f.
  - Added support for parsing single_extensions in an OCSP response.
  - NameAttribute values can now be empty strings.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1595937600">- update to 3.0
- refreshed disable-uneven-sizes-tests.patch and  skip_openssl_memleak_test.patch
  * Removed support for passing an Extension instance
    to from_issuer_subject_key_identifier(), as per our deprecation policy.
  * Support for LibreSSL 2.7.x, 2.8.x, and 2.9.0 has been removed
  * Dropped support for macOS 10.9, macOS users must upgrade to 10.10 or newer.
  * RSA generate_private_key() no longer accepts public_exponent values except
    65537 and 3 (the latter for legacy purposes).
  * X.509 certificate parsing now enforces that the version field contains
    a valid value, rather than deferring this check until version is accessed.
  * Deprecated support for Python 2
  * Added support for OpenSSH serialization format for ec, ed25519, rsa and dsa
    private keys: load_ssh_private_key() for loading and OpenSSH for writing.
  * Added support for OpenSSH certificates to load_ssh_public_key().
  * Added encrypt_at_time() and decrypt_at_time() to Fernet.
  * Added support for the SubjectInformationAccess X.509 extension.
  * Added support for parsing SignedCertificateTimestamps in OCSP responses.
  * Added support for parsing attributes in certificate signing requests via get_attribute_for_oid().
  * Added support for encoding attributes in certificate signing requests via add_attribute().
  * On OpenSSL 1.1.1d and higher cryptography now uses OpenSSL’s built-in CSPRNG
    instead of its own OS random engine because these versions of OpenSSL properly reseed on fork.
  * Added initial support for creating PKCS12 files with serialize_key_and_certificates().</changelog>
  <changelog author="dmueller@suse.com" date="1600430400">- update to 3.1:
  * **BACKWARDS INCOMPATIBLE:** Removed support for ``idna`` based
    :term:`U-label` parsing in various X.509 classes. This support was originally
    deprecated in version 2.1 and moved to an extra in 2.5.
  * Deprecated OpenSSL 1.0.2 support. OpenSSL 1.0.2 is no longer supported by
    the OpenSSL project. The next version of ``cryptography`` will drop support
    for it.
  * Deprecated support for Python 3.5. This version sees very little use and will
    be removed in the next release.
  * ``backend`` arguments to functions are no longer required and the
    default backend will automatically be selected if no ``backend`` is provided.
  * Added initial support for parsing certificates from PKCS7 files with
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_pem_pkcs7_certificates`
    and
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_der_pkcs7_certificates`
    .
  * Calling ``update`` or ``update_into`` on
    :class:`~cryptography.hazmat.primitives.ciphers.CipherContext` with ``data``
    longer than 2\ :sup:`31` bytes no longer raises an ``OverflowError``. This
    also resolves the same issue in :doc:`/fernet`.</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 3.1.1:
  * wheels compiled with OpenSSL 1.1.1h.</changelog>
  <changelog author="michael@stroeder.com" date="1603713600">- update to 3.2 (bsc#1178168, CVE-2020-25659):
  * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,
    to protect against Bleichenbacher vulnerabilities. Due to limitations imposed
    by our API, we cannot completely mitigate this vulnerability.
  * Support for OpenSSL 1.0.2 has been removed.
  * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.
- drops 5507-mitigate-Bleichenbacher-attacks.patch on older dists</changelog>
  <changelog author="michael@stroeder.com" date="1603886400">- update to 3.2.1:
  Disable blinding on RSA public keys to address an error with
  some versions of OpenSSL.</changelog>
  <changelog author="mcepl@suse.com" date="1607256000">- Remove unnecessary dependency virtualenv.</changelog>
  <changelog author="mrueckert@suse.de" date="1607515200">- update to 3.3.0
  - BACKWARDS INCOMPATIBLE: Support for Python 3.5 has been removed
    due to low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: The GCM and AESGCM now require 64-bit
    to 1024-bit (8 byte to 128 byte) initialization vectors. This
    change is to conform with an upcoming OpenSSL release that will
    no longer support sizes outside this window.
  - BACKWARDS INCOMPATIBLE: When deserializing asymmetric keys we
    now raise ValueError rather than UnsupportedAlgorithm when an
    unsupported cipher is used. This change is to conform with an
    upcoming OpenSSL release that will no longer distinguish
    between error types.
  - BACKWARDS INCOMPATIBLE: We no longer allow loading of finite
    field Diffie-Hellman parameters of less than 512 bits in
    length. This change is to conform with an upcoming OpenSSL
    release that no longer supports smaller sizes. These keys were
    already wildly insecure and should not have been used in any
    application outside of testing.
  - Updated Windows, macOS, and manylinux wheels to be compiled
    with OpenSSL 1.1.1i.
  - Python 2 support is deprecated in cryptography. This is the
    last release that will support Python 2.
  - Added the recover_data_from_signature() function to
    RSAPublicKey for recovering the signed data from an RSA
    signature.</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 3.3.1:
  * Re-added a legacy symbol causing problems for older ``pyOpenSSL`` use</changelog>
  <changelog author="michael@stroeder.com" date="1612699200">- update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331):
  * SECURITY ISSUE: Fixed a bug where certain sequences of update()
    calls when symmetrically encrypting very large payloads (&gt;2GB) could
    result in an integer overflow, leading to buffer overflows.
    CVE-2020-36242
  - drops CVE-2020-36242-buffer-overflow.patch on older dists</changelog>
  <changelog author="daniel.garcia@suse.com" date="1676289600">- Add patch CVE-2023-23931-dont-allow-update-into.patch (bsc#1208036, CVE-2023-23931)
  * Don't allow update_into to mutate immutable objects</changelog>
</package>
<package pkgid="82f56ba73171512dfa7b78c6f4bbd4eb740e2baf69e0a25e1703110fc62d7cda" name="python3-cryptography" arch="ppc64le">
  <version epoch="0" ver="3.3.2" rel="150400.20.3"/>
  <changelog author="tchvatal@suse.com" date="1534852800">- Update to 2.3.1:
  * updated tests for upstream wycheproof changes
  * many other tiny test tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1544097600">- Fix fdupes call</changelog>
  <changelog author="mcepl@suse.com" date="1544097601">- Update to 2.4.1:
  * Dropped support for LibreSSL 2.4.x.
  * Deprecated OpenSSL 1.0.1 support. OpenSSL 1.0.1 is no
    longer supported by the OpenSSL project. At this time there
    is no time table for dropping support, however we strongly
    encourage all users to upgrade or install cryptography from
    a wheel.
  * Added initial :doc:`OCSP &lt;/x509/ocsp&gt;` support.
  * Added support for cryptography.x509.PrecertPoison.</changelog>
  <changelog author="mpluskal@suse.com" date="1546516800">- Update to version 2.4.2:
  * Updated Windows, macOS, and manylinux1 wheels to be compiled
    with OpenSSL 1.1.0j.</changelog>
  <changelog author="michael@stroeder.com" date="1548417600">- Dependency on python-idna changed to "Recommends" aligned with
  change in upstream source (see below)
- update to 2.5:
  * BACKWARDS INCOMPATIBLE: U-label strings were deprecated in version 2.1,
    but this version removes the default idna dependency as well. If you still
    need this deprecated path please install cryptography with the idna extra:
    pip install cryptography[idna].
  * BACKWARDS INCOMPATIBLE: The minimum supported PyPy version is now 5.4.
  * Numerous classes and functions have been updated to allow bytes-like
    types for keying material and passwords, including symmetric algorithms,
    AEAD ciphers, KDFs, loading asymmetric keys, and one time password classes.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL 1.1.1a.
  * Added support for SHA512_224 and SHA512_256 when using OpenSSL 1.1.1.
  * Added support for SHA3_224, SHA3_256, SHA3_384, and SHA3_512 when using OpenSSL 1.1.1.
  * Added support for X448 key exchange when using OpenSSL 1.1.1.
  * Added support for SHAKE128 and SHAKE256 when using OpenSSL 1.1.1.
  * Added initial support for parsing PKCS12 files with load_key_and_certificates().
  * Added support for IssuingDistributionPoint.
  * Added rfc4514_string() method to x509.Name,
    x509.RelativeDistinguishedName, and x509.NameAttribute to format the name
    or component an RFC 4514 Distinguished Name string.
  * Added from_encoded_point(), which immediately checks if the point is on
    the curve and supports compressed points. Deprecated the previous method
    from_encoded_point().
  * Added signature_hash_algorithm to OCSPResponse.
  * Updated X25519 key exchange support to allow additional serialization
    methods. Calling public_bytes() with no arguments has been deprecated.
  * Added support for encoding compressed and uncompressed points via
    public_bytes(). Deprecated the previous method encode_point().</changelog>
  <changelog author="michael@stroeder.com" date="1551355200">- update to 2.6.1:
  * BACKWARDS INCOMPATIBLE:
    Removedcryptography.hazmat.primitives.asymmetric.utils.encode_rfc6979_signature
    andcryptography.hazmat.primitives.asymmetric.utils.decode_rfc6979_signature,
    which had been deprecated for nearly 4 years. Use encode_dss_signature()
    and decode_dss_signature()instead.
  * BACKWARDS INCOMPATIBLE: Removed cryptography.x509.Certificate.serial, which
    had been deprecated for nearly 3 years. Use serial_number instead.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with
    OpenSSL 1.1.1b.
  * Added support for Ed448 signing when using OpenSSL 1.1.1b or newer.
  * Added support for Ed25519 signing when using OpenSSL 1.1.1b or newer.
  * load_ssh_public_key() can now load ed25519 public keys.
  * Add support for easily mapping an object identifier to its elliptic curve
    class viaget_curve_for_oid().
  * Add support for OpenSSL when compiled with the no-engine
    (OPENSSL_NO_ENGINE) flag.</changelog>
  <changelog author="tchvatal@suse.com" date="1559131200">- Simplify the test execution to be more understandable</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559563200">- update to 2.7
  * BACKWARDS INCOMPATIBLE: Removed the cryptography.hazmat.primitives.mac.MACContext interface.
  The CMAC and HMAC APIs have not changed, but they are no longer registered
  as MACContext instances.
  * Removed support for running our tests with setup.py test.
  * Add support for :class:`~cryptography.hazmat.primitives.poly1305.Poly1305`
  when using OpenSSL 1.1.1 or newer.
  * Support serialization with Encoding.OpenSSH and PublicFormat.OpenSSH
  in :meth:`Ed25519PublicKey.public_bytes &lt;cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PublicKey.public_bytes&gt;` .
  * Correctly allow passing a SubjectKeyIdentifier to :meth:`~cryptography.x509.AuthorityKeyIdentifier.from_issuer_subject_key_identifier`
  and deprecate passing an Extension object.</changelog>
  <changelog author="michael@stroeder.com" date="1571313600">- update to 2.8
  * Added support for Python 3.8.
  * Added class methods Poly1305.generate_tag and Poly1305.verify_tag for Poly1305 sign and verify operations.
  * Deprecated support for OpenSSL 1.0.1. Support will be removed in cryptography 2.9.
  * We now ship manylinux2010 wheels in addition to our manylinux1 wheels.
  * Added support for ed25519 and ed448 keys in the CertificateBuilder, CertificateSigningRequestBuilder, CertificateRevocationListBuilder and OCSPResponseBuilder.
  * cryptography no longer depends on asn1crypto.
  * FreshestCRL is now allowed as a CertificateRevocationList extension.</changelog>
  <changelog author="michael@stroeder.com" date="1589544000">- update to 2.9.2
  * 2.9.2 - 2020-04-22
  - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15.
  * 2.9.1 - 2020-04-21
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g.
  * 2.9 - 2020-04-02
  - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to
    low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed.
    Users on older version of OpenSSL will need to upgrade.
  - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed.
  - Removed support for calling public_bytes() with no arguments, as per
    our deprecation policy. You must now pass encoding and format.
  - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string()
    returns the RDNs as required by RFC 4514.
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f.
  - Added support for parsing single_extensions in an OCSP response.
  - NameAttribute values can now be empty strings.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1595937600">- update to 3.0
- refreshed disable-uneven-sizes-tests.patch and  skip_openssl_memleak_test.patch
  * Removed support for passing an Extension instance
    to from_issuer_subject_key_identifier(), as per our deprecation policy.
  * Support for LibreSSL 2.7.x, 2.8.x, and 2.9.0 has been removed
  * Dropped support for macOS 10.9, macOS users must upgrade to 10.10 or newer.
  * RSA generate_private_key() no longer accepts public_exponent values except
    65537 and 3 (the latter for legacy purposes).
  * X.509 certificate parsing now enforces that the version field contains
    a valid value, rather than deferring this check until version is accessed.
  * Deprecated support for Python 2
  * Added support for OpenSSH serialization format for ec, ed25519, rsa and dsa
    private keys: load_ssh_private_key() for loading and OpenSSH for writing.
  * Added support for OpenSSH certificates to load_ssh_public_key().
  * Added encrypt_at_time() and decrypt_at_time() to Fernet.
  * Added support for the SubjectInformationAccess X.509 extension.
  * Added support for parsing SignedCertificateTimestamps in OCSP responses.
  * Added support for parsing attributes in certificate signing requests via get_attribute_for_oid().
  * Added support for encoding attributes in certificate signing requests via add_attribute().
  * On OpenSSL 1.1.1d and higher cryptography now uses OpenSSL’s built-in CSPRNG
    instead of its own OS random engine because these versions of OpenSSL properly reseed on fork.
  * Added initial support for creating PKCS12 files with serialize_key_and_certificates().</changelog>
  <changelog author="dmueller@suse.com" date="1600430400">- update to 3.1:
  * **BACKWARDS INCOMPATIBLE:** Removed support for ``idna`` based
    :term:`U-label` parsing in various X.509 classes. This support was originally
    deprecated in version 2.1 and moved to an extra in 2.5.
  * Deprecated OpenSSL 1.0.2 support. OpenSSL 1.0.2 is no longer supported by
    the OpenSSL project. The next version of ``cryptography`` will drop support
    for it.
  * Deprecated support for Python 3.5. This version sees very little use and will
    be removed in the next release.
  * ``backend`` arguments to functions are no longer required and the
    default backend will automatically be selected if no ``backend`` is provided.
  * Added initial support for parsing certificates from PKCS7 files with
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_pem_pkcs7_certificates`
    and
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_der_pkcs7_certificates`
    .
  * Calling ``update`` or ``update_into`` on
    :class:`~cryptography.hazmat.primitives.ciphers.CipherContext` with ``data``
    longer than 2\ :sup:`31` bytes no longer raises an ``OverflowError``. This
    also resolves the same issue in :doc:`/fernet`.</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 3.1.1:
  * wheels compiled with OpenSSL 1.1.1h.</changelog>
  <changelog author="michael@stroeder.com" date="1603713600">- update to 3.2 (bsc#1178168, CVE-2020-25659):
  * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,
    to protect against Bleichenbacher vulnerabilities. Due to limitations imposed
    by our API, we cannot completely mitigate this vulnerability.
  * Support for OpenSSL 1.0.2 has been removed.
  * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.
- drops 5507-mitigate-Bleichenbacher-attacks.patch on older dists</changelog>
  <changelog author="michael@stroeder.com" date="1603886400">- update to 3.2.1:
  Disable blinding on RSA public keys to address an error with
  some versions of OpenSSL.</changelog>
  <changelog author="mcepl@suse.com" date="1607256000">- Remove unnecessary dependency virtualenv.</changelog>
  <changelog author="mrueckert@suse.de" date="1607515200">- update to 3.3.0
  - BACKWARDS INCOMPATIBLE: Support for Python 3.5 has been removed
    due to low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: The GCM and AESGCM now require 64-bit
    to 1024-bit (8 byte to 128 byte) initialization vectors. This
    change is to conform with an upcoming OpenSSL release that will
    no longer support sizes outside this window.
  - BACKWARDS INCOMPATIBLE: When deserializing asymmetric keys we
    now raise ValueError rather than UnsupportedAlgorithm when an
    unsupported cipher is used. This change is to conform with an
    upcoming OpenSSL release that will no longer distinguish
    between error types.
  - BACKWARDS INCOMPATIBLE: We no longer allow loading of finite
    field Diffie-Hellman parameters of less than 512 bits in
    length. This change is to conform with an upcoming OpenSSL
    release that no longer supports smaller sizes. These keys were
    already wildly insecure and should not have been used in any
    application outside of testing.
  - Updated Windows, macOS, and manylinux wheels to be compiled
    with OpenSSL 1.1.1i.
  - Python 2 support is deprecated in cryptography. This is the
    last release that will support Python 2.
  - Added the recover_data_from_signature() function to
    RSAPublicKey for recovering the signed data from an RSA
    signature.</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 3.3.1:
  * Re-added a legacy symbol causing problems for older ``pyOpenSSL`` use</changelog>
  <changelog author="michael@stroeder.com" date="1612699200">- update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331):
  * SECURITY ISSUE: Fixed a bug where certain sequences of update()
    calls when symmetrically encrypting very large payloads (&gt;2GB) could
    result in an integer overflow, leading to buffer overflows.
    CVE-2020-36242
  - drops CVE-2020-36242-buffer-overflow.patch on older dists</changelog>
  <changelog author="daniel.garcia@suse.com" date="1676289600">- Add patch CVE-2023-23931-dont-allow-update-into.patch (bsc#1208036, CVE-2023-23931)
  * Don't allow update_into to mutate immutable objects</changelog>
</package>
<package pkgid="958f253ca0f9a3b9604cb9922194323afdedd8c5e93bd6d2ce00aadcb3811e46" name="python3-cryptography" arch="s390x">
  <version epoch="0" ver="3.3.2" rel="150400.20.3"/>
  <changelog author="tchvatal@suse.com" date="1534852800">- Update to 2.3.1:
  * updated tests for upstream wycheproof changes
  * many other tiny test tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1544097600">- Fix fdupes call</changelog>
  <changelog author="mcepl@suse.com" date="1544097601">- Update to 2.4.1:
  * Dropped support for LibreSSL 2.4.x.
  * Deprecated OpenSSL 1.0.1 support. OpenSSL 1.0.1 is no
    longer supported by the OpenSSL project. At this time there
    is no time table for dropping support, however we strongly
    encourage all users to upgrade or install cryptography from
    a wheel.
  * Added initial :doc:`OCSP &lt;/x509/ocsp&gt;` support.
  * Added support for cryptography.x509.PrecertPoison.</changelog>
  <changelog author="mpluskal@suse.com" date="1546516800">- Update to version 2.4.2:
  * Updated Windows, macOS, and manylinux1 wheels to be compiled
    with OpenSSL 1.1.0j.</changelog>
  <changelog author="michael@stroeder.com" date="1548417600">- Dependency on python-idna changed to "Recommends" aligned with
  change in upstream source (see below)
- update to 2.5:
  * BACKWARDS INCOMPATIBLE: U-label strings were deprecated in version 2.1,
    but this version removes the default idna dependency as well. If you still
    need this deprecated path please install cryptography with the idna extra:
    pip install cryptography[idna].
  * BACKWARDS INCOMPATIBLE: The minimum supported PyPy version is now 5.4.
  * Numerous classes and functions have been updated to allow bytes-like
    types for keying material and passwords, including symmetric algorithms,
    AEAD ciphers, KDFs, loading asymmetric keys, and one time password classes.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL 1.1.1a.
  * Added support for SHA512_224 and SHA512_256 when using OpenSSL 1.1.1.
  * Added support for SHA3_224, SHA3_256, SHA3_384, and SHA3_512 when using OpenSSL 1.1.1.
  * Added support for X448 key exchange when using OpenSSL 1.1.1.
  * Added support for SHAKE128 and SHAKE256 when using OpenSSL 1.1.1.
  * Added initial support for parsing PKCS12 files with load_key_and_certificates().
  * Added support for IssuingDistributionPoint.
  * Added rfc4514_string() method to x509.Name,
    x509.RelativeDistinguishedName, and x509.NameAttribute to format the name
    or component an RFC 4514 Distinguished Name string.
  * Added from_encoded_point(), which immediately checks if the point is on
    the curve and supports compressed points. Deprecated the previous method
    from_encoded_point().
  * Added signature_hash_algorithm to OCSPResponse.
  * Updated X25519 key exchange support to allow additional serialization
    methods. Calling public_bytes() with no arguments has been deprecated.
  * Added support for encoding compressed and uncompressed points via
    public_bytes(). Deprecated the previous method encode_point().</changelog>
  <changelog author="michael@stroeder.com" date="1551355200">- update to 2.6.1:
  * BACKWARDS INCOMPATIBLE:
    Removedcryptography.hazmat.primitives.asymmetric.utils.encode_rfc6979_signature
    andcryptography.hazmat.primitives.asymmetric.utils.decode_rfc6979_signature,
    which had been deprecated for nearly 4 years. Use encode_dss_signature()
    and decode_dss_signature()instead.
  * BACKWARDS INCOMPATIBLE: Removed cryptography.x509.Certificate.serial, which
    had been deprecated for nearly 3 years. Use serial_number instead.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with
    OpenSSL 1.1.1b.
  * Added support for Ed448 signing when using OpenSSL 1.1.1b or newer.
  * Added support for Ed25519 signing when using OpenSSL 1.1.1b or newer.
  * load_ssh_public_key() can now load ed25519 public keys.
  * Add support for easily mapping an object identifier to its elliptic curve
    class viaget_curve_for_oid().
  * Add support for OpenSSL when compiled with the no-engine
    (OPENSSL_NO_ENGINE) flag.</changelog>
  <changelog author="tchvatal@suse.com" date="1559131200">- Simplify the test execution to be more understandable</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559563200">- update to 2.7
  * BACKWARDS INCOMPATIBLE: Removed the cryptography.hazmat.primitives.mac.MACContext interface.
  The CMAC and HMAC APIs have not changed, but they are no longer registered
  as MACContext instances.
  * Removed support for running our tests with setup.py test.
  * Add support for :class:`~cryptography.hazmat.primitives.poly1305.Poly1305`
  when using OpenSSL 1.1.1 or newer.
  * Support serialization with Encoding.OpenSSH and PublicFormat.OpenSSH
  in :meth:`Ed25519PublicKey.public_bytes &lt;cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PublicKey.public_bytes&gt;` .
  * Correctly allow passing a SubjectKeyIdentifier to :meth:`~cryptography.x509.AuthorityKeyIdentifier.from_issuer_subject_key_identifier`
  and deprecate passing an Extension object.</changelog>
  <changelog author="michael@stroeder.com" date="1571313600">- update to 2.8
  * Added support for Python 3.8.
  * Added class methods Poly1305.generate_tag and Poly1305.verify_tag for Poly1305 sign and verify operations.
  * Deprecated support for OpenSSL 1.0.1. Support will be removed in cryptography 2.9.
  * We now ship manylinux2010 wheels in addition to our manylinux1 wheels.
  * Added support for ed25519 and ed448 keys in the CertificateBuilder, CertificateSigningRequestBuilder, CertificateRevocationListBuilder and OCSPResponseBuilder.
  * cryptography no longer depends on asn1crypto.
  * FreshestCRL is now allowed as a CertificateRevocationList extension.</changelog>
  <changelog author="michael@stroeder.com" date="1589544000">- update to 2.9.2
  * 2.9.2 - 2020-04-22
  - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15.
  * 2.9.1 - 2020-04-21
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g.
  * 2.9 - 2020-04-02
  - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to
    low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed.
    Users on older version of OpenSSL will need to upgrade.
  - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed.
  - Removed support for calling public_bytes() with no arguments, as per
    our deprecation policy. You must now pass encoding and format.
  - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string()
    returns the RDNs as required by RFC 4514.
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f.
  - Added support for parsing single_extensions in an OCSP response.
  - NameAttribute values can now be empty strings.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1595937600">- update to 3.0
- refreshed disable-uneven-sizes-tests.patch and  skip_openssl_memleak_test.patch
  * Removed support for passing an Extension instance
    to from_issuer_subject_key_identifier(), as per our deprecation policy.
  * Support for LibreSSL 2.7.x, 2.8.x, and 2.9.0 has been removed
  * Dropped support for macOS 10.9, macOS users must upgrade to 10.10 or newer.
  * RSA generate_private_key() no longer accepts public_exponent values except
    65537 and 3 (the latter for legacy purposes).
  * X.509 certificate parsing now enforces that the version field contains
    a valid value, rather than deferring this check until version is accessed.
  * Deprecated support for Python 2
  * Added support for OpenSSH serialization format for ec, ed25519, rsa and dsa
    private keys: load_ssh_private_key() for loading and OpenSSH for writing.
  * Added support for OpenSSH certificates to load_ssh_public_key().
  * Added encrypt_at_time() and decrypt_at_time() to Fernet.
  * Added support for the SubjectInformationAccess X.509 extension.
  * Added support for parsing SignedCertificateTimestamps in OCSP responses.
  * Added support for parsing attributes in certificate signing requests via get_attribute_for_oid().
  * Added support for encoding attributes in certificate signing requests via add_attribute().
  * On OpenSSL 1.1.1d and higher cryptography now uses OpenSSL’s built-in CSPRNG
    instead of its own OS random engine because these versions of OpenSSL properly reseed on fork.
  * Added initial support for creating PKCS12 files with serialize_key_and_certificates().</changelog>
  <changelog author="dmueller@suse.com" date="1600430400">- update to 3.1:
  * **BACKWARDS INCOMPATIBLE:** Removed support for ``idna`` based
    :term:`U-label` parsing in various X.509 classes. This support was originally
    deprecated in version 2.1 and moved to an extra in 2.5.
  * Deprecated OpenSSL 1.0.2 support. OpenSSL 1.0.2 is no longer supported by
    the OpenSSL project. The next version of ``cryptography`` will drop support
    for it.
  * Deprecated support for Python 3.5. This version sees very little use and will
    be removed in the next release.
  * ``backend`` arguments to functions are no longer required and the
    default backend will automatically be selected if no ``backend`` is provided.
  * Added initial support for parsing certificates from PKCS7 files with
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_pem_pkcs7_certificates`
    and
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_der_pkcs7_certificates`
    .
  * Calling ``update`` or ``update_into`` on
    :class:`~cryptography.hazmat.primitives.ciphers.CipherContext` with ``data``
    longer than 2\ :sup:`31` bytes no longer raises an ``OverflowError``. This
    also resolves the same issue in :doc:`/fernet`.</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 3.1.1:
  * wheels compiled with OpenSSL 1.1.1h.</changelog>
  <changelog author="michael@stroeder.com" date="1603713600">- update to 3.2 (bsc#1178168, CVE-2020-25659):
  * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,
    to protect against Bleichenbacher vulnerabilities. Due to limitations imposed
    by our API, we cannot completely mitigate this vulnerability.
  * Support for OpenSSL 1.0.2 has been removed.
  * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.
- drops 5507-mitigate-Bleichenbacher-attacks.patch on older dists</changelog>
  <changelog author="michael@stroeder.com" date="1603886400">- update to 3.2.1:
  Disable blinding on RSA public keys to address an error with
  some versions of OpenSSL.</changelog>
  <changelog author="mcepl@suse.com" date="1607256000">- Remove unnecessary dependency virtualenv.</changelog>
  <changelog author="mrueckert@suse.de" date="1607515200">- update to 3.3.0
  - BACKWARDS INCOMPATIBLE: Support for Python 3.5 has been removed
    due to low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: The GCM and AESGCM now require 64-bit
    to 1024-bit (8 byte to 128 byte) initialization vectors. This
    change is to conform with an upcoming OpenSSL release that will
    no longer support sizes outside this window.
  - BACKWARDS INCOMPATIBLE: When deserializing asymmetric keys we
    now raise ValueError rather than UnsupportedAlgorithm when an
    unsupported cipher is used. This change is to conform with an
    upcoming OpenSSL release that will no longer distinguish
    between error types.
  - BACKWARDS INCOMPATIBLE: We no longer allow loading of finite
    field Diffie-Hellman parameters of less than 512 bits in
    length. This change is to conform with an upcoming OpenSSL
    release that no longer supports smaller sizes. These keys were
    already wildly insecure and should not have been used in any
    application outside of testing.
  - Updated Windows, macOS, and manylinux wheels to be compiled
    with OpenSSL 1.1.1i.
  - Python 2 support is deprecated in cryptography. This is the
    last release that will support Python 2.
  - Added the recover_data_from_signature() function to
    RSAPublicKey for recovering the signed data from an RSA
    signature.</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 3.3.1:
  * Re-added a legacy symbol causing problems for older ``pyOpenSSL`` use</changelog>
  <changelog author="michael@stroeder.com" date="1612699200">- update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331):
  * SECURITY ISSUE: Fixed a bug where certain sequences of update()
    calls when symmetrically encrypting very large payloads (&gt;2GB) could
    result in an integer overflow, leading to buffer overflows.
    CVE-2020-36242
  - drops CVE-2020-36242-buffer-overflow.patch on older dists</changelog>
  <changelog author="daniel.garcia@suse.com" date="1676289600">- Add patch CVE-2023-23931-dont-allow-update-into.patch (bsc#1208036, CVE-2023-23931)
  * Don't allow update_into to mutate immutable objects</changelog>
</package>
<package pkgid="1163cf320b2838ea9802aa8f08ddf00ee15013045cd79bb7ffd66784b20c7947" name="python3-cryptography" arch="src">
  <version epoch="0" ver="3.3.2" rel="150400.20.3"/>
  <changelog author="tchvatal@suse.com" date="1534852800">- Update to 2.3.1:
  * updated tests for upstream wycheproof changes
  * many other tiny test tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1544097600">- Fix fdupes call</changelog>
  <changelog author="mcepl@suse.com" date="1544097601">- Update to 2.4.1:
  * Dropped support for LibreSSL 2.4.x.
  * Deprecated OpenSSL 1.0.1 support. OpenSSL 1.0.1 is no
    longer supported by the OpenSSL project. At this time there
    is no time table for dropping support, however we strongly
    encourage all users to upgrade or install cryptography from
    a wheel.
  * Added initial :doc:`OCSP &lt;/x509/ocsp&gt;` support.
  * Added support for cryptography.x509.PrecertPoison.</changelog>
  <changelog author="mpluskal@suse.com" date="1546516800">- Update to version 2.4.2:
  * Updated Windows, macOS, and manylinux1 wheels to be compiled
    with OpenSSL 1.1.0j.</changelog>
  <changelog author="michael@stroeder.com" date="1548417600">- Dependency on python-idna changed to "Recommends" aligned with
  change in upstream source (see below)
- update to 2.5:
  * BACKWARDS INCOMPATIBLE: U-label strings were deprecated in version 2.1,
    but this version removes the default idna dependency as well. If you still
    need this deprecated path please install cryptography with the idna extra:
    pip install cryptography[idna].
  * BACKWARDS INCOMPATIBLE: The minimum supported PyPy version is now 5.4.
  * Numerous classes and functions have been updated to allow bytes-like
    types for keying material and passwords, including symmetric algorithms,
    AEAD ciphers, KDFs, loading asymmetric keys, and one time password classes.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL 1.1.1a.
  * Added support for SHA512_224 and SHA512_256 when using OpenSSL 1.1.1.
  * Added support for SHA3_224, SHA3_256, SHA3_384, and SHA3_512 when using OpenSSL 1.1.1.
  * Added support for X448 key exchange when using OpenSSL 1.1.1.
  * Added support for SHAKE128 and SHAKE256 when using OpenSSL 1.1.1.
  * Added initial support for parsing PKCS12 files with load_key_and_certificates().
  * Added support for IssuingDistributionPoint.
  * Added rfc4514_string() method to x509.Name,
    x509.RelativeDistinguishedName, and x509.NameAttribute to format the name
    or component an RFC 4514 Distinguished Name string.
  * Added from_encoded_point(), which immediately checks if the point is on
    the curve and supports compressed points. Deprecated the previous method
    from_encoded_point().
  * Added signature_hash_algorithm to OCSPResponse.
  * Updated X25519 key exchange support to allow additional serialization
    methods. Calling public_bytes() with no arguments has been deprecated.
  * Added support for encoding compressed and uncompressed points via
    public_bytes(). Deprecated the previous method encode_point().</changelog>
  <changelog author="michael@stroeder.com" date="1551355200">- update to 2.6.1:
  * BACKWARDS INCOMPATIBLE:
    Removedcryptography.hazmat.primitives.asymmetric.utils.encode_rfc6979_signature
    andcryptography.hazmat.primitives.asymmetric.utils.decode_rfc6979_signature,
    which had been deprecated for nearly 4 years. Use encode_dss_signature()
    and decode_dss_signature()instead.
  * BACKWARDS INCOMPATIBLE: Removed cryptography.x509.Certificate.serial, which
    had been deprecated for nearly 3 years. Use serial_number instead.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with
    OpenSSL 1.1.1b.
  * Added support for Ed448 signing when using OpenSSL 1.1.1b or newer.
  * Added support for Ed25519 signing when using OpenSSL 1.1.1b or newer.
  * load_ssh_public_key() can now load ed25519 public keys.
  * Add support for easily mapping an object identifier to its elliptic curve
    class viaget_curve_for_oid().
  * Add support for OpenSSL when compiled with the no-engine
    (OPENSSL_NO_ENGINE) flag.</changelog>
  <changelog author="tchvatal@suse.com" date="1559131200">- Simplify the test execution to be more understandable</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559563200">- update to 2.7
  * BACKWARDS INCOMPATIBLE: Removed the cryptography.hazmat.primitives.mac.MACContext interface.
  The CMAC and HMAC APIs have not changed, but they are no longer registered
  as MACContext instances.
  * Removed support for running our tests with setup.py test.
  * Add support for :class:`~cryptography.hazmat.primitives.poly1305.Poly1305`
  when using OpenSSL 1.1.1 or newer.
  * Support serialization with Encoding.OpenSSH and PublicFormat.OpenSSH
  in :meth:`Ed25519PublicKey.public_bytes &lt;cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PublicKey.public_bytes&gt;` .
  * Correctly allow passing a SubjectKeyIdentifier to :meth:`~cryptography.x509.AuthorityKeyIdentifier.from_issuer_subject_key_identifier`
  and deprecate passing an Extension object.</changelog>
  <changelog author="michael@stroeder.com" date="1571313600">- update to 2.8
  * Added support for Python 3.8.
  * Added class methods Poly1305.generate_tag and Poly1305.verify_tag for Poly1305 sign and verify operations.
  * Deprecated support for OpenSSL 1.0.1. Support will be removed in cryptography 2.9.
  * We now ship manylinux2010 wheels in addition to our manylinux1 wheels.
  * Added support for ed25519 and ed448 keys in the CertificateBuilder, CertificateSigningRequestBuilder, CertificateRevocationListBuilder and OCSPResponseBuilder.
  * cryptography no longer depends on asn1crypto.
  * FreshestCRL is now allowed as a CertificateRevocationList extension.</changelog>
  <changelog author="michael@stroeder.com" date="1589544000">- update to 2.9.2
  * 2.9.2 - 2020-04-22
  - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15.
  * 2.9.1 - 2020-04-21
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g.
  * 2.9 - 2020-04-02
  - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to
    low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed.
    Users on older version of OpenSSL will need to upgrade.
  - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed.
  - Removed support for calling public_bytes() with no arguments, as per
    our deprecation policy. You must now pass encoding and format.
  - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string()
    returns the RDNs as required by RFC 4514.
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f.
  - Added support for parsing single_extensions in an OCSP response.
  - NameAttribute values can now be empty strings.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1595937600">- update to 3.0
- refreshed disable-uneven-sizes-tests.patch and  skip_openssl_memleak_test.patch
  * Removed support for passing an Extension instance
    to from_issuer_subject_key_identifier(), as per our deprecation policy.
  * Support for LibreSSL 2.7.x, 2.8.x, and 2.9.0 has been removed
  * Dropped support for macOS 10.9, macOS users must upgrade to 10.10 or newer.
  * RSA generate_private_key() no longer accepts public_exponent values except
    65537 and 3 (the latter for legacy purposes).
  * X.509 certificate parsing now enforces that the version field contains
    a valid value, rather than deferring this check until version is accessed.
  * Deprecated support for Python 2
  * Added support for OpenSSH serialization format for ec, ed25519, rsa and dsa
    private keys: load_ssh_private_key() for loading and OpenSSH for writing.
  * Added support for OpenSSH certificates to load_ssh_public_key().
  * Added encrypt_at_time() and decrypt_at_time() to Fernet.
  * Added support for the SubjectInformationAccess X.509 extension.
  * Added support for parsing SignedCertificateTimestamps in OCSP responses.
  * Added support for parsing attributes in certificate signing requests via get_attribute_for_oid().
  * Added support for encoding attributes in certificate signing requests via add_attribute().
  * On OpenSSL 1.1.1d and higher cryptography now uses OpenSSL’s built-in CSPRNG
    instead of its own OS random engine because these versions of OpenSSL properly reseed on fork.
  * Added initial support for creating PKCS12 files with serialize_key_and_certificates().</changelog>
  <changelog author="dmueller@suse.com" date="1600430400">- update to 3.1:
  * **BACKWARDS INCOMPATIBLE:** Removed support for ``idna`` based
    :term:`U-label` parsing in various X.509 classes. This support was originally
    deprecated in version 2.1 and moved to an extra in 2.5.
  * Deprecated OpenSSL 1.0.2 support. OpenSSL 1.0.2 is no longer supported by
    the OpenSSL project. The next version of ``cryptography`` will drop support
    for it.
  * Deprecated support for Python 3.5. This version sees very little use and will
    be removed in the next release.
  * ``backend`` arguments to functions are no longer required and the
    default backend will automatically be selected if no ``backend`` is provided.
  * Added initial support for parsing certificates from PKCS7 files with
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_pem_pkcs7_certificates`
    and
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_der_pkcs7_certificates`
    .
  * Calling ``update`` or ``update_into`` on
    :class:`~cryptography.hazmat.primitives.ciphers.CipherContext` with ``data``
    longer than 2\ :sup:`31` bytes no longer raises an ``OverflowError``. This
    also resolves the same issue in :doc:`/fernet`.</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 3.1.1:
  * wheels compiled with OpenSSL 1.1.1h.</changelog>
  <changelog author="michael@stroeder.com" date="1603713600">- update to 3.2 (bsc#1178168, CVE-2020-25659):
  * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,
    to protect against Bleichenbacher vulnerabilities. Due to limitations imposed
    by our API, we cannot completely mitigate this vulnerability.
  * Support for OpenSSL 1.0.2 has been removed.
  * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.
- drops 5507-mitigate-Bleichenbacher-attacks.patch on older dists</changelog>
  <changelog author="michael@stroeder.com" date="1603886400">- update to 3.2.1:
  Disable blinding on RSA public keys to address an error with
  some versions of OpenSSL.</changelog>
  <changelog author="mcepl@suse.com" date="1607256000">- Remove unnecessary dependency virtualenv.</changelog>
  <changelog author="mrueckert@suse.de" date="1607515200">- update to 3.3.0
  - BACKWARDS INCOMPATIBLE: Support for Python 3.5 has been removed
    due to low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: The GCM and AESGCM now require 64-bit
    to 1024-bit (8 byte to 128 byte) initialization vectors. This
    change is to conform with an upcoming OpenSSL release that will
    no longer support sizes outside this window.
  - BACKWARDS INCOMPATIBLE: When deserializing asymmetric keys we
    now raise ValueError rather than UnsupportedAlgorithm when an
    unsupported cipher is used. This change is to conform with an
    upcoming OpenSSL release that will no longer distinguish
    between error types.
  - BACKWARDS INCOMPATIBLE: We no longer allow loading of finite
    field Diffie-Hellman parameters of less than 512 bits in
    length. This change is to conform with an upcoming OpenSSL
    release that no longer supports smaller sizes. These keys were
    already wildly insecure and should not have been used in any
    application outside of testing.
  - Updated Windows, macOS, and manylinux wheels to be compiled
    with OpenSSL 1.1.1i.
  - Python 2 support is deprecated in cryptography. This is the
    last release that will support Python 2.
  - Added the recover_data_from_signature() function to
    RSAPublicKey for recovering the signed data from an RSA
    signature.</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 3.3.1:
  * Re-added a legacy symbol causing problems for older ``pyOpenSSL`` use</changelog>
  <changelog author="michael@stroeder.com" date="1612699200">- update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331):
  * SECURITY ISSUE: Fixed a bug where certain sequences of update()
    calls when symmetrically encrypting very large payloads (&gt;2GB) could
    result in an integer overflow, leading to buffer overflows.
    CVE-2020-36242
  - drops CVE-2020-36242-buffer-overflow.patch on older dists</changelog>
  <changelog author="daniel.garcia@suse.com" date="1676289600">- Add patch CVE-2023-23931-dont-allow-update-into.patch (bsc#1208036, CVE-2023-23931)
  * Don't allow update_into to mutate immutable objects</changelog>
</package>
<package pkgid="8d01db80914ea5adb8bfa4e7bd3ad7f8976aab6cc76859f1da5871870d8ca797" name="python3-cryptography" arch="x86_64">
  <version epoch="0" ver="3.3.2" rel="150400.20.3"/>
  <changelog author="tchvatal@suse.com" date="1534852800">- Update to 2.3.1:
  * updated tests for upstream wycheproof changes
  * many other tiny test tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1544097600">- Fix fdupes call</changelog>
  <changelog author="mcepl@suse.com" date="1544097601">- Update to 2.4.1:
  * Dropped support for LibreSSL 2.4.x.
  * Deprecated OpenSSL 1.0.1 support. OpenSSL 1.0.1 is no
    longer supported by the OpenSSL project. At this time there
    is no time table for dropping support, however we strongly
    encourage all users to upgrade or install cryptography from
    a wheel.
  * Added initial :doc:`OCSP &lt;/x509/ocsp&gt;` support.
  * Added support for cryptography.x509.PrecertPoison.</changelog>
  <changelog author="mpluskal@suse.com" date="1546516800">- Update to version 2.4.2:
  * Updated Windows, macOS, and manylinux1 wheels to be compiled
    with OpenSSL 1.1.0j.</changelog>
  <changelog author="michael@stroeder.com" date="1548417600">- Dependency on python-idna changed to "Recommends" aligned with
  change in upstream source (see below)
- update to 2.5:
  * BACKWARDS INCOMPATIBLE: U-label strings were deprecated in version 2.1,
    but this version removes the default idna dependency as well. If you still
    need this deprecated path please install cryptography with the idna extra:
    pip install cryptography[idna].
  * BACKWARDS INCOMPATIBLE: The minimum supported PyPy version is now 5.4.
  * Numerous classes and functions have been updated to allow bytes-like
    types for keying material and passwords, including symmetric algorithms,
    AEAD ciphers, KDFs, loading asymmetric keys, and one time password classes.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL 1.1.1a.
  * Added support for SHA512_224 and SHA512_256 when using OpenSSL 1.1.1.
  * Added support for SHA3_224, SHA3_256, SHA3_384, and SHA3_512 when using OpenSSL 1.1.1.
  * Added support for X448 key exchange when using OpenSSL 1.1.1.
  * Added support for SHAKE128 and SHAKE256 when using OpenSSL 1.1.1.
  * Added initial support for parsing PKCS12 files with load_key_and_certificates().
  * Added support for IssuingDistributionPoint.
  * Added rfc4514_string() method to x509.Name,
    x509.RelativeDistinguishedName, and x509.NameAttribute to format the name
    or component an RFC 4514 Distinguished Name string.
  * Added from_encoded_point(), which immediately checks if the point is on
    the curve and supports compressed points. Deprecated the previous method
    from_encoded_point().
  * Added signature_hash_algorithm to OCSPResponse.
  * Updated X25519 key exchange support to allow additional serialization
    methods. Calling public_bytes() with no arguments has been deprecated.
  * Added support for encoding compressed and uncompressed points via
    public_bytes(). Deprecated the previous method encode_point().</changelog>
  <changelog author="michael@stroeder.com" date="1551355200">- update to 2.6.1:
  * BACKWARDS INCOMPATIBLE:
    Removedcryptography.hazmat.primitives.asymmetric.utils.encode_rfc6979_signature
    andcryptography.hazmat.primitives.asymmetric.utils.decode_rfc6979_signature,
    which had been deprecated for nearly 4 years. Use encode_dss_signature()
    and decode_dss_signature()instead.
  * BACKWARDS INCOMPATIBLE: Removed cryptography.x509.Certificate.serial, which
    had been deprecated for nearly 3 years. Use serial_number instead.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with
    OpenSSL 1.1.1b.
  * Added support for Ed448 signing when using OpenSSL 1.1.1b or newer.
  * Added support for Ed25519 signing when using OpenSSL 1.1.1b or newer.
  * load_ssh_public_key() can now load ed25519 public keys.
  * Add support for easily mapping an object identifier to its elliptic curve
    class viaget_curve_for_oid().
  * Add support for OpenSSL when compiled with the no-engine
    (OPENSSL_NO_ENGINE) flag.</changelog>
  <changelog author="tchvatal@suse.com" date="1559131200">- Simplify the test execution to be more understandable</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559563200">- update to 2.7
  * BACKWARDS INCOMPATIBLE: Removed the cryptography.hazmat.primitives.mac.MACContext interface.
  The CMAC and HMAC APIs have not changed, but they are no longer registered
  as MACContext instances.
  * Removed support for running our tests with setup.py test.
  * Add support for :class:`~cryptography.hazmat.primitives.poly1305.Poly1305`
  when using OpenSSL 1.1.1 or newer.
  * Support serialization with Encoding.OpenSSH and PublicFormat.OpenSSH
  in :meth:`Ed25519PublicKey.public_bytes &lt;cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PublicKey.public_bytes&gt;` .
  * Correctly allow passing a SubjectKeyIdentifier to :meth:`~cryptography.x509.AuthorityKeyIdentifier.from_issuer_subject_key_identifier`
  and deprecate passing an Extension object.</changelog>
  <changelog author="michael@stroeder.com" date="1571313600">- update to 2.8
  * Added support for Python 3.8.
  * Added class methods Poly1305.generate_tag and Poly1305.verify_tag for Poly1305 sign and verify operations.
  * Deprecated support for OpenSSL 1.0.1. Support will be removed in cryptography 2.9.
  * We now ship manylinux2010 wheels in addition to our manylinux1 wheels.
  * Added support for ed25519 and ed448 keys in the CertificateBuilder, CertificateSigningRequestBuilder, CertificateRevocationListBuilder and OCSPResponseBuilder.
  * cryptography no longer depends on asn1crypto.
  * FreshestCRL is now allowed as a CertificateRevocationList extension.</changelog>
  <changelog author="michael@stroeder.com" date="1589544000">- update to 2.9.2
  * 2.9.2 - 2020-04-22
  - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15.
  * 2.9.1 - 2020-04-21
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g.
  * 2.9 - 2020-04-02
  - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to
    low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed.
    Users on older version of OpenSSL will need to upgrade.
  - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed.
  - Removed support for calling public_bytes() with no arguments, as per
    our deprecation policy. You must now pass encoding and format.
  - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string()
    returns the RDNs as required by RFC 4514.
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f.
  - Added support for parsing single_extensions in an OCSP response.
  - NameAttribute values can now be empty strings.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1595937600">- update to 3.0
- refreshed disable-uneven-sizes-tests.patch and  skip_openssl_memleak_test.patch
  * Removed support for passing an Extension instance
    to from_issuer_subject_key_identifier(), as per our deprecation policy.
  * Support for LibreSSL 2.7.x, 2.8.x, and 2.9.0 has been removed
  * Dropped support for macOS 10.9, macOS users must upgrade to 10.10 or newer.
  * RSA generate_private_key() no longer accepts public_exponent values except
    65537 and 3 (the latter for legacy purposes).
  * X.509 certificate parsing now enforces that the version field contains
    a valid value, rather than deferring this check until version is accessed.
  * Deprecated support for Python 2
  * Added support for OpenSSH serialization format for ec, ed25519, rsa and dsa
    private keys: load_ssh_private_key() for loading and OpenSSH for writing.
  * Added support for OpenSSH certificates to load_ssh_public_key().
  * Added encrypt_at_time() and decrypt_at_time() to Fernet.
  * Added support for the SubjectInformationAccess X.509 extension.
  * Added support for parsing SignedCertificateTimestamps in OCSP responses.
  * Added support for parsing attributes in certificate signing requests via get_attribute_for_oid().
  * Added support for encoding attributes in certificate signing requests via add_attribute().
  * On OpenSSL 1.1.1d and higher cryptography now uses OpenSSL’s built-in CSPRNG
    instead of its own OS random engine because these versions of OpenSSL properly reseed on fork.
  * Added initial support for creating PKCS12 files with serialize_key_and_certificates().</changelog>
  <changelog author="dmueller@suse.com" date="1600430400">- update to 3.1:
  * **BACKWARDS INCOMPATIBLE:** Removed support for ``idna`` based
    :term:`U-label` parsing in various X.509 classes. This support was originally
    deprecated in version 2.1 and moved to an extra in 2.5.
  * Deprecated OpenSSL 1.0.2 support. OpenSSL 1.0.2 is no longer supported by
    the OpenSSL project. The next version of ``cryptography`` will drop support
    for it.
  * Deprecated support for Python 3.5. This version sees very little use and will
    be removed in the next release.
  * ``backend`` arguments to functions are no longer required and the
    default backend will automatically be selected if no ``backend`` is provided.
  * Added initial support for parsing certificates from PKCS7 files with
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_pem_pkcs7_certificates`
    and
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_der_pkcs7_certificates`
    .
  * Calling ``update`` or ``update_into`` on
    :class:`~cryptography.hazmat.primitives.ciphers.CipherContext` with ``data``
    longer than 2\ :sup:`31` bytes no longer raises an ``OverflowError``. This
    also resolves the same issue in :doc:`/fernet`.</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 3.1.1:
  * wheels compiled with OpenSSL 1.1.1h.</changelog>
  <changelog author="michael@stroeder.com" date="1603713600">- update to 3.2 (bsc#1178168, CVE-2020-25659):
  * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,
    to protect against Bleichenbacher vulnerabilities. Due to limitations imposed
    by our API, we cannot completely mitigate this vulnerability.
  * Support for OpenSSL 1.0.2 has been removed.
  * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.
- drops 5507-mitigate-Bleichenbacher-attacks.patch on older dists</changelog>
  <changelog author="michael@stroeder.com" date="1603886400">- update to 3.2.1:
  Disable blinding on RSA public keys to address an error with
  some versions of OpenSSL.</changelog>
  <changelog author="mcepl@suse.com" date="1607256000">- Remove unnecessary dependency virtualenv.</changelog>
  <changelog author="mrueckert@suse.de" date="1607515200">- update to 3.3.0
  - BACKWARDS INCOMPATIBLE: Support for Python 3.5 has been removed
    due to low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: The GCM and AESGCM now require 64-bit
    to 1024-bit (8 byte to 128 byte) initialization vectors. This
    change is to conform with an upcoming OpenSSL release that will
    no longer support sizes outside this window.
  - BACKWARDS INCOMPATIBLE: When deserializing asymmetric keys we
    now raise ValueError rather than UnsupportedAlgorithm when an
    unsupported cipher is used. This change is to conform with an
    upcoming OpenSSL release that will no longer distinguish
    between error types.
  - BACKWARDS INCOMPATIBLE: We no longer allow loading of finite
    field Diffie-Hellman parameters of less than 512 bits in
    length. This change is to conform with an upcoming OpenSSL
    release that no longer supports smaller sizes. These keys were
    already wildly insecure and should not have been used in any
    application outside of testing.
  - Updated Windows, macOS, and manylinux wheels to be compiled
    with OpenSSL 1.1.1i.
  - Python 2 support is deprecated in cryptography. This is the
    last release that will support Python 2.
  - Added the recover_data_from_signature() function to
    RSAPublicKey for recovering the signed data from an RSA
    signature.</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 3.3.1:
  * Re-added a legacy symbol causing problems for older ``pyOpenSSL`` use</changelog>
  <changelog author="michael@stroeder.com" date="1612699200">- update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331):
  * SECURITY ISSUE: Fixed a bug where certain sequences of update()
    calls when symmetrically encrypting very large payloads (&gt;2GB) could
    result in an integer overflow, leading to buffer overflows.
    CVE-2020-36242
  - drops CVE-2020-36242-buffer-overflow.patch on older dists</changelog>
  <changelog author="daniel.garcia@suse.com" date="1676289600">- Add patch CVE-2023-23931-dont-allow-update-into.patch (bsc#1208036, CVE-2023-23931)
  * Don't allow update_into to mutate immutable objects</changelog>
</package>
<package pkgid="d06ef5d371590a853f397809bb32b29d80ebe610838a1f2ee3bc50b81b4aa76d" name="python3-cryptography" arch="aarch64">
  <version epoch="0" ver="3.3.2" rel="150400.23.1"/>
  <changelog author="tchvatal@suse.com" date="1544097600">- Fix fdupes call</changelog>
  <changelog author="mcepl@suse.com" date="1544097601">- Update to 2.4.1:
  * Dropped support for LibreSSL 2.4.x.
  * Deprecated OpenSSL 1.0.1 support. OpenSSL 1.0.1 is no
    longer supported by the OpenSSL project. At this time there
    is no time table for dropping support, however we strongly
    encourage all users to upgrade or install cryptography from
    a wheel.
  * Added initial :doc:`OCSP &lt;/x509/ocsp&gt;` support.
  * Added support for cryptography.x509.PrecertPoison.</changelog>
  <changelog author="mpluskal@suse.com" date="1546516800">- Update to version 2.4.2:
  * Updated Windows, macOS, and manylinux1 wheels to be compiled
    with OpenSSL 1.1.0j.</changelog>
  <changelog author="michael@stroeder.com" date="1548417600">- Dependency on python-idna changed to "Recommends" aligned with
  change in upstream source (see below)
- update to 2.5:
  * BACKWARDS INCOMPATIBLE: U-label strings were deprecated in version 2.1,
    but this version removes the default idna dependency as well. If you still
    need this deprecated path please install cryptography with the idna extra:
    pip install cryptography[idna].
  * BACKWARDS INCOMPATIBLE: The minimum supported PyPy version is now 5.4.
  * Numerous classes and functions have been updated to allow bytes-like
    types for keying material and passwords, including symmetric algorithms,
    AEAD ciphers, KDFs, loading asymmetric keys, and one time password classes.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL 1.1.1a.
  * Added support for SHA512_224 and SHA512_256 when using OpenSSL 1.1.1.
  * Added support for SHA3_224, SHA3_256, SHA3_384, and SHA3_512 when using OpenSSL 1.1.1.
  * Added support for X448 key exchange when using OpenSSL 1.1.1.
  * Added support for SHAKE128 and SHAKE256 when using OpenSSL 1.1.1.
  * Added initial support for parsing PKCS12 files with load_key_and_certificates().
  * Added support for IssuingDistributionPoint.
  * Added rfc4514_string() method to x509.Name,
    x509.RelativeDistinguishedName, and x509.NameAttribute to format the name
    or component an RFC 4514 Distinguished Name string.
  * Added from_encoded_point(), which immediately checks if the point is on
    the curve and supports compressed points. Deprecated the previous method
    from_encoded_point().
  * Added signature_hash_algorithm to OCSPResponse.
  * Updated X25519 key exchange support to allow additional serialization
    methods. Calling public_bytes() with no arguments has been deprecated.
  * Added support for encoding compressed and uncompressed points via
    public_bytes(). Deprecated the previous method encode_point().</changelog>
  <changelog author="michael@stroeder.com" date="1551355200">- update to 2.6.1:
  * BACKWARDS INCOMPATIBLE:
    Removedcryptography.hazmat.primitives.asymmetric.utils.encode_rfc6979_signature
    andcryptography.hazmat.primitives.asymmetric.utils.decode_rfc6979_signature,
    which had been deprecated for nearly 4 years. Use encode_dss_signature()
    and decode_dss_signature()instead.
  * BACKWARDS INCOMPATIBLE: Removed cryptography.x509.Certificate.serial, which
    had been deprecated for nearly 3 years. Use serial_number instead.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with
    OpenSSL 1.1.1b.
  * Added support for Ed448 signing when using OpenSSL 1.1.1b or newer.
  * Added support for Ed25519 signing when using OpenSSL 1.1.1b or newer.
  * load_ssh_public_key() can now load ed25519 public keys.
  * Add support for easily mapping an object identifier to its elliptic curve
    class viaget_curve_for_oid().
  * Add support for OpenSSL when compiled with the no-engine
    (OPENSSL_NO_ENGINE) flag.</changelog>
  <changelog author="tchvatal@suse.com" date="1559131200">- Simplify the test execution to be more understandable</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559563200">- update to 2.7
  * BACKWARDS INCOMPATIBLE: Removed the cryptography.hazmat.primitives.mac.MACContext interface.
  The CMAC and HMAC APIs have not changed, but they are no longer registered
  as MACContext instances.
  * Removed support for running our tests with setup.py test.
  * Add support for :class:`~cryptography.hazmat.primitives.poly1305.Poly1305`
  when using OpenSSL 1.1.1 or newer.
  * Support serialization with Encoding.OpenSSH and PublicFormat.OpenSSH
  in :meth:`Ed25519PublicKey.public_bytes &lt;cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PublicKey.public_bytes&gt;` .
  * Correctly allow passing a SubjectKeyIdentifier to :meth:`~cryptography.x509.AuthorityKeyIdentifier.from_issuer_subject_key_identifier`
  and deprecate passing an Extension object.</changelog>
  <changelog author="michael@stroeder.com" date="1571313600">- update to 2.8
  * Added support for Python 3.8.
  * Added class methods Poly1305.generate_tag and Poly1305.verify_tag for Poly1305 sign and verify operations.
  * Deprecated support for OpenSSL 1.0.1. Support will be removed in cryptography 2.9.
  * We now ship manylinux2010 wheels in addition to our manylinux1 wheels.
  * Added support for ed25519 and ed448 keys in the CertificateBuilder, CertificateSigningRequestBuilder, CertificateRevocationListBuilder and OCSPResponseBuilder.
  * cryptography no longer depends on asn1crypto.
  * FreshestCRL is now allowed as a CertificateRevocationList extension.</changelog>
  <changelog author="michael@stroeder.com" date="1589544000">- update to 2.9.2
  * 2.9.2 - 2020-04-22
  - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15.
  * 2.9.1 - 2020-04-21
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g.
  * 2.9 - 2020-04-02
  - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to
    low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed.
    Users on older version of OpenSSL will need to upgrade.
  - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed.
  - Removed support for calling public_bytes() with no arguments, as per
    our deprecation policy. You must now pass encoding and format.
  - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string()
    returns the RDNs as required by RFC 4514.
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f.
  - Added support for parsing single_extensions in an OCSP response.
  - NameAttribute values can now be empty strings.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1595937600">- update to 3.0
- refreshed disable-uneven-sizes-tests.patch and  skip_openssl_memleak_test.patch
  * Removed support for passing an Extension instance
    to from_issuer_subject_key_identifier(), as per our deprecation policy.
  * Support for LibreSSL 2.7.x, 2.8.x, and 2.9.0 has been removed
  * Dropped support for macOS 10.9, macOS users must upgrade to 10.10 or newer.
  * RSA generate_private_key() no longer accepts public_exponent values except
    65537 and 3 (the latter for legacy purposes).
  * X.509 certificate parsing now enforces that the version field contains
    a valid value, rather than deferring this check until version is accessed.
  * Deprecated support for Python 2
  * Added support for OpenSSH serialization format for ec, ed25519, rsa and dsa
    private keys: load_ssh_private_key() for loading and OpenSSH for writing.
  * Added support for OpenSSH certificates to load_ssh_public_key().
  * Added encrypt_at_time() and decrypt_at_time() to Fernet.
  * Added support for the SubjectInformationAccess X.509 extension.
  * Added support for parsing SignedCertificateTimestamps in OCSP responses.
  * Added support for parsing attributes in certificate signing requests via get_attribute_for_oid().
  * Added support for encoding attributes in certificate signing requests via add_attribute().
  * On OpenSSL 1.1.1d and higher cryptography now uses OpenSSL’s built-in CSPRNG
    instead of its own OS random engine because these versions of OpenSSL properly reseed on fork.
  * Added initial support for creating PKCS12 files with serialize_key_and_certificates().</changelog>
  <changelog author="dmueller@suse.com" date="1600430400">- update to 3.1:
  * **BACKWARDS INCOMPATIBLE:** Removed support for ``idna`` based
    :term:`U-label` parsing in various X.509 classes. This support was originally
    deprecated in version 2.1 and moved to an extra in 2.5.
  * Deprecated OpenSSL 1.0.2 support. OpenSSL 1.0.2 is no longer supported by
    the OpenSSL project. The next version of ``cryptography`` will drop support
    for it.
  * Deprecated support for Python 3.5. This version sees very little use and will
    be removed in the next release.
  * ``backend`` arguments to functions are no longer required and the
    default backend will automatically be selected if no ``backend`` is provided.
  * Added initial support for parsing certificates from PKCS7 files with
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_pem_pkcs7_certificates`
    and
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_der_pkcs7_certificates`
    .
  * Calling ``update`` or ``update_into`` on
    :class:`~cryptography.hazmat.primitives.ciphers.CipherContext` with ``data``
    longer than 2\ :sup:`31` bytes no longer raises an ``OverflowError``. This
    also resolves the same issue in :doc:`/fernet`.</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 3.1.1:
  * wheels compiled with OpenSSL 1.1.1h.</changelog>
  <changelog author="michael@stroeder.com" date="1603713600">- update to 3.2 (bsc#1178168, CVE-2020-25659):
  * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,
    to protect against Bleichenbacher vulnerabilities. Due to limitations imposed
    by our API, we cannot completely mitigate this vulnerability.
  * Support for OpenSSL 1.0.2 has been removed.
  * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.
- drops 5507-mitigate-Bleichenbacher-attacks.patch on older dists</changelog>
  <changelog author="michael@stroeder.com" date="1603886400">- update to 3.2.1:
  Disable blinding on RSA public keys to address an error with
  some versions of OpenSSL.</changelog>
  <changelog author="mcepl@suse.com" date="1607256000">- Remove unnecessary dependency virtualenv.</changelog>
  <changelog author="mrueckert@suse.de" date="1607515200">- update to 3.3.0
  - BACKWARDS INCOMPATIBLE: Support for Python 3.5 has been removed
    due to low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: The GCM and AESGCM now require 64-bit
    to 1024-bit (8 byte to 128 byte) initialization vectors. This
    change is to conform with an upcoming OpenSSL release that will
    no longer support sizes outside this window.
  - BACKWARDS INCOMPATIBLE: When deserializing asymmetric keys we
    now raise ValueError rather than UnsupportedAlgorithm when an
    unsupported cipher is used. This change is to conform with an
    upcoming OpenSSL release that will no longer distinguish
    between error types.
  - BACKWARDS INCOMPATIBLE: We no longer allow loading of finite
    field Diffie-Hellman parameters of less than 512 bits in
    length. This change is to conform with an upcoming OpenSSL
    release that no longer supports smaller sizes. These keys were
    already wildly insecure and should not have been used in any
    application outside of testing.
  - Updated Windows, macOS, and manylinux wheels to be compiled
    with OpenSSL 1.1.1i.
  - Python 2 support is deprecated in cryptography. This is the
    last release that will support Python 2.
  - Added the recover_data_from_signature() function to
    RSAPublicKey for recovering the signed data from an RSA
    signature.</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 3.3.1:
  * Re-added a legacy symbol causing problems for older ``pyOpenSSL`` use</changelog>
  <changelog author="michael@stroeder.com" date="1612699200">- update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331):
  * SECURITY ISSUE: Fixed a bug where certain sequences of update()
    calls when symmetrically encrypting very large payloads (&gt;2GB) could
    result in an integer overflow, leading to buffer overflows.
    CVE-2020-36242
  - drops CVE-2020-36242-buffer-overflow.patch on older dists</changelog>
  <changelog author="daniel.garcia@suse.com" date="1676289600">- Add patch CVE-2023-23931-dont-allow-update-into.patch (bsc#1208036, CVE-2023-23931)
  * Don't allow update_into to mutate immutable objects</changelog>
  <changelog author="daniel.garcia@suse.com" date="1701259200">- Add CVE-2023-49083.patch to fix A null-pointer-dereference and
  segfault could occur when loading certificates from a PKCS#7 bundle.
  bsc#1217592</changelog>
</package>
<package pkgid="3bfc8cfae91d3de265e3b39f3076abf7b18213fd6bc502c18051ccf5c2644ddc" name="python3-cryptography" arch="ppc64le">
  <version epoch="0" ver="3.3.2" rel="150400.23.1"/>
  <changelog author="tchvatal@suse.com" date="1544097600">- Fix fdupes call</changelog>
  <changelog author="mcepl@suse.com" date="1544097601">- Update to 2.4.1:
  * Dropped support for LibreSSL 2.4.x.
  * Deprecated OpenSSL 1.0.1 support. OpenSSL 1.0.1 is no
    longer supported by the OpenSSL project. At this time there
    is no time table for dropping support, however we strongly
    encourage all users to upgrade or install cryptography from
    a wheel.
  * Added initial :doc:`OCSP &lt;/x509/ocsp&gt;` support.
  * Added support for cryptography.x509.PrecertPoison.</changelog>
  <changelog author="mpluskal@suse.com" date="1546516800">- Update to version 2.4.2:
  * Updated Windows, macOS, and manylinux1 wheels to be compiled
    with OpenSSL 1.1.0j.</changelog>
  <changelog author="michael@stroeder.com" date="1548417600">- Dependency on python-idna changed to "Recommends" aligned with
  change in upstream source (see below)
- update to 2.5:
  * BACKWARDS INCOMPATIBLE: U-label strings were deprecated in version 2.1,
    but this version removes the default idna dependency as well. If you still
    need this deprecated path please install cryptography with the idna extra:
    pip install cryptography[idna].
  * BACKWARDS INCOMPATIBLE: The minimum supported PyPy version is now 5.4.
  * Numerous classes and functions have been updated to allow bytes-like
    types for keying material and passwords, including symmetric algorithms,
    AEAD ciphers, KDFs, loading asymmetric keys, and one time password classes.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL 1.1.1a.
  * Added support for SHA512_224 and SHA512_256 when using OpenSSL 1.1.1.
  * Added support for SHA3_224, SHA3_256, SHA3_384, and SHA3_512 when using OpenSSL 1.1.1.
  * Added support for X448 key exchange when using OpenSSL 1.1.1.
  * Added support for SHAKE128 and SHAKE256 when using OpenSSL 1.1.1.
  * Added initial support for parsing PKCS12 files with load_key_and_certificates().
  * Added support for IssuingDistributionPoint.
  * Added rfc4514_string() method to x509.Name,
    x509.RelativeDistinguishedName, and x509.NameAttribute to format the name
    or component an RFC 4514 Distinguished Name string.
  * Added from_encoded_point(), which immediately checks if the point is on
    the curve and supports compressed points. Deprecated the previous method
    from_encoded_point().
  * Added signature_hash_algorithm to OCSPResponse.
  * Updated X25519 key exchange support to allow additional serialization
    methods. Calling public_bytes() with no arguments has been deprecated.
  * Added support for encoding compressed and uncompressed points via
    public_bytes(). Deprecated the previous method encode_point().</changelog>
  <changelog author="michael@stroeder.com" date="1551355200">- update to 2.6.1:
  * BACKWARDS INCOMPATIBLE:
    Removedcryptography.hazmat.primitives.asymmetric.utils.encode_rfc6979_signature
    andcryptography.hazmat.primitives.asymmetric.utils.decode_rfc6979_signature,
    which had been deprecated for nearly 4 years. Use encode_dss_signature()
    and decode_dss_signature()instead.
  * BACKWARDS INCOMPATIBLE: Removed cryptography.x509.Certificate.serial, which
    had been deprecated for nearly 3 years. Use serial_number instead.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with
    OpenSSL 1.1.1b.
  * Added support for Ed448 signing when using OpenSSL 1.1.1b or newer.
  * Added support for Ed25519 signing when using OpenSSL 1.1.1b or newer.
  * load_ssh_public_key() can now load ed25519 public keys.
  * Add support for easily mapping an object identifier to its elliptic curve
    class viaget_curve_for_oid().
  * Add support for OpenSSL when compiled with the no-engine
    (OPENSSL_NO_ENGINE) flag.</changelog>
  <changelog author="tchvatal@suse.com" date="1559131200">- Simplify the test execution to be more understandable</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559563200">- update to 2.7
  * BACKWARDS INCOMPATIBLE: Removed the cryptography.hazmat.primitives.mac.MACContext interface.
  The CMAC and HMAC APIs have not changed, but they are no longer registered
  as MACContext instances.
  * Removed support for running our tests with setup.py test.
  * Add support for :class:`~cryptography.hazmat.primitives.poly1305.Poly1305`
  when using OpenSSL 1.1.1 or newer.
  * Support serialization with Encoding.OpenSSH and PublicFormat.OpenSSH
  in :meth:`Ed25519PublicKey.public_bytes &lt;cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PublicKey.public_bytes&gt;` .
  * Correctly allow passing a SubjectKeyIdentifier to :meth:`~cryptography.x509.AuthorityKeyIdentifier.from_issuer_subject_key_identifier`
  and deprecate passing an Extension object.</changelog>
  <changelog author="michael@stroeder.com" date="1571313600">- update to 2.8
  * Added support for Python 3.8.
  * Added class methods Poly1305.generate_tag and Poly1305.verify_tag for Poly1305 sign and verify operations.
  * Deprecated support for OpenSSL 1.0.1. Support will be removed in cryptography 2.9.
  * We now ship manylinux2010 wheels in addition to our manylinux1 wheels.
  * Added support for ed25519 and ed448 keys in the CertificateBuilder, CertificateSigningRequestBuilder, CertificateRevocationListBuilder and OCSPResponseBuilder.
  * cryptography no longer depends on asn1crypto.
  * FreshestCRL is now allowed as a CertificateRevocationList extension.</changelog>
  <changelog author="michael@stroeder.com" date="1589544000">- update to 2.9.2
  * 2.9.2 - 2020-04-22
  - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15.
  * 2.9.1 - 2020-04-21
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g.
  * 2.9 - 2020-04-02
  - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to
    low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed.
    Users on older version of OpenSSL will need to upgrade.
  - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed.
  - Removed support for calling public_bytes() with no arguments, as per
    our deprecation policy. You must now pass encoding and format.
  - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string()
    returns the RDNs as required by RFC 4514.
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f.
  - Added support for parsing single_extensions in an OCSP response.
  - NameAttribute values can now be empty strings.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1595937600">- update to 3.0
- refreshed disable-uneven-sizes-tests.patch and  skip_openssl_memleak_test.patch
  * Removed support for passing an Extension instance
    to from_issuer_subject_key_identifier(), as per our deprecation policy.
  * Support for LibreSSL 2.7.x, 2.8.x, and 2.9.0 has been removed
  * Dropped support for macOS 10.9, macOS users must upgrade to 10.10 or newer.
  * RSA generate_private_key() no longer accepts public_exponent values except
    65537 and 3 (the latter for legacy purposes).
  * X.509 certificate parsing now enforces that the version field contains
    a valid value, rather than deferring this check until version is accessed.
  * Deprecated support for Python 2
  * Added support for OpenSSH serialization format for ec, ed25519, rsa and dsa
    private keys: load_ssh_private_key() for loading and OpenSSH for writing.
  * Added support for OpenSSH certificates to load_ssh_public_key().
  * Added encrypt_at_time() and decrypt_at_time() to Fernet.
  * Added support for the SubjectInformationAccess X.509 extension.
  * Added support for parsing SignedCertificateTimestamps in OCSP responses.
  * Added support for parsing attributes in certificate signing requests via get_attribute_for_oid().
  * Added support for encoding attributes in certificate signing requests via add_attribute().
  * On OpenSSL 1.1.1d and higher cryptography now uses OpenSSL’s built-in CSPRNG
    instead of its own OS random engine because these versions of OpenSSL properly reseed on fork.
  * Added initial support for creating PKCS12 files with serialize_key_and_certificates().</changelog>
  <changelog author="dmueller@suse.com" date="1600430400">- update to 3.1:
  * **BACKWARDS INCOMPATIBLE:** Removed support for ``idna`` based
    :term:`U-label` parsing in various X.509 classes. This support was originally
    deprecated in version 2.1 and moved to an extra in 2.5.
  * Deprecated OpenSSL 1.0.2 support. OpenSSL 1.0.2 is no longer supported by
    the OpenSSL project. The next version of ``cryptography`` will drop support
    for it.
  * Deprecated support for Python 3.5. This version sees very little use and will
    be removed in the next release.
  * ``backend`` arguments to functions are no longer required and the
    default backend will automatically be selected if no ``backend`` is provided.
  * Added initial support for parsing certificates from PKCS7 files with
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_pem_pkcs7_certificates`
    and
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_der_pkcs7_certificates`
    .
  * Calling ``update`` or ``update_into`` on
    :class:`~cryptography.hazmat.primitives.ciphers.CipherContext` with ``data``
    longer than 2\ :sup:`31` bytes no longer raises an ``OverflowError``. This
    also resolves the same issue in :doc:`/fernet`.</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 3.1.1:
  * wheels compiled with OpenSSL 1.1.1h.</changelog>
  <changelog author="michael@stroeder.com" date="1603713600">- update to 3.2 (bsc#1178168, CVE-2020-25659):
  * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,
    to protect against Bleichenbacher vulnerabilities. Due to limitations imposed
    by our API, we cannot completely mitigate this vulnerability.
  * Support for OpenSSL 1.0.2 has been removed.
  * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.
- drops 5507-mitigate-Bleichenbacher-attacks.patch on older dists</changelog>
  <changelog author="michael@stroeder.com" date="1603886400">- update to 3.2.1:
  Disable blinding on RSA public keys to address an error with
  some versions of OpenSSL.</changelog>
  <changelog author="mcepl@suse.com" date="1607256000">- Remove unnecessary dependency virtualenv.</changelog>
  <changelog author="mrueckert@suse.de" date="1607515200">- update to 3.3.0
  - BACKWARDS INCOMPATIBLE: Support for Python 3.5 has been removed
    due to low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: The GCM and AESGCM now require 64-bit
    to 1024-bit (8 byte to 128 byte) initialization vectors. This
    change is to conform with an upcoming OpenSSL release that will
    no longer support sizes outside this window.
  - BACKWARDS INCOMPATIBLE: When deserializing asymmetric keys we
    now raise ValueError rather than UnsupportedAlgorithm when an
    unsupported cipher is used. This change is to conform with an
    upcoming OpenSSL release that will no longer distinguish
    between error types.
  - BACKWARDS INCOMPATIBLE: We no longer allow loading of finite
    field Diffie-Hellman parameters of less than 512 bits in
    length. This change is to conform with an upcoming OpenSSL
    release that no longer supports smaller sizes. These keys were
    already wildly insecure and should not have been used in any
    application outside of testing.
  - Updated Windows, macOS, and manylinux wheels to be compiled
    with OpenSSL 1.1.1i.
  - Python 2 support is deprecated in cryptography. This is the
    last release that will support Python 2.
  - Added the recover_data_from_signature() function to
    RSAPublicKey for recovering the signed data from an RSA
    signature.</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 3.3.1:
  * Re-added a legacy symbol causing problems for older ``pyOpenSSL`` use</changelog>
  <changelog author="michael@stroeder.com" date="1612699200">- update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331):
  * SECURITY ISSUE: Fixed a bug where certain sequences of update()
    calls when symmetrically encrypting very large payloads (&gt;2GB) could
    result in an integer overflow, leading to buffer overflows.
    CVE-2020-36242
  - drops CVE-2020-36242-buffer-overflow.patch on older dists</changelog>
  <changelog author="daniel.garcia@suse.com" date="1676289600">- Add patch CVE-2023-23931-dont-allow-update-into.patch (bsc#1208036, CVE-2023-23931)
  * Don't allow update_into to mutate immutable objects</changelog>
  <changelog author="daniel.garcia@suse.com" date="1701259200">- Add CVE-2023-49083.patch to fix A null-pointer-dereference and
  segfault could occur when loading certificates from a PKCS#7 bundle.
  bsc#1217592</changelog>
</package>
<package pkgid="306dce7600fd5f5c5a8e0975e959a21477edb06250e4a31fdd83e692d377708f" name="python3-cryptography" arch="s390x">
  <version epoch="0" ver="3.3.2" rel="150400.23.1"/>
  <changelog author="tchvatal@suse.com" date="1544097600">- Fix fdupes call</changelog>
  <changelog author="mcepl@suse.com" date="1544097601">- Update to 2.4.1:
  * Dropped support for LibreSSL 2.4.x.
  * Deprecated OpenSSL 1.0.1 support. OpenSSL 1.0.1 is no
    longer supported by the OpenSSL project. At this time there
    is no time table for dropping support, however we strongly
    encourage all users to upgrade or install cryptography from
    a wheel.
  * Added initial :doc:`OCSP &lt;/x509/ocsp&gt;` support.
  * Added support for cryptography.x509.PrecertPoison.</changelog>
  <changelog author="mpluskal@suse.com" date="1546516800">- Update to version 2.4.2:
  * Updated Windows, macOS, and manylinux1 wheels to be compiled
    with OpenSSL 1.1.0j.</changelog>
  <changelog author="michael@stroeder.com" date="1548417600">- Dependency on python-idna changed to "Recommends" aligned with
  change in upstream source (see below)
- update to 2.5:
  * BACKWARDS INCOMPATIBLE: U-label strings were deprecated in version 2.1,
    but this version removes the default idna dependency as well. If you still
    need this deprecated path please install cryptography with the idna extra:
    pip install cryptography[idna].
  * BACKWARDS INCOMPATIBLE: The minimum supported PyPy version is now 5.4.
  * Numerous classes and functions have been updated to allow bytes-like
    types for keying material and passwords, including symmetric algorithms,
    AEAD ciphers, KDFs, loading asymmetric keys, and one time password classes.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL 1.1.1a.
  * Added support for SHA512_224 and SHA512_256 when using OpenSSL 1.1.1.
  * Added support for SHA3_224, SHA3_256, SHA3_384, and SHA3_512 when using OpenSSL 1.1.1.
  * Added support for X448 key exchange when using OpenSSL 1.1.1.
  * Added support for SHAKE128 and SHAKE256 when using OpenSSL 1.1.1.
  * Added initial support for parsing PKCS12 files with load_key_and_certificates().
  * Added support for IssuingDistributionPoint.
  * Added rfc4514_string() method to x509.Name,
    x509.RelativeDistinguishedName, and x509.NameAttribute to format the name
    or component an RFC 4514 Distinguished Name string.
  * Added from_encoded_point(), which immediately checks if the point is on
    the curve and supports compressed points. Deprecated the previous method
    from_encoded_point().
  * Added signature_hash_algorithm to OCSPResponse.
  * Updated X25519 key exchange support to allow additional serialization
    methods. Calling public_bytes() with no arguments has been deprecated.
  * Added support for encoding compressed and uncompressed points via
    public_bytes(). Deprecated the previous method encode_point().</changelog>
  <changelog author="michael@stroeder.com" date="1551355200">- update to 2.6.1:
  * BACKWARDS INCOMPATIBLE:
    Removedcryptography.hazmat.primitives.asymmetric.utils.encode_rfc6979_signature
    andcryptography.hazmat.primitives.asymmetric.utils.decode_rfc6979_signature,
    which had been deprecated for nearly 4 years. Use encode_dss_signature()
    and decode_dss_signature()instead.
  * BACKWARDS INCOMPATIBLE: Removed cryptography.x509.Certificate.serial, which
    had been deprecated for nearly 3 years. Use serial_number instead.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with
    OpenSSL 1.1.1b.
  * Added support for Ed448 signing when using OpenSSL 1.1.1b or newer.
  * Added support for Ed25519 signing when using OpenSSL 1.1.1b or newer.
  * load_ssh_public_key() can now load ed25519 public keys.
  * Add support for easily mapping an object identifier to its elliptic curve
    class viaget_curve_for_oid().
  * Add support for OpenSSL when compiled with the no-engine
    (OPENSSL_NO_ENGINE) flag.</changelog>
  <changelog author="tchvatal@suse.com" date="1559131200">- Simplify the test execution to be more understandable</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559563200">- update to 2.7
  * BACKWARDS INCOMPATIBLE: Removed the cryptography.hazmat.primitives.mac.MACContext interface.
  The CMAC and HMAC APIs have not changed, but they are no longer registered
  as MACContext instances.
  * Removed support for running our tests with setup.py test.
  * Add support for :class:`~cryptography.hazmat.primitives.poly1305.Poly1305`
  when using OpenSSL 1.1.1 or newer.
  * Support serialization with Encoding.OpenSSH and PublicFormat.OpenSSH
  in :meth:`Ed25519PublicKey.public_bytes &lt;cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PublicKey.public_bytes&gt;` .
  * Correctly allow passing a SubjectKeyIdentifier to :meth:`~cryptography.x509.AuthorityKeyIdentifier.from_issuer_subject_key_identifier`
  and deprecate passing an Extension object.</changelog>
  <changelog author="michael@stroeder.com" date="1571313600">- update to 2.8
  * Added support for Python 3.8.
  * Added class methods Poly1305.generate_tag and Poly1305.verify_tag for Poly1305 sign and verify operations.
  * Deprecated support for OpenSSL 1.0.1. Support will be removed in cryptography 2.9.
  * We now ship manylinux2010 wheels in addition to our manylinux1 wheels.
  * Added support for ed25519 and ed448 keys in the CertificateBuilder, CertificateSigningRequestBuilder, CertificateRevocationListBuilder and OCSPResponseBuilder.
  * cryptography no longer depends on asn1crypto.
  * FreshestCRL is now allowed as a CertificateRevocationList extension.</changelog>
  <changelog author="michael@stroeder.com" date="1589544000">- update to 2.9.2
  * 2.9.2 - 2020-04-22
  - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15.
  * 2.9.1 - 2020-04-21
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g.
  * 2.9 - 2020-04-02
  - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to
    low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed.
    Users on older version of OpenSSL will need to upgrade.
  - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed.
  - Removed support for calling public_bytes() with no arguments, as per
    our deprecation policy. You must now pass encoding and format.
  - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string()
    returns the RDNs as required by RFC 4514.
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f.
  - Added support for parsing single_extensions in an OCSP response.
  - NameAttribute values can now be empty strings.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1595937600">- update to 3.0
- refreshed disable-uneven-sizes-tests.patch and  skip_openssl_memleak_test.patch
  * Removed support for passing an Extension instance
    to from_issuer_subject_key_identifier(), as per our deprecation policy.
  * Support for LibreSSL 2.7.x, 2.8.x, and 2.9.0 has been removed
  * Dropped support for macOS 10.9, macOS users must upgrade to 10.10 or newer.
  * RSA generate_private_key() no longer accepts public_exponent values except
    65537 and 3 (the latter for legacy purposes).
  * X.509 certificate parsing now enforces that the version field contains
    a valid value, rather than deferring this check until version is accessed.
  * Deprecated support for Python 2
  * Added support for OpenSSH serialization format for ec, ed25519, rsa and dsa
    private keys: load_ssh_private_key() for loading and OpenSSH for writing.
  * Added support for OpenSSH certificates to load_ssh_public_key().
  * Added encrypt_at_time() and decrypt_at_time() to Fernet.
  * Added support for the SubjectInformationAccess X.509 extension.
  * Added support for parsing SignedCertificateTimestamps in OCSP responses.
  * Added support for parsing attributes in certificate signing requests via get_attribute_for_oid().
  * Added support for encoding attributes in certificate signing requests via add_attribute().
  * On OpenSSL 1.1.1d and higher cryptography now uses OpenSSL’s built-in CSPRNG
    instead of its own OS random engine because these versions of OpenSSL properly reseed on fork.
  * Added initial support for creating PKCS12 files with serialize_key_and_certificates().</changelog>
  <changelog author="dmueller@suse.com" date="1600430400">- update to 3.1:
  * **BACKWARDS INCOMPATIBLE:** Removed support for ``idna`` based
    :term:`U-label` parsing in various X.509 classes. This support was originally
    deprecated in version 2.1 and moved to an extra in 2.5.
  * Deprecated OpenSSL 1.0.2 support. OpenSSL 1.0.2 is no longer supported by
    the OpenSSL project. The next version of ``cryptography`` will drop support
    for it.
  * Deprecated support for Python 3.5. This version sees very little use and will
    be removed in the next release.
  * ``backend`` arguments to functions are no longer required and the
    default backend will automatically be selected if no ``backend`` is provided.
  * Added initial support for parsing certificates from PKCS7 files with
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_pem_pkcs7_certificates`
    and
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_der_pkcs7_certificates`
    .
  * Calling ``update`` or ``update_into`` on
    :class:`~cryptography.hazmat.primitives.ciphers.CipherContext` with ``data``
    longer than 2\ :sup:`31` bytes no longer raises an ``OverflowError``. This
    also resolves the same issue in :doc:`/fernet`.</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 3.1.1:
  * wheels compiled with OpenSSL 1.1.1h.</changelog>
  <changelog author="michael@stroeder.com" date="1603713600">- update to 3.2 (bsc#1178168, CVE-2020-25659):
  * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,
    to protect against Bleichenbacher vulnerabilities. Due to limitations imposed
    by our API, we cannot completely mitigate this vulnerability.
  * Support for OpenSSL 1.0.2 has been removed.
  * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.
- drops 5507-mitigate-Bleichenbacher-attacks.patch on older dists</changelog>
  <changelog author="michael@stroeder.com" date="1603886400">- update to 3.2.1:
  Disable blinding on RSA public keys to address an error with
  some versions of OpenSSL.</changelog>
  <changelog author="mcepl@suse.com" date="1607256000">- Remove unnecessary dependency virtualenv.</changelog>
  <changelog author="mrueckert@suse.de" date="1607515200">- update to 3.3.0
  - BACKWARDS INCOMPATIBLE: Support for Python 3.5 has been removed
    due to low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: The GCM and AESGCM now require 64-bit
    to 1024-bit (8 byte to 128 byte) initialization vectors. This
    change is to conform with an upcoming OpenSSL release that will
    no longer support sizes outside this window.
  - BACKWARDS INCOMPATIBLE: When deserializing asymmetric keys we
    now raise ValueError rather than UnsupportedAlgorithm when an
    unsupported cipher is used. This change is to conform with an
    upcoming OpenSSL release that will no longer distinguish
    between error types.
  - BACKWARDS INCOMPATIBLE: We no longer allow loading of finite
    field Diffie-Hellman parameters of less than 512 bits in
    length. This change is to conform with an upcoming OpenSSL
    release that no longer supports smaller sizes. These keys were
    already wildly insecure and should not have been used in any
    application outside of testing.
  - Updated Windows, macOS, and manylinux wheels to be compiled
    with OpenSSL 1.1.1i.
  - Python 2 support is deprecated in cryptography. This is the
    last release that will support Python 2.
  - Added the recover_data_from_signature() function to
    RSAPublicKey for recovering the signed data from an RSA
    signature.</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 3.3.1:
  * Re-added a legacy symbol causing problems for older ``pyOpenSSL`` use</changelog>
  <changelog author="michael@stroeder.com" date="1612699200">- update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331):
  * SECURITY ISSUE: Fixed a bug where certain sequences of update()
    calls when symmetrically encrypting very large payloads (&gt;2GB) could
    result in an integer overflow, leading to buffer overflows.
    CVE-2020-36242
  - drops CVE-2020-36242-buffer-overflow.patch on older dists</changelog>
  <changelog author="daniel.garcia@suse.com" date="1676289600">- Add patch CVE-2023-23931-dont-allow-update-into.patch (bsc#1208036, CVE-2023-23931)
  * Don't allow update_into to mutate immutable objects</changelog>
  <changelog author="daniel.garcia@suse.com" date="1701259200">- Add CVE-2023-49083.patch to fix A null-pointer-dereference and
  segfault could occur when loading certificates from a PKCS#7 bundle.
  bsc#1217592</changelog>
</package>
<package pkgid="a4a0f0507d32123f80bd729e395cffc893d718a8a2cbb7a43f3f1a6c49eb1eb6" name="python3-cryptography" arch="src">
  <version epoch="0" ver="3.3.2" rel="150400.23.1"/>
  <changelog author="tchvatal@suse.com" date="1544097600">- Fix fdupes call</changelog>
  <changelog author="mcepl@suse.com" date="1544097601">- Update to 2.4.1:
  * Dropped support for LibreSSL 2.4.x.
  * Deprecated OpenSSL 1.0.1 support. OpenSSL 1.0.1 is no
    longer supported by the OpenSSL project. At this time there
    is no time table for dropping support, however we strongly
    encourage all users to upgrade or install cryptography from
    a wheel.
  * Added initial :doc:`OCSP &lt;/x509/ocsp&gt;` support.
  * Added support for cryptography.x509.PrecertPoison.</changelog>
  <changelog author="mpluskal@suse.com" date="1546516800">- Update to version 2.4.2:
  * Updated Windows, macOS, and manylinux1 wheels to be compiled
    with OpenSSL 1.1.0j.</changelog>
  <changelog author="michael@stroeder.com" date="1548417600">- Dependency on python-idna changed to "Recommends" aligned with
  change in upstream source (see below)
- update to 2.5:
  * BACKWARDS INCOMPATIBLE: U-label strings were deprecated in version 2.1,
    but this version removes the default idna dependency as well. If you still
    need this deprecated path please install cryptography with the idna extra:
    pip install cryptography[idna].
  * BACKWARDS INCOMPATIBLE: The minimum supported PyPy version is now 5.4.
  * Numerous classes and functions have been updated to allow bytes-like
    types for keying material and passwords, including symmetric algorithms,
    AEAD ciphers, KDFs, loading asymmetric keys, and one time password classes.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL 1.1.1a.
  * Added support for SHA512_224 and SHA512_256 when using OpenSSL 1.1.1.
  * Added support for SHA3_224, SHA3_256, SHA3_384, and SHA3_512 when using OpenSSL 1.1.1.
  * Added support for X448 key exchange when using OpenSSL 1.1.1.
  * Added support for SHAKE128 and SHAKE256 when using OpenSSL 1.1.1.
  * Added initial support for parsing PKCS12 files with load_key_and_certificates().
  * Added support for IssuingDistributionPoint.
  * Added rfc4514_string() method to x509.Name,
    x509.RelativeDistinguishedName, and x509.NameAttribute to format the name
    or component an RFC 4514 Distinguished Name string.
  * Added from_encoded_point(), which immediately checks if the point is on
    the curve and supports compressed points. Deprecated the previous method
    from_encoded_point().
  * Added signature_hash_algorithm to OCSPResponse.
  * Updated X25519 key exchange support to allow additional serialization
    methods. Calling public_bytes() with no arguments has been deprecated.
  * Added support for encoding compressed and uncompressed points via
    public_bytes(). Deprecated the previous method encode_point().</changelog>
  <changelog author="michael@stroeder.com" date="1551355200">- update to 2.6.1:
  * BACKWARDS INCOMPATIBLE:
    Removedcryptography.hazmat.primitives.asymmetric.utils.encode_rfc6979_signature
    andcryptography.hazmat.primitives.asymmetric.utils.decode_rfc6979_signature,
    which had been deprecated for nearly 4 years. Use encode_dss_signature()
    and decode_dss_signature()instead.
  * BACKWARDS INCOMPATIBLE: Removed cryptography.x509.Certificate.serial, which
    had been deprecated for nearly 3 years. Use serial_number instead.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with
    OpenSSL 1.1.1b.
  * Added support for Ed448 signing when using OpenSSL 1.1.1b or newer.
  * Added support for Ed25519 signing when using OpenSSL 1.1.1b or newer.
  * load_ssh_public_key() can now load ed25519 public keys.
  * Add support for easily mapping an object identifier to its elliptic curve
    class viaget_curve_for_oid().
  * Add support for OpenSSL when compiled with the no-engine
    (OPENSSL_NO_ENGINE) flag.</changelog>
  <changelog author="tchvatal@suse.com" date="1559131200">- Simplify the test execution to be more understandable</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559563200">- update to 2.7
  * BACKWARDS INCOMPATIBLE: Removed the cryptography.hazmat.primitives.mac.MACContext interface.
  The CMAC and HMAC APIs have not changed, but they are no longer registered
  as MACContext instances.
  * Removed support for running our tests with setup.py test.
  * Add support for :class:`~cryptography.hazmat.primitives.poly1305.Poly1305`
  when using OpenSSL 1.1.1 or newer.
  * Support serialization with Encoding.OpenSSH and PublicFormat.OpenSSH
  in :meth:`Ed25519PublicKey.public_bytes &lt;cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PublicKey.public_bytes&gt;` .
  * Correctly allow passing a SubjectKeyIdentifier to :meth:`~cryptography.x509.AuthorityKeyIdentifier.from_issuer_subject_key_identifier`
  and deprecate passing an Extension object.</changelog>
  <changelog author="michael@stroeder.com" date="1571313600">- update to 2.8
  * Added support for Python 3.8.
  * Added class methods Poly1305.generate_tag and Poly1305.verify_tag for Poly1305 sign and verify operations.
  * Deprecated support for OpenSSL 1.0.1. Support will be removed in cryptography 2.9.
  * We now ship manylinux2010 wheels in addition to our manylinux1 wheels.
  * Added support for ed25519 and ed448 keys in the CertificateBuilder, CertificateSigningRequestBuilder, CertificateRevocationListBuilder and OCSPResponseBuilder.
  * cryptography no longer depends on asn1crypto.
  * FreshestCRL is now allowed as a CertificateRevocationList extension.</changelog>
  <changelog author="michael@stroeder.com" date="1589544000">- update to 2.9.2
  * 2.9.2 - 2020-04-22
  - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15.
  * 2.9.1 - 2020-04-21
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g.
  * 2.9 - 2020-04-02
  - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to
    low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed.
    Users on older version of OpenSSL will need to upgrade.
  - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed.
  - Removed support for calling public_bytes() with no arguments, as per
    our deprecation policy. You must now pass encoding and format.
  - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string()
    returns the RDNs as required by RFC 4514.
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f.
  - Added support for parsing single_extensions in an OCSP response.
  - NameAttribute values can now be empty strings.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1595937600">- update to 3.0
- refreshed disable-uneven-sizes-tests.patch and  skip_openssl_memleak_test.patch
  * Removed support for passing an Extension instance
    to from_issuer_subject_key_identifier(), as per our deprecation policy.
  * Support for LibreSSL 2.7.x, 2.8.x, and 2.9.0 has been removed
  * Dropped support for macOS 10.9, macOS users must upgrade to 10.10 or newer.
  * RSA generate_private_key() no longer accepts public_exponent values except
    65537 and 3 (the latter for legacy purposes).
  * X.509 certificate parsing now enforces that the version field contains
    a valid value, rather than deferring this check until version is accessed.
  * Deprecated support for Python 2
  * Added support for OpenSSH serialization format for ec, ed25519, rsa and dsa
    private keys: load_ssh_private_key() for loading and OpenSSH for writing.
  * Added support for OpenSSH certificates to load_ssh_public_key().
  * Added encrypt_at_time() and decrypt_at_time() to Fernet.
  * Added support for the SubjectInformationAccess X.509 extension.
  * Added support for parsing SignedCertificateTimestamps in OCSP responses.
  * Added support for parsing attributes in certificate signing requests via get_attribute_for_oid().
  * Added support for encoding attributes in certificate signing requests via add_attribute().
  * On OpenSSL 1.1.1d and higher cryptography now uses OpenSSL’s built-in CSPRNG
    instead of its own OS random engine because these versions of OpenSSL properly reseed on fork.
  * Added initial support for creating PKCS12 files with serialize_key_and_certificates().</changelog>
  <changelog author="dmueller@suse.com" date="1600430400">- update to 3.1:
  * **BACKWARDS INCOMPATIBLE:** Removed support for ``idna`` based
    :term:`U-label` parsing in various X.509 classes. This support was originally
    deprecated in version 2.1 and moved to an extra in 2.5.
  * Deprecated OpenSSL 1.0.2 support. OpenSSL 1.0.2 is no longer supported by
    the OpenSSL project. The next version of ``cryptography`` will drop support
    for it.
  * Deprecated support for Python 3.5. This version sees very little use and will
    be removed in the next release.
  * ``backend`` arguments to functions are no longer required and the
    default backend will automatically be selected if no ``backend`` is provided.
  * Added initial support for parsing certificates from PKCS7 files with
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_pem_pkcs7_certificates`
    and
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_der_pkcs7_certificates`
    .
  * Calling ``update`` or ``update_into`` on
    :class:`~cryptography.hazmat.primitives.ciphers.CipherContext` with ``data``
    longer than 2\ :sup:`31` bytes no longer raises an ``OverflowError``. This
    also resolves the same issue in :doc:`/fernet`.</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 3.1.1:
  * wheels compiled with OpenSSL 1.1.1h.</changelog>
  <changelog author="michael@stroeder.com" date="1603713600">- update to 3.2 (bsc#1178168, CVE-2020-25659):
  * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,
    to protect against Bleichenbacher vulnerabilities. Due to limitations imposed
    by our API, we cannot completely mitigate this vulnerability.
  * Support for OpenSSL 1.0.2 has been removed.
  * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.
- drops 5507-mitigate-Bleichenbacher-attacks.patch on older dists</changelog>
  <changelog author="michael@stroeder.com" date="1603886400">- update to 3.2.1:
  Disable blinding on RSA public keys to address an error with
  some versions of OpenSSL.</changelog>
  <changelog author="mcepl@suse.com" date="1607256000">- Remove unnecessary dependency virtualenv.</changelog>
  <changelog author="mrueckert@suse.de" date="1607515200">- update to 3.3.0
  - BACKWARDS INCOMPATIBLE: Support for Python 3.5 has been removed
    due to low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: The GCM and AESGCM now require 64-bit
    to 1024-bit (8 byte to 128 byte) initialization vectors. This
    change is to conform with an upcoming OpenSSL release that will
    no longer support sizes outside this window.
  - BACKWARDS INCOMPATIBLE: When deserializing asymmetric keys we
    now raise ValueError rather than UnsupportedAlgorithm when an
    unsupported cipher is used. This change is to conform with an
    upcoming OpenSSL release that will no longer distinguish
    between error types.
  - BACKWARDS INCOMPATIBLE: We no longer allow loading of finite
    field Diffie-Hellman parameters of less than 512 bits in
    length. This change is to conform with an upcoming OpenSSL
    release that no longer supports smaller sizes. These keys were
    already wildly insecure and should not have been used in any
    application outside of testing.
  - Updated Windows, macOS, and manylinux wheels to be compiled
    with OpenSSL 1.1.1i.
  - Python 2 support is deprecated in cryptography. This is the
    last release that will support Python 2.
  - Added the recover_data_from_signature() function to
    RSAPublicKey for recovering the signed data from an RSA
    signature.</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 3.3.1:
  * Re-added a legacy symbol causing problems for older ``pyOpenSSL`` use</changelog>
  <changelog author="michael@stroeder.com" date="1612699200">- update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331):
  * SECURITY ISSUE: Fixed a bug where certain sequences of update()
    calls when symmetrically encrypting very large payloads (&gt;2GB) could
    result in an integer overflow, leading to buffer overflows.
    CVE-2020-36242
  - drops CVE-2020-36242-buffer-overflow.patch on older dists</changelog>
  <changelog author="daniel.garcia@suse.com" date="1676289600">- Add patch CVE-2023-23931-dont-allow-update-into.patch (bsc#1208036, CVE-2023-23931)
  * Don't allow update_into to mutate immutable objects</changelog>
  <changelog author="daniel.garcia@suse.com" date="1701259200">- Add CVE-2023-49083.patch to fix A null-pointer-dereference and
  segfault could occur when loading certificates from a PKCS#7 bundle.
  bsc#1217592</changelog>
</package>
<package pkgid="a8b84b422a2c07f88d36f016fc559a51da7e2fa80c087e33c1e1f939cb5a8e3c" name="python3-cryptography" arch="x86_64">
  <version epoch="0" ver="3.3.2" rel="150400.23.1"/>
  <changelog author="tchvatal@suse.com" date="1544097600">- Fix fdupes call</changelog>
  <changelog author="mcepl@suse.com" date="1544097601">- Update to 2.4.1:
  * Dropped support for LibreSSL 2.4.x.
  * Deprecated OpenSSL 1.0.1 support. OpenSSL 1.0.1 is no
    longer supported by the OpenSSL project. At this time there
    is no time table for dropping support, however we strongly
    encourage all users to upgrade or install cryptography from
    a wheel.
  * Added initial :doc:`OCSP &lt;/x509/ocsp&gt;` support.
  * Added support for cryptography.x509.PrecertPoison.</changelog>
  <changelog author="mpluskal@suse.com" date="1546516800">- Update to version 2.4.2:
  * Updated Windows, macOS, and manylinux1 wheels to be compiled
    with OpenSSL 1.1.0j.</changelog>
  <changelog author="michael@stroeder.com" date="1548417600">- Dependency on python-idna changed to "Recommends" aligned with
  change in upstream source (see below)
- update to 2.5:
  * BACKWARDS INCOMPATIBLE: U-label strings were deprecated in version 2.1,
    but this version removes the default idna dependency as well. If you still
    need this deprecated path please install cryptography with the idna extra:
    pip install cryptography[idna].
  * BACKWARDS INCOMPATIBLE: The minimum supported PyPy version is now 5.4.
  * Numerous classes and functions have been updated to allow bytes-like
    types for keying material and passwords, including symmetric algorithms,
    AEAD ciphers, KDFs, loading asymmetric keys, and one time password classes.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL 1.1.1a.
  * Added support for SHA512_224 and SHA512_256 when using OpenSSL 1.1.1.
  * Added support for SHA3_224, SHA3_256, SHA3_384, and SHA3_512 when using OpenSSL 1.1.1.
  * Added support for X448 key exchange when using OpenSSL 1.1.1.
  * Added support for SHAKE128 and SHAKE256 when using OpenSSL 1.1.1.
  * Added initial support for parsing PKCS12 files with load_key_and_certificates().
  * Added support for IssuingDistributionPoint.
  * Added rfc4514_string() method to x509.Name,
    x509.RelativeDistinguishedName, and x509.NameAttribute to format the name
    or component an RFC 4514 Distinguished Name string.
  * Added from_encoded_point(), which immediately checks if the point is on
    the curve and supports compressed points. Deprecated the previous method
    from_encoded_point().
  * Added signature_hash_algorithm to OCSPResponse.
  * Updated X25519 key exchange support to allow additional serialization
    methods. Calling public_bytes() with no arguments has been deprecated.
  * Added support for encoding compressed and uncompressed points via
    public_bytes(). Deprecated the previous method encode_point().</changelog>
  <changelog author="michael@stroeder.com" date="1551355200">- update to 2.6.1:
  * BACKWARDS INCOMPATIBLE:
    Removedcryptography.hazmat.primitives.asymmetric.utils.encode_rfc6979_signature
    andcryptography.hazmat.primitives.asymmetric.utils.decode_rfc6979_signature,
    which had been deprecated for nearly 4 years. Use encode_dss_signature()
    and decode_dss_signature()instead.
  * BACKWARDS INCOMPATIBLE: Removed cryptography.x509.Certificate.serial, which
    had been deprecated for nearly 3 years. Use serial_number instead.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with
    OpenSSL 1.1.1b.
  * Added support for Ed448 signing when using OpenSSL 1.1.1b or newer.
  * Added support for Ed25519 signing when using OpenSSL 1.1.1b or newer.
  * load_ssh_public_key() can now load ed25519 public keys.
  * Add support for easily mapping an object identifier to its elliptic curve
    class viaget_curve_for_oid().
  * Add support for OpenSSL when compiled with the no-engine
    (OPENSSL_NO_ENGINE) flag.</changelog>
  <changelog author="tchvatal@suse.com" date="1559131200">- Simplify the test execution to be more understandable</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559563200">- update to 2.7
  * BACKWARDS INCOMPATIBLE: Removed the cryptography.hazmat.primitives.mac.MACContext interface.
  The CMAC and HMAC APIs have not changed, but they are no longer registered
  as MACContext instances.
  * Removed support for running our tests with setup.py test.
  * Add support for :class:`~cryptography.hazmat.primitives.poly1305.Poly1305`
  when using OpenSSL 1.1.1 or newer.
  * Support serialization with Encoding.OpenSSH and PublicFormat.OpenSSH
  in :meth:`Ed25519PublicKey.public_bytes &lt;cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PublicKey.public_bytes&gt;` .
  * Correctly allow passing a SubjectKeyIdentifier to :meth:`~cryptography.x509.AuthorityKeyIdentifier.from_issuer_subject_key_identifier`
  and deprecate passing an Extension object.</changelog>
  <changelog author="michael@stroeder.com" date="1571313600">- update to 2.8
  * Added support for Python 3.8.
  * Added class methods Poly1305.generate_tag and Poly1305.verify_tag for Poly1305 sign and verify operations.
  * Deprecated support for OpenSSL 1.0.1. Support will be removed in cryptography 2.9.
  * We now ship manylinux2010 wheels in addition to our manylinux1 wheels.
  * Added support for ed25519 and ed448 keys in the CertificateBuilder, CertificateSigningRequestBuilder, CertificateRevocationListBuilder and OCSPResponseBuilder.
  * cryptography no longer depends on asn1crypto.
  * FreshestCRL is now allowed as a CertificateRevocationList extension.</changelog>
  <changelog author="michael@stroeder.com" date="1589544000">- update to 2.9.2
  * 2.9.2 - 2020-04-22
  - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15.
  * 2.9.1 - 2020-04-21
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g.
  * 2.9 - 2020-04-02
  - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to
    low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed.
    Users on older version of OpenSSL will need to upgrade.
  - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed.
  - Removed support for calling public_bytes() with no arguments, as per
    our deprecation policy. You must now pass encoding and format.
  - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string()
    returns the RDNs as required by RFC 4514.
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f.
  - Added support for parsing single_extensions in an OCSP response.
  - NameAttribute values can now be empty strings.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1595937600">- update to 3.0
- refreshed disable-uneven-sizes-tests.patch and  skip_openssl_memleak_test.patch
  * Removed support for passing an Extension instance
    to from_issuer_subject_key_identifier(), as per our deprecation policy.
  * Support for LibreSSL 2.7.x, 2.8.x, and 2.9.0 has been removed
  * Dropped support for macOS 10.9, macOS users must upgrade to 10.10 or newer.
  * RSA generate_private_key() no longer accepts public_exponent values except
    65537 and 3 (the latter for legacy purposes).
  * X.509 certificate parsing now enforces that the version field contains
    a valid value, rather than deferring this check until version is accessed.
  * Deprecated support for Python 2
  * Added support for OpenSSH serialization format for ec, ed25519, rsa and dsa
    private keys: load_ssh_private_key() for loading and OpenSSH for writing.
  * Added support for OpenSSH certificates to load_ssh_public_key().
  * Added encrypt_at_time() and decrypt_at_time() to Fernet.
  * Added support for the SubjectInformationAccess X.509 extension.
  * Added support for parsing SignedCertificateTimestamps in OCSP responses.
  * Added support for parsing attributes in certificate signing requests via get_attribute_for_oid().
  * Added support for encoding attributes in certificate signing requests via add_attribute().
  * On OpenSSL 1.1.1d and higher cryptography now uses OpenSSL’s built-in CSPRNG
    instead of its own OS random engine because these versions of OpenSSL properly reseed on fork.
  * Added initial support for creating PKCS12 files with serialize_key_and_certificates().</changelog>
  <changelog author="dmueller@suse.com" date="1600430400">- update to 3.1:
  * **BACKWARDS INCOMPATIBLE:** Removed support for ``idna`` based
    :term:`U-label` parsing in various X.509 classes. This support was originally
    deprecated in version 2.1 and moved to an extra in 2.5.
  * Deprecated OpenSSL 1.0.2 support. OpenSSL 1.0.2 is no longer supported by
    the OpenSSL project. The next version of ``cryptography`` will drop support
    for it.
  * Deprecated support for Python 3.5. This version sees very little use and will
    be removed in the next release.
  * ``backend`` arguments to functions are no longer required and the
    default backend will automatically be selected if no ``backend`` is provided.
  * Added initial support for parsing certificates from PKCS7 files with
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_pem_pkcs7_certificates`
    and
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_der_pkcs7_certificates`
    .
  * Calling ``update`` or ``update_into`` on
    :class:`~cryptography.hazmat.primitives.ciphers.CipherContext` with ``data``
    longer than 2\ :sup:`31` bytes no longer raises an ``OverflowError``. This
    also resolves the same issue in :doc:`/fernet`.</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 3.1.1:
  * wheels compiled with OpenSSL 1.1.1h.</changelog>
  <changelog author="michael@stroeder.com" date="1603713600">- update to 3.2 (bsc#1178168, CVE-2020-25659):
  * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,
    to protect against Bleichenbacher vulnerabilities. Due to limitations imposed
    by our API, we cannot completely mitigate this vulnerability.
  * Support for OpenSSL 1.0.2 has been removed.
  * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.
- drops 5507-mitigate-Bleichenbacher-attacks.patch on older dists</changelog>
  <changelog author="michael@stroeder.com" date="1603886400">- update to 3.2.1:
  Disable blinding on RSA public keys to address an error with
  some versions of OpenSSL.</changelog>
  <changelog author="mcepl@suse.com" date="1607256000">- Remove unnecessary dependency virtualenv.</changelog>
  <changelog author="mrueckert@suse.de" date="1607515200">- update to 3.3.0
  - BACKWARDS INCOMPATIBLE: Support for Python 3.5 has been removed
    due to low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: The GCM and AESGCM now require 64-bit
    to 1024-bit (8 byte to 128 byte) initialization vectors. This
    change is to conform with an upcoming OpenSSL release that will
    no longer support sizes outside this window.
  - BACKWARDS INCOMPATIBLE: When deserializing asymmetric keys we
    now raise ValueError rather than UnsupportedAlgorithm when an
    unsupported cipher is used. This change is to conform with an
    upcoming OpenSSL release that will no longer distinguish
    between error types.
  - BACKWARDS INCOMPATIBLE: We no longer allow loading of finite
    field Diffie-Hellman parameters of less than 512 bits in
    length. This change is to conform with an upcoming OpenSSL
    release that no longer supports smaller sizes. These keys were
    already wildly insecure and should not have been used in any
    application outside of testing.
  - Updated Windows, macOS, and manylinux wheels to be compiled
    with OpenSSL 1.1.1i.
  - Python 2 support is deprecated in cryptography. This is the
    last release that will support Python 2.
  - Added the recover_data_from_signature() function to
    RSAPublicKey for recovering the signed data from an RSA
    signature.</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 3.3.1:
  * Re-added a legacy symbol causing problems for older ``pyOpenSSL`` use</changelog>
  <changelog author="michael@stroeder.com" date="1612699200">- update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331):
  * SECURITY ISSUE: Fixed a bug where certain sequences of update()
    calls when symmetrically encrypting very large payloads (&gt;2GB) could
    result in an integer overflow, leading to buffer overflows.
    CVE-2020-36242
  - drops CVE-2020-36242-buffer-overflow.patch on older dists</changelog>
  <changelog author="daniel.garcia@suse.com" date="1676289600">- Add patch CVE-2023-23931-dont-allow-update-into.patch (bsc#1208036, CVE-2023-23931)
  * Don't allow update_into to mutate immutable objects</changelog>
  <changelog author="daniel.garcia@suse.com" date="1701259200">- Add CVE-2023-49083.patch to fix A null-pointer-dereference and
  segfault could occur when loading certificates from a PKCS#7 bundle.
  bsc#1217592</changelog>
</package>
<package pkgid="6ce38c4b81cdac05941c5e9a23ca00dcdfd5f6c769db6730521e062f848e7483" name="python3-cssselect" arch="noarch">
  <version epoch="0" ver="1.0.3" rel="150000.3.5.1"/>
  <changelog author="iacobcatalin@gmail.com" date="1357646400">- Initial package 0.7.1</changelog>
  <changelog author="saschpe@suse.de" date="1358164800">- Minimal cleanup</changelog>
  <changelog author="arun@gmx.de" date="1364472000">- updated to 0.8
  Changelog (http://pythonhosted.org/cssselect/#changelog):
    Released on 2013-03-15.
    Improvements:
    [#22] Let extended translators override what XPathExpr class is used
    [#19] Use the built-in lang() XPath function for implementing the :lang() pseudo-class with XML documents. This is probably faster than ancestor-or-self::.
    Bug fixes:
    [#14] Fix non-ASCII pseudo-classes. (Invalid selector instead of crash.)
    [#20] As per the spec, elements containing only whitespace are not considered empty for the :empty pseudo-class.</changelog>
  <changelog author="arun@gmx.de" date="1373371200">- Packaged LICENSE file
  fixes bnc#828513
  Bug 828513 - LICENSE not packaged in python3-cssselect 0.8</changelog>
  <changelog author="p.drouand@gmail.com" date="1385208000">- Update to version 0.9.1
  + **Backward incompatible change from 0.9**:
    :meth:`~GenericTranslator.selector_to_xpath` defaults to ignoring
    pseudo-elements, as it did in 0.8 and previous versions.
    (:meth:`~GenericTranslator.css_to_xpath` doesn’t change.)
  + Drop official support for Python 2.4 and 3.1,
    as testing was becoming difficult. Nothing will break overnight,
    but future releases may on may not work on these versions.
    Older releases will remain available on PyPI.
- Changes from 0.9
  + Add parser support for :attr:`functional pseudo-elements
    &lt;Selector.pseudo_element&gt;`.
  + This version accidentally introduced a backward incompatible change:
    :meth:`~GenericTranslator.selector_to_xpath` defaults to rejecting
    pseudo-elements instead of ignoring them.
- Remove useless CFLAGS definition
- Add README.rst, CHANGES and AUTHORS in package documentation</changelog>
  <changelog author="tbechtold@suse.com" date="1490788800">- update to 1.0.1:
  * Add support for Python 3.6.
  * Documentation hosted `on Read the Docs &lt;https://cssselect.readthedocs.io/&gt;`_
  * Add code coverage reports.
  * Fix ``:nth-*(an+b)`` pseudo-classes selectors.
    (except ``*:nth-child()`` which looks untranslatable to XPath 1.0.)
  * Distribute as universal wheel.
  * Add support for Python 3.3, 3.4 and 3.5.
  * Drop support for Python 2.5 as testing is getting difficult.
  * Improve tests on pseudo-elements.
- Switch to singlespec approach</changelog>
  <changelog author="arun@gmx.de" date="1515240000">- specfile:
  * update copyright year
- update to version 1.0.3:
  * Fix artifact uploads to pypi
- changes from version 1.0.2:
  * Drop support for Python 2.6 and Python 3.3.
  * Fix deprecation warning in Python 3.6.
  * Minor cleanups.</changelog>
</package>
<package pkgid="7fd05de42c8e1af36866bc3c57ef4ed4ff341923cbca8d94d20bc3c3684aee71" name="python3-jmespath" arch="noarch">
  <version epoch="0" ver="0.9.3" rel="150000.3.5.1"/>
  <changelog author="rschweikert@suse.com" date="1414065600">- Update to version 0.4.1
  + No upstream changelog</changelog>
  <changelog author="rschweikert@suse.com" date="1421582400">- Update to version 0.5.0
  + No upstream changelog
  + Update in support for fix of bnc#905354</changelog>
  <changelog author="aboe76@gmail.com" date="1427371200">- Updated to version 0.6.1
  + No Upstream Changelog</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1430049600">- update to version 0.7.0:
  * Add support for JEP-12, raw string literals
  * Support .whl files
- additional changes from version 0.6.2:
  * Implement JEP-10, slice projections
  * Fix bug with filter projection parsing
  * Add to_array function
  * Add merge function
  * Fix error messages for function argument type errors
- point source URL to pypi</changelog>
  <changelog author="rjschwei@suse.com" date="1432728000">- Update to version 0.7.1:
  * Rename ``bin/jp`` to ``bin/jp.py``
  * Fix issue with precedence when parsing wildcard
    projections
  * Remove ordereddict and simplejson as py2.6 dependencies.
    These were never actually used in the jmespath code base,
    only in the unit tests.  Unittests requirements are handled
    via requirements26.txt.</changelog>
  <changelog author="rjschwei@suse.com" date="1453291200">- Manage the jp executable with update-alternatives now that
  python3-jmespath exists
- spec file improvements</changelog>
  <changelog author="rjschwei@suse.com" date="1453291201">- Fix build issues for SLE 11
  + More test dependencies required</changelog>
  <changelog author="toddrme2178@gmail.com" date="1454328000">- Update to version 0.9.0
  * Add support for new lines with tokens in an expression
  * Add support for JEP 9 which introduces "and" expressions, "unary"
    expressions, "not" expressions, and "paren" expressions
  * Fix issue with hardcoded path in ``jp.py`` executable
    (issue 90, issue 88, issue 82)
- Update to version 0.8.0
  * Improve lexing performance (issue 84)
  * Fix parsing error for multiselect lists (issue 86)
  * Fix issue with escaping single quotes in literal strings (issue 85)
  * Add support for providing your own dict cls to support
    ordered dictionaries (issue 94)
  * Add map() function (issue 95)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1471262400">- Fix update-alternatives implementation.</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to version 0.9.2
  + Fix regression when using ordering comparators on strings (issue 124)
- From 0.9.1
  + Raise LexerError on invalid numbers (issue 98)
  + Add support for custom functions (#100) (issue 100)
  + Fix ZeroDivisionError for built-in function avg() on empty lists (#115)
    (issue 115)
  + Properly handle non numerical ordering operators (#117) (issue 117)</changelog>
  <changelog author="tbechtold@suse.com" date="1490788800">- Only BuildRequire unittest2 for python2</changelog>
  <changelog author="jmatejek@suse.com" date="1490788801">- properly Requires(postun) for %postun section</changelog>
  <changelog author="rjschwei@suse.com" date="1510228800">- Update to 0.9.3:
  + Fix issue where long types in py2 and Decimal types were not
    being evaluated as numbers (issue 125)
  + Handle numbers in scientific notation in to_number() function (issue 120)
  + Fix issue where custom functions would override the function
    table of the builtin function class (issue 133)</changelog>
</package>
<package pkgid="1fdfb504beed7db8b606741dcbd14961c3717ab917398051adc2f077ab0de498" name="python3-libxml2" arch="aarch64">
  <version epoch="0" ver="2.10.3" rel="150500.5.11.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
</package>
<package pkgid="1c660c12dd1fe607375b311174fc6e10591c2699dbdb9eb88a105e5610144f21" name="python3-libxml2" arch="s390x">
  <version epoch="0" ver="2.10.3" rel="150500.5.11.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
</package>
<package pkgid="dc468231bc57f502b658a9804b63c21bf93f7325714904bcdb33011716e1e81f" name="python3-libxml2" arch="x86_64">
  <version epoch="0" ver="2.10.3" rel="150500.5.11.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
</package>
<package pkgid="2642ae902bcfdfc54cbff84cc0ca10f99c91894e2821a2a156208ad0fd9282d7" name="python3-libxml2" arch="aarch64">
  <version epoch="0" ver="2.10.3" rel="150500.5.14.1"/>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
</package>
<package pkgid="6caff5567371dfd99d181318d588ed1d3a2c83490de897144f4f0db239f52d27" name="python3-libxml2" arch="s390x">
  <version epoch="0" ver="2.10.3" rel="150500.5.14.1"/>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
</package>
<package pkgid="16ba98ad64cf069667e855c950675cc50a592afb094a4179bfd99f75e36043dd" name="python3-libxml2" arch="x86_64">
  <version epoch="0" ver="2.10.3" rel="150500.5.14.1"/>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
</package>
<package pkgid="345a036ba2025bef02dadae21684b651865dd137b9eb505a1813c5572ad157cf" name="python3-libxml2" arch="aarch64">
  <version epoch="0" ver="2.10.3" rel="150500.5.8.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
</package>
<package pkgid="2b4f170cb81f8bcd601ef93e03d42bbc751f3d915622c0ff3277731b2b308a23" name="python3-libxml2" arch="s390x">
  <version epoch="0" ver="2.10.3" rel="150500.5.8.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
</package>
<package pkgid="84a246cd0f063ed51e4df8317fc286311419666e83f82b739a8d722ecdd5799f" name="python3-libxml2" arch="x86_64">
  <version epoch="0" ver="2.10.3" rel="150500.5.8.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
</package>
<package pkgid="5bb903a404fadb4739becce664930c214f1e11ac2df67777feec922f213fe929" name="python3-ply" arch="noarch">
  <version epoch="0" ver="3.10" rel="150000.3.5.1"/>
  <changelog author="saschpe@suse.de" date="1301400000">- Update to 3.4:
  + Minor patch to make cpp.py compatible with Python 3.
  + Fixed setup.py trove classifiers to properly list PLY as Python
    3 compatible.
- License changed to BSD3c
- Packaged more doc files
- Moved important docs (README, ..) to base package
- Fixed build for non-SUSE distros</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="highwaystar.ru@gmail.com" date="1337947200">- python3 package added</changelog>
  <changelog author="toddrme2178@gmail.com" date="1337947201">- spec file cleanups</changelog>
  <changelog author="toddrme2178@gmail.com" date="1357128000">- Fix building on SLES</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1431345600">- update to version 3.6:
  * If PLY is unable to create the 'parser.out' or 'parsetab.py'
    files due to permission issues, it now just issues a warning
    message and continues to operate
  * Fixed some issues related to use of packages and table file
    modules
- additional changes from version 3.5:
  * Added support for defaulted_states in the parser
  * Fixed debug logging in the parser
  * Added actions to be defined to character literals (Issue #32)
  * Import of the 'parsetab.py' file is now constrained to only
    consider the directory specified by the outputdir argument to
    yacc()
  * Changed default output directory to be the same as that in
    which the yacc grammar is defined
  * Changed the parsetab.py file signature slightly so that the
    parsetab won't regenerate if created on a different major
    version of Python
  * Fixed Issue #44 call_errorfunc() should return the result of
    errorfunc()
  * Support for versions of Python &lt;2.7 is officially dropped
  * Fixed bug related to calling yacc(start=...)
  * Added skipped tests for PyPy and Java
  * Added filter to make unit tests pass under 'python -3'
  * Fixed CPP_INTEGER regex in ply/cpp.py (Issue 21)
  * Fixed yacc validation bugs when from __future__ import
    unicode_literals is being used
  * Added support for Travis-CI
  * Added a .gitignore file
  * Fixed validation problems for source files that include a
    different source code encoding specifier
  * Fixed unit tests for yacc to eliminate random failures due to
    dict hash value randomization in Python 3.3
  * Fixed comment whitespace processing bugs in ply/cpp.py
  * Fixed token names in ply/ctokens.py to match rule names
  * Changes to functions available in panic mode error recover
  * Fixed some problems with line and position tracking and the use
    of error symbols
  * Change to doc string handling in lex module
  * Fixed issue #1: Fixed _tabversion. It should use __tabversion__
    instead of __version__
  * Fixed issue #8: Literals empty list causes IndexError
  * Fixed issue #12: Typo in code snippet in documentation
  * Fixed issue #10: Correctly escape t_XOREQUAL pattern.
- clean the test and example directories
- remove stray backup files in doc
- remove unneeded executable bit of testlex.py
- remove CFLAGS export: unneeded
- do not drop executable bit of everything in test since
  it contains subdirectories
- remove useless clean section
- remove README from package: not provided anymore</changelog>
  <changelog author="hpj@urpla.net" date="1444219200">- update to version 3.8:
  * Fixed issues related to Python 3.5. Patch contributed by Barry Warsaw.
- update to version 3.7
  * Fixed problems when reading table files from pickled data.
  * Fixed regression in handling of table modules if specified as module
    objects.   See https://github.com/dabeaz/ply/issues/63
- clean up spec
- add testing rig</changelog>
  <changelog author="tbechtold@suse.com" date="1472817600">- update to 3.9:
  * Exposed the parser state number as the parser.state attribute
    in productions and error functions.
  * Fixed Issue #88. Python3 compatibility with ply/cpp.
  * Fixed Issue #93. Ply can crash if SyntaxError is raised inside
    a production.   Not actually sure if the original implementation
    worked as documented at all.  Yacc has been modified to follow
    the spec as outlined in the CHANGES noted for 11/27/07 below.
  * Fixed Issue #97. Failure with code validation when the original
    source files aren't present.   Validation step now ignores
    the missing file.
  * Minor fixes to version numbers.</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10
  * Changed grammar signature computation to not involve hashing
    functions. Parts are just combined into a big string.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1499688000">- Fix wrong-script-interpreter rpmlint error.</changelog>
</package>
<package pkgid="54aa5a5b41bdeb853d8a0e7dfb2c23960da8518a5b58e8df93cfc2354feda702" name="python3-psutil" arch="aarch64">
  <version epoch="0" ver="5.9.1" rel="150300.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Add pr_1665.patch: Future-proof disk_io_counters on Linux. Fixes
  tests with Linux 5.5.</changelog>
  <changelog author="tchvatal@suse.com" date="1584187200">- Update to 5.7.0:
  * Various fixes to build with updated kernel/etc.
- Remove merged patch pr_1665.patch and pr_1364.patch
- Update patch skip-obs.patch
- Remove skip-test-missing-warnings.patch as it can be fixed by
  properly calling the tests</changelog>
  <changelog author="mcepl@suse.com" date="1598011200">- Add skip_failing_tests.patch to skip tests failing because of
  incomplete emulation of the environment in osc build
  environment (gh#giampaolo/psutil#1635).</changelog>
  <changelog author="dmueller@suse.com" date="1600257600">- update to 5.7.2:
  * parallel tests on UNIX (make test-parallel). They're twice as fast!
  * 1741: "make build/install" is now run in parallel and it's about 15% faster on UNIX.
  * 1747: Process.wait() on POSIX returns an enum, showing the negative signal which was used to terminate the process
  * 1747: Process.wait() return value is cached so that the exit code can be retrieved on then next call.
  * 1747: Process provides more info about the process on str() and repr() (status and exit code):
  * 1757: memory leak tests are now stable.
  * 1768: [Windows] added support for Windows Nano Server. (contributed by Julien Lebot)
  * 1726: [Linux] cpu_freq() parsing should use spaces instead of tabs on ia64. (patch by Michał Górny)
  * 1760: [Linux] Process.rlimit() does not handle long long type properly.
  * 1766: [macOS] NoSuchProcess may be raised instead of ZombieProcess.
  * 1781: fix signature of callback function for getloadavg(). (patch by Ammar Askar)
  - remove skip-flaky-i586.patch (obsolete)</changelog>
  <changelog author="code@bnavigator.de" date="1604404800">- Fix shebang replacement for multiple python flavors</changelog>
  <changelog author="dmueller@suse.com" date="1606824000">- update to 5.7.3:
  - 809_: [FreeBSD] add support for `Process.rlimit()`.
  - 893_: [BSD] add support for `Process.environ()` (patch by Armin Gruner)
  - 1830_: [UNIX] `net_if_stats()`'s `isup` also checks whether the NIC is
    running (meaning Wi-Fi or ethernet cable is connected).
  - 1837_: [Linux] improved battery detection and charge "secsleft" calculation
  - 1620_: [Linux] physical cpu_count() result is incorrect on systems with more
    than one CPU socket.
  - 1738_: [macOS] Process.exe() may raise FileNotFoundError if process is still
    alive but the exe file which launched it got deleted.
  - 1791_: [macOS] fix missing include for getpagesize().
  - 1823_: [Windows] Process.open_files() may cause a segfault due to a NULL
    pointer.
  - 1838_: [Linux] sensors_battery(): if `percent` can be determined but not
    the remaining values, still return a result instead of None.
- skip-obs.patch, skip_failing_tests.patch: rediff</changelog>
  <changelog author="asn@cryptomilk.org" date="1607688000">- Add missing BR for unittest2</changelog>
  <changelog author="code@bnavigator.de" date="1607688001">- Only require unittest2 for Leap.</changelog>
  <changelog author="alarrosa@suse.com" date="1611576000">- update to 5.8.0:
  * Enhancements:
  - 1863: disk_partitions() exposes 2 extra fields: maxfile and
    maxpath, which are the maximum file name and path name
    length.
  - 1872: [Windows] added support for PyPy 2.7.
  - 1879: provide pre-compiled wheels for Linux and macOS.
  - 1880: get rid of Travis and Cirrus CI services (they are no
    longer free). CI testing is now done by GitHub Actions on
    Linux, macOS and FreeBSD (yes). AppVeyor is still being used
    for Windows CI.
  * Bug fixes:
  - 1708: [Linux] get rid of sensors_temperatures() duplicates.
    (patch by Tim Schlueter).
  - 1839: [Windows] always raise AccessDenied when failing to
    query 64 processes from 32 bit ones (NtWoW64 APIs).
  - 1866: [Windows] process exe(), cmdline(), environ() may raise
    "invalid access to memory location" on Python 3.9.
  - 1874: [Solaris] wrong swap output given when encrypted column
    is present.
  - 1875: [Windows] process username() may raise
    ERROR_NONE_MAPPED if the SID has no corresponding account
    name. In this case AccessDenied is now raised.
  - 1877: [Windows] OpenProcess may fail with ERROR_SUCCESS.
    Turn it into AccessDenied or NoSuchProcess depending on
    whether the PID is alive.
  - 1886: [macOS] EIO error may be raised on cmdline() and
    environment(). Now it gets translated into AccessDenied.
  - 1891: [macOS] get rid of deprecated getpagesize().
- Rebase patch and skip three other tests that fail on obs
  * skip-obs.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1611835200">- Add patch to skip tests related to rlimit and zombie processes
  that fail when building for python2 on i586:
  * skip_rlimit_tests_on_python2.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1611921600">- Do not install tests (and change the way they're run since they
  were run from %{buildroot})</changelog>
  <changelog author="idesmi@protonmail.com" date="1620820800">- remove the dependency on net-tools, since it conflicts with
  busybox-hostnmame which is default on MicroOS. boo#1184753</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637841600">- Update skip-obs.patch to also skip TestProcess.test_ionice_linux</changelog>
  <changelog author="dmueller@suse.com" date="1641816000">- update to 5.9.0:
  * [Linux]: `cpu_freq()`_ is slow on systems with many CPUs. Read current
    frequency values for all CPUs from ``/proc/cpuinfo`` instead of opening many
    files in ``/sys`` fs.  (patch by marxin)
  * `NoSuchProcess`_ message now specifies if the PID has been reused.
  * error classes (`NoSuchProcess`_, `AccessDenied`_, etc.) now have a better
    formatted and separated ``__repr__`` and ``__str__`` implementations.
  * [Linux]: `disk_partitions()`_: convert ``/dev/root`` device (an alias
    used on some Linux distros) to real root device path.
  * ``PSUTIL_DEBUG`` mode now prints file name and line number of the debug
    messages coming from C extension modules.
  * rewrite HISTORY.rst to use hyperlinks pointing to psutil API doc.
  * [Linux]: `wait_procs()`_ should catch ``subprocess.TimeoutExpired``
  exception.
  * [Linux]: `sensors_battery()`_ can raise ``TypeError`` on PureOS.
  * [Linux]: psutil does not handle ``ENAMETOOLONG`` when accessing process
  file descriptors in procfs.  (patch by Nikita Radchenko)
  * **[critical]**: ``memoize_when_activated`` decorator is not thread-safe.
  * **[critical]**: `process_iter()`_ is not thread safe and can raise
  ``TypeError`` if invoked from multiple threads.
  * [Linux]: `cpu_freq()`_ return order is wrong on systems with more than
  9 CPUs.</changelog>
  <changelog author="mcepl@suse.com" date="1643544000">- Add skip-partitions-erros.patch skipping tests failing on Linux
  (gh#giampaolo/psutil#2043).</changelog>
  <changelog author="mcepl@suse.com" date="1643803200">- Fix name of Patch4, it is skip-partitions-erros.patch</changelog>
  <changelog author="michael@stroeder.com" date="1653393600">- removed obsolete skip-partitions-erros.patch
- update to 5.9.1
  * Enhancements
  - 1053: drop Python 2.6 support. (patches by Matthieu Darbois and Hugo van Kemenade)
  - 2050, [Linux]: increase read(2) buffer size from 1k to 32k when reading /proc
    pseudo files line by line. This should help having more consistent results.
  - 2057, [OpenBSD]: add support for cpu_freq().
  - 2107, [Linux]: Process.memory_full_info() (reporting process USS/PSS/Swap memory)
    now reads /proc/pid/smaps_rollup instead of /proc/pids/smaps, which makes it 5 times faster.
  * Bug fixes
  - 2048: AttributeError is raised if psutil.Error class is raised manually and passed through str.
  - 2049, [Linux]: cpu_freq() erroneously returns curr value in GHz while min and max are in MHz.
  - 2050, [Linux]: virtual_memory() may raise ValueError if running in a LCX container.</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Add patch mem-used-bsc1181475.patch (bsc#1181475)
  * Adopt change of used memory calculation from upstream of procps</changelog>
  <changelog author="code@bnavigator.de" date="1657886400">- Fix tests: setuptools changed the builddir library path and does
  not find the module from it. Use the installed platlib instead
  and exclude psutil.tests only later.
- Refresh skip-obs.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1669032000">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)</changelog>
</package>
<package pkgid="6ff304d04fa47707b86f909ee822ba66d52b426b547e6463faf40b90242d9991" name="python3-psutil" arch="s390x">
  <version epoch="0" ver="5.9.1" rel="150300.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Add pr_1665.patch: Future-proof disk_io_counters on Linux. Fixes
  tests with Linux 5.5.</changelog>
  <changelog author="tchvatal@suse.com" date="1584187200">- Update to 5.7.0:
  * Various fixes to build with updated kernel/etc.
- Remove merged patch pr_1665.patch and pr_1364.patch
- Update patch skip-obs.patch
- Remove skip-test-missing-warnings.patch as it can be fixed by
  properly calling the tests</changelog>
  <changelog author="mcepl@suse.com" date="1598011200">- Add skip_failing_tests.patch to skip tests failing because of
  incomplete emulation of the environment in osc build
  environment (gh#giampaolo/psutil#1635).</changelog>
  <changelog author="dmueller@suse.com" date="1600257600">- update to 5.7.2:
  * parallel tests on UNIX (make test-parallel). They're twice as fast!
  * 1741: "make build/install" is now run in parallel and it's about 15% faster on UNIX.
  * 1747: Process.wait() on POSIX returns an enum, showing the negative signal which was used to terminate the process
  * 1747: Process.wait() return value is cached so that the exit code can be retrieved on then next call.
  * 1747: Process provides more info about the process on str() and repr() (status and exit code):
  * 1757: memory leak tests are now stable.
  * 1768: [Windows] added support for Windows Nano Server. (contributed by Julien Lebot)
  * 1726: [Linux] cpu_freq() parsing should use spaces instead of tabs on ia64. (patch by Michał Górny)
  * 1760: [Linux] Process.rlimit() does not handle long long type properly.
  * 1766: [macOS] NoSuchProcess may be raised instead of ZombieProcess.
  * 1781: fix signature of callback function for getloadavg(). (patch by Ammar Askar)
  - remove skip-flaky-i586.patch (obsolete)</changelog>
  <changelog author="code@bnavigator.de" date="1604404800">- Fix shebang replacement for multiple python flavors</changelog>
  <changelog author="dmueller@suse.com" date="1606824000">- update to 5.7.3:
  - 809_: [FreeBSD] add support for `Process.rlimit()`.
  - 893_: [BSD] add support for `Process.environ()` (patch by Armin Gruner)
  - 1830_: [UNIX] `net_if_stats()`'s `isup` also checks whether the NIC is
    running (meaning Wi-Fi or ethernet cable is connected).
  - 1837_: [Linux] improved battery detection and charge "secsleft" calculation
  - 1620_: [Linux] physical cpu_count() result is incorrect on systems with more
    than one CPU socket.
  - 1738_: [macOS] Process.exe() may raise FileNotFoundError if process is still
    alive but the exe file which launched it got deleted.
  - 1791_: [macOS] fix missing include for getpagesize().
  - 1823_: [Windows] Process.open_files() may cause a segfault due to a NULL
    pointer.
  - 1838_: [Linux] sensors_battery(): if `percent` can be determined but not
    the remaining values, still return a result instead of None.
- skip-obs.patch, skip_failing_tests.patch: rediff</changelog>
  <changelog author="asn@cryptomilk.org" date="1607688000">- Add missing BR for unittest2</changelog>
  <changelog author="code@bnavigator.de" date="1607688001">- Only require unittest2 for Leap.</changelog>
  <changelog author="alarrosa@suse.com" date="1611576000">- update to 5.8.0:
  * Enhancements:
  - 1863: disk_partitions() exposes 2 extra fields: maxfile and
    maxpath, which are the maximum file name and path name
    length.
  - 1872: [Windows] added support for PyPy 2.7.
  - 1879: provide pre-compiled wheels for Linux and macOS.
  - 1880: get rid of Travis and Cirrus CI services (they are no
    longer free). CI testing is now done by GitHub Actions on
    Linux, macOS and FreeBSD (yes). AppVeyor is still being used
    for Windows CI.
  * Bug fixes:
  - 1708: [Linux] get rid of sensors_temperatures() duplicates.
    (patch by Tim Schlueter).
  - 1839: [Windows] always raise AccessDenied when failing to
    query 64 processes from 32 bit ones (NtWoW64 APIs).
  - 1866: [Windows] process exe(), cmdline(), environ() may raise
    "invalid access to memory location" on Python 3.9.
  - 1874: [Solaris] wrong swap output given when encrypted column
    is present.
  - 1875: [Windows] process username() may raise
    ERROR_NONE_MAPPED if the SID has no corresponding account
    name. In this case AccessDenied is now raised.
  - 1877: [Windows] OpenProcess may fail with ERROR_SUCCESS.
    Turn it into AccessDenied or NoSuchProcess depending on
    whether the PID is alive.
  - 1886: [macOS] EIO error may be raised on cmdline() and
    environment(). Now it gets translated into AccessDenied.
  - 1891: [macOS] get rid of deprecated getpagesize().
- Rebase patch and skip three other tests that fail on obs
  * skip-obs.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1611835200">- Add patch to skip tests related to rlimit and zombie processes
  that fail when building for python2 on i586:
  * skip_rlimit_tests_on_python2.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1611921600">- Do not install tests (and change the way they're run since they
  were run from %{buildroot})</changelog>
  <changelog author="idesmi@protonmail.com" date="1620820800">- remove the dependency on net-tools, since it conflicts with
  busybox-hostnmame which is default on MicroOS. boo#1184753</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637841600">- Update skip-obs.patch to also skip TestProcess.test_ionice_linux</changelog>
  <changelog author="dmueller@suse.com" date="1641816000">- update to 5.9.0:
  * [Linux]: `cpu_freq()`_ is slow on systems with many CPUs. Read current
    frequency values for all CPUs from ``/proc/cpuinfo`` instead of opening many
    files in ``/sys`` fs.  (patch by marxin)
  * `NoSuchProcess`_ message now specifies if the PID has been reused.
  * error classes (`NoSuchProcess`_, `AccessDenied`_, etc.) now have a better
    formatted and separated ``__repr__`` and ``__str__`` implementations.
  * [Linux]: `disk_partitions()`_: convert ``/dev/root`` device (an alias
    used on some Linux distros) to real root device path.
  * ``PSUTIL_DEBUG`` mode now prints file name and line number of the debug
    messages coming from C extension modules.
  * rewrite HISTORY.rst to use hyperlinks pointing to psutil API doc.
  * [Linux]: `wait_procs()`_ should catch ``subprocess.TimeoutExpired``
  exception.
  * [Linux]: `sensors_battery()`_ can raise ``TypeError`` on PureOS.
  * [Linux]: psutil does not handle ``ENAMETOOLONG`` when accessing process
  file descriptors in procfs.  (patch by Nikita Radchenko)
  * **[critical]**: ``memoize_when_activated`` decorator is not thread-safe.
  * **[critical]**: `process_iter()`_ is not thread safe and can raise
  ``TypeError`` if invoked from multiple threads.
  * [Linux]: `cpu_freq()`_ return order is wrong on systems with more than
  9 CPUs.</changelog>
  <changelog author="mcepl@suse.com" date="1643544000">- Add skip-partitions-erros.patch skipping tests failing on Linux
  (gh#giampaolo/psutil#2043).</changelog>
  <changelog author="mcepl@suse.com" date="1643803200">- Fix name of Patch4, it is skip-partitions-erros.patch</changelog>
  <changelog author="michael@stroeder.com" date="1653393600">- removed obsolete skip-partitions-erros.patch
- update to 5.9.1
  * Enhancements
  - 1053: drop Python 2.6 support. (patches by Matthieu Darbois and Hugo van Kemenade)
  - 2050, [Linux]: increase read(2) buffer size from 1k to 32k when reading /proc
    pseudo files line by line. This should help having more consistent results.
  - 2057, [OpenBSD]: add support for cpu_freq().
  - 2107, [Linux]: Process.memory_full_info() (reporting process USS/PSS/Swap memory)
    now reads /proc/pid/smaps_rollup instead of /proc/pids/smaps, which makes it 5 times faster.
  * Bug fixes
  - 2048: AttributeError is raised if psutil.Error class is raised manually and passed through str.
  - 2049, [Linux]: cpu_freq() erroneously returns curr value in GHz while min and max are in MHz.
  - 2050, [Linux]: virtual_memory() may raise ValueError if running in a LCX container.</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Add patch mem-used-bsc1181475.patch (bsc#1181475)
  * Adopt change of used memory calculation from upstream of procps</changelog>
  <changelog author="code@bnavigator.de" date="1657886400">- Fix tests: setuptools changed the builddir library path and does
  not find the module from it. Use the installed platlib instead
  and exclude psutil.tests only later.
- Refresh skip-obs.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1669032000">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)</changelog>
</package>
<package pkgid="2d5e07eb0ca53a8775b10e20f79c4ff5743c300095248f8bf27259fa87738ecb" name="python3-psutil" arch="x86_64">
  <version epoch="0" ver="5.9.1" rel="150300.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Add pr_1665.patch: Future-proof disk_io_counters on Linux. Fixes
  tests with Linux 5.5.</changelog>
  <changelog author="tchvatal@suse.com" date="1584187200">- Update to 5.7.0:
  * Various fixes to build with updated kernel/etc.
- Remove merged patch pr_1665.patch and pr_1364.patch
- Update patch skip-obs.patch
- Remove skip-test-missing-warnings.patch as it can be fixed by
  properly calling the tests</changelog>
  <changelog author="mcepl@suse.com" date="1598011200">- Add skip_failing_tests.patch to skip tests failing because of
  incomplete emulation of the environment in osc build
  environment (gh#giampaolo/psutil#1635).</changelog>
  <changelog author="dmueller@suse.com" date="1600257600">- update to 5.7.2:
  * parallel tests on UNIX (make test-parallel). They're twice as fast!
  * 1741: "make build/install" is now run in parallel and it's about 15% faster on UNIX.
  * 1747: Process.wait() on POSIX returns an enum, showing the negative signal which was used to terminate the process
  * 1747: Process.wait() return value is cached so that the exit code can be retrieved on then next call.
  * 1747: Process provides more info about the process on str() and repr() (status and exit code):
  * 1757: memory leak tests are now stable.
  * 1768: [Windows] added support for Windows Nano Server. (contributed by Julien Lebot)
  * 1726: [Linux] cpu_freq() parsing should use spaces instead of tabs on ia64. (patch by Michał Górny)
  * 1760: [Linux] Process.rlimit() does not handle long long type properly.
  * 1766: [macOS] NoSuchProcess may be raised instead of ZombieProcess.
  * 1781: fix signature of callback function for getloadavg(). (patch by Ammar Askar)
  - remove skip-flaky-i586.patch (obsolete)</changelog>
  <changelog author="code@bnavigator.de" date="1604404800">- Fix shebang replacement for multiple python flavors</changelog>
  <changelog author="dmueller@suse.com" date="1606824000">- update to 5.7.3:
  - 809_: [FreeBSD] add support for `Process.rlimit()`.
  - 893_: [BSD] add support for `Process.environ()` (patch by Armin Gruner)
  - 1830_: [UNIX] `net_if_stats()`'s `isup` also checks whether the NIC is
    running (meaning Wi-Fi or ethernet cable is connected).
  - 1837_: [Linux] improved battery detection and charge "secsleft" calculation
  - 1620_: [Linux] physical cpu_count() result is incorrect on systems with more
    than one CPU socket.
  - 1738_: [macOS] Process.exe() may raise FileNotFoundError if process is still
    alive but the exe file which launched it got deleted.
  - 1791_: [macOS] fix missing include for getpagesize().
  - 1823_: [Windows] Process.open_files() may cause a segfault due to a NULL
    pointer.
  - 1838_: [Linux] sensors_battery(): if `percent` can be determined but not
    the remaining values, still return a result instead of None.
- skip-obs.patch, skip_failing_tests.patch: rediff</changelog>
  <changelog author="asn@cryptomilk.org" date="1607688000">- Add missing BR for unittest2</changelog>
  <changelog author="code@bnavigator.de" date="1607688001">- Only require unittest2 for Leap.</changelog>
  <changelog author="alarrosa@suse.com" date="1611576000">- update to 5.8.0:
  * Enhancements:
  - 1863: disk_partitions() exposes 2 extra fields: maxfile and
    maxpath, which are the maximum file name and path name
    length.
  - 1872: [Windows] added support for PyPy 2.7.
  - 1879: provide pre-compiled wheels for Linux and macOS.
  - 1880: get rid of Travis and Cirrus CI services (they are no
    longer free). CI testing is now done by GitHub Actions on
    Linux, macOS and FreeBSD (yes). AppVeyor is still being used
    for Windows CI.
  * Bug fixes:
  - 1708: [Linux] get rid of sensors_temperatures() duplicates.
    (patch by Tim Schlueter).
  - 1839: [Windows] always raise AccessDenied when failing to
    query 64 processes from 32 bit ones (NtWoW64 APIs).
  - 1866: [Windows] process exe(), cmdline(), environ() may raise
    "invalid access to memory location" on Python 3.9.
  - 1874: [Solaris] wrong swap output given when encrypted column
    is present.
  - 1875: [Windows] process username() may raise
    ERROR_NONE_MAPPED if the SID has no corresponding account
    name. In this case AccessDenied is now raised.
  - 1877: [Windows] OpenProcess may fail with ERROR_SUCCESS.
    Turn it into AccessDenied or NoSuchProcess depending on
    whether the PID is alive.
  - 1886: [macOS] EIO error may be raised on cmdline() and
    environment(). Now it gets translated into AccessDenied.
  - 1891: [macOS] get rid of deprecated getpagesize().
- Rebase patch and skip three other tests that fail on obs
  * skip-obs.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1611835200">- Add patch to skip tests related to rlimit and zombie processes
  that fail when building for python2 on i586:
  * skip_rlimit_tests_on_python2.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1611921600">- Do not install tests (and change the way they're run since they
  were run from %{buildroot})</changelog>
  <changelog author="idesmi@protonmail.com" date="1620820800">- remove the dependency on net-tools, since it conflicts with
  busybox-hostnmame which is default on MicroOS. boo#1184753</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637841600">- Update skip-obs.patch to also skip TestProcess.test_ionice_linux</changelog>
  <changelog author="dmueller@suse.com" date="1641816000">- update to 5.9.0:
  * [Linux]: `cpu_freq()`_ is slow on systems with many CPUs. Read current
    frequency values for all CPUs from ``/proc/cpuinfo`` instead of opening many
    files in ``/sys`` fs.  (patch by marxin)
  * `NoSuchProcess`_ message now specifies if the PID has been reused.
  * error classes (`NoSuchProcess`_, `AccessDenied`_, etc.) now have a better
    formatted and separated ``__repr__`` and ``__str__`` implementations.
  * [Linux]: `disk_partitions()`_: convert ``/dev/root`` device (an alias
    used on some Linux distros) to real root device path.
  * ``PSUTIL_DEBUG`` mode now prints file name and line number of the debug
    messages coming from C extension modules.
  * rewrite HISTORY.rst to use hyperlinks pointing to psutil API doc.
  * [Linux]: `wait_procs()`_ should catch ``subprocess.TimeoutExpired``
  exception.
  * [Linux]: `sensors_battery()`_ can raise ``TypeError`` on PureOS.
  * [Linux]: psutil does not handle ``ENAMETOOLONG`` when accessing process
  file descriptors in procfs.  (patch by Nikita Radchenko)
  * **[critical]**: ``memoize_when_activated`` decorator is not thread-safe.
  * **[critical]**: `process_iter()`_ is not thread safe and can raise
  ``TypeError`` if invoked from multiple threads.
  * [Linux]: `cpu_freq()`_ return order is wrong on systems with more than
  9 CPUs.</changelog>
  <changelog author="mcepl@suse.com" date="1643544000">- Add skip-partitions-erros.patch skipping tests failing on Linux
  (gh#giampaolo/psutil#2043).</changelog>
  <changelog author="mcepl@suse.com" date="1643803200">- Fix name of Patch4, it is skip-partitions-erros.patch</changelog>
  <changelog author="michael@stroeder.com" date="1653393600">- removed obsolete skip-partitions-erros.patch
- update to 5.9.1
  * Enhancements
  - 1053: drop Python 2.6 support. (patches by Matthieu Darbois and Hugo van Kemenade)
  - 2050, [Linux]: increase read(2) buffer size from 1k to 32k when reading /proc
    pseudo files line by line. This should help having more consistent results.
  - 2057, [OpenBSD]: add support for cpu_freq().
  - 2107, [Linux]: Process.memory_full_info() (reporting process USS/PSS/Swap memory)
    now reads /proc/pid/smaps_rollup instead of /proc/pids/smaps, which makes it 5 times faster.
  * Bug fixes
  - 2048: AttributeError is raised if psutil.Error class is raised manually and passed through str.
  - 2049, [Linux]: cpu_freq() erroneously returns curr value in GHz while min and max are in MHz.
  - 2050, [Linux]: virtual_memory() may raise ValueError if running in a LCX container.</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Add patch mem-used-bsc1181475.patch (bsc#1181475)
  * Adopt change of used memory calculation from upstream of procps</changelog>
  <changelog author="code@bnavigator.de" date="1657886400">- Fix tests: setuptools changed the builddir library path and does
  not find the module from it. Use the installed platlib instead
  and exclude psutil.tests only later.
- Refresh skip-obs.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1669032000">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)</changelog>
</package>
<package pkgid="da6a9ce1fd8b6d9af3a458b88537b49404af60078fd10e5be3ca33cdcbf5e87b" name="python3-requests" arch="noarch">
  <version epoch="0" ver="2.25.1" rel="150300.3.6.1"/>
  <changelog author="mcepl@suse.com" date="1546257600">- Move name ahead of version in spec file to resolve build issues
  on older distributions
- fdupe more thoroughly.</changelog>
  <changelog author="jbrownell@suse.com" date="1547035200">- Support older Red Hat platforms that don't offer "Recommends:"</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1549368000">- update to version 2.21.0:
  * Requests now supports idna v2.8.</changelog>
  <changelog author="tchvatal@suse.com" date="1550232000">- Do not depend on python-py
- Update few of the requirements</changelog>
  <changelog author="tchvatal@suse.com" date="1551096000">- Skip one more test that is flaky</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Do not hardcode version requirements in setup.py allowing us to
  update and verify functionality on our own:
  * requests-no-hardcoded-version.patch</changelog>
  <changelog author="bstephenson@suse.com" date="1558008000">- Update to version 2.20.1 (bsc#1111622)
  * Fixed bug with unintended Authorization header stripping for
    redirects using default ports (http/80, https/443).</changelog>
  <changelog author="tchvatal@suse.com" date="1558785600">- Update to 2.22.0:
  * Requests now supports urllib3 v1.25.2. (note: 1.25.0 and 1.25.1 are incompatible)
- Rebase requests-no-hardcoded-version.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1563796800">- Hardcode pytest 3.x series as upstream even in git does not work
  with newer versions (they pinned the release)</changelog>
  <changelog author="jayvdb@gmail.com" date="1572609600">- Add two patches only updating test logic to remove pytest 3 pin
  - merged_pr_5049.patch
  - pr_5251-pytest5.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576324800">- Remove python-urllib3, python-certifi and ca-certificates from
  main package BuildRequires, not required for building.
- Do not require full python, (implicit) python-base is sufficient.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582545600">- update to 2.23.0
- dropped merged_pr_5049.patch
- refreshed requests-no-hardcoded-version.patch
  * Remove defunct reference to prefetch in Session __attrs__
  * Requests no longer outputs password in basic auth usage warning</changelog>
  <changelog author="mcepl@suse.com" date="1587988800">- Switch off test_https_warnings test (bsc#1170175)</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1595505600">- remove patch pr_5251-pytest5.patch, not needed anymore.
- update to version 2.24.0:
  - pyOpenSSL TLS implementation is now only used if Python
  either doesn't have an `ssl` module or doesn't support
  SNI. Previously pyOpenSSL was unconditionally used if available.
  This applies even if pyOpenSSL is installed via the
  `requests[security]` extra (#5443)
  - Redirect resolution should now only occur when
  `allow_redirects` is True. (#5492)
  - No longer perform unnecessary Content-Length calculation for
  requests that won't use it. (#5496)</changelog>
  <changelog author="dmueller@suse.com" date="1606392000">- update to 2.25.0:
  * Added support for NETRC environment variable. (#5643)
  * Requests now supports urllib3 v1.26.
  * Requests v2.25.x will be the last release series with support for Python 3.5.
- refreshed requests-no-hardcoded-version.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1607947200">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
  <changelog author="dmueller@suse.com" date="1608379200">- update to 2.25.1:
  - Requests now treats `application/json` as `utf8` by default. Resolving
  inconsistencies between `r.text` and `r.json` output. (#5673)</changelog>
  <changelog author="code@bnavigator.de" date="1612353600">- Don't pin idna&lt;3 in the egg-info so that depending packages
  can install the new idna dropping python2</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1658404800">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1686657600">- Add CVE-2023-32681.patch to fix unintended leak of
  Proxy-Authorization header (CVE-2023-32681, bsc#1211674)
  Upstream commit: gh#psf/requests@74ea7cf7a6a2</changelog>
</package>
<package pkgid="6205d05b175650cd2ecdb8bf5cfaae17e598ad38b039ca74d2d2f307af445b7c" name="python3-rpm" arch="aarch64">
  <version epoch="0" ver="4.14.3" rel="150400.59.7.1"/>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="138ae441ce8d0ed95c31c4990c17d2ef9df9a6d790eb0e62cc5f0c0b9087fa2a" name="python3-rpm" arch="s390x">
  <version epoch="0" ver="4.14.3" rel="150400.59.7.1"/>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="cda960bbb7f0b833bf5149bb393bbb76a18e2674d7226259415916d75c8fcb37" name="python3-rpm" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="150400.59.7.1"/>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="60c902a15845be8ef1883aa0c2329e35a162996d75a4069f6c0b81def6ad2f45" name="python3-salt" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150500.4.24.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
</package>
<package pkgid="f815307c7c5d2ece060cdee97388e56f490ff266fba3e709c6c7804d408240f8" name="python3-salt" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150500.4.24.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
</package>
<package pkgid="5b492b55fa111fa2a71384f2ae867ec503fd4b1ed913200f2f41782dda634413" name="python3-salt" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150500.4.24.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
</package>
<package pkgid="02fa7f2a2abc014e122b4ee218c62f9fd0bdcce46aac8a03fb2e78cbdbdbe5d3" name="python3-salt" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150500.4.29.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
</package>
<package pkgid="5e7fd9db6c66c56b41ca7dc0e6de640495e38d054bb1fadb4937d0032f6281da" name="python3-salt" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150500.4.29.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
</package>
<package pkgid="6797fdca56322f581801fe7d6bcaf0b47577b1b93ed95087405248acdf1359ab" name="python3-salt" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150500.4.29.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
</package>
<package pkgid="199b78380dfec5c94897397baa63132afc7dc86c7f8ab49704dc89cb7df000d4" name="python3-setuptools" arch="noarch">
  <version epoch="0" ver="44.1.1" rel="150400.9.6.1"/>
  <changelog author="tchvatal@suse.com" date="1566388800">- Update to 41.2.0:
  * #479: Remove some usage of the deprecated imp module.
  * #1565: Changed html_sidebars from string to list of string as per https://www.sphinx-doc.org/en/master/changes.html#id58
  * #1697: Moved most of the constants from setup.py to setup.cfg
  * #1756: Forse metadata-version &gt;= 1.2. when project urls are present.</changelog>
  <changelog author="tchvatal@suse.com" date="1566388801">- Switch to multibuild to enable testsuite</changelog>
  <changelog author="jayvdb@gmail.com" date="1568462400">- Define LANG in %check to fix openSUSE/SLE 15 testsuite</changelog>
  <changelog author="mcalabkova@suse.com" date="1570795200">- Update to 41.4.0
  * In declarative config, now traps errors when invalid python_requires
    values are supplied.
  * When storing extras, rely on OrderedSet to retain order of extras
    as indicated by the packager, which will also be deterministic
    on Python 2.7 (with PYTHONHASHSEED unset) and Python 3.6+.
  * Fixed failing integration test triggered by 'long_description_content_type' in packaging.</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Add patch to sort outputs for better reproducability:
  * sort-for-reproducibility.patch
- Add missing dep on ordered-set as it is now in the vendored
  dir too</changelog>
  <changelog author="tchvatal@suse.com" date="1571227201">- Try to use system packages rather than the vendored variants</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1571313600">- Remove runtime dependency for the full python3 package, as the
  actually required SSL module is in python3-base. For python(2),
  SSL is in the "full" python package. Avoids build loops and
  shortens the dependency chain for e.g. rust.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1573473600">- update to 41.6.0
- add importlib.patch
  * Replace usage of deprecated imp module with local
    re-implementation in setuptools._imp
  * Fix pkg_resources.Requirement hash/equality implementation
  * Fix tests when running under python3.10.
  * drop 'deprecated' documentation (test command, ez_setup, EasyInstall)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1580817600">- update to 44.0.0
- last version with python2 support
- add testdata.tar.gz -&gt; missing data for testsuite
  * Drop support for Python 3.4.
  * include pyproject.toml in source distribution by default.
    Projects relying on the previous behavior where pyproject.toml
  * Setuptools once again declares 'setuptools' in the build-system.requires
    and adds PEP 517 build support by declaring itself as the build-backend
  * Fix support for easy_install's find-links option in setup.cfg
  * Build dependencies (setup_requires and tests_require) now install transitive
    dependencies indicated by extras.
  * Mark the easy_install script and setuptools command as deprecated, and use
    pip when available to fetch/build wheels for missing setup_requires/tests_require
    requirements, with the following differences in behavior:
    + support for python_requires
    + better support for wheels (proper handling of priority with respect to PEP 425 tags)
    + PEP 517/518 support
    + eggs are not supported
    + no support for the allow_hosts easy_install option (index_url/find_links are still honored)
    + pip environment variables are honored (and take precedence over easy_install options)
  * Removed the "upload" and "register" commands in favor of twine.
  * Add support for the license_files option in setup.cfg to automatically
    include multiple license files in a source distribution.
  * Update handling of wheels compatibility tags: * add support for manylinux2010
  * fix use of removed 'm' ABI flag in Python 3.8 on Windows
  * Fix empty namespace package installation from wheel.
  * Setuptools now exposes a new entry point hook "setuptools.finalize_distribution_options",
    enabling plugins like setuptools_scm to configure options on the distribution
    at finalization time.</changelog>
  <changelog author="tchvatal@suse.com" date="1584100800">- Fix build without python2</changelog>
  <changelog author="mcepl@suse.com" date="1586174400">- Fix License to the correct MIT</changelog>
  <changelog author="code@bnavigator.de" date="1592913600">- use local source dir for pytest imports
  gh#openSUSE/python-rpm-macros#48</changelog>
  <changelog author="mimi.vx@gmail.com" date="1597320000">- update to 44.1.0
  * Set sys.argv[0] in setup script run by build_meta.__legacy__
  * Fix for Python 4: replace unsafe six.PY3 with six.PY2
  * Fixed a bug in the “setuptools.finalize_distribution_options” hook
    that lead to ignoring the order attribute of entry points managed
    by this hook.
  * Avoid loading working set during Distribution.finalize_options prior
    to invoking _install_setup_requires, broken since v42.0.0.</changelog>
  <changelog author="mcepl@suse.com" date="1605009600">- Add wheel subpackage with the generated wheel for this package
  (bsc#1176262, CVE-2019-20916).</changelog>
  <changelog author="mcepl@suse.com" date="1605182400">- Make wheel a separate build run to avoid the setuptools/wheel build
  cycle.</changelog>
  <changelog author="mcepl@suse.com" date="1605528000">- Avoid duplicite wheel name in the generated package, and we actually
  don't need a subpackage at all.</changelog>
  <changelog author="mcepl@suse.com" date="1607428800">- Add remove_mock.patch to remove dependency on the external mock
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1611316800">- We cannot remove vendored packages when generating setuptools
  wheel (bsc#1177127).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1673265600">- Add CVE-2022-40897-ReDos.patch to fix Regular Expression Denial of Service
  (ReDoS) in package_index.py.
  bsc#1206667</changelog>
  <changelog author="dmueller@suse.com" date="1683201600">- Rename package sources from python- to python3 for PSP (jsc#PED-68, jsc#PED-2217)</changelog>
</package>
<package pkgid="da174c68801c720a8856e4c913a55ca2316746d1ffe3b63c7ce19d2ff8733e71" name="python3-setuptools" arch="src">
  <version epoch="0" ver="44.1.1" rel="150400.9.6.1"/>
  <changelog author="tchvatal@suse.com" date="1566388800">- Update to 41.2.0:
  * #479: Remove some usage of the deprecated imp module.
  * #1565: Changed html_sidebars from string to list of string as per https://www.sphinx-doc.org/en/master/changes.html#id58
  * #1697: Moved most of the constants from setup.py to setup.cfg
  * #1756: Forse metadata-version &gt;= 1.2. when project urls are present.</changelog>
  <changelog author="tchvatal@suse.com" date="1566388801">- Switch to multibuild to enable testsuite</changelog>
  <changelog author="jayvdb@gmail.com" date="1568462400">- Define LANG in %check to fix openSUSE/SLE 15 testsuite</changelog>
  <changelog author="mcalabkova@suse.com" date="1570795200">- Update to 41.4.0
  * In declarative config, now traps errors when invalid python_requires
    values are supplied.
  * When storing extras, rely on OrderedSet to retain order of extras
    as indicated by the packager, which will also be deterministic
    on Python 2.7 (with PYTHONHASHSEED unset) and Python 3.6+.
  * Fixed failing integration test triggered by 'long_description_content_type' in packaging.</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Add patch to sort outputs for better reproducability:
  * sort-for-reproducibility.patch
- Add missing dep on ordered-set as it is now in the vendored
  dir too</changelog>
  <changelog author="tchvatal@suse.com" date="1571227201">- Try to use system packages rather than the vendored variants</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1571313600">- Remove runtime dependency for the full python3 package, as the
  actually required SSL module is in python3-base. For python(2),
  SSL is in the "full" python package. Avoids build loops and
  shortens the dependency chain for e.g. rust.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1573473600">- update to 41.6.0
- add importlib.patch
  * Replace usage of deprecated imp module with local
    re-implementation in setuptools._imp
  * Fix pkg_resources.Requirement hash/equality implementation
  * Fix tests when running under python3.10.
  * drop 'deprecated' documentation (test command, ez_setup, EasyInstall)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1580817600">- update to 44.0.0
- last version with python2 support
- add testdata.tar.gz -&gt; missing data for testsuite
  * Drop support for Python 3.4.
  * include pyproject.toml in source distribution by default.
    Projects relying on the previous behavior where pyproject.toml
  * Setuptools once again declares 'setuptools' in the build-system.requires
    and adds PEP 517 build support by declaring itself as the build-backend
  * Fix support for easy_install's find-links option in setup.cfg
  * Build dependencies (setup_requires and tests_require) now install transitive
    dependencies indicated by extras.
  * Mark the easy_install script and setuptools command as deprecated, and use
    pip when available to fetch/build wheels for missing setup_requires/tests_require
    requirements, with the following differences in behavior:
    + support for python_requires
    + better support for wheels (proper handling of priority with respect to PEP 425 tags)
    + PEP 517/518 support
    + eggs are not supported
    + no support for the allow_hosts easy_install option (index_url/find_links are still honored)
    + pip environment variables are honored (and take precedence over easy_install options)
  * Removed the "upload" and "register" commands in favor of twine.
  * Add support for the license_files option in setup.cfg to automatically
    include multiple license files in a source distribution.
  * Update handling of wheels compatibility tags: * add support for manylinux2010
  * fix use of removed 'm' ABI flag in Python 3.8 on Windows
  * Fix empty namespace package installation from wheel.
  * Setuptools now exposes a new entry point hook "setuptools.finalize_distribution_options",
    enabling plugins like setuptools_scm to configure options on the distribution
    at finalization time.</changelog>
  <changelog author="tchvatal@suse.com" date="1584100800">- Fix build without python2</changelog>
  <changelog author="mcepl@suse.com" date="1586174400">- Fix License to the correct MIT</changelog>
  <changelog author="code@bnavigator.de" date="1592913600">- use local source dir for pytest imports
  gh#openSUSE/python-rpm-macros#48</changelog>
  <changelog author="mimi.vx@gmail.com" date="1597320000">- update to 44.1.0
  * Set sys.argv[0] in setup script run by build_meta.__legacy__
  * Fix for Python 4: replace unsafe six.PY3 with six.PY2
  * Fixed a bug in the “setuptools.finalize_distribution_options” hook
    that lead to ignoring the order attribute of entry points managed
    by this hook.
  * Avoid loading working set during Distribution.finalize_options prior
    to invoking _install_setup_requires, broken since v42.0.0.</changelog>
  <changelog author="mcepl@suse.com" date="1605009600">- Add wheel subpackage with the generated wheel for this package
  (bsc#1176262, CVE-2019-20916).</changelog>
  <changelog author="mcepl@suse.com" date="1605182400">- Make wheel a separate build run to avoid the setuptools/wheel build
  cycle.</changelog>
  <changelog author="mcepl@suse.com" date="1605528000">- Avoid duplicite wheel name in the generated package, and we actually
  don't need a subpackage at all.</changelog>
  <changelog author="mcepl@suse.com" date="1607428800">- Add remove_mock.patch to remove dependency on the external mock
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1611316800">- We cannot remove vendored packages when generating setuptools
  wheel (bsc#1177127).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1673265600">- Add CVE-2022-40897-ReDos.patch to fix Regular Expression Denial of Service
  (ReDoS) in package_index.py.
  bsc#1206667</changelog>
  <changelog author="dmueller@suse.com" date="1683201600">- Rename package sources from python- to python3 for PSP (jsc#PED-68, jsc#PED-2217)</changelog>
</package>
<package pkgid="97c2fb28f3a62d70d5d5e4e1019a566a8ddf39122a38328abf07b6eaa3f81d80" name="python3-simplejson" arch="aarch64">
  <version epoch="0" ver="3.17.2" rel="150300.3.4.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1431432000">- update to version 3.6.5:
  * Importing bug fix for reference leak when an error occurs
    during dict encoding
    https://github.com/simplejson/simplejson/issues/109
- additional changes from version 3.6.4:
  * Important bug fix for dump when only sort_keys is set
    https://github.com/simplejson/simplejson/issues/106
- additional changes from version 3.6.3:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/103
- additional changes from version 3.6.2:
  * Documentation updates
    http://bugs.python.org/issue21514
- additional changes from version 3.6.1:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/102
- additional changes from version 3.6.0:
  * Automatically strip any UTF-8 BOM from input to more closely
    follow the latest specs
    https://github.com/simplejson/simplejson/pull/101
- additional changes from version 3.5.3:
  * Fix lower bound checking in scan_once / raw_decode API
    https://github.com/simplejson/simplejson/issues/98</changelog>
  <changelog author="dmueller@suse.com" date="1479470400">- update to 3.8.2:
  * Fix implicit cast compiler warning in _speedups.c
  * simplejson is now available as wheels for OS X and Windows thanks to Travis-CI
  and AppVeyor respectively! Many thanks to @aebrahim for getting this party
  started.
  * Fix issue with iterable_as_array and indent option
  * Fix typo in keyword argument name introduced in 3.8.0
  * New iterable_as_array encoder option to perform lazy serialization of
  any iterable objects, without having to convert to tuple or list.
  * Fix typo introduced in 3.7.0 (behavior should be indistinguishable)
  https://github.com/simplejson/simplejson/commit/e18cc09b688ea1f3305c27616fd3cadd2adc6d31#commitcomment-11443842
  * Do not cache Decimal class in encoder, only reference the decimal module.
  This may make reload work in more common scenarios.
  * Fix compilation with MSVC
  https://github.com/simplejson/simplejson/pull/119
  * simplejson no longer trusts custom str/repr methods for int, long, float
  subclasses. These instances are now formatted as if they were exact
  instances of those types.
  https://github.com/simplejson/simplejson/issues/118</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10.0
  * Add RawJSON class to allow a faster path for already encoded JSON.
- From 3.9.0
  * Workaround for bad behavior in string subclasses
  * Fix warnings flagged by -3
  * Update readthedocs documentation links
  * Add build status badge to README</changelog>
  <changelog author="jmatejek@suse.com" date="1490097600">- fix pypi url</changelog>
  <changelog author="tbechtold@suse.com" date="1502193600">- update to 3.11.1:
  * Fix issue with item_sort_key when speedups are available, and add
    auto-discovery to test suites to prevent similar regressions
  * docstring fix in JSONEncoder
  * Call PyObject_IsTrue() only once for the strict argument of scann  er
  * Fix a crash with unencodable encoding in the encoder
  * Remove unused imports
  * Remove remnants of Python 2.4 support
  * Fix argument checking errors in _speedups.c
  * Remove the `__init__` methods in extension classes
  * Fix typo in the doc for loads
  * Add Python 3.6 to testing matrix and PyPI metadata</changelog>
  <changelog author="arun@gmx.de" date="1509969600">- update to version 3.12.0:
  * Fix threaded import race condition
    https://github.com/simplejson/simplejson/issues/184
  * Move RawJSON implementation to simplejson.raw_json module
  * Move JSONDecodeError implementation to simplejson.errors module</changelog>
  <changelog author="arun@gmx.de" date="1511697600">- update to version 3.13.2:
  * Fix additional Python 2.x compilation issue on Windows
- changes from version 3.13.1 :
  * Improve CI to catch speedups build regressions
  * Fix speedups build regression in Python 2.x
    https://github.com/simplejson/simplejson/issues/193
- changes from version 3.13.0:
  * Workarounds for NamedTemporaryFile issues with Windows for tool
    tests
  * Make TypeError messages contain type name instead of a repr.
    https://github.com/simplejson/simplejson/pull/191
  * Ensure that encoding of text subtypes is consistent with or
    without speedups
    https://github.com/simplejson/simplejson/issues/185
- changes from version 3.12.1:
  * Misc updates to build infrastructure
  * Fix an assertion failure when make_encoder receives a bad encoder
    argument https://github.com/simplejson/simplejson/pull/188
  * Fix potential crash during GC
    https://github.com/simplejson/simplejson/pull/187
  * Fix a reference leak when sorting keys
    https://github.com/simplejson/simplejson/pull/186</changelog>
  <changelog author="jengelh@inai.de" date="1511784000">- Remove bias from description.</changelog>
  <changelog author="arun@gmx.de" date="1525608000">- specfile:
  * update copyright year
- update to version 3.14.0:
  * Defer is_raw_json test (performance improvement)
    https://github.com/simplejson/simplejson/pull/212
  * Avoid escaping U+2028 and U+2029 without ensure_ascii
    https://github.com/simplejson/simplejson/pull/211
  * Fix an incorrect type test in Python 2, avoiding an unnecessary
    unicode copy.  https://github.com/simplejson/simplejson/pull/210</changelog>
  <changelog author="arun@gmx.de" date="1526904000">- update to version 3.15.0:
  * Clean up the C code
  * Bypass the decode() method in bytes subclasses
  * Support builds without cStringIO
  * Allow to disable serializing bytes by default in Python 3
  * Simplify the compatibility code
  * Fix tests in Python 2.5</changelog>
  <changelog author="arun@gmx.de" date="1530532800">- specfile:
  * be more specific in %files:
    %{python_sitearch}/* -&gt; %{python_sitearch}/simplejson*
- update to version 3.16.0:
  * Restore old behavior with regard to the type of decoded empty
    strings with speedups enabled on Python 2.x
    https://github.com/simplejson/simplejson/pull/225
  * Add python_requires to setup.py to help pip
    https://github.com/simplejson/simplejson/pull/224
  * Fix CSS in docs when built locally
    https://github.com/simplejson/simplejson/pull/222</changelog>
  <changelog author="tchvatal@suse.com" date="1530532801">- Do not package tests</changelog>
  <changelog author="arun@gmx.de" date="1536408000">- update to version 3.16.1:
  * Added examples for JSON lines use cases
  * Add wheels for more Python versions and platforms</changelog>
  <changelog author="arun@gmx.de" date="1574596800">- specfile:
  * update copyright year
- update to version 3.17.0:
  * Updated documentation to be Python 3 first, and
    have removed documentation notes about version changes
    that occurred more than five years ago.
    https://github.com/simplejson/simplejson/pull/257
    https://github.com/simplejson/simplejson/pull/254
  * Update build matrix for Python 3.8
    https://github.com/simplejson/simplejson/pull/255
    https://github.com/simplejson/simplejson/pull/256</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596024000">- update to 3.17.2
- use pytest as testrunner</changelog>
</package>
<package pkgid="e1a19715b0ce4b6b32bdffac3462c72752573fb02653e3595fa1849fbc03426d" name="python3-simplejson" arch="s390x">
  <version epoch="0" ver="3.17.2" rel="150300.3.4.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1431432000">- update to version 3.6.5:
  * Importing bug fix for reference leak when an error occurs
    during dict encoding
    https://github.com/simplejson/simplejson/issues/109
- additional changes from version 3.6.4:
  * Important bug fix for dump when only sort_keys is set
    https://github.com/simplejson/simplejson/issues/106
- additional changes from version 3.6.3:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/103
- additional changes from version 3.6.2:
  * Documentation updates
    http://bugs.python.org/issue21514
- additional changes from version 3.6.1:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/102
- additional changes from version 3.6.0:
  * Automatically strip any UTF-8 BOM from input to more closely
    follow the latest specs
    https://github.com/simplejson/simplejson/pull/101
- additional changes from version 3.5.3:
  * Fix lower bound checking in scan_once / raw_decode API
    https://github.com/simplejson/simplejson/issues/98</changelog>
  <changelog author="dmueller@suse.com" date="1479470400">- update to 3.8.2:
  * Fix implicit cast compiler warning in _speedups.c
  * simplejson is now available as wheels for OS X and Windows thanks to Travis-CI
  and AppVeyor respectively! Many thanks to @aebrahim for getting this party
  started.
  * Fix issue with iterable_as_array and indent option
  * Fix typo in keyword argument name introduced in 3.8.0
  * New iterable_as_array encoder option to perform lazy serialization of
  any iterable objects, without having to convert to tuple or list.
  * Fix typo introduced in 3.7.0 (behavior should be indistinguishable)
  https://github.com/simplejson/simplejson/commit/e18cc09b688ea1f3305c27616fd3cadd2adc6d31#commitcomment-11443842
  * Do not cache Decimal class in encoder, only reference the decimal module.
  This may make reload work in more common scenarios.
  * Fix compilation with MSVC
  https://github.com/simplejson/simplejson/pull/119
  * simplejson no longer trusts custom str/repr methods for int, long, float
  subclasses. These instances are now formatted as if they were exact
  instances of those types.
  https://github.com/simplejson/simplejson/issues/118</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10.0
  * Add RawJSON class to allow a faster path for already encoded JSON.
- From 3.9.0
  * Workaround for bad behavior in string subclasses
  * Fix warnings flagged by -3
  * Update readthedocs documentation links
  * Add build status badge to README</changelog>
  <changelog author="jmatejek@suse.com" date="1490097600">- fix pypi url</changelog>
  <changelog author="tbechtold@suse.com" date="1502193600">- update to 3.11.1:
  * Fix issue with item_sort_key when speedups are available, and add
    auto-discovery to test suites to prevent similar regressions
  * docstring fix in JSONEncoder
  * Call PyObject_IsTrue() only once for the strict argument of scann  er
  * Fix a crash with unencodable encoding in the encoder
  * Remove unused imports
  * Remove remnants of Python 2.4 support
  * Fix argument checking errors in _speedups.c
  * Remove the `__init__` methods in extension classes
  * Fix typo in the doc for loads
  * Add Python 3.6 to testing matrix and PyPI metadata</changelog>
  <changelog author="arun@gmx.de" date="1509969600">- update to version 3.12.0:
  * Fix threaded import race condition
    https://github.com/simplejson/simplejson/issues/184
  * Move RawJSON implementation to simplejson.raw_json module
  * Move JSONDecodeError implementation to simplejson.errors module</changelog>
  <changelog author="arun@gmx.de" date="1511697600">- update to version 3.13.2:
  * Fix additional Python 2.x compilation issue on Windows
- changes from version 3.13.1 :
  * Improve CI to catch speedups build regressions
  * Fix speedups build regression in Python 2.x
    https://github.com/simplejson/simplejson/issues/193
- changes from version 3.13.0:
  * Workarounds for NamedTemporaryFile issues with Windows for tool
    tests
  * Make TypeError messages contain type name instead of a repr.
    https://github.com/simplejson/simplejson/pull/191
  * Ensure that encoding of text subtypes is consistent with or
    without speedups
    https://github.com/simplejson/simplejson/issues/185
- changes from version 3.12.1:
  * Misc updates to build infrastructure
  * Fix an assertion failure when make_encoder receives a bad encoder
    argument https://github.com/simplejson/simplejson/pull/188
  * Fix potential crash during GC
    https://github.com/simplejson/simplejson/pull/187
  * Fix a reference leak when sorting keys
    https://github.com/simplejson/simplejson/pull/186</changelog>
  <changelog author="jengelh@inai.de" date="1511784000">- Remove bias from description.</changelog>
  <changelog author="arun@gmx.de" date="1525608000">- specfile:
  * update copyright year
- update to version 3.14.0:
  * Defer is_raw_json test (performance improvement)
    https://github.com/simplejson/simplejson/pull/212
  * Avoid escaping U+2028 and U+2029 without ensure_ascii
    https://github.com/simplejson/simplejson/pull/211
  * Fix an incorrect type test in Python 2, avoiding an unnecessary
    unicode copy.  https://github.com/simplejson/simplejson/pull/210</changelog>
  <changelog author="arun@gmx.de" date="1526904000">- update to version 3.15.0:
  * Clean up the C code
  * Bypass the decode() method in bytes subclasses
  * Support builds without cStringIO
  * Allow to disable serializing bytes by default in Python 3
  * Simplify the compatibility code
  * Fix tests in Python 2.5</changelog>
  <changelog author="arun@gmx.de" date="1530532800">- specfile:
  * be more specific in %files:
    %{python_sitearch}/* -&gt; %{python_sitearch}/simplejson*
- update to version 3.16.0:
  * Restore old behavior with regard to the type of decoded empty
    strings with speedups enabled on Python 2.x
    https://github.com/simplejson/simplejson/pull/225
  * Add python_requires to setup.py to help pip
    https://github.com/simplejson/simplejson/pull/224
  * Fix CSS in docs when built locally
    https://github.com/simplejson/simplejson/pull/222</changelog>
  <changelog author="tchvatal@suse.com" date="1530532801">- Do not package tests</changelog>
  <changelog author="arun@gmx.de" date="1536408000">- update to version 3.16.1:
  * Added examples for JSON lines use cases
  * Add wheels for more Python versions and platforms</changelog>
  <changelog author="arun@gmx.de" date="1574596800">- specfile:
  * update copyright year
- update to version 3.17.0:
  * Updated documentation to be Python 3 first, and
    have removed documentation notes about version changes
    that occurred more than five years ago.
    https://github.com/simplejson/simplejson/pull/257
    https://github.com/simplejson/simplejson/pull/254
  * Update build matrix for Python 3.8
    https://github.com/simplejson/simplejson/pull/255
    https://github.com/simplejson/simplejson/pull/256</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596024000">- update to 3.17.2
- use pytest as testrunner</changelog>
</package>
<package pkgid="5df5e3e4068c3d314794ae168bba86395b982a06c7c6ba6049de9b5beb0f4ad6" name="python3-simplejson" arch="x86_64">
  <version epoch="0" ver="3.17.2" rel="150300.3.4.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1431432000">- update to version 3.6.5:
  * Importing bug fix for reference leak when an error occurs
    during dict encoding
    https://github.com/simplejson/simplejson/issues/109
- additional changes from version 3.6.4:
  * Important bug fix for dump when only sort_keys is set
    https://github.com/simplejson/simplejson/issues/106
- additional changes from version 3.6.3:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/103
- additional changes from version 3.6.2:
  * Documentation updates
    http://bugs.python.org/issue21514
- additional changes from version 3.6.1:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/102
- additional changes from version 3.6.0:
  * Automatically strip any UTF-8 BOM from input to more closely
    follow the latest specs
    https://github.com/simplejson/simplejson/pull/101
- additional changes from version 3.5.3:
  * Fix lower bound checking in scan_once / raw_decode API
    https://github.com/simplejson/simplejson/issues/98</changelog>
  <changelog author="dmueller@suse.com" date="1479470400">- update to 3.8.2:
  * Fix implicit cast compiler warning in _speedups.c
  * simplejson is now available as wheels for OS X and Windows thanks to Travis-CI
  and AppVeyor respectively! Many thanks to @aebrahim for getting this party
  started.
  * Fix issue with iterable_as_array and indent option
  * Fix typo in keyword argument name introduced in 3.8.0
  * New iterable_as_array encoder option to perform lazy serialization of
  any iterable objects, without having to convert to tuple or list.
  * Fix typo introduced in 3.7.0 (behavior should be indistinguishable)
  https://github.com/simplejson/simplejson/commit/e18cc09b688ea1f3305c27616fd3cadd2adc6d31#commitcomment-11443842
  * Do not cache Decimal class in encoder, only reference the decimal module.
  This may make reload work in more common scenarios.
  * Fix compilation with MSVC
  https://github.com/simplejson/simplejson/pull/119
  * simplejson no longer trusts custom str/repr methods for int, long, float
  subclasses. These instances are now formatted as if they were exact
  instances of those types.
  https://github.com/simplejson/simplejson/issues/118</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10.0
  * Add RawJSON class to allow a faster path for already encoded JSON.
- From 3.9.0
  * Workaround for bad behavior in string subclasses
  * Fix warnings flagged by -3
  * Update readthedocs documentation links
  * Add build status badge to README</changelog>
  <changelog author="jmatejek@suse.com" date="1490097600">- fix pypi url</changelog>
  <changelog author="tbechtold@suse.com" date="1502193600">- update to 3.11.1:
  * Fix issue with item_sort_key when speedups are available, and add
    auto-discovery to test suites to prevent similar regressions
  * docstring fix in JSONEncoder
  * Call PyObject_IsTrue() only once for the strict argument of scann  er
  * Fix a crash with unencodable encoding in the encoder
  * Remove unused imports
  * Remove remnants of Python 2.4 support
  * Fix argument checking errors in _speedups.c
  * Remove the `__init__` methods in extension classes
  * Fix typo in the doc for loads
  * Add Python 3.6 to testing matrix and PyPI metadata</changelog>
  <changelog author="arun@gmx.de" date="1509969600">- update to version 3.12.0:
  * Fix threaded import race condition
    https://github.com/simplejson/simplejson/issues/184
  * Move RawJSON implementation to simplejson.raw_json module
  * Move JSONDecodeError implementation to simplejson.errors module</changelog>
  <changelog author="arun@gmx.de" date="1511697600">- update to version 3.13.2:
  * Fix additional Python 2.x compilation issue on Windows
- changes from version 3.13.1 :
  * Improve CI to catch speedups build regressions
  * Fix speedups build regression in Python 2.x
    https://github.com/simplejson/simplejson/issues/193
- changes from version 3.13.0:
  * Workarounds for NamedTemporaryFile issues with Windows for tool
    tests
  * Make TypeError messages contain type name instead of a repr.
    https://github.com/simplejson/simplejson/pull/191
  * Ensure that encoding of text subtypes is consistent with or
    without speedups
    https://github.com/simplejson/simplejson/issues/185
- changes from version 3.12.1:
  * Misc updates to build infrastructure
  * Fix an assertion failure when make_encoder receives a bad encoder
    argument https://github.com/simplejson/simplejson/pull/188
  * Fix potential crash during GC
    https://github.com/simplejson/simplejson/pull/187
  * Fix a reference leak when sorting keys
    https://github.com/simplejson/simplejson/pull/186</changelog>
  <changelog author="jengelh@inai.de" date="1511784000">- Remove bias from description.</changelog>
  <changelog author="arun@gmx.de" date="1525608000">- specfile:
  * update copyright year
- update to version 3.14.0:
  * Defer is_raw_json test (performance improvement)
    https://github.com/simplejson/simplejson/pull/212
  * Avoid escaping U+2028 and U+2029 without ensure_ascii
    https://github.com/simplejson/simplejson/pull/211
  * Fix an incorrect type test in Python 2, avoiding an unnecessary
    unicode copy.  https://github.com/simplejson/simplejson/pull/210</changelog>
  <changelog author="arun@gmx.de" date="1526904000">- update to version 3.15.0:
  * Clean up the C code
  * Bypass the decode() method in bytes subclasses
  * Support builds without cStringIO
  * Allow to disable serializing bytes by default in Python 3
  * Simplify the compatibility code
  * Fix tests in Python 2.5</changelog>
  <changelog author="arun@gmx.de" date="1530532800">- specfile:
  * be more specific in %files:
    %{python_sitearch}/* -&gt; %{python_sitearch}/simplejson*
- update to version 3.16.0:
  * Restore old behavior with regard to the type of decoded empty
    strings with speedups enabled on Python 2.x
    https://github.com/simplejson/simplejson/pull/225
  * Add python_requires to setup.py to help pip
    https://github.com/simplejson/simplejson/pull/224
  * Fix CSS in docs when built locally
    https://github.com/simplejson/simplejson/pull/222</changelog>
  <changelog author="tchvatal@suse.com" date="1530532801">- Do not package tests</changelog>
  <changelog author="arun@gmx.de" date="1536408000">- update to version 3.16.1:
  * Added examples for JSON lines use cases
  * Add wheels for more Python versions and platforms</changelog>
  <changelog author="arun@gmx.de" date="1574596800">- specfile:
  * update copyright year
- update to version 3.17.0:
  * Updated documentation to be Python 3 first, and
    have removed documentation notes about version changes
    that occurred more than five years ago.
    https://github.com/simplejson/simplejson/pull/257
    https://github.com/simplejson/simplejson/pull/254
  * Update build matrix for Python 3.8
    https://github.com/simplejson/simplejson/pull/255
    https://github.com/simplejson/simplejson/pull/256</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596024000">- update to 3.17.2
- use pytest as testrunner</changelog>
</package>
<package pkgid="098ac33ff219f06a9fb739bdca84cb488a058cd3aef04697156fcd36856d8560" name="python3-urllib3" arch="noarch">
  <version epoch="0" ver="1.25.10" rel="150300.4.6.1"/>
  <changelog author="tchvatal@suse.com" date="1559131200">- Add more test to skip as with new openssl some behaviour changed
  and we can't rely on them anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1559908800">- Skip test_source_address_error as we raise different error with
  fixes that we provide in new python2/3</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1560945600">- Fix Upgrade from Leap 42.1/42.2 by adding Obsoletes/Provides:
  python-urllib3, fixes boo#1138746</changelog>
  <changelog author="dimstar@opensuse.org" date="1561032000">- Provides/Obsoletes does not fix the issue: we have a
  directory-to-symlink switch, which cannot be handled by RPM
  internally. Assist using pre script (boo#1138715).</changelog>
  <changelog author="dimstar@opensuse.org" date="1561118400">- Fixup pre script: the migration issue happens when changing from
  python-urllib3 to python2-urllib3: the number of installed
  instances of python2-urlliib3 is at this moment 1, unlike in
  regular updates. This is due to a name change, which consists not
  of a pure package update.</changelog>
  <changelog author="tchvatal@suse.com" date="1563796800">- Use old pytest 3.x as newer do not work with this release
  * this will be fixed with next release, just spread among
    numerous fixes in the git for quick backporting</changelog>
  <changelog author="jayvdb@gmail.com" date="1568462400">- Use have/skip_python2/3 macros to allow building only one flavour</changelog>
  <changelog author="tchvatal@suse.com" date="1568980800">- Update to 1.25.5:
  * Add mitigation for BPO-37428 affecting Python &lt;3.7.4 and OpenSSL 1.1.1+ which caused certificate verification to be enabled when using cert_reqs=CERT_NONE. (Issue #1682)
  * Propagate Retry-After header settings to subsequent retries. (Pull #1607)
  * Fix edge case where Retry-After header was still respected even when explicitly opted out of. (Pull #1607)
  * Remove dependency on rfc3986 for URL parsing.
  * Fix issue where URLs containing invalid characters within Url.auth would raise an exception instead of percent-encoding those characters.
  * Add support for HTTPResponse.auto_close = False which makes HTTP responses work well with BufferedReaders and other io module features. (Pull #1652)
  * Percent-encode invalid characters in URL for HTTPConnectionPool.request() (Pull #1673)
- Drop patch urllib3-ssl-default-context.patch
- Drop patch python-urllib3-recent-date.patch the date is recent
  enough on its own</changelog>
  <changelog author="tchvatal@suse.com" date="1569585600">- Restrict the tornado dep from tom to 5 or older release as the
  6.x changed the API</changelog>
  <changelog author="tchvatal@suse.com" date="1570017600">- Updae to 1.25.6:
  * Fix issue where tilde (~) characters were incorrectly percent-encoded in the path. (Pull #1692)</changelog>
  <changelog author="rhafer@suse.de" date="1571140800">- Require a new enough release of python-six. 1.25.6 needs at least
  1.12.0 for ensure_text() and friends.</changelog>
  <changelog author="mcalabkova@suse.com" date="1581076800">- update to 1.25.8
  * Drop support for EOL Python 3.4
  * Optimize _encode_invalid_chars
  * Preserve chunked parameter on retries
  * Allow unset SERVER_SOFTWARE in App Engine
  * Fix issue where URL fragment was sent within the request target.
  * Fix issue where an empty query section in a URL would fail to parse.
  * Remove TLS 1.3 support in SecureTransport due to Apple removing support.</changelog>
  <changelog author="mcepl@suse.com" date="1587470400">- Explicitly switch off building python 2 version.</changelog>
  <changelog author="dmueller@suse.com" date="1591099200">- update to 1.25.9 (bsc#1177120, CVE-2020-26137):
  * Added ``InvalidProxyConfigurationWarning`` which is raised when
    erroneously specifying an HTTPS proxy URL. urllib3 doesn't currently
    support connecting to HTTPS proxies but will soon be able to
    and we would like users to migrate properly without much breakage.
  * Drain connection after ``PoolManager`` redirect (Pull #1817)
  * Ensure ``load_verify_locations`` raises ``SSLError`` for all backends (Pull #1812)
  * Rename ``VerifiedHTTPSConnection`` to ``HTTPSConnection`` (Pull #1805)
  * Allow the CA certificate data to be passed as a string (Pull #1804)
  * Raise ``ValueError`` if method contains control characters (Pull #1800)
  * Add ``__repr__`` to ``Timeout`` (Pull #1795)</changelog>
  <changelog author="dmueller@suse.com" date="1596542400">- update to 1.25.10:
  * Added support for ``SSLKEYLOGFILE`` environment variable for
    logging TLS session keys with use with programs like
    Wireshark for decrypting captured web traffic (Pull #1867)
  * Fixed loading of SecureTransport libraries on macOS Big Sur
    due to the new dynamic linker cache (Pull #1905)
  * Collapse chunked request bodies data and framing into one
  call to ``send()`` to reduce the number of TCP packets by 2-4x (Pull #1906)
  * Don't insert ``None`` into ``ConnectionPool`` if the pool
    was empty when requesting a connection (Pull #1866)
  * Avoid ``hasattr`` call in ``BrotliDecoder.decompress()`` (Pull #1858)</changelog>
  <changelog author="aplanas@suse.com" date="1599652800">- Generate pyc for ssl_match_hostname too</changelog>
  <changelog author="mcepl@suse.com" date="1608206400">- Add CI variable, which makes timeouts in the test suite longer
  (gh#urllib3/urllib3#2109, bsc#1176389) and
  test_timeout_errors_cause_retries should not fail.</changelog>
  <changelog author="code@bnavigator.de" date="1609502400">- Skip test for RECENT_DATE. It is a test purely for developers.
  To maintain reproducibility, keep upstreams possibly outdated
  RECENT_DATE in the source code.</changelog>
  <changelog author="johannes.grassler@suse.com" date="1623412800">- Add CVE-2021-33503.patch (bsc#1187045, CVE-2021-33503)
  * Improve performance of sub-authority splitting in URL</changelog>
  <changelog author="daniel.garcia@suse.com" date="1696852800">- Add CVE-2023-43804.patch (bsc#1215968, CVE-2023-43804)
  gh#urllib3/urllib3#3139
  * Added the Cookie header to the list of headers to strip from
    requests when redirecting to a different host. As before,
    different headers can be set via Retry.remove_headers_on_redirect.</changelog>
</package>
<package pkgid="a9f1c027a66e6d078c11044aa427269aad7a612e5848d79d3161778c82a68ba5" name="python3-urllib3" arch="noarch">
  <version epoch="0" ver="1.25.10" rel="150300.4.9.1"/>
  <changelog author="tchvatal@suse.com" date="1559908800">- Skip test_source_address_error as we raise different error with
  fixes that we provide in new python2/3</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1560945600">- Fix Upgrade from Leap 42.1/42.2 by adding Obsoletes/Provides:
  python-urllib3, fixes boo#1138746</changelog>
  <changelog author="dimstar@opensuse.org" date="1561032000">- Provides/Obsoletes does not fix the issue: we have a
  directory-to-symlink switch, which cannot be handled by RPM
  internally. Assist using pre script (boo#1138715).</changelog>
  <changelog author="dimstar@opensuse.org" date="1561118400">- Fixup pre script: the migration issue happens when changing from
  python-urllib3 to python2-urllib3: the number of installed
  instances of python2-urlliib3 is at this moment 1, unlike in
  regular updates. This is due to a name change, which consists not
  of a pure package update.</changelog>
  <changelog author="tchvatal@suse.com" date="1563796800">- Use old pytest 3.x as newer do not work with this release
  * this will be fixed with next release, just spread among
    numerous fixes in the git for quick backporting</changelog>
  <changelog author="jayvdb@gmail.com" date="1568462400">- Use have/skip_python2/3 macros to allow building only one flavour</changelog>
  <changelog author="tchvatal@suse.com" date="1568980800">- Update to 1.25.5:
  * Add mitigation for BPO-37428 affecting Python &lt;3.7.4 and OpenSSL 1.1.1+ which caused certificate verification to be enabled when using cert_reqs=CERT_NONE. (Issue #1682)
  * Propagate Retry-After header settings to subsequent retries. (Pull #1607)
  * Fix edge case where Retry-After header was still respected even when explicitly opted out of. (Pull #1607)
  * Remove dependency on rfc3986 for URL parsing.
  * Fix issue where URLs containing invalid characters within Url.auth would raise an exception instead of percent-encoding those characters.
  * Add support for HTTPResponse.auto_close = False which makes HTTP responses work well with BufferedReaders and other io module features. (Pull #1652)
  * Percent-encode invalid characters in URL for HTTPConnectionPool.request() (Pull #1673)
- Drop patch urllib3-ssl-default-context.patch
- Drop patch python-urllib3-recent-date.patch the date is recent
  enough on its own</changelog>
  <changelog author="tchvatal@suse.com" date="1569585600">- Restrict the tornado dep from tom to 5 or older release as the
  6.x changed the API</changelog>
  <changelog author="tchvatal@suse.com" date="1570017600">- Updae to 1.25.6:
  * Fix issue where tilde (~) characters were incorrectly percent-encoded in the path. (Pull #1692)</changelog>
  <changelog author="rhafer@suse.de" date="1571140800">- Require a new enough release of python-six. 1.25.6 needs at least
  1.12.0 for ensure_text() and friends.</changelog>
  <changelog author="mcalabkova@suse.com" date="1581076800">- update to 1.25.8
  * Drop support for EOL Python 3.4
  * Optimize _encode_invalid_chars
  * Preserve chunked parameter on retries
  * Allow unset SERVER_SOFTWARE in App Engine
  * Fix issue where URL fragment was sent within the request target.
  * Fix issue where an empty query section in a URL would fail to parse.
  * Remove TLS 1.3 support in SecureTransport due to Apple removing support.</changelog>
  <changelog author="mcepl@suse.com" date="1587470400">- Explicitly switch off building python 2 version.</changelog>
  <changelog author="dmueller@suse.com" date="1591099200">- update to 1.25.9 (bsc#1177120, CVE-2020-26137):
  * Added ``InvalidProxyConfigurationWarning`` which is raised when
    erroneously specifying an HTTPS proxy URL. urllib3 doesn't currently
    support connecting to HTTPS proxies but will soon be able to
    and we would like users to migrate properly without much breakage.
  * Drain connection after ``PoolManager`` redirect (Pull #1817)
  * Ensure ``load_verify_locations`` raises ``SSLError`` for all backends (Pull #1812)
  * Rename ``VerifiedHTTPSConnection`` to ``HTTPSConnection`` (Pull #1805)
  * Allow the CA certificate data to be passed as a string (Pull #1804)
  * Raise ``ValueError`` if method contains control characters (Pull #1800)
  * Add ``__repr__`` to ``Timeout`` (Pull #1795)</changelog>
  <changelog author="dmueller@suse.com" date="1596542400">- update to 1.25.10:
  * Added support for ``SSLKEYLOGFILE`` environment variable for
    logging TLS session keys with use with programs like
    Wireshark for decrypting captured web traffic (Pull #1867)
  * Fixed loading of SecureTransport libraries on macOS Big Sur
    due to the new dynamic linker cache (Pull #1905)
  * Collapse chunked request bodies data and framing into one
  call to ``send()`` to reduce the number of TCP packets by 2-4x (Pull #1906)
  * Don't insert ``None`` into ``ConnectionPool`` if the pool
    was empty when requesting a connection (Pull #1866)
  * Avoid ``hasattr`` call in ``BrotliDecoder.decompress()`` (Pull #1858)</changelog>
  <changelog author="aplanas@suse.com" date="1599652800">- Generate pyc for ssl_match_hostname too</changelog>
  <changelog author="mcepl@suse.com" date="1608206400">- Add CI variable, which makes timeouts in the test suite longer
  (gh#urllib3/urllib3#2109, bsc#1176389) and
  test_timeout_errors_cause_retries should not fail.</changelog>
  <changelog author="code@bnavigator.de" date="1609502400">- Skip test for RECENT_DATE. It is a test purely for developers.
  To maintain reproducibility, keep upstreams possibly outdated
  RECENT_DATE in the source code.</changelog>
  <changelog author="johannes.grassler@suse.com" date="1623412800">- Add CVE-2021-33503.patch (bsc#1187045, CVE-2021-33503)
  * Improve performance of sub-authority splitting in URL</changelog>
  <changelog author="daniel.garcia@suse.com" date="1696852800">- Add CVE-2023-43804.patch (bsc#1215968, CVE-2023-43804)
  gh#urllib3/urllib3#3139
  * Added the Cookie header to the list of headers to strip from
    requests when redirecting to a different host. As before,
    different headers can be set via Retry.remove_headers_on_redirect.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1698235200">- Add CVE-2023-45803.patch (bsc#1216377, CVE-2023-45803)
  gh#urllib3/urllib3@4e98d57809da</changelog>
</package>
<package pkgid="188c03db297dc4885ab9fb615c3d78ddacaa97a09f71233a3486c79d0132a921" name="qemu" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="7b96253209e79e3ab95332346b99c689d82affaa535abbc96ea2e4d497b1c69f" name="qemu" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="2a2a9f7c3b5168239e3ae73dd313f77ac56fdfdcb2d1ff2a83231e7a1e7b028c" name="qemu" arch="src">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="46e1cb18c4ac1e631f09231e4bba3e39fc18a047932b14e4c8dd4c5387120804" name="qemu" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="21415ae99bab2eb2c9897d75482a32f51a1d3121bf84c9e7ef9bfac0107d475c" name="qemu" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="f79847bee30f7b2e74a578b334736a09c464d306212161586cd11fc1acd77338" name="qemu" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="6b16e3acda80d8e7261d84ea4acd910015a1f8742fc5dd6f6e3cbb57d63f6465" name="qemu" arch="src">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="6cf4a0caee0bab89ca317440f258b2e3a88e8892879c5d0b7ef8cd15a26f8880" name="qemu" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="e2f5aa9f5532d845c77600930ee9731b07410a1ba721e4e48b3d3a9fa6e77100" name="qemu-accel-tcg-x86" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="e2d8378b0a690ced00b7b0b708ebc79f466adef58d5aec51caea771a92629664" name="qemu-accel-tcg-x86" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="d75dba9f713e851dea3a44bd541ef366ac9c88a810568a8661989395e9fa7ddb" name="qemu-arm" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="6adb5f0a82a1bbaa438250adbbdd491893b302c87cc4ede9e52771f93180df68" name="qemu-arm" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="e3069547385534d0a257ecff6cdded030b94e08d74a98f95754043443b84f811" name="qemu-audio-spice" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="aa46d4a643ba9526c3270a1b5374160917d883406c8f435da6b30d2d8c36a9af" name="qemu-audio-spice" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="47ba929a096db95476e5848e685be3f16aa94dcbeb209e76fd8b13535c556afe" name="qemu-audio-spice" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="919ca0d11abe6c71a0662fb87df6eae70160f99ab2e1c834a06623f1814729c1" name="qemu-audio-spice" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="4855ea11887bb20beb242e03b0c727ea995038ad6bd79d43b75769f3707df9b2" name="qemu-audio-spice" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="a3db00ffd761bbcf3c4a674664508516bc40fecf6f053f8529279a226c36fa9e" name="qemu-audio-spice" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="20c9aee320c3bc133bc4592648e80832d2fae5839885e733e8ac5d57e391199f" name="qemu-block-curl" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="f022c5f0f914f4aeb63bc66bdbfaf243aa3416e6c96e10c4cc7ce8f9b87fc983" name="qemu-block-curl" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="19b186c26203d2a3790f82639fe909f6af0d9bd0cfbefe8a1ea1e6fdc8b18214" name="qemu-block-curl" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="ae4ea72945ea5b124d900d1b48dd69a710779d359ea7c5f4827115e1d180ad0b" name="qemu-block-curl" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="60d82021c90d4548419d17c8fb9f6dc8fb510a4593fbb91f915e63aed295bbcd" name="qemu-block-curl" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="52ffab8b8ce02039a08d58db2992f2bb23bd86cc2b42af0ca21f12bbdd94c7f9" name="qemu-block-curl" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="a693c8a2df4fbd4d073723da6941da9a5fb0d98ce978a4bbd0e305366ed846f3" name="qemu-chardev-spice" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="40efba64d1cf2fa57f87f03fa224e57b5fc71c9306b6b77ccacf84215736d63c" name="qemu-chardev-spice" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="9f077b7660f6740f49544ef3b01ee5fc6fb3d088b989d78f8f25f8ce006b8f82" name="qemu-chardev-spice" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="785671532852a12f77d4923979102cf172f0daaf0da49a3c0f53207f0eb429b3" name="qemu-chardev-spice" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="a041ed5796ddf8ce7906ce86132ac6b6abb8f11bc9f693d7dafb244cd633a5d2" name="qemu-chardev-spice" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="1f8d18192f58b75d52e8651722094fe0372f3a86be6cd2657f680db6b81f528e" name="qemu-chardev-spice" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="ed65cd22cbfa3ea3908161d8b7784d3b378069378acca68da71f67abc1ee397f" name="qemu-guest-agent" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="dd5e2d04b82d297f9efe5ea778422adb66188714c465b5cca723516dcf72a0e0" name="qemu-guest-agent" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="368b0329363bd37f3f1d31a428f681b63579d2ad9382c2aff0c8dc0333c66110" name="qemu-guest-agent" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="6a256913cbe094ccd360b414c975f0fa740375d1a39af3d4da04942da8962635" name="qemu-guest-agent" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="f0eb71aa11d76408b84479181117d20ef86e5554fa755bca128187a0094b331c" name="qemu-guest-agent" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="e1374c0adb2a553a887d77bca7df389656bc1d30a44b7c986a2d4176a91ed9e6" name="qemu-guest-agent" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="fc8bd75a3ac138865bc8cd8abe1ced9b3d1f503c526e0ac2312424ae4eaff212" name="qemu-hw-display-qxl" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="92f622c996e8f89173673161e47a08ee5e17b9a51b2e370790eaa2564eec47d9" name="qemu-hw-display-qxl" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="ce7a1b6d4511299f4e434ba4e228eec70d5aebd6078512a76156405f87cd9277" name="qemu-hw-display-qxl" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="768a97ae60e79e40efe5b6054c0c3d7285314827b7e4da46ac8112b17de66aaa" name="qemu-hw-display-qxl" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="6fdd49d36b408c75c04d49409e8dfc3547fdd19d86d64fd3d59b0b4e9d12b9b1" name="qemu-hw-display-qxl" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="421aa65ff6cbd27b73ab29316b89f63880483ed830147ba96c78341b69642cf1" name="qemu-hw-display-qxl" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="93d8fbce14956bde71cafad57bc51146ca763420d44ea9525a37c85ef98be1ed" name="qemu-hw-display-virtio-gpu" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="9bbed6f8dc977c6bf5981fc05e3a7ab6dd1d41478d4fe9b28fb60af62a9305e7" name="qemu-hw-display-virtio-gpu" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="b593ded4a51fd48a8275abe1a67bc47f729cb7b9b73d3b1dee468c88f4ae397f" name="qemu-hw-display-virtio-gpu" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="a9cd0ad1a37c205a7327670e46a4a16bf0c87354bae6c59730e6b4aafa093d1d" name="qemu-hw-display-virtio-gpu" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="b8478f743374802818d2ee8941cdd8e8bd1607e5e84be6120379c3fdcc641a80" name="qemu-hw-display-virtio-gpu" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="07e5f22a69ff501ed5e513e621dae6325543806c813446b75dd5b45a2671b53e" name="qemu-hw-display-virtio-gpu" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="0208508433c639c0b97042f7b138a4719997dd0023523baad647186ccfad8155" name="qemu-hw-display-virtio-vga" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="66567372078fc1db2294132bb58010a690b6e07378bc6b2b727690d6e18aab4a" name="qemu-hw-display-virtio-vga" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="5d7167a40a756d9f86029670efca7d1239ca8b1e00261b4a4f0a4cf841939483" name="qemu-hw-display-virtio-vga" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="33a95690de54fb1d58dd0cbbd9eb4a9cbda87e3cbceb5eb47b8b6fca541301ad" name="qemu-hw-display-virtio-vga" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="99d1af1be0735122c5283a1e4263b9102d4da3c816b9c1f0f0bcffb26e9346af" name="qemu-hw-display-virtio-vga" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="ba786a07f28367d4550414ae4510434c036bf20e6a51eaa0fa6abb9606d6cff1" name="qemu-hw-display-virtio-vga" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="9578559eb9b1540da86774cf8ebf27a6cfcc792af74a89a2138070720e50058a" name="qemu-hw-usb-redirect" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="a11bbf011674e85168716053a25e1787252b24d99109ddc35b0bac9e28c0e697" name="qemu-hw-usb-redirect" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="8ea3a65271ca19be7e54030b7dcdcbd42f51a070a8a77e374ddccd9179cfe9dd" name="qemu-hw-usb-redirect" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="4cf61fdeea8c5f54c059c163676752691c44e00c4b1229e2e2eda2af5ecf840b" name="qemu-hw-usb-redirect" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="a59d60ed9a4b248b6567268b34108fb197f13366387728f2d185d5344bf923e1" name="qemu-hw-usb-redirect" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="76e187b8240a45ac7c7e4d5ccf662d0a99bec4ea281416d23c7f6c9248b6b44a" name="qemu-hw-usb-redirect" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="bb0d3cb553d4fa720469eb117f2a3405fdac5845c7f5e0c53790e14f8771d668" name="qemu-ipxe" arch="noarch">
  <version epoch="0" ver="1.0.0+" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="688282d8af1cd0fc90104489159ef4ce80382a98b0d2833b7b07416b09ea92b9" name="qemu-ipxe" arch="noarch">
  <version epoch="0" ver="1.0.0+" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="b9975641277df6d6d58c48397132336e58accbf9872bbd3bd0f937808c145e4c" name="qemu-s390x" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="02dd0ecaa35a564861553b61dae574268a02552d88b0b95212693c88a80b398f" name="qemu-s390x" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="036276a00f609fda952675ad8e8d85fb8e11992e8d895a9e817a375de43c037f" name="qemu-seabios" arch="noarch">
  <version epoch="0" ver="1.16.0_0_gd239552" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="3ed4ce455e14273b6c5a2db2aef7e4c195cccb7b9782b701ec22468b182f7cd0" name="qemu-seabios" arch="noarch">
  <version epoch="0" ver="1.16.0_0_gd239552" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="e840913f1330a790a9c28efc498ec1ecd1faafa9fd119f6f14e0a888627f21ab" name="qemu-sgabios" arch="noarch">
  <version epoch="0" ver="8" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="72847c5937777279ae7ca3b6aadc3dce3a0042fdb761a16024bf0ea2cab37fcc" name="qemu-sgabios" arch="noarch">
  <version epoch="0" ver="8" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="1179ac0520b77802bdbb0622803ec70240a0ef09ff5b20e3f39c71741888de75" name="qemu-tools" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="a3e7ab7af2b0595c845cd65b699e3f1ca0fdbe78a7977fb08543d0d3191149e0" name="qemu-tools" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="127283823fc8dc12f7403c9ddb7ed84d1fa98a72ba820aa795ac937552bff45b" name="qemu-tools" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="f0a2235f503ecc98a17789c3801baa69e811b9e1c9fa830096f3ab9997730e0f" name="qemu-tools" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="9a4e5d2df748421cb59af4967eb2a931836e29a96841b0250d5570e2031aa56f" name="qemu-tools" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="fdb2e5070558ffeceb62c47a7fae6effaf6c9dd1f2068ae97bf6f5ffe83a1032" name="qemu-tools" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="ba1f2f93c249f1761cac999ed66b2b977364defcae4dfbdb314beea2152f2f46" name="qemu-ui-opengl" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="e2c38fa709f1e93d12e2306c85d1d9f991337fe39ed921606520628243413dfb" name="qemu-ui-opengl" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="74d980c4afab5277dc9d8b4496bc2606b08c2d91abaaf34ab09e3a87cf98cb02" name="qemu-ui-opengl" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="bdf8859e916560c931ba501ad423f042e4cb1ff0f120c78b5219fec25be01e68" name="qemu-ui-opengl" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="f07bf3c4095d1d391b42a9fe757fb5b39e57f72b28a50862608c2493bb18b9e5" name="qemu-ui-opengl" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="5649582e63ed5542895c39c676d10039fdc7745d7d09d84dc59f6c7d21142127" name="qemu-ui-opengl" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="50c76f4230fe91167c9804ac6eb2c87941a5aeaa05bcb0ca6b0a4ef15e93a54b" name="qemu-ui-spice-core" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="d23f2975c6414ac21473e92aefecf4ecd2d78b7e350f004c325caf6f4dda7551" name="qemu-ui-spice-core" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="bb96acd7867e58e8a5b83765abbe8dbecfc86d80de67eaad1409264c9c0a9f43" name="qemu-ui-spice-core" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="04364a9eec1c411292d45950c37998b74639f8e5b29396634155aed3a6dff42f" name="qemu-ui-spice-core" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="240deab065a00d5c604eea832adc95f81ef6f9a7d2f558426c0e0d95ce2b5022" name="qemu-ui-spice-core" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="63bcfbbbdad37fdb3b368c37aa7aefbe857f7005157ad49859672acfea8c535b" name="qemu-ui-spice-core" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="26f6a56ae4b0a04ee24893b38f8aeb75f01ea7b1c14683bd930d4c054c198122" name="qemu-vgabios" arch="noarch">
  <version epoch="0" ver="1.16.0_0_gd239552" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="141cc06a5c37a7ca446722f40d35fe644b052dacc73f3a6d54899d7a6b340a2f" name="qemu-vgabios" arch="noarch">
  <version epoch="0" ver="1.16.0_0_gd239552" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="5c8c8a4d5687242552991382fdb16f7ffdd759495f959b76e8f5cca404ef9cd9" name="qemu-x86" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="f420306536e212e446f3234fe9d71bbb8b22f7f9b0439c3ab88477a3ddb9aea0" name="qemu-x86" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="11eda5b82184a0e16dbb39fc00513ae3468765c43128ae5a531559c8a8149011" name="regionServiceClientConfigAzure" arch="noarch">
  <version epoch="0" ver="2.0.1" rel="150000.3.19.1"/>
  <changelog author="ms@suse.com" date="1413460800">- regionServiceClientConfigAzure
  + update the configuration to match the new command line arguments</changelog>
  <changelog author="rschweikert@suse.com" date="1420545600">- Include in SLE 12 (FATE 318302, bnc#911856)</changelog>
  <changelog author="rjschwei@suse.com" date="1423742400">- Update to version 0.0.3
  + Use the new command for the meta data (azuremetadata)
  + Fix the package dependencies, requires azuremetadata</changelog>
  <changelog author="rjschwei@suse.com" date="1519214400">- Update to version 0.0.4
  + Use region hint to get SMT data in pre for IPv6 support (bsc#1029162)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1585656000">- Update to version 0.0.5
  + Don't specify root device name explicitly (bsc#1158698, bsc#1158707)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1587988800">- Update to version 0.0.6
  + Report subscriptionId during registration (bsc#1170605, bsc#1170606)</changelog>
  <changelog author="rjschwei@suse.com" date="1588852800">- Update to version 1.0.0 (bsc#1171465, bsc#1171465)
  + Merge region server setup for SLES and SLES For SAP</changelog>
  <changelog author="rjschwei@suse.com" date="1596715200">- Update to version 1.0.5 (bsc#1174791, bsc#1174937)
  + New configuration to switch to https only outgoing traffic
  + Use latest API to query the metadata server and send additional data</changelog>
  <changelog author="rjschwei@suse.com" date="1652875200">- Update to version 2.0.0 (bsc#1199668)
  + Move the certs to /usr from /var to accomodate ro filesystem of
    SLE-Micro
  + Fix source url in spec file</changelog>
  <changelog author="jesus.bv@suse.com" date="1701172800">- Update to version 2.0.1 (bsc#1217537)
  + Replacing 104.45.31.195.pem 191.237.254.253.pem certs
    expiring in 8 years and new length of 4096
    These certs will replace the current certs that
    expire soon</changelog>
</package>
<package pkgid="b7042c457468cd9a671a4895c7d1110fd9211cb41616ac52bdad1946827d60de" name="regionServiceClientConfigAzure" arch="src">
  <version epoch="0" ver="2.0.1" rel="150000.3.19.1"/>
  <changelog author="ms@suse.com" date="1413460800">- regionServiceClientConfigAzure
  + update the configuration to match the new command line arguments</changelog>
  <changelog author="rschweikert@suse.com" date="1420545600">- Include in SLE 12 (FATE 318302, bnc#911856)</changelog>
  <changelog author="rjschwei@suse.com" date="1423742400">- Update to version 0.0.3
  + Use the new command for the meta data (azuremetadata)
  + Fix the package dependencies, requires azuremetadata</changelog>
  <changelog author="rjschwei@suse.com" date="1519214400">- Update to version 0.0.4
  + Use region hint to get SMT data in pre for IPv6 support (bsc#1029162)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1585656000">- Update to version 0.0.5
  + Don't specify root device name explicitly (bsc#1158698, bsc#1158707)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1587988800">- Update to version 0.0.6
  + Report subscriptionId during registration (bsc#1170605, bsc#1170606)</changelog>
  <changelog author="rjschwei@suse.com" date="1588852800">- Update to version 1.0.0 (bsc#1171465, bsc#1171465)
  + Merge region server setup for SLES and SLES For SAP</changelog>
  <changelog author="rjschwei@suse.com" date="1596715200">- Update to version 1.0.5 (bsc#1174791, bsc#1174937)
  + New configuration to switch to https only outgoing traffic
  + Use latest API to query the metadata server and send additional data</changelog>
  <changelog author="rjschwei@suse.com" date="1652875200">- Update to version 2.0.0 (bsc#1199668)
  + Move the certs to /usr from /var to accomodate ro filesystem of
    SLE-Micro
  + Fix source url in spec file</changelog>
  <changelog author="jesus.bv@suse.com" date="1701172800">- Update to version 2.0.1 (bsc#1217537)
  + Replacing 104.45.31.195.pem 191.237.254.253.pem certs
    expiring in 8 years and new length of 4096
    These certs will replace the current certs that
    expire soon</changelog>
</package>
<package pkgid="902ab988f8ad683fb8c28a3516dbbe44d6502e39e023b49e67a97c83271d20db" name="regionServiceClientConfigEC2" arch="noarch">
  <version epoch="0" ver="4.1.1" rel="150000.3.27.1"/>
  <changelog author="rschweikert@suse.com" date="1413374400">- Update to version 1.0.1
  + Add region server for China region</changelog>
  <changelog author="aosthof@suse.de" date="1417521600">- Removed /etc/regionserverclnt.cfg~ from tarball</changelog>
  <changelog author="rjschwei@suse.com" date="1486987200">- Update to version 2.0.0 (bsc#1025004)
  + Delete old certificate of server we no longer operate
  + Add certificate for new server 34.197.223.242</changelog>
  <changelog author="rjschwei@suse.com" date="1512820800">- Fix dependency for SLE 15 (bsc#1071292)</changelog>
  <changelog author="rjschwei@suse.com" date="1519214400">- Update to version 2.0.1
  + Use region hint to get SMT data in pre for IPv6 support (bsc#1029162)</changelog>
  <changelog author="jmason@suse.com" date="1526299200">- Update to version 2.1.0 (bsc#1093189, bsc#1121114)
  + Drop lost server IP address; realign IPs with certs
  + Add 34.197.223.242 to configuration</changelog>
  <changelog author="rjschwei@suse.com" date="1588766400">- Update to version 2.2.0 (bsc#1171232, bsc#1171233)
  + Send a region hint using the plugin
  + Consolidate SLES and SLES For SAP certs</changelog>
  <changelog author="rjschwei@suse.com" date="1596715200">- Update to version 2.2.1 (bsc#1174791, bsc#1174937)
  + New configuration to switch to https only outgoing traffic</changelog>
  <changelog author="rjschwei@suse.com" date="1598961600">- Update to version 3.0.0 (bsc#1176005, bsc#1176007)
  + Reduce the number of region servers
  + Require python3-ec2metadata to support IMDSv2 only setups</changelog>
  <changelog author="jmason@suse.com" date="1636718400">- Update to version 3.1.0 (bsc#1029162)
  + Add IPv6 addresses to config
  + Include IPv6 certificates
  + Requires cloud-regionsrv-client &gt;= v9.3.0</changelog>
  <changelog author="rjschwei@suse.com" date="1652875200">- Update to version 4.0.0 (bsc#1199668)
  + Move cert location to usr form var to accomodate ro filesystem of
    SLE-Micro
  + Fix source location in spec file</changelog>
  <changelog author="rjschwei@suse.com" date="1662552000">- Update to version 4.1.0 (bsc#1203215)
  + New certs for 52.79.82.165 and 54.247.166.75</changelog>
  <changelog author="jesus.bv@suse.com" date="1701172800">- Update to version 4.1.1 (bsc#1217536)
  + Replace 54.247.166.75.pem and 54.253.118.149.pem old soon to expired certs
    with new generated ones that expire in 8 years and have longer length (4096)</changelog>
</package>
<package pkgid="8e24eb76623b369705d98e190f8139466cbc9cf569affbc5fd1a11beca3d8a03" name="regionServiceClientConfigEC2" arch="src">
  <version epoch="0" ver="4.1.1" rel="150000.3.27.1"/>
  <changelog author="rschweikert@suse.com" date="1401537600">- Initial build</changelog>
  <changelog author="rschweikert@suse.com" date="1401710400">- Update to version 1.0.0
  + use ful path for data collector
  + fix provides</changelog>
  <changelog author="rschweikert@suse.com" date="1413374400">- Update to version 1.0.1
  + Add region server for China region</changelog>
  <changelog author="aosthof@suse.de" date="1417521600">- Removed /etc/regionserverclnt.cfg~ from tarball</changelog>
  <changelog author="rjschwei@suse.com" date="1486987200">- Update to version 2.0.0 (bsc#1025004)
  + Delete old certificate of server we no longer operate
  + Add certificate for new server 34.197.223.242</changelog>
  <changelog author="rjschwei@suse.com" date="1512820800">- Fix dependency for SLE 15 (bsc#1071292)</changelog>
  <changelog author="rjschwei@suse.com" date="1519214400">- Update to version 2.0.1
  + Use region hint to get SMT data in pre for IPv6 support (bsc#1029162)</changelog>
  <changelog author="jmason@suse.com" date="1526299200">- Update to version 2.1.0 (bsc#1093189, bsc#1121114)
  + Drop lost server IP address; realign IPs with certs
  + Add 34.197.223.242 to configuration</changelog>
  <changelog author="rjschwei@suse.com" date="1588766400">- Update to version 2.2.0 (bsc#1171232, bsc#1171233)
  + Send a region hint using the plugin
  + Consolidate SLES and SLES For SAP certs</changelog>
  <changelog author="rjschwei@suse.com" date="1596715200">- Update to version 2.2.1 (bsc#1174791, bsc#1174937)
  + New configuration to switch to https only outgoing traffic</changelog>
  <changelog author="rjschwei@suse.com" date="1598961600">- Update to version 3.0.0 (bsc#1176005, bsc#1176007)
  + Reduce the number of region servers
  + Require python3-ec2metadata to support IMDSv2 only setups</changelog>
  <changelog author="jmason@suse.com" date="1636718400">- Update to version 3.1.0 (bsc#1029162)
  + Add IPv6 addresses to config
  + Include IPv6 certificates
  + Requires cloud-regionsrv-client &gt;= v9.3.0</changelog>
  <changelog author="rjschwei@suse.com" date="1652875200">- Update to version 4.0.0 (bsc#1199668)
  + Move cert location to usr form var to accomodate ro filesystem of
    SLE-Micro
  + Fix source location in spec file</changelog>
  <changelog author="rjschwei@suse.com" date="1662552000">- Update to version 4.1.0 (bsc#1203215)
  + New certs for 52.79.82.165 and 54.247.166.75</changelog>
  <changelog author="jesus.bv@suse.com" date="1701172800">- Update to version 4.1.1 (bsc#1217536)
  + Replace 54.247.166.75.pem and 54.253.118.149.pem old soon to expired certs
    with new generated ones that expire in 8 years and have longer length (4096)</changelog>
</package>
<package pkgid="5faeaa9db3871523eff3778ca68f7142478f1383abf0fd7e85d18dc5bbfd9064" name="regionServiceClientConfigGCE" arch="noarch">
  <version epoch="0" ver="4.0.1" rel="150000.4.12.1"/>
  <changelog author="rschweikert@suse.com" date="1411732800">- New certificate for new region servers</changelog>
  <changelog author="rschweikert@suse.com" date="1411732801">- Bump to version 2.0.1
  + fix spec file file list</changelog>
  <changelog author="rschweikert@suse.com" date="1412942400">- Enable use of plugin to send region hints to region server</changelog>
  <changelog author="rjschwei@suse.com" date="1450180800">- Bump to version 2.1.1 (bsc#959244)
  + Point to the proper region servers</changelog>
  <changelog author="rjschwei@suse.com" date="1503489600">- Update to version 2.1.2 (bsc#1053695, bsc#1053696)
  + Configure the client to send license verification data to the SMT server</changelog>
  <changelog author="rjschwei@suse.com" date="1512820800">- Fix dependency for SLE 15 (bsc#1071292)</changelog>
  <changelog author="rjschwei@suse.com" date="1588939200">- Update to version 3.0.0 (bsc#1171467, bsc#1171469)
  + Unify the configuration between SLES and SLES For SAP</changelog>
  <changelog author="rjschwei@suse.com" date="1596715200">- Update to version 3.0.1 (bsc#1174791, bsc#1174937)
  + New configuration to switch to https only outgoing traffic</changelog>
  <changelog author="rjschwei@suse.com" date="1652875200">- Update to version 4.0.0 (bsc#1199668)
  + Move the cert location to /usr for compatibility with ro setup of
    SLE-Micro
  + Fix url in spec file to pint to the proper location of the source</changelog>
  <changelog author="jesus.bv@suse.com" date="1701172800">- Update to version 4.0.1 (bsc#1217538)
  + Replace 130.211.242.136.pem and 130.211.88.88.pem certs
    expiring in 8 years and new length of 4096
    These certs will replace the current certs that
    expire soon</changelog>
</package>
<package pkgid="88500f51a6bb07e41acb1113535c4ea446198c624b88897fb276493d64728c7c" name="regionServiceClientConfigGCE" arch="src">
  <version epoch="0" ver="4.0.1" rel="150000.4.12.1"/>
  <changelog author="rschweikert@suse.com" date="1398168000">- Initial build</changelog>
  <changelog author="rschweikert@suse.com" date="1398168001">- Include in SLE 12 (FATE #316168)</changelog>
  <changelog author="rschweikert@suse.com" date="1398254400">- Fix license string</changelog>
  <changelog author="rschweikert@suse.com" date="1399291200">- Properly handle licensing, use Apache v2</changelog>
  <changelog author="rschweikert@suse.com" date="1399896000">- Fix provides, package also provides the region server certs</changelog>
  <changelog author="rschweikert@suse.com" date="1399896001">- Re-add previously removed provide, need all 3</changelog>
  <changelog author="rschweikert@suse.com" date="1411732800">- New certificate for new region servers</changelog>
  <changelog author="rschweikert@suse.com" date="1411732801">- Bump to version 2.0.1
  + fix spec file file list</changelog>
  <changelog author="rschweikert@suse.com" date="1412942400">- Enable use of plugin to send region hints to region server</changelog>
  <changelog author="rjschwei@suse.com" date="1450180800">- Bump to version 2.1.1 (bsc#959244)
  + Point to the proper region servers</changelog>
  <changelog author="rjschwei@suse.com" date="1503489600">- Update to version 2.1.2 (bsc#1053695, bsc#1053696)
  + Configure the client to send license verification data to the SMT server</changelog>
  <changelog author="rjschwei@suse.com" date="1512820800">- Fix dependency for SLE 15 (bsc#1071292)</changelog>
  <changelog author="rjschwei@suse.com" date="1588939200">- Update to version 3.0.0 (bsc#1171467, bsc#1171469)
  + Unify the configuration between SLES and SLES For SAP</changelog>
  <changelog author="rjschwei@suse.com" date="1596715200">- Update to version 3.0.1 (bsc#1174791, bsc#1174937)
  + New configuration to switch to https only outgoing traffic</changelog>
  <changelog author="rjschwei@suse.com" date="1652875200">- Update to version 4.0.0 (bsc#1199668)
  + Move the cert location to /usr for compatibility with ro setup of
    SLE-Micro
  + Fix url in spec file to pint to the proper location of the source</changelog>
  <changelog author="jesus.bv@suse.com" date="1701172800">- Update to version 4.0.1 (bsc#1217538)
  + Replace 130.211.242.136.pem and 130.211.88.88.pem certs
    expiring in 8 years and new length of 4096
    These certs will replace the current certs that
    expire soon</changelog>
</package>
<package pkgid="35cd6bac6367586c1842b861562d1a44129e68e4412b4ec26ffb7821759d633c" name="rpm" arch="aarch64">
  <version epoch="0" ver="4.14.3" rel="150400.59.7.1"/>
  <changelog author="mls@suse.de" date="1586865600">- Do not map the index database read-write all the time [bnc#1168735]
  * new patch: ndb_backport2.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1590321600">- Add reproducible-debuginfo.patch to generate debuginfo
  in a reproducible way [bsc#1172173]</changelog>
  <changelog author="lpechacek@suse.com" date="1603800000">- Backport support for compressed kernel modules (jsc#SLE-10886)
  * added patch: compressed-kernel-modules.diff
  * modified file: find-requires.ksyms
  * modified file: find-provides.ksyms
- Fix obvious bugs in find-provides.ksyms
  * https://github.com/openSUSE/rpm-config-SUSE/pull/34</changelog>
  <changelog author="mls@suse.de" date="1607428800">- Handle xz compressed kernels in find-provides.ksyms [bsc#1179251]
  * modified file: find-requires.ksyms</changelog>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608638400">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
  <changelog author="mls@suse.de" date="1707912000">- backport lua support for rpm.execute to ease migrating [bnc#1216752]
  * new patch: luaexecute.diff</changelog>
</package>
<package pkgid="8a042fc31ef998a2c179d592753e2c41d40a201817069c0d1b3453982f96a5b6" name="rpm" arch="s390x">
  <version epoch="0" ver="4.14.3" rel="150400.59.7.1"/>
  <changelog author="mls@suse.de" date="1586865600">- Do not map the index database read-write all the time [bnc#1168735]
  * new patch: ndb_backport2.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1590321600">- Add reproducible-debuginfo.patch to generate debuginfo
  in a reproducible way [bsc#1172173]</changelog>
  <changelog author="lpechacek@suse.com" date="1603800000">- Backport support for compressed kernel modules (jsc#SLE-10886)
  * added patch: compressed-kernel-modules.diff
  * modified file: find-requires.ksyms
  * modified file: find-provides.ksyms
- Fix obvious bugs in find-provides.ksyms
  * https://github.com/openSUSE/rpm-config-SUSE/pull/34</changelog>
  <changelog author="mls@suse.de" date="1607428800">- Handle xz compressed kernels in find-provides.ksyms [bsc#1179251]
  * modified file: find-requires.ksyms</changelog>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608638400">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
  <changelog author="mls@suse.de" date="1707912000">- backport lua support for rpm.execute to ease migrating [bnc#1216752]
  * new patch: luaexecute.diff</changelog>
</package>
<package pkgid="e63436c0e0ff11868e88d4d77abe7118179664fb315a8bd269efe02eff54b1f2" name="rpm" arch="src">
  <version epoch="0" ver="4.14.3" rel="150400.59.7.1"/>
  <changelog author="mls@suse.de" date="1586865600">- Do not map the index database read-write all the time [bnc#1168735]
  * new patch: ndb_backport2.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1590321600">- Add reproducible-debuginfo.patch to generate debuginfo
  in a reproducible way [bsc#1172173]</changelog>
  <changelog author="lpechacek@suse.com" date="1603800000">- Backport support for compressed kernel modules (jsc#SLE-10886)
  * added patch: compressed-kernel-modules.diff
  * modified file: find-requires.ksyms
  * modified file: find-provides.ksyms
- Fix obvious bugs in find-provides.ksyms
  * https://github.com/openSUSE/rpm-config-SUSE/pull/34</changelog>
  <changelog author="mls@suse.de" date="1607428800">- Handle xz compressed kernels in find-provides.ksyms [bsc#1179251]
  * modified file: find-requires.ksyms</changelog>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608638400">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
  <changelog author="mls@suse.de" date="1707912000">- backport lua support for rpm.execute to ease migrating [bnc#1216752]
  * new patch: luaexecute.diff</changelog>
</package>
<package pkgid="27c9e8b497d1ec1ae0e06fb00af229df6cdecb1f24ae73d893f45c2b7ab8b232" name="rpm" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="150400.59.7.1"/>
  <changelog author="mls@suse.de" date="1586865600">- Do not map the index database read-write all the time [bnc#1168735]
  * new patch: ndb_backport2.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1590321600">- Add reproducible-debuginfo.patch to generate debuginfo
  in a reproducible way [bsc#1172173]</changelog>
  <changelog author="lpechacek@suse.com" date="1603800000">- Backport support for compressed kernel modules (jsc#SLE-10886)
  * added patch: compressed-kernel-modules.diff
  * modified file: find-requires.ksyms
  * modified file: find-provides.ksyms
- Fix obvious bugs in find-provides.ksyms
  * https://github.com/openSUSE/rpm-config-SUSE/pull/34</changelog>
  <changelog author="mls@suse.de" date="1607428800">- Handle xz compressed kernels in find-provides.ksyms [bsc#1179251]
  * modified file: find-requires.ksyms</changelog>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608638400">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
  <changelog author="mls@suse.de" date="1707912000">- backport lua support for rpm.execute to ease migrating [bnc#1216752]
  * new patch: luaexecute.diff</changelog>
</package>
<package pkgid="18cbfac33ba12975498c5ccfa41b3f8cab1f889709569a215bbe80b7fbdb35ba" name="rpm-ndb" arch="aarch64">
  <version epoch="0" ver="4.14.3" rel="150400.59.7.1"/>
  <changelog author="mls@suse.de" date="1579176000">- Initial revision</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
</package>
<package pkgid="23d6151c13543fcd0e2331bc5c91649e22c9c317abdcf53b0b66c7079467f016" name="rpm-ndb" arch="s390x">
  <version epoch="0" ver="4.14.3" rel="150400.59.7.1"/>
  <changelog author="mls@suse.de" date="1579176000">- Initial revision</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
</package>
<package pkgid="6f0ece19d7c10d18cba86ac07f83e07b50359e46fcb1880cec3448eddbfb5b04" name="rpm-ndb" arch="src">
  <version epoch="0" ver="4.14.3" rel="150400.59.7.1"/>
  <changelog author="mls@suse.de" date="1579176000">- Initial revision</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
</package>
<package pkgid="2e8261161e6a7aba3c2cf5e6e85481423ff0b01d976bc2c19207e3b34e1c72fb" name="rpm-ndb" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="150400.59.7.1"/>
  <changelog author="mls@suse.de" date="1579176000">- Initial revision</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
</package>
<package pkgid="4d5857f926be19d12c7adb9981854b94b9ba0ef4c7a8c8de1ce9c410b54fa78f" name="runc" arch="aarch64">
  <version epoch="0" ver="1.1.10" rel="150000.55.1"/>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1698840000">- Update to runc v1.1.10. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.10&gt;.</changelog>
</package>
<package pkgid="1875f6166c9e5e7af956eae919ada1183c3b127dc20474bf4fca49c71ee4fa35" name="runc" arch="s390x">
  <version epoch="0" ver="1.1.10" rel="150000.55.1"/>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1698840000">- Update to runc v1.1.10. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.10&gt;.</changelog>
</package>
<package pkgid="663fbd4f3b44939cb4eec4c3c20c1cb906d19d0312b4c5fd5b26adb8f72165f1" name="runc" arch="src">
  <version epoch="0" ver="1.1.10" rel="150000.55.1"/>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1698840000">- Update to runc v1.1.10. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.10&gt;.</changelog>
</package>
<package pkgid="36ac0b44dbf69865a174273b7055966f82bbf2b46a7b93a0c4ff12ee1bac0c7f" name="runc" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="150000.55.1"/>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1698840000">- Update to runc v1.1.10. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.10&gt;.</changelog>
</package>
<package pkgid="4e9583018bdc6fc8b67f71e304dbcbabe2cf7a8619af12219fdd385b41a47d0b" name="runc" arch="aarch64">
  <version epoch="0" ver="1.1.11" rel="150000.58.1"/>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1698840000">- Update to runc v1.1.10. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.10&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1704196800">- Update to runc v1.1.11. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.11&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1705579200">[ This was only ever released for SLES. ]
- Add upstream patch to fix embargoed issue CVE-2024-21626. bsc#1218894
  &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  + CVE-2024-21626.patch</changelog>
</package>
<package pkgid="2766ab0e703ccda9397fd16c17e27a77604788e0af21e39f4c2a1244e10973e2" name="runc" arch="s390x">
  <version epoch="0" ver="1.1.11" rel="150000.58.1"/>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1698840000">- Update to runc v1.1.10. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.10&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1704196800">- Update to runc v1.1.11. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.11&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1705579200">[ This was only ever released for SLES. ]
- Add upstream patch to fix embargoed issue CVE-2024-21626. bsc#1218894
  &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  + CVE-2024-21626.patch</changelog>
</package>
<package pkgid="cfaa3dde63943fabec0a74573c12c954aae82daca87fec53a610adad6ed9a050" name="runc" arch="src">
  <version epoch="0" ver="1.1.11" rel="150000.58.1"/>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1698840000">- Update to runc v1.1.10. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.10&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1704196800">- Update to runc v1.1.11. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.11&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1705579200">[ This was only ever released for SLES. ]
- Add upstream patch to fix embargoed issue CVE-2024-21626. bsc#1218894
  &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  + CVE-2024-21626.patch</changelog>
</package>
<package pkgid="35a49e413ad45524d45a9331d8cdf9767bb4e9bbdd228868eb32d0274c20f728" name="runc" arch="x86_64">
  <version epoch="0" ver="1.1.11" rel="150000.58.1"/>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1698840000">- Update to runc v1.1.10. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.10&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1704196800">- Update to runc v1.1.11. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.11&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1705579200">[ This was only ever released for SLES. ]
- Add upstream patch to fix embargoed issue CVE-2024-21626. bsc#1218894
  &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  + CVE-2024-21626.patch</changelog>
</package>
<package pkgid="8ad8cb3b979832b2a66e2c8f5c454f04f6375dd9ee9fc039f27aa1535cecac0a" name="runc" arch="aarch64">
  <version epoch="0" ver="1.1.12" rel="150000.61.2"/>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1698840000">- Update to runc v1.1.10. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.10&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1704196800">- Update to runc v1.1.11. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.11&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1705579200">[ This was only ever released for SLES. ]
- Add upstream patch to fix embargoed issue CVE-2024-21626. bsc#1218894
  &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  + CVE-2024-21626.patch</changelog>
  <changelog author="asarai@suse.com" date="1706702400">- Update to runc v1.1.12. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.12&gt;. bsc#1218894
  * This release fixes a container breakout vulnerability (CVE-2024-21626). For
    more details, see the upstream security advisory:
    &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  * Remove upstreamed patches:
  - CVE-2024-21626.patch
  * Update runc.keyring to match upstream changes.</changelog>
</package>
<package pkgid="572d43600f8576d8427e91b77a72c4941e2969c242e03a69a924bc56b6c99d53" name="runc" arch="s390x">
  <version epoch="0" ver="1.1.12" rel="150000.61.2"/>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1698840000">- Update to runc v1.1.10. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.10&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1704196800">- Update to runc v1.1.11. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.11&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1705579200">[ This was only ever released for SLES. ]
- Add upstream patch to fix embargoed issue CVE-2024-21626. bsc#1218894
  &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  + CVE-2024-21626.patch</changelog>
  <changelog author="asarai@suse.com" date="1706702400">- Update to runc v1.1.12. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.12&gt;. bsc#1218894
  * This release fixes a container breakout vulnerability (CVE-2024-21626). For
    more details, see the upstream security advisory:
    &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  * Remove upstreamed patches:
  - CVE-2024-21626.patch
  * Update runc.keyring to match upstream changes.</changelog>
</package>
<package pkgid="b2f42c8fcb1f7d9c232a87d5585987ab6aa752b230c9f5ffd3e5fc57aae774e3" name="runc" arch="src">
  <version epoch="0" ver="1.1.12" rel="150000.61.2"/>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1698840000">- Update to runc v1.1.10. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.10&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1704196800">- Update to runc v1.1.11. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.11&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1705579200">[ This was only ever released for SLES. ]
- Add upstream patch to fix embargoed issue CVE-2024-21626. bsc#1218894
  &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  + CVE-2024-21626.patch</changelog>
  <changelog author="asarai@suse.com" date="1706702400">- Update to runc v1.1.12. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.12&gt;. bsc#1218894
  * This release fixes a container breakout vulnerability (CVE-2024-21626). For
    more details, see the upstream security advisory:
    &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  * Remove upstreamed patches:
  - CVE-2024-21626.patch
  * Update runc.keyring to match upstream changes.</changelog>
</package>
<package pkgid="b06b5970734b4d2cee0fb771bc2c39455722403050152661c8426884e523a160" name="runc" arch="x86_64">
  <version epoch="0" ver="1.1.12" rel="150000.61.2"/>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1698840000">- Update to runc v1.1.10. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.10&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1704196800">- Update to runc v1.1.11. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.11&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1705579200">[ This was only ever released for SLES. ]
- Add upstream patch to fix embargoed issue CVE-2024-21626. bsc#1218894
  &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  + CVE-2024-21626.patch</changelog>
  <changelog author="asarai@suse.com" date="1706702400">- Update to runc v1.1.12. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.12&gt;. bsc#1218894
  * This release fixes a container breakout vulnerability (CVE-2024-21626). For
    more details, see the upstream security advisory:
    &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  * Remove upstreamed patches:
  - CVE-2024-21626.patch
  * Update runc.keyring to match upstream changes.</changelog>
</package>
<package pkgid="d634542d591dada94158be1beebf6335f563b8595feb7a92bb2057baa4a2cfad" name="runc" arch="aarch64">
  <version epoch="0" ver="1.1.8" rel="150000.49.1"/>
  <changelog author="asarai@suse.com" date="1619438400">- Backport patch to fix build on SLE-12 ppc64le.
  + 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1620820800">- Update to runc v1.0.0~rc94. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94
  Breaking Changes:
  * cgroupv1: kernel memory limits are now always ignored, as kmemcg has
    been effectively deprecated by the kernel. Users should make use of regular
    memory cgroup controls.
  Regression Fixes:
  * seccomp: fix 32-bit compilation errors
  * runc init: fix a hang caused by deadlock in seccomp/ebpf loading code
  * runc start: fix "chdir to cwd: permission denied" for some setups
- Remove upstreamed patches:
  - 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
</package>
<package pkgid="dd11e7c19bf6b73c06cc371b9e2be99d34003757aef0d7093a8266143f787a8c" name="runc" arch="s390x">
  <version epoch="0" ver="1.1.8" rel="150000.49.1"/>
  <changelog author="asarai@suse.com" date="1619438400">- Backport patch to fix build on SLE-12 ppc64le.
  + 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1620820800">- Update to runc v1.0.0~rc94. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94
  Breaking Changes:
  * cgroupv1: kernel memory limits are now always ignored, as kmemcg has
    been effectively deprecated by the kernel. Users should make use of regular
    memory cgroup controls.
  Regression Fixes:
  * seccomp: fix 32-bit compilation errors
  * runc init: fix a hang caused by deadlock in seccomp/ebpf loading code
  * runc start: fix "chdir to cwd: permission denied" for some setups
- Remove upstreamed patches:
  - 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
</package>
<package pkgid="fa68f187f5d24519db4a73fc7be537e5dfacb69623b5b3a0e438fcd70821a4a5" name="runc" arch="src">
  <version epoch="0" ver="1.1.8" rel="150000.49.1"/>
  <changelog author="asarai@suse.com" date="1619438400">- Backport patch to fix build on SLE-12 ppc64le.
  + 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1620820800">- Update to runc v1.0.0~rc94. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94
  Breaking Changes:
  * cgroupv1: kernel memory limits are now always ignored, as kmemcg has
    been effectively deprecated by the kernel. Users should make use of regular
    memory cgroup controls.
  Regression Fixes:
  * seccomp: fix 32-bit compilation errors
  * runc init: fix a hang caused by deadlock in seccomp/ebpf loading code
  * runc start: fix "chdir to cwd: permission denied" for some setups
- Remove upstreamed patches:
  - 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
</package>
<package pkgid="6342f2ce05a79bda1b519e49797136f480c61000f734ee363adc62ddbbb5059e" name="runc" arch="x86_64">
  <version epoch="0" ver="1.1.8" rel="150000.49.1"/>
  <changelog author="asarai@suse.com" date="1619438400">- Backport patch to fix build on SLE-12 ppc64le.
  + 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1620820800">- Update to runc v1.0.0~rc94. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94
  Breaking Changes:
  * cgroupv1: kernel memory limits are now always ignored, as kmemcg has
    been effectively deprecated by the kernel. Users should make use of regular
    memory cgroup controls.
  Regression Fixes:
  * seccomp: fix 32-bit compilation errors
  * runc init: fix a hang caused by deadlock in seccomp/ebpf loading code
  * runc start: fix "chdir to cwd: permission denied" for some setups
- Remove upstreamed patches:
  - 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
</package>
<package pkgid="8b7377bf978c2f179878bce11bbe8c80d60d9b7a5bcccfdff7e8a65514debb89" name="runc" arch="aarch64">
  <version epoch="0" ver="1.1.9" rel="150000.52.2"/>
  <changelog author="asarai@suse.com" date="1620820800">- Update to runc v1.0.0~rc94. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94
  Breaking Changes:
  * cgroupv1: kernel memory limits are now always ignored, as kmemcg has
    been effectively deprecated by the kernel. Users should make use of regular
    memory cgroup controls.
  Regression Fixes:
  * seccomp: fix 32-bit compilation errors
  * runc init: fix a hang caused by deadlock in seccomp/ebpf loading code
  * runc start: fix "chdir to cwd: permission denied" for some setups
- Remove upstreamed patches:
  - 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
</package>
<package pkgid="2dd425528a08e7badd9fe0e7ca80041c7a5333f21a3156faeed0c37ce365e8cb" name="runc" arch="s390x">
  <version epoch="0" ver="1.1.9" rel="150000.52.2"/>
  <changelog author="asarai@suse.com" date="1620820800">- Update to runc v1.0.0~rc94. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94
  Breaking Changes:
  * cgroupv1: kernel memory limits are now always ignored, as kmemcg has
    been effectively deprecated by the kernel. Users should make use of regular
    memory cgroup controls.
  Regression Fixes:
  * seccomp: fix 32-bit compilation errors
  * runc init: fix a hang caused by deadlock in seccomp/ebpf loading code
  * runc start: fix "chdir to cwd: permission denied" for some setups
- Remove upstreamed patches:
  - 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
</package>
<package pkgid="6a8b25ae2fc95e24f5c35186e4bd0e5df933338110ec274d629b57b38f08b4f6" name="runc" arch="src">
  <version epoch="0" ver="1.1.9" rel="150000.52.2"/>
  <changelog author="asarai@suse.com" date="1620820800">- Update to runc v1.0.0~rc94. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94
  Breaking Changes:
  * cgroupv1: kernel memory limits are now always ignored, as kmemcg has
    been effectively deprecated by the kernel. Users should make use of regular
    memory cgroup controls.
  Regression Fixes:
  * seccomp: fix 32-bit compilation errors
  * runc init: fix a hang caused by deadlock in seccomp/ebpf loading code
  * runc start: fix "chdir to cwd: permission denied" for some setups
- Remove upstreamed patches:
  - 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
</package>
<package pkgid="e5d2ac196ce3f17f43afc5cdc10a5306306f1f12136e384b8d2e31ab01517b64" name="runc" arch="x86_64">
  <version epoch="0" ver="1.1.9" rel="150000.52.2"/>
  <changelog author="asarai@suse.com" date="1620820800">- Update to runc v1.0.0~rc94. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94
  Breaking Changes:
  * cgroupv1: kernel memory limits are now always ignored, as kmemcg has
    been effectively deprecated by the kernel. Users should make use of regular
    memory cgroup controls.
  Regression Fixes:
  * seccomp: fix 32-bit compilation errors
  * runc init: fix a hang caused by deadlock in seccomp/ebpf loading code
  * runc start: fix "chdir to cwd: permission denied" for some setups
- Remove upstreamed patches:
  - 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
</package>
<package pkgid="504b0879e604cf406c1330aa219bde7258a77070b564b3a253b57698e4081a3b" name="s390-tools" arch="s390x">
  <version epoch="0" ver="2.30.0" rel="150500.9.10.1"/>
  <changelog author="nikolay.gueorguiev@suse.com" date="1673352000">- Updated read_values.c for z16 machine type (bsc#1206832)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1673438400">- Updated read_values.c for z16 machine type (bsc#1206832)
  * Added the IBM LinuxONE Emperor 4 machine type
  * Updated the z16 machine type to IBM z16 A01</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1675684800">- Added patch (bsc#1207947)
  * s390-tools-sles15sp5-zkey-Support-EP11-host-library-version-4.patch</changelog>
  <changelog author="jose.gomez@suse.com" date="1676548800">- Implemented read_values -u. The result of -u is a unique identifier composed of:
  * Machine Serial Number.
  * LPAR Name.
  * VM Name (can be optional).</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1676980800">- Applied the following patches (bsc#1208527, bsc#1206173)
  * s390-tools-sles15sp5-01-zipl-boot-discard-.eh_frame-and-.interp-input-sectio.patch
  * s390-tools-sles15sp5-02-zipl-boot-declare-that-no-executable-stack-is-requir.patch
  * s390-tools-sles15sp5-03-zipl-boot-use-no-warn-rwx-segments-linker-flag.patch
  * s390-tools-sles15sp5-04-zipl-boot-disable-build-id.patch
  * s390-tools-sles15sp5-05-zipl-boot-simplify-objcopy-commands.patch
  * s390-tools-sles15sp5-06-zipl-move-STAGE2_MAX_SIZE-and-STAGE1B_LOAD_ADDR-to-l.patch
  * s390-tools-sles15sp5-07-zipl-boot-use-linker-scripts-for-all-bootloaders.patch
  * s390-tools-sles15sp5-08-genprotimg-boot-declare-that-no-executable-stack-is-.patch
  * s390-tools-sles15sp5-09-genprotimg-boot-use-no-warn-rwx-segments-linker-flag.patch
  * s390-tools-sles15sp5-10-genprotimg-boot-disable-build-id.patch
  * s390-tools-sles15sp5-11-genprotimg-boot-Makefile-simplify-objcopy-command.patch
  * s390-tools-sles15sp5-12-genprotimg-boot-improve-linker-scripts.patch
  * s390-tools-sles15sp5-13-genprotimg-boot-stage3b-add-size-check-to-the-linker.patch
  * s390-tools-sles15sp5-14-genprotimg-boot-stage3b_reloc.bin-add-linker-script.patch
  * s390-tools-sles15sp5-15-zipl-Embed-loader-data-directly-into-boot-object.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678276800">- Updated cputype (bsc#1208983)
  * Changed the script to avoid "/usr/bin/cputype: line xx: nnnn: command not found",
    when machine type was found more than once in the /proc/cpuinfo.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678708800">- Applied a patch (bsc#1209196)
  * s390-tools-sles15sp5-lszcrypt-use-separate-index-for-inner-sub-device-loo.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1679572800">- Allow activation of devices at boot via kernel command line
  for live installation media (jsc#PED-2975)
  * Added a Source dracut-zdev-live-20230321.tar
  * Updated the .spec file for the new Source
-  Amended read_value.c</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1681905600">- Tailored the .spec, added a patch
  * s390-tools-ALP-zdev-live.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1683028800">- Applies a fix, splitting of rd.zdev-parameters, in
  * s390-tools-ALP-zdev-live.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1683201600">- Applied patches for ziomon: fix for SCSI devices of type disk without block dev
    (bsc#1211008)
  * s390-tools-sles15sp5-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch
  * s390-tools-sles15sp5-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1692619200">- Applies patches (bsc#1213377, bsc#1213852, bsc#1214114)
  * s390-tools-sles15sp5-01-zdev-add-missing-label-in-the-udev-rules.patch
  * s390-tools-sles15sp5-01-zdev-add-proper-value-input-for-the-ZDEV_SITE_ID-key.patch
  * s390-tools-sles15sp5-02-zdev-use-rename-file-to-avoid-any-symlinks-created.patch
  * s390-tools-sles15sp5-dasdfmt-Fall-back-to-full-format-if-space-release-fa.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1698926400">- Applied a patch (jsc#PED-6539, jsc#PED-6373)
  * s390-tools-sles15sp6-zkey-Support-EP11-AES-keys-with-prepended-header-to-.patch
- Updated read_values.c (bsc#1214466, bsc#1214534)
  * Update read_values.c to support the new IBM z Processors
- Updated SUSE's tools and their corresponding man pages (bsc#1216257)
  * ctc_configure
  * dasd_configure.opensuse
  * dasd_configure.8
  * dasd_configure.suse
  * mkdump.pl.opensuse
  * mkdump.pl.suse
  * qeth_configure
  * qeth_configure.8
  * zfcp_disk_configure
  * zfcp_disk_configure.8
  * zfcp_host_configure.8
  * zfcp_host_configure
- Updated cputype script
  * Amended cputype to support the new IBM z Processors</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1699876800">* Upgrade 390-tools from version 2.25.0 to version v2.29.0 (Latest)
  * * * *
  - General:
  - s390-tools now supports tools written in Rust.
  - Add compdb Makefile target to create 'compile_commands.json' to support LSP
  - backends in IDEs and editors
  - Add new tools / libraries:
  * rust/pv: Library for pv tools written in rust
  * rust/pvsecret: Tool to manage UV-secrets
  * Changes of existing tools:
  - dbginfo.sh: Global IFS variable
  - genprotimg: Add support for add-secret requests
  - genprotimg: Build debuginfo files for bootloader
  - hyptop: Add real SMT utilization field
  - hyptop: Allow users to set speedup factor
  - pvattest: Add yaml-output for verify command
  - zipl: Build debuginfo files for bootloader
  * Bug Fixes:
  - dump2tar: Fix truncated paths
  - zdev/dracut: fix kdump build to integrate with site support
  * * * *
  * v2.28.0
  - Changes of existing tools:
  - chzcrypt: Support for SE AP pass-through support
  - genprotimg: Add support for non-s390x architectures
  - lszcrypt: Support for SE AP pass-through support
  - zdev: Add support for autoquiesce related sysfs attributes
  * Bug Fixes:
  - ap_tools/ap-check: Handle missing 'matrix' and 'control_domains' attrs
  - ap_tools/ap-check: Hold ap config file lock over get attributes
  - s390-tools: Fix build for ppc64le
  - zdev: Add missing label in the udev-rules
  - zdev: Add proper value input for the ZDEV_SITE_ID key
  - zdev: Use rename-file to avoid any symlinks created
  - zipl/dump: fix ngdump dracut helper script
  * * * *
  * v2.27.0
  * Changes of existing tools:
  - s390-tools cross-compile and non-s390x support:
  - pkg-config is now mandatory for the build process
  - Add PKG_CONFIG Makefile variable to select pkg-config program;
  - default pkg-config or $(CROSS_COMPILE)pkg-config if
  - CROSS_COMPILE is set
  - Rename Makefile variable ARCH to HOST_ARCH. HOST_ARCH is the
    architecture that will run the produced (executable) objects
  - Add the Makefile variable BUILD_ARCH. BUILD_ARCH is the
    architecture of the build system. For each Makefile variable like
    CC, LINK, CPP, ... there is a suffixed version of it - e.g.
    CC_FOR_BUILD. This is useful for cross compiling, and this naming
    convention is very similar to the Meson convention (see
    https://mesonbuild.com/Reference-tables.html#environment-variables-per-machine).
  - Limit build targets for non-s390x architectures (pvattest)
  - dasdfmt: Fall back to full format if space release fails
  - dbginfo.sh: Add nstat for network and SNMP stats
  - dbginfo.sh: Rework crypto data collection
  - hyptop: Show thread util by default
  - zipl: Add support for list-directed IPL dump from ECKD DASD
  * Bug Fixes:
  - lszcrypt: Fix argument parsing
  - zdev/dracut: Fix out-of-memory (OOM) situations in the kdump crashkernel environment
  - ziomon/ziorep_config: Fix for SCSI devices of type disk without block dev
  - pvextract-hdr: Fix parsing issues on little-endian systems
  * * * *
  * v2.26.0
  * Remove tools / libraries:
  - Remove vmconvert and libvmdump in favor of vmdump file support in zdump
  * Changes of existing tools:
  - ipl_tools: Add support for list-directed IPL from ECKD DASD
  - lszcrypt: Display hardware filtering support capability
  - vmur: Remove option -c for dump file conversion (See zdump changes)
  - zdev: Add zfcp ber_stop parameter handling
  - zdump: Add vmdump dfi for vmdump format to elf format
  - zkey: Support EP11 host library version
  * Bug Fixes:
  - zipl: Move dump parmline processing and verification
  - zipl/genprotimg: Various build improvements
  * * * *
  * Removed obsolete IBM patches
  - s390-tools-sles15sp5-zipl-boot-disable-Warray-bounds-for-now.patch
  - s390-tools-sles15sp5-zkey-Support-EP11-host-library-version-4.patch
  * Removed obsolete patches for bug 1208527, and bug 1206173
  - s390-tools-sles15sp5-01-zipl-boot-discard-.eh_frame-and-.interp-input-sectio.patch
  - s390-tools-sles15sp5-02-zipl-boot-declare-that-no-executable-stack-is-requir.patch
  - s390-tools-sles15sp5-03-zipl-boot-use-no-warn-rwx-segments-linker-flag.patch
  - s390-tools-sles15sp5-04-zipl-boot-disable-build-id.patch
  - s390-tools-sles15sp5-05-zipl-boot-simplify-objcopy-commands.patch
  - s390-tools-sles15sp5-06-zipl-move-STAGE2_MAX_SIZE-and-STAGE1B_LOAD_ADDR-to-l.patch
  - s390-tools-sles15sp5-07-zipl-boot-use-linker-scripts-for-all-bootloaders.patch
  - s390-tools-sles15sp5-08-genprotimg-boot-declare-that-no-executable-stack-is-.patch
  - s390-tools-sles15sp5-09-genprotimg-boot-use-no-warn-rwx-segments-linker-flag.patch
  - s390-tools-sles15sp5-10-genprotimg-boot-disable-build-id.patch
  - s390-tools-sles15sp5-11-genprotimg-boot-Makefile-simplify-objcopy-command.patch
  - s390-tools-sles15sp5-12-genprotimg-boot-improve-linker-scripts.patch
  - s390-tools-sles15sp5-13-genprotimg-boot-stage3b-add-size-check-to-the-linker.patch
  - s390-tools-sles15sp5-14-genprotimg-boot-stage3b_reloc.bin-add-linker-script.patch
  - s390-tools-sles15sp5-15-zipl-Embed-loader-data-directly-into-boot-object.patch
  * Removed obsolete patch for bug 1209196
  - s390-tools-sles15sp5-lszcrypt-use-separate-index-for-inner-sub-device-loo.patch
  * Removed obsolete patches for bug 1211008
  - s390-tools-sles15sp5-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch
  - s390-tools-sles15sp5-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch
  * Removed obsolete patch for bug 1213377
  - s390-tools-sles15sp5-01-zdev-add-missing-label-in-the-udev-rules.patch
  * Removed obsolete patches for bug 1213852
  - s390-tools-sles15sp5-01-zdev-add-proper-value-input-for-the-ZDEV_SITE_ID-key.patch
  - s390-tools-sles15sp5-02-zdev-use-rename-file-to-avoid-any-symlinks-created.patch
  * Removed obsolete patch for bug 1214114
  - s390-tools-sles15sp5-dasdfmt-Fall-back-to-full-format-if-space-release-fa.patch
  * Removed obsolete patch
  - s390-tools-sles15sp5-fix-chown-commands-syntax.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1700049600">- Fixed a logic error in read_values.c</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1700827200">- Provide s390-tools on x86_64 to enable Secure Execution in the Cloud
    (jsc#PED-578, jsc#PED-7136, and jsc#PED-7138)
  * Selected tools from the s390-tools package need to be made available on x86_64.
    This will enable the integration of IBM Z machines running Secure Execution in a
    cloud environment where users don't necessarily need to have an s390x environment.
  - genprotimg    - (for building secure images)
  - pvsecret      -
  - pvattest      - (for external attestation)
  - pvextract-hdr -</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1701691200">- Upgrade s390-tools to version 2.30
    (jsc#PED-5783, jsc#PED-6785, jsc#PED-7136, jsc#PED-6539, jsc#PED-4604,
    jsc#PED-6649, jsc#PED-7138 )
- Add new tools / libraries:
  * lspai: Tool to display PAI counter sets
  * s390-tools: Provide a ShellCheck configuration
- Changes of existing tools / libraries:
  * cpumf/pai: Add command line option for realtime scheduling
  * dbginfo.sh: enhance ethtool collection for ROCE
  * libutil/util_lockfile: add routine to return owning pid of file lock
  * lszcrypt: Improve lszcrypt output on SE guests
  * rust: Use a single workspace for all rust tools
  * zdev: limit the derivation of ZDEV_SITE_ID
  * zdump/df_s390: Update 'zgetdump -i' output with zlib info
  * zdump/dfi_s390: Support reading compressed s390_ext dumps
  * zipl/boot: Integrate zlib compression to single volume DASD dumper
  * zipl/boot: compile the bootloaders only if HOST_ARCH is s390x
  * zipl: Add --no-compress option to zipl command
  * zkey: Also check for deconfigured and check-stopped cards
- Bug Fixes:
  * ap_tools/ap-check: handle get-attributes between pre and post event
  * libutil: fix util_file_read_*() using wrong format specifiers
  * rust/pv: fix Invalid write of size
- Amended the SUSE patches for version 2.30
- Revendored vendor.tar.gz
- Removed an obsolete patch
  * s390-tools-sles15sp6-zkey-Support-EP11-AES-keys-with-prepended-header-to-.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1702814400">- Updated the .spec file to use gcc13 (bsc#1217838)
- Amended read_values for '-S' option (bsc#1217923)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1706097600">- Updated the .spec file
  * Explicitly specified 'ExclusiveArch: s390x x86_64'</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1706788800">- Updated read_values.c (bsc#1219227)</changelog>
</package>
<package pkgid="8056d617bd3c11d251e7154acbc40feb88098c830c255f7af275672cdc2f225b" name="s390-tools" arch="src">
  <version epoch="0" ver="2.30.0" rel="150500.9.10.1"/>
  <changelog author="nikolay.gueorguiev@suse.com" date="1673352000">- Updated read_values.c for z16 machine type (bsc#1206832)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1673438400">- Updated read_values.c for z16 machine type (bsc#1206832)
  * Added the IBM LinuxONE Emperor 4 machine type
  * Updated the z16 machine type to IBM z16 A01</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1675684800">- Added patch (bsc#1207947)
  * s390-tools-sles15sp5-zkey-Support-EP11-host-library-version-4.patch</changelog>
  <changelog author="jose.gomez@suse.com" date="1676548800">- Implemented read_values -u. The result of -u is a unique identifier composed of:
  * Machine Serial Number.
  * LPAR Name.
  * VM Name (can be optional).</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1676980800">- Applied the following patches (bsc#1208527, bsc#1206173)
  * s390-tools-sles15sp5-01-zipl-boot-discard-.eh_frame-and-.interp-input-sectio.patch
  * s390-tools-sles15sp5-02-zipl-boot-declare-that-no-executable-stack-is-requir.patch
  * s390-tools-sles15sp5-03-zipl-boot-use-no-warn-rwx-segments-linker-flag.patch
  * s390-tools-sles15sp5-04-zipl-boot-disable-build-id.patch
  * s390-tools-sles15sp5-05-zipl-boot-simplify-objcopy-commands.patch
  * s390-tools-sles15sp5-06-zipl-move-STAGE2_MAX_SIZE-and-STAGE1B_LOAD_ADDR-to-l.patch
  * s390-tools-sles15sp5-07-zipl-boot-use-linker-scripts-for-all-bootloaders.patch
  * s390-tools-sles15sp5-08-genprotimg-boot-declare-that-no-executable-stack-is-.patch
  * s390-tools-sles15sp5-09-genprotimg-boot-use-no-warn-rwx-segments-linker-flag.patch
  * s390-tools-sles15sp5-10-genprotimg-boot-disable-build-id.patch
  * s390-tools-sles15sp5-11-genprotimg-boot-Makefile-simplify-objcopy-command.patch
  * s390-tools-sles15sp5-12-genprotimg-boot-improve-linker-scripts.patch
  * s390-tools-sles15sp5-13-genprotimg-boot-stage3b-add-size-check-to-the-linker.patch
  * s390-tools-sles15sp5-14-genprotimg-boot-stage3b_reloc.bin-add-linker-script.patch
  * s390-tools-sles15sp5-15-zipl-Embed-loader-data-directly-into-boot-object.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678276800">- Updated cputype (bsc#1208983)
  * Changed the script to avoid "/usr/bin/cputype: line xx: nnnn: command not found",
    when machine type was found more than once in the /proc/cpuinfo.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678708800">- Applied a patch (bsc#1209196)
  * s390-tools-sles15sp5-lszcrypt-use-separate-index-for-inner-sub-device-loo.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1679572800">- Allow activation of devices at boot via kernel command line
  for live installation media (jsc#PED-2975)
  * Added a Source dracut-zdev-live-20230321.tar
  * Updated the .spec file for the new Source
-  Amended read_value.c</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1681905600">- Tailored the .spec, added a patch
  * s390-tools-ALP-zdev-live.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1683028800">- Applies a fix, splitting of rd.zdev-parameters, in
  * s390-tools-ALP-zdev-live.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1683201600">- Applied patches for ziomon: fix for SCSI devices of type disk without block dev
    (bsc#1211008)
  * s390-tools-sles15sp5-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch
  * s390-tools-sles15sp5-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1692619200">- Applies patches (bsc#1213377, bsc#1213852, bsc#1214114)
  * s390-tools-sles15sp5-01-zdev-add-missing-label-in-the-udev-rules.patch
  * s390-tools-sles15sp5-01-zdev-add-proper-value-input-for-the-ZDEV_SITE_ID-key.patch
  * s390-tools-sles15sp5-02-zdev-use-rename-file-to-avoid-any-symlinks-created.patch
  * s390-tools-sles15sp5-dasdfmt-Fall-back-to-full-format-if-space-release-fa.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1698926400">- Applied a patch (jsc#PED-6539, jsc#PED-6373)
  * s390-tools-sles15sp6-zkey-Support-EP11-AES-keys-with-prepended-header-to-.patch
- Updated read_values.c (bsc#1214466, bsc#1214534)
  * Update read_values.c to support the new IBM z Processors
- Updated SUSE's tools and their corresponding man pages (bsc#1216257)
  * ctc_configure
  * dasd_configure.opensuse
  * dasd_configure.8
  * dasd_configure.suse
  * mkdump.pl.opensuse
  * mkdump.pl.suse
  * qeth_configure
  * qeth_configure.8
  * zfcp_disk_configure
  * zfcp_disk_configure.8
  * zfcp_host_configure.8
  * zfcp_host_configure
- Updated cputype script
  * Amended cputype to support the new IBM z Processors</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1699876800">* Upgrade 390-tools from version 2.25.0 to version v2.29.0 (Latest)
  * * * *
  - General:
  - s390-tools now supports tools written in Rust.
  - Add compdb Makefile target to create 'compile_commands.json' to support LSP
  - backends in IDEs and editors
  - Add new tools / libraries:
  * rust/pv: Library for pv tools written in rust
  * rust/pvsecret: Tool to manage UV-secrets
  * Changes of existing tools:
  - dbginfo.sh: Global IFS variable
  - genprotimg: Add support for add-secret requests
  - genprotimg: Build debuginfo files for bootloader
  - hyptop: Add real SMT utilization field
  - hyptop: Allow users to set speedup factor
  - pvattest: Add yaml-output for verify command
  - zipl: Build debuginfo files for bootloader
  * Bug Fixes:
  - dump2tar: Fix truncated paths
  - zdev/dracut: fix kdump build to integrate with site support
  * * * *
  * v2.28.0
  - Changes of existing tools:
  - chzcrypt: Support for SE AP pass-through support
  - genprotimg: Add support for non-s390x architectures
  - lszcrypt: Support for SE AP pass-through support
  - zdev: Add support for autoquiesce related sysfs attributes
  * Bug Fixes:
  - ap_tools/ap-check: Handle missing 'matrix' and 'control_domains' attrs
  - ap_tools/ap-check: Hold ap config file lock over get attributes
  - s390-tools: Fix build for ppc64le
  - zdev: Add missing label in the udev-rules
  - zdev: Add proper value input for the ZDEV_SITE_ID key
  - zdev: Use rename-file to avoid any symlinks created
  - zipl/dump: fix ngdump dracut helper script
  * * * *
  * v2.27.0
  * Changes of existing tools:
  - s390-tools cross-compile and non-s390x support:
  - pkg-config is now mandatory for the build process
  - Add PKG_CONFIG Makefile variable to select pkg-config program;
  - default pkg-config or $(CROSS_COMPILE)pkg-config if
  - CROSS_COMPILE is set
  - Rename Makefile variable ARCH to HOST_ARCH. HOST_ARCH is the
    architecture that will run the produced (executable) objects
  - Add the Makefile variable BUILD_ARCH. BUILD_ARCH is the
    architecture of the build system. For each Makefile variable like
    CC, LINK, CPP, ... there is a suffixed version of it - e.g.
    CC_FOR_BUILD. This is useful for cross compiling, and this naming
    convention is very similar to the Meson convention (see
    https://mesonbuild.com/Reference-tables.html#environment-variables-per-machine).
  - Limit build targets for non-s390x architectures (pvattest)
  - dasdfmt: Fall back to full format if space release fails
  - dbginfo.sh: Add nstat for network and SNMP stats
  - dbginfo.sh: Rework crypto data collection
  - hyptop: Show thread util by default
  - zipl: Add support for list-directed IPL dump from ECKD DASD
  * Bug Fixes:
  - lszcrypt: Fix argument parsing
  - zdev/dracut: Fix out-of-memory (OOM) situations in the kdump crashkernel environment
  - ziomon/ziorep_config: Fix for SCSI devices of type disk without block dev
  - pvextract-hdr: Fix parsing issues on little-endian systems
  * * * *
  * v2.26.0
  * Remove tools / libraries:
  - Remove vmconvert and libvmdump in favor of vmdump file support in zdump
  * Changes of existing tools:
  - ipl_tools: Add support for list-directed IPL from ECKD DASD
  - lszcrypt: Display hardware filtering support capability
  - vmur: Remove option -c for dump file conversion (See zdump changes)
  - zdev: Add zfcp ber_stop parameter handling
  - zdump: Add vmdump dfi for vmdump format to elf format
  - zkey: Support EP11 host library version
  * Bug Fixes:
  - zipl: Move dump parmline processing and verification
  - zipl/genprotimg: Various build improvements
  * * * *
  * Removed obsolete IBM patches
  - s390-tools-sles15sp5-zipl-boot-disable-Warray-bounds-for-now.patch
  - s390-tools-sles15sp5-zkey-Support-EP11-host-library-version-4.patch
  * Removed obsolete patches for bug 1208527, and bug 1206173
  - s390-tools-sles15sp5-01-zipl-boot-discard-.eh_frame-and-.interp-input-sectio.patch
  - s390-tools-sles15sp5-02-zipl-boot-declare-that-no-executable-stack-is-requir.patch
  - s390-tools-sles15sp5-03-zipl-boot-use-no-warn-rwx-segments-linker-flag.patch
  - s390-tools-sles15sp5-04-zipl-boot-disable-build-id.patch
  - s390-tools-sles15sp5-05-zipl-boot-simplify-objcopy-commands.patch
  - s390-tools-sles15sp5-06-zipl-move-STAGE2_MAX_SIZE-and-STAGE1B_LOAD_ADDR-to-l.patch
  - s390-tools-sles15sp5-07-zipl-boot-use-linker-scripts-for-all-bootloaders.patch
  - s390-tools-sles15sp5-08-genprotimg-boot-declare-that-no-executable-stack-is-.patch
  - s390-tools-sles15sp5-09-genprotimg-boot-use-no-warn-rwx-segments-linker-flag.patch
  - s390-tools-sles15sp5-10-genprotimg-boot-disable-build-id.patch
  - s390-tools-sles15sp5-11-genprotimg-boot-Makefile-simplify-objcopy-command.patch
  - s390-tools-sles15sp5-12-genprotimg-boot-improve-linker-scripts.patch
  - s390-tools-sles15sp5-13-genprotimg-boot-stage3b-add-size-check-to-the-linker.patch
  - s390-tools-sles15sp5-14-genprotimg-boot-stage3b_reloc.bin-add-linker-script.patch
  - s390-tools-sles15sp5-15-zipl-Embed-loader-data-directly-into-boot-object.patch
  * Removed obsolete patch for bug 1209196
  - s390-tools-sles15sp5-lszcrypt-use-separate-index-for-inner-sub-device-loo.patch
  * Removed obsolete patches for bug 1211008
  - s390-tools-sles15sp5-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch
  - s390-tools-sles15sp5-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch
  * Removed obsolete patch for bug 1213377
  - s390-tools-sles15sp5-01-zdev-add-missing-label-in-the-udev-rules.patch
  * Removed obsolete patches for bug 1213852
  - s390-tools-sles15sp5-01-zdev-add-proper-value-input-for-the-ZDEV_SITE_ID-key.patch
  - s390-tools-sles15sp5-02-zdev-use-rename-file-to-avoid-any-symlinks-created.patch
  * Removed obsolete patch for bug 1214114
  - s390-tools-sles15sp5-dasdfmt-Fall-back-to-full-format-if-space-release-fa.patch
  * Removed obsolete patch
  - s390-tools-sles15sp5-fix-chown-commands-syntax.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1700049600">- Fixed a logic error in read_values.c</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1700827200">- Provide s390-tools on x86_64 to enable Secure Execution in the Cloud
    (jsc#PED-578, jsc#PED-7136, and jsc#PED-7138)
  * Selected tools from the s390-tools package need to be made available on x86_64.
    This will enable the integration of IBM Z machines running Secure Execution in a
    cloud environment where users don't necessarily need to have an s390x environment.
  - genprotimg    - (for building secure images)
  - pvsecret      -
  - pvattest      - (for external attestation)
  - pvextract-hdr -</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1701691200">- Upgrade s390-tools to version 2.30
    (jsc#PED-5783, jsc#PED-6785, jsc#PED-7136, jsc#PED-6539, jsc#PED-4604,
    jsc#PED-6649, jsc#PED-7138 )
- Add new tools / libraries:
  * lspai: Tool to display PAI counter sets
  * s390-tools: Provide a ShellCheck configuration
- Changes of existing tools / libraries:
  * cpumf/pai: Add command line option for realtime scheduling
  * dbginfo.sh: enhance ethtool collection for ROCE
  * libutil/util_lockfile: add routine to return owning pid of file lock
  * lszcrypt: Improve lszcrypt output on SE guests
  * rust: Use a single workspace for all rust tools
  * zdev: limit the derivation of ZDEV_SITE_ID
  * zdump/df_s390: Update 'zgetdump -i' output with zlib info
  * zdump/dfi_s390: Support reading compressed s390_ext dumps
  * zipl/boot: Integrate zlib compression to single volume DASD dumper
  * zipl/boot: compile the bootloaders only if HOST_ARCH is s390x
  * zipl: Add --no-compress option to zipl command
  * zkey: Also check for deconfigured and check-stopped cards
- Bug Fixes:
  * ap_tools/ap-check: handle get-attributes between pre and post event
  * libutil: fix util_file_read_*() using wrong format specifiers
  * rust/pv: fix Invalid write of size
- Amended the SUSE patches for version 2.30
- Revendored vendor.tar.gz
- Removed an obsolete patch
  * s390-tools-sles15sp6-zkey-Support-EP11-AES-keys-with-prepended-header-to-.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1702814400">- Updated the .spec file to use gcc13 (bsc#1217838)
- Amended read_values for '-S' option (bsc#1217923)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1706097600">- Updated the .spec file
  * Explicitly specified 'ExclusiveArch: s390x x86_64'</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1706788800">- Updated read_values.c (bsc#1219227)</changelog>
</package>
<package pkgid="daad5a16820da3efcf01077dd6687995982299450784e4604ab22e056e2ec636" name="s390-tools" arch="x86_64">
  <version epoch="0" ver="2.30.0" rel="150500.9.10.1"/>
  <changelog author="nikolay.gueorguiev@suse.com" date="1673352000">- Updated read_values.c for z16 machine type (bsc#1206832)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1673438400">- Updated read_values.c for z16 machine type (bsc#1206832)
  * Added the IBM LinuxONE Emperor 4 machine type
  * Updated the z16 machine type to IBM z16 A01</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1675684800">- Added patch (bsc#1207947)
  * s390-tools-sles15sp5-zkey-Support-EP11-host-library-version-4.patch</changelog>
  <changelog author="jose.gomez@suse.com" date="1676548800">- Implemented read_values -u. The result of -u is a unique identifier composed of:
  * Machine Serial Number.
  * LPAR Name.
  * VM Name (can be optional).</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1676980800">- Applied the following patches (bsc#1208527, bsc#1206173)
  * s390-tools-sles15sp5-01-zipl-boot-discard-.eh_frame-and-.interp-input-sectio.patch
  * s390-tools-sles15sp5-02-zipl-boot-declare-that-no-executable-stack-is-requir.patch
  * s390-tools-sles15sp5-03-zipl-boot-use-no-warn-rwx-segments-linker-flag.patch
  * s390-tools-sles15sp5-04-zipl-boot-disable-build-id.patch
  * s390-tools-sles15sp5-05-zipl-boot-simplify-objcopy-commands.patch
  * s390-tools-sles15sp5-06-zipl-move-STAGE2_MAX_SIZE-and-STAGE1B_LOAD_ADDR-to-l.patch
  * s390-tools-sles15sp5-07-zipl-boot-use-linker-scripts-for-all-bootloaders.patch
  * s390-tools-sles15sp5-08-genprotimg-boot-declare-that-no-executable-stack-is-.patch
  * s390-tools-sles15sp5-09-genprotimg-boot-use-no-warn-rwx-segments-linker-flag.patch
  * s390-tools-sles15sp5-10-genprotimg-boot-disable-build-id.patch
  * s390-tools-sles15sp5-11-genprotimg-boot-Makefile-simplify-objcopy-command.patch
  * s390-tools-sles15sp5-12-genprotimg-boot-improve-linker-scripts.patch
  * s390-tools-sles15sp5-13-genprotimg-boot-stage3b-add-size-check-to-the-linker.patch
  * s390-tools-sles15sp5-14-genprotimg-boot-stage3b_reloc.bin-add-linker-script.patch
  * s390-tools-sles15sp5-15-zipl-Embed-loader-data-directly-into-boot-object.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678276800">- Updated cputype (bsc#1208983)
  * Changed the script to avoid "/usr/bin/cputype: line xx: nnnn: command not found",
    when machine type was found more than once in the /proc/cpuinfo.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678708800">- Applied a patch (bsc#1209196)
  * s390-tools-sles15sp5-lszcrypt-use-separate-index-for-inner-sub-device-loo.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1679572800">- Allow activation of devices at boot via kernel command line
  for live installation media (jsc#PED-2975)
  * Added a Source dracut-zdev-live-20230321.tar
  * Updated the .spec file for the new Source
-  Amended read_value.c</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1681905600">- Tailored the .spec, added a patch
  * s390-tools-ALP-zdev-live.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1683028800">- Applies a fix, splitting of rd.zdev-parameters, in
  * s390-tools-ALP-zdev-live.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1683201600">- Applied patches for ziomon: fix for SCSI devices of type disk without block dev
    (bsc#1211008)
  * s390-tools-sles15sp5-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch
  * s390-tools-sles15sp5-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1692619200">- Applies patches (bsc#1213377, bsc#1213852, bsc#1214114)
  * s390-tools-sles15sp5-01-zdev-add-missing-label-in-the-udev-rules.patch
  * s390-tools-sles15sp5-01-zdev-add-proper-value-input-for-the-ZDEV_SITE_ID-key.patch
  * s390-tools-sles15sp5-02-zdev-use-rename-file-to-avoid-any-symlinks-created.patch
  * s390-tools-sles15sp5-dasdfmt-Fall-back-to-full-format-if-space-release-fa.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1698926400">- Applied a patch (jsc#PED-6539, jsc#PED-6373)
  * s390-tools-sles15sp6-zkey-Support-EP11-AES-keys-with-prepended-header-to-.patch
- Updated read_values.c (bsc#1214466, bsc#1214534)
  * Update read_values.c to support the new IBM z Processors
- Updated SUSE's tools and their corresponding man pages (bsc#1216257)
  * ctc_configure
  * dasd_configure.opensuse
  * dasd_configure.8
  * dasd_configure.suse
  * mkdump.pl.opensuse
  * mkdump.pl.suse
  * qeth_configure
  * qeth_configure.8
  * zfcp_disk_configure
  * zfcp_disk_configure.8
  * zfcp_host_configure.8
  * zfcp_host_configure
- Updated cputype script
  * Amended cputype to support the new IBM z Processors</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1699876800">* Upgrade 390-tools from version 2.25.0 to version v2.29.0 (Latest)
  * * * *
  - General:
  - s390-tools now supports tools written in Rust.
  - Add compdb Makefile target to create 'compile_commands.json' to support LSP
  - backends in IDEs and editors
  - Add new tools / libraries:
  * rust/pv: Library for pv tools written in rust
  * rust/pvsecret: Tool to manage UV-secrets
  * Changes of existing tools:
  - dbginfo.sh: Global IFS variable
  - genprotimg: Add support for add-secret requests
  - genprotimg: Build debuginfo files for bootloader
  - hyptop: Add real SMT utilization field
  - hyptop: Allow users to set speedup factor
  - pvattest: Add yaml-output for verify command
  - zipl: Build debuginfo files for bootloader
  * Bug Fixes:
  - dump2tar: Fix truncated paths
  - zdev/dracut: fix kdump build to integrate with site support
  * * * *
  * v2.28.0
  - Changes of existing tools:
  - chzcrypt: Support for SE AP pass-through support
  - genprotimg: Add support for non-s390x architectures
  - lszcrypt: Support for SE AP pass-through support
  - zdev: Add support for autoquiesce related sysfs attributes
  * Bug Fixes:
  - ap_tools/ap-check: Handle missing 'matrix' and 'control_domains' attrs
  - ap_tools/ap-check: Hold ap config file lock over get attributes
  - s390-tools: Fix build for ppc64le
  - zdev: Add missing label in the udev-rules
  - zdev: Add proper value input for the ZDEV_SITE_ID key
  - zdev: Use rename-file to avoid any symlinks created
  - zipl/dump: fix ngdump dracut helper script
  * * * *
  * v2.27.0
  * Changes of existing tools:
  - s390-tools cross-compile and non-s390x support:
  - pkg-config is now mandatory for the build process
  - Add PKG_CONFIG Makefile variable to select pkg-config program;
  - default pkg-config or $(CROSS_COMPILE)pkg-config if
  - CROSS_COMPILE is set
  - Rename Makefile variable ARCH to HOST_ARCH. HOST_ARCH is the
    architecture that will run the produced (executable) objects
  - Add the Makefile variable BUILD_ARCH. BUILD_ARCH is the
    architecture of the build system. For each Makefile variable like
    CC, LINK, CPP, ... there is a suffixed version of it - e.g.
    CC_FOR_BUILD. This is useful for cross compiling, and this naming
    convention is very similar to the Meson convention (see
    https://mesonbuild.com/Reference-tables.html#environment-variables-per-machine).
  - Limit build targets for non-s390x architectures (pvattest)
  - dasdfmt: Fall back to full format if space release fails
  - dbginfo.sh: Add nstat for network and SNMP stats
  - dbginfo.sh: Rework crypto data collection
  - hyptop: Show thread util by default
  - zipl: Add support for list-directed IPL dump from ECKD DASD
  * Bug Fixes:
  - lszcrypt: Fix argument parsing
  - zdev/dracut: Fix out-of-memory (OOM) situations in the kdump crashkernel environment
  - ziomon/ziorep_config: Fix for SCSI devices of type disk without block dev
  - pvextract-hdr: Fix parsing issues on little-endian systems
  * * * *
  * v2.26.0
  * Remove tools / libraries:
  - Remove vmconvert and libvmdump in favor of vmdump file support in zdump
  * Changes of existing tools:
  - ipl_tools: Add support for list-directed IPL from ECKD DASD
  - lszcrypt: Display hardware filtering support capability
  - vmur: Remove option -c for dump file conversion (See zdump changes)
  - zdev: Add zfcp ber_stop parameter handling
  - zdump: Add vmdump dfi for vmdump format to elf format
  - zkey: Support EP11 host library version
  * Bug Fixes:
  - zipl: Move dump parmline processing and verification
  - zipl/genprotimg: Various build improvements
  * * * *
  * Removed obsolete IBM patches
  - s390-tools-sles15sp5-zipl-boot-disable-Warray-bounds-for-now.patch
  - s390-tools-sles15sp5-zkey-Support-EP11-host-library-version-4.patch
  * Removed obsolete patches for bug 1208527, and bug 1206173
  - s390-tools-sles15sp5-01-zipl-boot-discard-.eh_frame-and-.interp-input-sectio.patch
  - s390-tools-sles15sp5-02-zipl-boot-declare-that-no-executable-stack-is-requir.patch
  - s390-tools-sles15sp5-03-zipl-boot-use-no-warn-rwx-segments-linker-flag.patch
  - s390-tools-sles15sp5-04-zipl-boot-disable-build-id.patch
  - s390-tools-sles15sp5-05-zipl-boot-simplify-objcopy-commands.patch
  - s390-tools-sles15sp5-06-zipl-move-STAGE2_MAX_SIZE-and-STAGE1B_LOAD_ADDR-to-l.patch
  - s390-tools-sles15sp5-07-zipl-boot-use-linker-scripts-for-all-bootloaders.patch
  - s390-tools-sles15sp5-08-genprotimg-boot-declare-that-no-executable-stack-is-.patch
  - s390-tools-sles15sp5-09-genprotimg-boot-use-no-warn-rwx-segments-linker-flag.patch
  - s390-tools-sles15sp5-10-genprotimg-boot-disable-build-id.patch
  - s390-tools-sles15sp5-11-genprotimg-boot-Makefile-simplify-objcopy-command.patch
  - s390-tools-sles15sp5-12-genprotimg-boot-improve-linker-scripts.patch
  - s390-tools-sles15sp5-13-genprotimg-boot-stage3b-add-size-check-to-the-linker.patch
  - s390-tools-sles15sp5-14-genprotimg-boot-stage3b_reloc.bin-add-linker-script.patch
  - s390-tools-sles15sp5-15-zipl-Embed-loader-data-directly-into-boot-object.patch
  * Removed obsolete patch for bug 1209196
  - s390-tools-sles15sp5-lszcrypt-use-separate-index-for-inner-sub-device-loo.patch
  * Removed obsolete patches for bug 1211008
  - s390-tools-sles15sp5-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch
  - s390-tools-sles15sp5-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch
  * Removed obsolete patch for bug 1213377
  - s390-tools-sles15sp5-01-zdev-add-missing-label-in-the-udev-rules.patch
  * Removed obsolete patches for bug 1213852
  - s390-tools-sles15sp5-01-zdev-add-proper-value-input-for-the-ZDEV_SITE_ID-key.patch
  - s390-tools-sles15sp5-02-zdev-use-rename-file-to-avoid-any-symlinks-created.patch
  * Removed obsolete patch for bug 1214114
  - s390-tools-sles15sp5-dasdfmt-Fall-back-to-full-format-if-space-release-fa.patch
  * Removed obsolete patch
  - s390-tools-sles15sp5-fix-chown-commands-syntax.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1700049600">- Fixed a logic error in read_values.c</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1700827200">- Provide s390-tools on x86_64 to enable Secure Execution in the Cloud
    (jsc#PED-578, jsc#PED-7136, and jsc#PED-7138)
  * Selected tools from the s390-tools package need to be made available on x86_64.
    This will enable the integration of IBM Z machines running Secure Execution in a
    cloud environment where users don't necessarily need to have an s390x environment.
  - genprotimg    - (for building secure images)
  - pvsecret      -
  - pvattest      - (for external attestation)
  - pvextract-hdr -</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1701691200">- Upgrade s390-tools to version 2.30
    (jsc#PED-5783, jsc#PED-6785, jsc#PED-7136, jsc#PED-6539, jsc#PED-4604,
    jsc#PED-6649, jsc#PED-7138 )
- Add new tools / libraries:
  * lspai: Tool to display PAI counter sets
  * s390-tools: Provide a ShellCheck configuration
- Changes of existing tools / libraries:
  * cpumf/pai: Add command line option for realtime scheduling
  * dbginfo.sh: enhance ethtool collection for ROCE
  * libutil/util_lockfile: add routine to return owning pid of file lock
  * lszcrypt: Improve lszcrypt output on SE guests
  * rust: Use a single workspace for all rust tools
  * zdev: limit the derivation of ZDEV_SITE_ID
  * zdump/df_s390: Update 'zgetdump -i' output with zlib info
  * zdump/dfi_s390: Support reading compressed s390_ext dumps
  * zipl/boot: Integrate zlib compression to single volume DASD dumper
  * zipl/boot: compile the bootloaders only if HOST_ARCH is s390x
  * zipl: Add --no-compress option to zipl command
  * zkey: Also check for deconfigured and check-stopped cards
- Bug Fixes:
  * ap_tools/ap-check: handle get-attributes between pre and post event
  * libutil: fix util_file_read_*() using wrong format specifiers
  * rust/pv: fix Invalid write of size
- Amended the SUSE patches for version 2.30
- Revendored vendor.tar.gz
- Removed an obsolete patch
  * s390-tools-sles15sp6-zkey-Support-EP11-AES-keys-with-prepended-header-to-.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1702814400">- Updated the .spec file to use gcc13 (bsc#1217838)
- Amended read_values for '-S' option (bsc#1217923)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1706097600">- Updated the .spec file
  * Explicitly specified 'ExclusiveArch: s390x x86_64'</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1706788800">- Updated read_values.c (bsc#1219227)</changelog>
</package>
<package pkgid="163326f6ac2694888ba743423f2bb5fad0ffcd6613640e23c474407e801d6bf7" name="salt" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150500.4.24.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
</package>
<package pkgid="1a683d6f30713117ecb54997f41151f012a3a0ce6e337d7df11e60e2ec06a4e2" name="salt" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150500.4.24.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
</package>
<package pkgid="ad385d42c75d713e16b6d525bc5da0d75d9749c75a974dbb2282a081c4d570c6" name="salt" arch="src">
  <version epoch="0" ver="3006.0" rel="150500.4.24.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
</package>
<package pkgid="f809b655c0902421cb58d38e64c3191700f357853c45eb3be4ba6c19a16e1959" name="salt" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150500.4.24.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
</package>
<package pkgid="ac1995faa24376816b4e849345462349cd23ec9e293f4b89640c654739ac920d" name="salt" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150500.4.29.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
</package>
<package pkgid="7394e1dc66a80c173677ffa59a076d1678d29a84a9913e773cc888d789dd5cf8" name="salt" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150500.4.29.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
</package>
<package pkgid="0520a9214f9171838f516a311e2d47f3273405739e76f5fc67f106cdd3d2b5bc" name="salt" arch="src">
  <version epoch="0" ver="3006.0" rel="150500.4.29.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
</package>
<package pkgid="58c7ac7cf53f98ecc7b92a373b5110a2e49e4b39ada325c36fbe85ddd0c1f024" name="salt" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150500.4.29.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
</package>
<package pkgid="1275acb131ba0337a075af82b83774cf97580924a6a3141b8a173ee6a0181832" name="salt-minion" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150500.4.24.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
</package>
<package pkgid="26b137ef97ceefa80043404216258aaf14f9195b590e03ef6357fb5c082dceec" name="salt-minion" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150500.4.24.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
</package>
<package pkgid="5d243485e5480c10c0f2f05b42b90170493cc9fd7720b72dfe0dfe65f0ab80f5" name="salt-minion" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150500.4.24.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
</package>
<package pkgid="e992dac99c566457792b0133403bdcc460175a5126e2fc81bc153b42da6682c1" name="salt-minion" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150500.4.29.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
</package>
<package pkgid="1918030da7f1c0b0a458216b09e5368aacd9a3c2d87e3023dcb5454fb38496c9" name="salt-minion" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150500.4.29.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
</package>
<package pkgid="9529163f48dcb7bb3b80b7bbe5059bd7879f61bf6ef78c6c692186fa94c7da00" name="salt-minion" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150500.4.29.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
</package>
<package pkgid="d4522f56b479e2e809686df66726f6fb61ba5801cd2f83a823d0bc12162158f0" name="salt-transactional-update" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150500.4.24.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
</package>
<package pkgid="5107891efcd1ce497df1341bfd3ad356e4ebee0768f57e29448ceb37c5982b2c" name="salt-transactional-update" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150500.4.24.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
</package>
<package pkgid="7300422460eb4ff01cc304814df4ff450347a6aacf60288ad2b6dd226b5cc362" name="salt-transactional-update" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150500.4.24.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
</package>
<package pkgid="5ab5a26ef8edff7c62597330f95ab93bf87a72c32517b35e65257a0095d3348d" name="salt-transactional-update" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150500.4.29.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
</package>
<package pkgid="3782ac0107172d74e1d21b498074134727af63a64124bc495e45cc6e8b9c52f6" name="salt-transactional-update" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150500.4.29.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
</package>
<package pkgid="68606d97fb967ba6a24abe7bc1b962f0ac1a85e89e8086480413ee3e474957b9" name="salt-transactional-update" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150500.4.29.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
</package>
<package pkgid="12140e87212867d2c85bf19fc90fed71ff7d7536cba857aa6052a7e2a597507b" name="samba" arch="src">
  <version epoch="0" ver="4.17.12+git.427.2619dc0bed" rel="150500.3.14.1"/>
  <changelog author="nopower@suse.com" date="1668600000">- Update to 4.15.12
  * CVE-2022-42898: samba: heimdal: Samba buffer overflow
    vulnerabilities on 32-bit systems; (bso#15203); (bsc#1205126).
- Update to 4.15.11
  * Allow rebuild of Centos 8 images after move to vault for
    Samba 4.15; (bso#15193).
  * CVE-2022-3437: samba: Buffer overflow in Heimdal unwrap_des3();
    (bso#15134); (bsc#1204254)</changelog>
  <changelog author="scabrero@suse.de" date="1669636800">- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);</changelog>
  <changelog author="dmulder@suse.com" date="1669896000">- Introduce without-smb1-server spec flag; (bsc#1205104);
- Update to 4.17.3
  * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit
    systems; (bsc#1205126); (bso#15203);
- Replace obsolete python-gpgme with python-gpg
  * Upstream replaced it in v4.9.5 -- bso#13728
- Update to 4.17.2
  * CVE-2022-3592 [SECURITY] samba: Wide links protection broken;
    (bso#15207); (bsc#1204499).
  * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal
    unwrap_des3();(bso#15134); (bsc#1204254).
- Update to 4.17.1
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * smbXsrv_connection_shutdown_send result leaked; (bso#15174).
  * Flush on a named stream never completes; (bso#15182).
  * Permission denied calling SMBC_getatr when file not exists;
    (bso#15195).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * pytest: add file removal helpers for TestCaseInTempDir;
    (bso#15191).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * Flush on a named stream never completes; (bso#15182).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * multi-channel socket passing may hit a race if one of the
    involved processes already existed; (bso#15200).
  * memory leak on temporary of struct imessaging_post_state and
    struct tevent_immediate on struct imessaging_context (in
    rpcd_spoolss and maybe others); (bso#15201).
  * Since popt1.19 various use after free errors using result of
    poptGetArg are now exposed; (bso#15205); (boo#1204279).
  * Remove special case for O_CREAT in SMB_VFS_OPENAT from
    vfs_glusterfs; (bso#15192).
  * GETPWSID in memory cache grows indefinetly with each NTLM
    auth; (bso#15169).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);
- Fix use after free errors resulting from using return of
  poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205).
- s3: smbd: Fix memory leak in
  smbd_server_connection_terminate_done(); (bso#15174).
- Disable SMB1 for tumbleweed builds.
- Update to 4.17.0
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
    (bso#15153).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * Cross-node multi-channel reconnects result in SMB2 Negotiate
    returning NT_STATUS_NOT_SUPPORTED; (bso#15159).
  * winbind at info level debug can coredump when processing
    wb_lookupusergroups; (bso#15160).
  * Make use of glfs_*at() API calls in vfs_glusterfs;
    (bso#15157).
  * Possible use after free of connection_struct when iterating
    smbd_server_connection-&gt;connections; (bso#15128).
  * `net usershare add` fails with flag works with --long but
    fails with -l; (bso#15145).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Missing READ_LEASE break could cause data corruption;
    (bso#15148).
  * libsamba-errors uses a wrong version number; (bso#15141).
  * SMB1 negotiation can fail to handle connection errors;
    (bso#15152).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * 4.17.rc1 still uses symlink-race prone unix_convert();
    (bso#15144).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Manpage for smbstatus json is missing; (bso#15147).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Fix issues found by coverity in smbstatus json code;
    (bso#15140).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Update to 4.16.4
  * CVE-2022-2031: Samba AD users can bypass certain restrictions
    associated with changing passwords; (bsc#1201495); (bso#15047);
  * CVE-2022-32744: Samba AD users can forge password change
    requests for any user; (bsc#1201493); (bso#15074);
  * CVE-2022-32745: Samba AD users can crash the server process
    with an LDAP add or modify request; (bsc#1201492); (bso#15008);
  * CVE-2022-32746: Samba AD users can induce a use-after-free in
    the server process with an LDAP add or modify request;
    (bsc#1201490); (bso#15009);
  * CVE-2022-32742: Server memory information leak via SMB1;
    (bsc#1201496); (bso#15085);
- Update to 4.16.3
  * Using vfs_streams_xattr and deleting a file causes a panic;
    (bso#15099);
  * Add support for bind 9.18; (bso#14986);
  * logging dsdb audit to specific files does not work;
    (bso#15076);
  * Problem when winbind renews Kerberos; (bso#14979);
    (bsc#1196224);
  * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in
    developer mode; (bso#15095);
  * Crash in streams_xattr because fsp-&gt;base_fsp-&gt;fsp_name is
    NULL; (bso#15105);
  * Crash in rpcd_classic - NULL pointer deference in
    mangle_is_mangled(); (bso#15118);
  * smbclient commands del &amp; deltree fail with
    NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
    (bsc#1200556);
  * Fix check for chown when processing NFSv4 ACL; (bso#15120);
  * The pcap background queue process should not be stopped;
    (bso#15082);
  * testparm: Fix typo in idmap rangesize check; (bso#15097);
  * net ads info returns LDAP server and LDAP server name as
    null; (bso#15106);
  * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;
    (bso#15108);
  * CTDB child process logging does not work as expected;
    (bso#15090);
- Update spec file to fix the optional Heimdal DC build
- Fix external trusts with MIT Kerberos 1.20
- Add missing samba-client requirement to samba-winbind package;
  (bsc#1198255);
- Move pdb backends from package samba-libs to package
  samba-client-libs and remove samba-libs requirement from
  samba-winbind; (bsc#1200964); (bsc#1198255);
- Add sysuser-shadow requirement for packages using
  systemd-sysusers
- Use the canonical realm name to refresh the Kerberos tickets;
  (bsc#1196224); (bso#14979);
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Update to 4.16.2
  * Use pathref fd instead of io fd in vfs_default_durable_cookie;
    (bso#15042);
  * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original
    file had been deleted; (bso#15069);
  * Reintroduce netgroups support; (bso#15087);
  * net ads info shows LDAP Server: 0.0.0.0 depending on contacted
    server; (bso#14674);
  * Update from 4.15  to 4.16 breaks discovery of [homes] on
    standalone server from Win and IOS; (bso#15062);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * smbclient -E doesn't work as advertised; (bso#15075);
  * The samba background daemon doesn't refresh the printcap cache
    on startup; (bso#15081);
  * Out-by-4 error in smbd read reply max_send clamp; (bso#14443);
- Fix samba4.blackbox.net_ads_dns_async test with bind9 &gt;= 9.17.7
- Support building with MIT Kerberos 1.20
- Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC;
  (CVE-2020-17049);
- Resource Based Constrained Delegation (RBCD) for Samba AD DC
- Support building with gcc 12.1
- Use requires_eq macro to require the libldb2 version available at
  samba-dsdb-modules build time; (bsc#1199362);
- Update to 4.16.1
  * Share and server swapped in smbget password prompt; (bso#14831);
  * Durable handles won't reconnect if the leased file is written to;
    (bso#15022);
  * rmdir silently fails if directory contains unreadable files and
    hide unreadable is yes; (bso#15023);
  * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information
    on renamed file handle; (bso#15038);
  * Need to describe --builtin-libraries= better (compare with
  - -bundled-libraries); (bso#8731);
  * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback;
    (bso#14957);
  * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes;
    (bso#15035);
  * PAM Kerberos authentication incorrectly fails with a clock skew
    error; (bso#15046);
  * Username map - samba erroneously applies unix group memberships
    to user account entries; (bso#15041);
  * KVNO off by 100000; (bso#14951);
  * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027);
  * vfs_gpfs recalls=no option prevents listing files; (bso#15055);
  * smbd doesn't handle UPNs for looking up names; (bso#15054);
- Update update-apparmor-samba-profile script, replace
  non-printable delimiter with more human readable separator as
  sed can accept separators that can appear in the input data.
- Fix update-apparmor-samba-profile script, sed doesn't like
  multibyte separators; (bsc#1198309).
- Update to 4.16.0
  * New samba-dcerpcd binary to provide DCERPC in the member server
    setup
  * Certificate Auto Enrollment
  * Ability to add ports to dns forwarder addresses in internal DNS
    backend
  * No longer using Linux mandatory locks for sharemodes
  * SMB1 protocol has been deprecated, particularly older dialects
  * SMB1 protocol SMBCopy command removed
  * SMB1 server-side wildcard expansion removed
- Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101);
- Use systemd-sysusers to create system users; (bsc#1182847);</changelog>
  <changelog author="scabrero@suse.de" date="1671105600">- Update to 4.17.4
  * CVE-2022-44640 Upstream Heimdal free of user-controlled
    pointer in FAST; (bsc#14929);
  * CVE-2021-20251 Bad password count not incremented atomically;
    (bsc#14611);
  * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability;
    (bsc#15203);
  * CVE-2022-37966 rc4-hmac Kerberos session keys issued to
    modern servers; (bso#15237);
  * CVE-2022-37967 Kerberos constrained delegation ticket forgery
    possible against Samba AD DC; (bso#15231);
  * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak
    and should be avoided; (bso#15240);
  * pam_winbind uses time_t and pointers assuming they are of the
    same size; (bso#15224);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * filter-subunit is inefficient with large numbers of
    knownfails; (bso#15258);
  * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories;
    (bso#15252);
  * The KDC logic arround msDs-supportedEncryptionTypes differs
    from Windows; (bso#13135);
  * libnet: change_password() doesn't work with
    dcerpc_samr_ChangePasswordUser4(); (bso#15206);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * Memory leak in snprintf replacement functions; (bso#15230);
  * RODC doesn't reset badPwdCount reliable via an RWDC
    (CVE-2021-20251 regression); (bso#15253);
  * Prevent EBADF errors with vfs_glusterfs; (bso#15198);
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243);
  * Stack smashing in net offlinejoin requestodj; (bso#15257);
  * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue;
    (bso#15197);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
- Remove deprecated if-{down,up} scripts; (bsc#1206444);
- Adjust the systemd drop-in file for named service; (bsc#1201689);
  * Paths are additive so do not repeat paths from named.service
  * Prefix the samba DLZ directory with "-" to ignore this path
    if it does not exists</changelog>
  <changelog author="nopower@suse.com" date="1671624000">- Change with_dc default to 0 (for non TW builds), ADDC feature is
  deprecated and will no longer be included in &gt;= SLE15-SP5;
  (jsc#PED-1122).</changelog>
  <changelog author="nopower@suse.com" date="1673524800">- Clean up logic for PAM migration settings in spec file.</changelog>
  <changelog author="nopower@suse.com" date="1674475200">- libdsdb-module-samba4 should be packaged as part of samba-libs and
  not samba-ad-dc-libs. Additionally no need for it to be
  removed conditionally.</changelog>
  <changelog author="nopower@suse.com" date="1674475201">- Remove non functioning ifup/ifdown samba-winbindd scripts;
  (bsc#1207414).</changelog>
  <changelog author="nopower@suse.com" date="1678363200">- Make samba-libs conflict with old samba-ad-dc-libs package
  to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1679745600">- Make (32bit) samba-libs conflict with old samba-ad-dc-libs
  package to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1681300800">- Update to 4.17.7
  * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords
    in cleartext; (bso#15315); (bsc#1209481).
  * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be
    deleted by unprivileged authenticated users; (bso#15276);
    (bsc#1209483).
  * CVE-2023-0614: samba: Access controlled AD LDAP attributes can
    be discovered; (bso#15270); (bsc#1209485).
  * large_ldap test is inefficient; (bso#15332).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
- Update to 4.17.6
  * streams_xattr is creating unexpected locks on folders;
    (bso#15314).
  * Use of the Azure AD Connect cloud sync tool is now supported
    for password hash synchronisation, allowing Samba AD Domains
    to synchronise passwords with this popular cloud environment;
    (bso#10635).
  * Spotlight doesn't work with latest macOS Ventura;
    (bso#15299).
  * New samba-dcerpc architecture does not scale gracefully;
    (bso#15310).
  * vfs_ceph incorrectly uses fsp_get_io_fd() instead of
    fsp_get_pathref_fd() in close and fstat; (bso#15307).
  * With clustering enabled samba-bgqd can core dump due to use
    after free; (bso#15293).
  * fd_load() function implicitly closes the fd where it should
    not; (bso#15311).
- Update to 4.17.5
  * smbc_getxattr() return value is incorrect; (bso#14808).
  * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not
    handled correctly; (bso#15172).
  * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210).
  * samba-tool gpo listall fails IPv6 only - finddcs() fails to
    find DC when there is only an AAAA record for the DC in DNS;
    (bso#15226).
  * smbd crashes if an FSCTL request is done on a stream handle;
    (bso#15236).
  * DFS links don't work anymore on Mac clients since 4.17;
    (bso#15277).
  * vfs_virusfilter segfault on access, directory edgecase
    (accessing NULL value); (bso#15283).
  * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5)
    based SChannel on NETLOGON (additional changes); (bso#15240).
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243).
  * Shares missing from netshareenum response in samba 4.17.4;
    (bso#15266).
  * ctdb: use-after-free in run_proc; (bso#15269).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * auth3_generate_session_info_pac leaks wbcAuthUserInfo;
    (bso#15286).
  * smbclient segfaults with use after free on an optimized
    build; (bso#15268).
  * smbstatus leaking files in msg.sock and msg.lock;
    (bso#15282).
  * Leak in wbcCtxPingDc2; (bso#15164).
  * Access based share enum does not work in Samba 4.16+;
    (bso#15265).
  * Crash during share enumeration; (bso#15267).
  * rep_listxattr on FreeBSD does not properly check for reads
    off end of returned buffer; (bso#15271).
  * Avoid relying on C89 features in a few places; (bso#15281).</changelog>
  <changelog author="nopower@suse.com" date="1686830400">- Update to 4.17.8
  * log flood: smbd_calculate_access_mask_fsp: Access denied:
    message level should be lower; (bso#15302).
  * Floating point exception (FPE) via cli_pull_send at
    source3/libsmb/clireadwrite.c; (bso#15306).
  * test_tstream_more_tcp_user_timeout_spin fails intermittently
    on Rackspace GitLab runners; (bso#15328).
  * Reduce flapping of ridalloc test; (bso#15329).
  * large_ldap test is unreliable; (bso#15351).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * mdssvc may crash when initializing; (bso#15354).
  * Large directory optimization broken for non-lcomp path
    elements; (bso#15313).
  * streams_depot fails to create streams; (bso#15357).
  * shadow_copy2 and streams_depot don't play well together;
    (bso#15358).
  * wbinfo -u fails on ad dc with &gt;1000 users; (bso#15366).
  * winbindd idmap child contacts the domain controller without a
    need; (bso#15317).
  * idmap_autorid may fail to map sids of trusted domains for the
    first time; (bso#15318).
  * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings;
    (bso#15319).
  * net ads search -P doesn't work against servers in other
    domains; (bso#15323).
  * DS ACEs might be inherited to unrelated object classes;
    (bso#15338).
  * Temporary smbXsrv_tcon_global.tdb can't be parsed;
    (bso#15353).
  * Setting veto files = /.*/ break listing directories;
    (bso#15360); (bsc#1212375).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
  * dsgetdcname: assumes local system uses IPv4; (bso#15325).</changelog>
  <changelog author="nopower@suse.com" date="1688644800">- Update to 4.17.9
  * Backport --pidl-developer fixes; (bso#15404).
  * smbd_scavenger crashes when service smbd is stopped;
    (bso#15275).
  * vfs_fruit might cause a failing open for delete; (bso#15378).
  * named crashes on DLZ zone update; (bso#14030).
  * winbind recurses into itself via rpcd_lsad; (bso#15361).
  * cli_list loops 100% CPU against pre-lanman2 servers;
    (bso#15382).
  * smbclient leaks fds with showacls; (bso#15391).
  * aes256 smb3 encryption algorithms are not allowed in
    smb3_sid_parse(); (bso#15374).
  * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR;
    (bso#15413).
  * smbget memory leak if failed to download files recursively;
    (bso#15403).</changelog>
  <changelog author="nopower@suse.com" date="1689249600">- CVE-2022-2127: lm_resp_len not checked properly in
  winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174).
- CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite
  Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173).
- CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type
  Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172).
- CVE-2023-34968: Spotlight server-side Share Path Disclosure;
  (bso#15388); (bsc#1213171).
- CVE-2023-3347: Samba doesn't require SMB2+ signing if
  `server signing = mandatory` is set; (bso#15397); (bsc#1213170).</changelog>
  <changelog author="nopower@suse.com" date="1689595200">- secure channel faulty since Windows 10/11 update 07/2023;
  (bso#15418); (bsc#1213384).</changelog>
  <changelog author="scabrero@suse.de" date="1690891200">- net ads lookup with unspecified realm fails; (bso#15384);
  (bsc#1213826);</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Move libcluster-samba4.so from samba-libs to samba-client-libs;
  (bsc#1213940);</changelog>
  <changelog author="scabrero@suse.de" date="1692014400">- Fix DFS not working with widelinks enabled; (bsc#1213607);
  (bso#15435);</changelog>
  <changelog author="nopower@suse.com" date="1696420800">- CVE-2023-4091: samba: Client can truncate file with read-only
  permissions; (bsc#1215904); (bso#15439).
- CVE-2023-42669: samba: rpcecho, enabled and running in AD DC,
  allows blocking sleep on request; (bso#1215905); (bso#15474).
- CVE-2023-42670: samba:  The procedure number is out of range
  when starting Active Directory Users and Computers;
  (bsc#1215906); (bso#15473).
- CVE-2023-3961: samba: Unsanitized client pipe name passed to
  local_np_connect(); (bsc#1215907); (bso#15422).
- CVE-2023-4154: samba: dirsync allows SYSTEM access with only
  "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES;
  (bsc#1215908); (bso#15424).</changelog>
  <changelog author="scabrero@suse.de" date="1698062400">- Update to samba 4.17.12
  * Weird filename can cause assert to fail in
    openat_pathref_fsp_nosymlink(); (bso#15419);
  * reply_sesssetup_and_X() can dereference uninitialized tmp
    pointer; (bso#15420);
  * Missing return in reply_exit_done(); (bso#15430);
  * TREE_CONNECT without SETUP causes smbd to use uninitialized
    pointer; (bso#15432);
  * Improve GetNChanges to address some (but not all "Azure AD
    Connect") syncronisation tool looping during the initial user
    sync phase; (bso#15401);
  * Samba replication logs show (null) DN; (bso#15407);
  * Spotlight sometimes returns no results on latest macOS;
    (bso#15342);
  * Renaming results in NT_STATUS_SHARING_VIOLATION if previously
    attempted to remove the destination; (bso#15417);
  * Spotlight results return wrong date in result list; (bso#15427);
  * macOS mdfind returns only 50 results; (bso#15463);
  * 2-3min delays at reconnect with smb2_validate_sequence_number:
    bad message_id 2; (bso#15346);
  * samba-tool ntacl get segfault if aio_pthread appended;
    (bso#15441);
  * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed;
    (bso#15446);
  * File doesn't show when user doesn't have permission if
    aio_pthread is loaded; (bso#15453);
  * net ads lookup (with unspecified realm) fails; (bso#15384);
    (bsc#1213826);
  * Regression DFS not working with widelinks = true; (bso#15435);
    (bsc#1213607);
  * ctdb_killtcp fails to work with --enable-pcap and libpcap 1.9.1;
    (bso#15451);
  * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449);
  * Windows client join fails if a second container CN=System exists
    somewhere; (bso#9959);
- Fix crossing automounter mount points; (bsc#1215212);</changelog>
</package>
<package pkgid="0b694ae809be7dcd6d1385303c77c1a77d515204f07983d8bbdccff49440680c" name="samba" arch="src">
  <version epoch="0" ver="4.17.12+git.444.922f3bd625" rel="150500.3.17.1"/>
  <changelog author="scabrero@suse.de" date="1669636800">- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);</changelog>
  <changelog author="dmulder@suse.com" date="1669896000">- Introduce without-smb1-server spec flag; (bsc#1205104);
- Update to 4.17.3
  * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit
    systems; (bsc#1205126); (bso#15203);
- Replace obsolete python-gpgme with python-gpg
  * Upstream replaced it in v4.9.5 -- bso#13728
- Update to 4.17.2
  * CVE-2022-3592 [SECURITY] samba: Wide links protection broken;
    (bso#15207); (bsc#1204499).
  * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal
    unwrap_des3();(bso#15134); (bsc#1204254).
- Update to 4.17.1
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * smbXsrv_connection_shutdown_send result leaked; (bso#15174).
  * Flush on a named stream never completes; (bso#15182).
  * Permission denied calling SMBC_getatr when file not exists;
    (bso#15195).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * pytest: add file removal helpers for TestCaseInTempDir;
    (bso#15191).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * Flush on a named stream never completes; (bso#15182).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * multi-channel socket passing may hit a race if one of the
    involved processes already existed; (bso#15200).
  * memory leak on temporary of struct imessaging_post_state and
    struct tevent_immediate on struct imessaging_context (in
    rpcd_spoolss and maybe others); (bso#15201).
  * Since popt1.19 various use after free errors using result of
    poptGetArg are now exposed; (bso#15205); (boo#1204279).
  * Remove special case for O_CREAT in SMB_VFS_OPENAT from
    vfs_glusterfs; (bso#15192).
  * GETPWSID in memory cache grows indefinetly with each NTLM
    auth; (bso#15169).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);
- Fix use after free errors resulting from using return of
  poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205).
- s3: smbd: Fix memory leak in
  smbd_server_connection_terminate_done(); (bso#15174).
- Disable SMB1 for tumbleweed builds.
- Update to 4.17.0
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
    (bso#15153).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * Cross-node multi-channel reconnects result in SMB2 Negotiate
    returning NT_STATUS_NOT_SUPPORTED; (bso#15159).
  * winbind at info level debug can coredump when processing
    wb_lookupusergroups; (bso#15160).
  * Make use of glfs_*at() API calls in vfs_glusterfs;
    (bso#15157).
  * Possible use after free of connection_struct when iterating
    smbd_server_connection-&gt;connections; (bso#15128).
  * `net usershare add` fails with flag works with --long but
    fails with -l; (bso#15145).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Missing READ_LEASE break could cause data corruption;
    (bso#15148).
  * libsamba-errors uses a wrong version number; (bso#15141).
  * SMB1 negotiation can fail to handle connection errors;
    (bso#15152).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * 4.17.rc1 still uses symlink-race prone unix_convert();
    (bso#15144).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Manpage for smbstatus json is missing; (bso#15147).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Fix issues found by coverity in smbstatus json code;
    (bso#15140).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Update to 4.16.4
  * CVE-2022-2031: Samba AD users can bypass certain restrictions
    associated with changing passwords; (bsc#1201495); (bso#15047);
  * CVE-2022-32744: Samba AD users can forge password change
    requests for any user; (bsc#1201493); (bso#15074);
  * CVE-2022-32745: Samba AD users can crash the server process
    with an LDAP add or modify request; (bsc#1201492); (bso#15008);
  * CVE-2022-32746: Samba AD users can induce a use-after-free in
    the server process with an LDAP add or modify request;
    (bsc#1201490); (bso#15009);
  * CVE-2022-32742: Server memory information leak via SMB1;
    (bsc#1201496); (bso#15085);
- Update to 4.16.3
  * Using vfs_streams_xattr and deleting a file causes a panic;
    (bso#15099);
  * Add support for bind 9.18; (bso#14986);
  * logging dsdb audit to specific files does not work;
    (bso#15076);
  * Problem when winbind renews Kerberos; (bso#14979);
    (bsc#1196224);
  * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in
    developer mode; (bso#15095);
  * Crash in streams_xattr because fsp-&gt;base_fsp-&gt;fsp_name is
    NULL; (bso#15105);
  * Crash in rpcd_classic - NULL pointer deference in
    mangle_is_mangled(); (bso#15118);
  * smbclient commands del &amp; deltree fail with
    NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
    (bsc#1200556);
  * Fix check for chown when processing NFSv4 ACL; (bso#15120);
  * The pcap background queue process should not be stopped;
    (bso#15082);
  * testparm: Fix typo in idmap rangesize check; (bso#15097);
  * net ads info returns LDAP server and LDAP server name as
    null; (bso#15106);
  * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;
    (bso#15108);
  * CTDB child process logging does not work as expected;
    (bso#15090);
- Update spec file to fix the optional Heimdal DC build
- Fix external trusts with MIT Kerberos 1.20
- Add missing samba-client requirement to samba-winbind package;
  (bsc#1198255);
- Move pdb backends from package samba-libs to package
  samba-client-libs and remove samba-libs requirement from
  samba-winbind; (bsc#1200964); (bsc#1198255);
- Add sysuser-shadow requirement for packages using
  systemd-sysusers
- Use the canonical realm name to refresh the Kerberos tickets;
  (bsc#1196224); (bso#14979);
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Update to 4.16.2
  * Use pathref fd instead of io fd in vfs_default_durable_cookie;
    (bso#15042);
  * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original
    file had been deleted; (bso#15069);
  * Reintroduce netgroups support; (bso#15087);
  * net ads info shows LDAP Server: 0.0.0.0 depending on contacted
    server; (bso#14674);
  * Update from 4.15  to 4.16 breaks discovery of [homes] on
    standalone server from Win and IOS; (bso#15062);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * smbclient -E doesn't work as advertised; (bso#15075);
  * The samba background daemon doesn't refresh the printcap cache
    on startup; (bso#15081);
  * Out-by-4 error in smbd read reply max_send clamp; (bso#14443);
- Fix samba4.blackbox.net_ads_dns_async test with bind9 &gt;= 9.17.7
- Support building with MIT Kerberos 1.20
- Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC;
  (CVE-2020-17049);
- Resource Based Constrained Delegation (RBCD) for Samba AD DC
- Support building with gcc 12.1
- Use requires_eq macro to require the libldb2 version available at
  samba-dsdb-modules build time; (bsc#1199362);
- Update to 4.16.1
  * Share and server swapped in smbget password prompt; (bso#14831);
  * Durable handles won't reconnect if the leased file is written to;
    (bso#15022);
  * rmdir silently fails if directory contains unreadable files and
    hide unreadable is yes; (bso#15023);
  * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information
    on renamed file handle; (bso#15038);
  * Need to describe --builtin-libraries= better (compare with
  - -bundled-libraries); (bso#8731);
  * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback;
    (bso#14957);
  * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes;
    (bso#15035);
  * PAM Kerberos authentication incorrectly fails with a clock skew
    error; (bso#15046);
  * Username map - samba erroneously applies unix group memberships
    to user account entries; (bso#15041);
  * KVNO off by 100000; (bso#14951);
  * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027);
  * vfs_gpfs recalls=no option prevents listing files; (bso#15055);
  * smbd doesn't handle UPNs for looking up names; (bso#15054);
- Update update-apparmor-samba-profile script, replace
  non-printable delimiter with more human readable separator as
  sed can accept separators that can appear in the input data.
- Fix update-apparmor-samba-profile script, sed doesn't like
  multibyte separators; (bsc#1198309).
- Update to 4.16.0
  * New samba-dcerpcd binary to provide DCERPC in the member server
    setup
  * Certificate Auto Enrollment
  * Ability to add ports to dns forwarder addresses in internal DNS
    backend
  * No longer using Linux mandatory locks for sharemodes
  * SMB1 protocol has been deprecated, particularly older dialects
  * SMB1 protocol SMBCopy command removed
  * SMB1 server-side wildcard expansion removed
- Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101);
- Use systemd-sysusers to create system users; (bsc#1182847);</changelog>
  <changelog author="scabrero@suse.de" date="1671105600">- Update to 4.17.4
  * CVE-2022-44640 Upstream Heimdal free of user-controlled
    pointer in FAST; (bsc#14929);
  * CVE-2021-20251 Bad password count not incremented atomically;
    (bsc#14611);
  * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability;
    (bsc#15203);
  * CVE-2022-37966 rc4-hmac Kerberos session keys issued to
    modern servers; (bso#15237);
  * CVE-2022-37967 Kerberos constrained delegation ticket forgery
    possible against Samba AD DC; (bso#15231);
  * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak
    and should be avoided; (bso#15240);
  * pam_winbind uses time_t and pointers assuming they are of the
    same size; (bso#15224);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * filter-subunit is inefficient with large numbers of
    knownfails; (bso#15258);
  * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories;
    (bso#15252);
  * The KDC logic arround msDs-supportedEncryptionTypes differs
    from Windows; (bso#13135);
  * libnet: change_password() doesn't work with
    dcerpc_samr_ChangePasswordUser4(); (bso#15206);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * Memory leak in snprintf replacement functions; (bso#15230);
  * RODC doesn't reset badPwdCount reliable via an RWDC
    (CVE-2021-20251 regression); (bso#15253);
  * Prevent EBADF errors with vfs_glusterfs; (bso#15198);
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243);
  * Stack smashing in net offlinejoin requestodj; (bso#15257);
  * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue;
    (bso#15197);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
- Remove deprecated if-{down,up} scripts; (bsc#1206444);
- Adjust the systemd drop-in file for named service; (bsc#1201689);
  * Paths are additive so do not repeat paths from named.service
  * Prefix the samba DLZ directory with "-" to ignore this path
    if it does not exists</changelog>
  <changelog author="nopower@suse.com" date="1671624000">- Change with_dc default to 0 (for non TW builds), ADDC feature is
  deprecated and will no longer be included in &gt;= SLE15-SP5;
  (jsc#PED-1122).</changelog>
  <changelog author="nopower@suse.com" date="1673524800">- Clean up logic for PAM migration settings in spec file.</changelog>
  <changelog author="nopower@suse.com" date="1674475200">- libdsdb-module-samba4 should be packaged as part of samba-libs and
  not samba-ad-dc-libs. Additionally no need for it to be
  removed conditionally.</changelog>
  <changelog author="nopower@suse.com" date="1674475201">- Remove non functioning ifup/ifdown samba-winbindd scripts;
  (bsc#1207414).</changelog>
  <changelog author="nopower@suse.com" date="1678363200">- Make samba-libs conflict with old samba-ad-dc-libs package
  to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1679745600">- Make (32bit) samba-libs conflict with old samba-ad-dc-libs
  package to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1681300800">- Update to 4.17.7
  * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords
    in cleartext; (bso#15315); (bsc#1209481).
  * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be
    deleted by unprivileged authenticated users; (bso#15276);
    (bsc#1209483).
  * CVE-2023-0614: samba: Access controlled AD LDAP attributes can
    be discovered; (bso#15270); (bsc#1209485).
  * large_ldap test is inefficient; (bso#15332).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
- Update to 4.17.6
  * streams_xattr is creating unexpected locks on folders;
    (bso#15314).
  * Use of the Azure AD Connect cloud sync tool is now supported
    for password hash synchronisation, allowing Samba AD Domains
    to synchronise passwords with this popular cloud environment;
    (bso#10635).
  * Spotlight doesn't work with latest macOS Ventura;
    (bso#15299).
  * New samba-dcerpc architecture does not scale gracefully;
    (bso#15310).
  * vfs_ceph incorrectly uses fsp_get_io_fd() instead of
    fsp_get_pathref_fd() in close and fstat; (bso#15307).
  * With clustering enabled samba-bgqd can core dump due to use
    after free; (bso#15293).
  * fd_load() function implicitly closes the fd where it should
    not; (bso#15311).
- Update to 4.17.5
  * smbc_getxattr() return value is incorrect; (bso#14808).
  * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not
    handled correctly; (bso#15172).
  * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210).
  * samba-tool gpo listall fails IPv6 only - finddcs() fails to
    find DC when there is only an AAAA record for the DC in DNS;
    (bso#15226).
  * smbd crashes if an FSCTL request is done on a stream handle;
    (bso#15236).
  * DFS links don't work anymore on Mac clients since 4.17;
    (bso#15277).
  * vfs_virusfilter segfault on access, directory edgecase
    (accessing NULL value); (bso#15283).
  * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5)
    based SChannel on NETLOGON (additional changes); (bso#15240).
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243).
  * Shares missing from netshareenum response in samba 4.17.4;
    (bso#15266).
  * ctdb: use-after-free in run_proc; (bso#15269).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * auth3_generate_session_info_pac leaks wbcAuthUserInfo;
    (bso#15286).
  * smbclient segfaults with use after free on an optimized
    build; (bso#15268).
  * smbstatus leaking files in msg.sock and msg.lock;
    (bso#15282).
  * Leak in wbcCtxPingDc2; (bso#15164).
  * Access based share enum does not work in Samba 4.16+;
    (bso#15265).
  * Crash during share enumeration; (bso#15267).
  * rep_listxattr on FreeBSD does not properly check for reads
    off end of returned buffer; (bso#15271).
  * Avoid relying on C89 features in a few places; (bso#15281).</changelog>
  <changelog author="nopower@suse.com" date="1686830400">- Update to 4.17.8
  * log flood: smbd_calculate_access_mask_fsp: Access denied:
    message level should be lower; (bso#15302).
  * Floating point exception (FPE) via cli_pull_send at
    source3/libsmb/clireadwrite.c; (bso#15306).
  * test_tstream_more_tcp_user_timeout_spin fails intermittently
    on Rackspace GitLab runners; (bso#15328).
  * Reduce flapping of ridalloc test; (bso#15329).
  * large_ldap test is unreliable; (bso#15351).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * mdssvc may crash when initializing; (bso#15354).
  * Large directory optimization broken for non-lcomp path
    elements; (bso#15313).
  * streams_depot fails to create streams; (bso#15357).
  * shadow_copy2 and streams_depot don't play well together;
    (bso#15358).
  * wbinfo -u fails on ad dc with &gt;1000 users; (bso#15366).
  * winbindd idmap child contacts the domain controller without a
    need; (bso#15317).
  * idmap_autorid may fail to map sids of trusted domains for the
    first time; (bso#15318).
  * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings;
    (bso#15319).
  * net ads search -P doesn't work against servers in other
    domains; (bso#15323).
  * DS ACEs might be inherited to unrelated object classes;
    (bso#15338).
  * Temporary smbXsrv_tcon_global.tdb can't be parsed;
    (bso#15353).
  * Setting veto files = /.*/ break listing directories;
    (bso#15360); (bsc#1212375).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
  * dsgetdcname: assumes local system uses IPv4; (bso#15325).</changelog>
  <changelog author="nopower@suse.com" date="1688644800">- Update to 4.17.9
  * Backport --pidl-developer fixes; (bso#15404).
  * smbd_scavenger crashes when service smbd is stopped;
    (bso#15275).
  * vfs_fruit might cause a failing open for delete; (bso#15378).
  * named crashes on DLZ zone update; (bso#14030).
  * winbind recurses into itself via rpcd_lsad; (bso#15361).
  * cli_list loops 100% CPU against pre-lanman2 servers;
    (bso#15382).
  * smbclient leaks fds with showacls; (bso#15391).
  * aes256 smb3 encryption algorithms are not allowed in
    smb3_sid_parse(); (bso#15374).
  * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR;
    (bso#15413).
  * smbget memory leak if failed to download files recursively;
    (bso#15403).</changelog>
  <changelog author="nopower@suse.com" date="1689249600">- CVE-2022-2127: lm_resp_len not checked properly in
  winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174).
- CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite
  Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173).
- CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type
  Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172).
- CVE-2023-34968: Spotlight server-side Share Path Disclosure;
  (bso#15388); (bsc#1213171).
- CVE-2023-3347: Samba doesn't require SMB2+ signing if
  `server signing = mandatory` is set; (bso#15397); (bsc#1213170).</changelog>
  <changelog author="nopower@suse.com" date="1689595200">- secure channel faulty since Windows 10/11 update 07/2023;
  (bso#15418); (bsc#1213384).</changelog>
  <changelog author="scabrero@suse.de" date="1690891200">- net ads lookup with unspecified realm fails; (bso#15384);
  (bsc#1213826);</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Move libcluster-samba4.so from samba-libs to samba-client-libs;
  (bsc#1213940);</changelog>
  <changelog author="scabrero@suse.de" date="1692014400">- Fix DFS not working with widelinks enabled; (bsc#1213607);
  (bso#15435);</changelog>
  <changelog author="nopower@suse.com" date="1696420800">- CVE-2023-4091: samba: Client can truncate file with read-only
  permissions; (bsc#1215904); (bso#15439).
- CVE-2023-42669: samba: rpcecho, enabled and running in AD DC,
  allows blocking sleep on request; (bso#1215905); (bso#15474).
- CVE-2023-42670: samba:  The procedure number is out of range
  when starting Active Directory Users and Computers;
  (bsc#1215906); (bso#15473).
- CVE-2023-3961: samba: Unsanitized client pipe name passed to
  local_np_connect(); (bsc#1215907); (bso#15422).
- CVE-2023-4154: samba: dirsync allows SYSTEM access with only
  "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES;
  (bsc#1215908); (bso#15424).</changelog>
  <changelog author="scabrero@suse.de" date="1698062400">- Update to samba 4.17.12
  * Weird filename can cause assert to fail in
    openat_pathref_fsp_nosymlink(); (bso#15419);
  * reply_sesssetup_and_X() can dereference uninitialized tmp
    pointer; (bso#15420);
  * Missing return in reply_exit_done(); (bso#15430);
  * TREE_CONNECT without SETUP causes smbd to use uninitialized
    pointer; (bso#15432);
  * Improve GetNChanges to address some (but not all "Azure AD
    Connect") syncronisation tool looping during the initial user
    sync phase; (bso#15401);
  * Samba replication logs show (null) DN; (bso#15407);
  * Spotlight sometimes returns no results on latest macOS;
    (bso#15342);
  * Renaming results in NT_STATUS_SHARING_VIOLATION if previously
    attempted to remove the destination; (bso#15417);
  * Spotlight results return wrong date in result list; (bso#15427);
  * macOS mdfind returns only 50 results; (bso#15463);
  * 2-3min delays at reconnect with smb2_validate_sequence_number:
    bad message_id 2; (bso#15346);
  * samba-tool ntacl get segfault if aio_pthread appended;
    (bso#15441);
  * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed;
    (bso#15446);
  * File doesn't show when user doesn't have permission if
    aio_pthread is loaded; (bso#15453);
  * net ads lookup (with unspecified realm) fails; (bso#15384);
    (bsc#1213826);
  * Regression DFS not working with widelinks = true; (bso#15435);
    (bsc#1213607);
  * ctdb_killtcp fails to work with --enable-pcap and libpcap 1.9.1;
    (bso#15451);
  * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449);
  * Windows client join fails if a second container CN=System exists
    somewhere; (bso#9959);
- Fix crossing automounter mount points; (bsc#1215212);</changelog>
  <changelog author="scabrero@suse.de" date="1700481600">- Add "net offlinejoin composeodj" command; (bsc#1214076);</changelog>
</package>
<package pkgid="aebd918713426bf3bd99e6f95e8034764904037cae3e88e28e397ef12e83526f" name="samba" arch="src">
  <version epoch="0" ver="4.17.12+git.455.b299ac1e60" rel="150500.3.20.1"/>
  <changelog author="dmulder@suse.com" date="1669896000">- Introduce without-smb1-server spec flag; (bsc#1205104);
- Update to 4.17.3
  * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit
    systems; (bsc#1205126); (bso#15203);
- Replace obsolete python-gpgme with python-gpg
  * Upstream replaced it in v4.9.5 -- bso#13728
- Update to 4.17.2
  * CVE-2022-3592 [SECURITY] samba: Wide links protection broken;
    (bso#15207); (bsc#1204499).
  * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal
    unwrap_des3();(bso#15134); (bsc#1204254).
- Update to 4.17.1
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * smbXsrv_connection_shutdown_send result leaked; (bso#15174).
  * Flush on a named stream never completes; (bso#15182).
  * Permission denied calling SMBC_getatr when file not exists;
    (bso#15195).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * pytest: add file removal helpers for TestCaseInTempDir;
    (bso#15191).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * Flush on a named stream never completes; (bso#15182).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * multi-channel socket passing may hit a race if one of the
    involved processes already existed; (bso#15200).
  * memory leak on temporary of struct imessaging_post_state and
    struct tevent_immediate on struct imessaging_context (in
    rpcd_spoolss and maybe others); (bso#15201).
  * Since popt1.19 various use after free errors using result of
    poptGetArg are now exposed; (bso#15205); (boo#1204279).
  * Remove special case for O_CREAT in SMB_VFS_OPENAT from
    vfs_glusterfs; (bso#15192).
  * GETPWSID in memory cache grows indefinetly with each NTLM
    auth; (bso#15169).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);
- Fix use after free errors resulting from using return of
  poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205).
- s3: smbd: Fix memory leak in
  smbd_server_connection_terminate_done(); (bso#15174).
- Disable SMB1 for tumbleweed builds.
- Update to 4.17.0
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
    (bso#15153).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * Cross-node multi-channel reconnects result in SMB2 Negotiate
    returning NT_STATUS_NOT_SUPPORTED; (bso#15159).
  * winbind at info level debug can coredump when processing
    wb_lookupusergroups; (bso#15160).
  * Make use of glfs_*at() API calls in vfs_glusterfs;
    (bso#15157).
  * Possible use after free of connection_struct when iterating
    smbd_server_connection-&gt;connections; (bso#15128).
  * `net usershare add` fails with flag works with --long but
    fails with -l; (bso#15145).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Missing READ_LEASE break could cause data corruption;
    (bso#15148).
  * libsamba-errors uses a wrong version number; (bso#15141).
  * SMB1 negotiation can fail to handle connection errors;
    (bso#15152).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * 4.17.rc1 still uses symlink-race prone unix_convert();
    (bso#15144).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Manpage for smbstatus json is missing; (bso#15147).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Fix issues found by coverity in smbstatus json code;
    (bso#15140).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Update to 4.16.4
  * CVE-2022-2031: Samba AD users can bypass certain restrictions
    associated with changing passwords; (bsc#1201495); (bso#15047);
  * CVE-2022-32744: Samba AD users can forge password change
    requests for any user; (bsc#1201493); (bso#15074);
  * CVE-2022-32745: Samba AD users can crash the server process
    with an LDAP add or modify request; (bsc#1201492); (bso#15008);
  * CVE-2022-32746: Samba AD users can induce a use-after-free in
    the server process with an LDAP add or modify request;
    (bsc#1201490); (bso#15009);
  * CVE-2022-32742: Server memory information leak via SMB1;
    (bsc#1201496); (bso#15085);
- Update to 4.16.3
  * Using vfs_streams_xattr and deleting a file causes a panic;
    (bso#15099);
  * Add support for bind 9.18; (bso#14986);
  * logging dsdb audit to specific files does not work;
    (bso#15076);
  * Problem when winbind renews Kerberos; (bso#14979);
    (bsc#1196224);
  * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in
    developer mode; (bso#15095);
  * Crash in streams_xattr because fsp-&gt;base_fsp-&gt;fsp_name is
    NULL; (bso#15105);
  * Crash in rpcd_classic - NULL pointer deference in
    mangle_is_mangled(); (bso#15118);
  * smbclient commands del &amp; deltree fail with
    NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
    (bsc#1200556);
  * Fix check for chown when processing NFSv4 ACL; (bso#15120);
  * The pcap background queue process should not be stopped;
    (bso#15082);
  * testparm: Fix typo in idmap rangesize check; (bso#15097);
  * net ads info returns LDAP server and LDAP server name as
    null; (bso#15106);
  * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;
    (bso#15108);
  * CTDB child process logging does not work as expected;
    (bso#15090);
- Update spec file to fix the optional Heimdal DC build
- Fix external trusts with MIT Kerberos 1.20
- Add missing samba-client requirement to samba-winbind package;
  (bsc#1198255);
- Move pdb backends from package samba-libs to package
  samba-client-libs and remove samba-libs requirement from
  samba-winbind; (bsc#1200964); (bsc#1198255);
- Add sysuser-shadow requirement for packages using
  systemd-sysusers
- Use the canonical realm name to refresh the Kerberos tickets;
  (bsc#1196224); (bso#14979);
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Update to 4.16.2
  * Use pathref fd instead of io fd in vfs_default_durable_cookie;
    (bso#15042);
  * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original
    file had been deleted; (bso#15069);
  * Reintroduce netgroups support; (bso#15087);
  * net ads info shows LDAP Server: 0.0.0.0 depending on contacted
    server; (bso#14674);
  * Update from 4.15  to 4.16 breaks discovery of [homes] on
    standalone server from Win and IOS; (bso#15062);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * smbclient -E doesn't work as advertised; (bso#15075);
  * The samba background daemon doesn't refresh the printcap cache
    on startup; (bso#15081);
  * Out-by-4 error in smbd read reply max_send clamp; (bso#14443);
- Fix samba4.blackbox.net_ads_dns_async test with bind9 &gt;= 9.17.7
- Support building with MIT Kerberos 1.20
- Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC;
  (CVE-2020-17049);
- Resource Based Constrained Delegation (RBCD) for Samba AD DC
- Support building with gcc 12.1
- Use requires_eq macro to require the libldb2 version available at
  samba-dsdb-modules build time; (bsc#1199362);
- Update to 4.16.1
  * Share and server swapped in smbget password prompt; (bso#14831);
  * Durable handles won't reconnect if the leased file is written to;
    (bso#15022);
  * rmdir silently fails if directory contains unreadable files and
    hide unreadable is yes; (bso#15023);
  * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information
    on renamed file handle; (bso#15038);
  * Need to describe --builtin-libraries= better (compare with
  - -bundled-libraries); (bso#8731);
  * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback;
    (bso#14957);
  * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes;
    (bso#15035);
  * PAM Kerberos authentication incorrectly fails with a clock skew
    error; (bso#15046);
  * Username map - samba erroneously applies unix group memberships
    to user account entries; (bso#15041);
  * KVNO off by 100000; (bso#14951);
  * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027);
  * vfs_gpfs recalls=no option prevents listing files; (bso#15055);
  * smbd doesn't handle UPNs for looking up names; (bso#15054);
- Update update-apparmor-samba-profile script, replace
  non-printable delimiter with more human readable separator as
  sed can accept separators that can appear in the input data.
- Fix update-apparmor-samba-profile script, sed doesn't like
  multibyte separators; (bsc#1198309).
- Update to 4.16.0
  * New samba-dcerpcd binary to provide DCERPC in the member server
    setup
  * Certificate Auto Enrollment
  * Ability to add ports to dns forwarder addresses in internal DNS
    backend
  * No longer using Linux mandatory locks for sharemodes
  * SMB1 protocol has been deprecated, particularly older dialects
  * SMB1 protocol SMBCopy command removed
  * SMB1 server-side wildcard expansion removed
- Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101);
- Use systemd-sysusers to create system users; (bsc#1182847);</changelog>
  <changelog author="scabrero@suse.de" date="1671105600">- Update to 4.17.4
  * CVE-2022-44640 Upstream Heimdal free of user-controlled
    pointer in FAST; (bsc#14929);
  * CVE-2021-20251 Bad password count not incremented atomically;
    (bsc#14611);
  * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability;
    (bsc#15203);
  * CVE-2022-37966 rc4-hmac Kerberos session keys issued to
    modern servers; (bso#15237);
  * CVE-2022-37967 Kerberos constrained delegation ticket forgery
    possible against Samba AD DC; (bso#15231);
  * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak
    and should be avoided; (bso#15240);
  * pam_winbind uses time_t and pointers assuming they are of the
    same size; (bso#15224);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * filter-subunit is inefficient with large numbers of
    knownfails; (bso#15258);
  * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories;
    (bso#15252);
  * The KDC logic arround msDs-supportedEncryptionTypes differs
    from Windows; (bso#13135);
  * libnet: change_password() doesn't work with
    dcerpc_samr_ChangePasswordUser4(); (bso#15206);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * Memory leak in snprintf replacement functions; (bso#15230);
  * RODC doesn't reset badPwdCount reliable via an RWDC
    (CVE-2021-20251 regression); (bso#15253);
  * Prevent EBADF errors with vfs_glusterfs; (bso#15198);
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243);
  * Stack smashing in net offlinejoin requestodj; (bso#15257);
  * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue;
    (bso#15197);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
- Remove deprecated if-{down,up} scripts; (bsc#1206444);
- Adjust the systemd drop-in file for named service; (bsc#1201689);
  * Paths are additive so do not repeat paths from named.service
  * Prefix the samba DLZ directory with "-" to ignore this path
    if it does not exists</changelog>
  <changelog author="nopower@suse.com" date="1671624000">- Change with_dc default to 0 (for non TW builds), ADDC feature is
  deprecated and will no longer be included in &gt;= SLE15-SP5;
  (jsc#PED-1122).</changelog>
  <changelog author="nopower@suse.com" date="1673524800">- Clean up logic for PAM migration settings in spec file.</changelog>
  <changelog author="nopower@suse.com" date="1674475200">- libdsdb-module-samba4 should be packaged as part of samba-libs and
  not samba-ad-dc-libs. Additionally no need for it to be
  removed conditionally.</changelog>
  <changelog author="nopower@suse.com" date="1674475201">- Remove non functioning ifup/ifdown samba-winbindd scripts;
  (bsc#1207414).</changelog>
  <changelog author="nopower@suse.com" date="1678363200">- Make samba-libs conflict with old samba-ad-dc-libs package
  to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1679745600">- Make (32bit) samba-libs conflict with old samba-ad-dc-libs
  package to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1681300800">- Update to 4.17.7
  * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords
    in cleartext; (bso#15315); (bsc#1209481).
  * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be
    deleted by unprivileged authenticated users; (bso#15276);
    (bsc#1209483).
  * CVE-2023-0614: samba: Access controlled AD LDAP attributes can
    be discovered; (bso#15270); (bsc#1209485).
  * large_ldap test is inefficient; (bso#15332).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
- Update to 4.17.6
  * streams_xattr is creating unexpected locks on folders;
    (bso#15314).
  * Use of the Azure AD Connect cloud sync tool is now supported
    for password hash synchronisation, allowing Samba AD Domains
    to synchronise passwords with this popular cloud environment;
    (bso#10635).
  * Spotlight doesn't work with latest macOS Ventura;
    (bso#15299).
  * New samba-dcerpc architecture does not scale gracefully;
    (bso#15310).
  * vfs_ceph incorrectly uses fsp_get_io_fd() instead of
    fsp_get_pathref_fd() in close and fstat; (bso#15307).
  * With clustering enabled samba-bgqd can core dump due to use
    after free; (bso#15293).
  * fd_load() function implicitly closes the fd where it should
    not; (bso#15311).
- Update to 4.17.5
  * smbc_getxattr() return value is incorrect; (bso#14808).
  * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not
    handled correctly; (bso#15172).
  * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210).
  * samba-tool gpo listall fails IPv6 only - finddcs() fails to
    find DC when there is only an AAAA record for the DC in DNS;
    (bso#15226).
  * smbd crashes if an FSCTL request is done on a stream handle;
    (bso#15236).
  * DFS links don't work anymore on Mac clients since 4.17;
    (bso#15277).
  * vfs_virusfilter segfault on access, directory edgecase
    (accessing NULL value); (bso#15283).
  * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5)
    based SChannel on NETLOGON (additional changes); (bso#15240).
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243).
  * Shares missing from netshareenum response in samba 4.17.4;
    (bso#15266).
  * ctdb: use-after-free in run_proc; (bso#15269).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * auth3_generate_session_info_pac leaks wbcAuthUserInfo;
    (bso#15286).
  * smbclient segfaults with use after free on an optimized
    build; (bso#15268).
  * smbstatus leaking files in msg.sock and msg.lock;
    (bso#15282).
  * Leak in wbcCtxPingDc2; (bso#15164).
  * Access based share enum does not work in Samba 4.16+;
    (bso#15265).
  * Crash during share enumeration; (bso#15267).
  * rep_listxattr on FreeBSD does not properly check for reads
    off end of returned buffer; (bso#15271).
  * Avoid relying on C89 features in a few places; (bso#15281).</changelog>
  <changelog author="nopower@suse.com" date="1686830400">- Update to 4.17.8
  * log flood: smbd_calculate_access_mask_fsp: Access denied:
    message level should be lower; (bso#15302).
  * Floating point exception (FPE) via cli_pull_send at
    source3/libsmb/clireadwrite.c; (bso#15306).
  * test_tstream_more_tcp_user_timeout_spin fails intermittently
    on Rackspace GitLab runners; (bso#15328).
  * Reduce flapping of ridalloc test; (bso#15329).
  * large_ldap test is unreliable; (bso#15351).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * mdssvc may crash when initializing; (bso#15354).
  * Large directory optimization broken for non-lcomp path
    elements; (bso#15313).
  * streams_depot fails to create streams; (bso#15357).
  * shadow_copy2 and streams_depot don't play well together;
    (bso#15358).
  * wbinfo -u fails on ad dc with &gt;1000 users; (bso#15366).
  * winbindd idmap child contacts the domain controller without a
    need; (bso#15317).
  * idmap_autorid may fail to map sids of trusted domains for the
    first time; (bso#15318).
  * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings;
    (bso#15319).
  * net ads search -P doesn't work against servers in other
    domains; (bso#15323).
  * DS ACEs might be inherited to unrelated object classes;
    (bso#15338).
  * Temporary smbXsrv_tcon_global.tdb can't be parsed;
    (bso#15353).
  * Setting veto files = /.*/ break listing directories;
    (bso#15360); (bsc#1212375).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
  * dsgetdcname: assumes local system uses IPv4; (bso#15325).</changelog>
  <changelog author="nopower@suse.com" date="1688644800">- Update to 4.17.9
  * Backport --pidl-developer fixes; (bso#15404).
  * smbd_scavenger crashes when service smbd is stopped;
    (bso#15275).
  * vfs_fruit might cause a failing open for delete; (bso#15378).
  * named crashes on DLZ zone update; (bso#14030).
  * winbind recurses into itself via rpcd_lsad; (bso#15361).
  * cli_list loops 100% CPU against pre-lanman2 servers;
    (bso#15382).
  * smbclient leaks fds with showacls; (bso#15391).
  * aes256 smb3 encryption algorithms are not allowed in
    smb3_sid_parse(); (bso#15374).
  * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR;
    (bso#15413).
  * smbget memory leak if failed to download files recursively;
    (bso#15403).</changelog>
  <changelog author="nopower@suse.com" date="1689249600">- CVE-2022-2127: lm_resp_len not checked properly in
  winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174).
- CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite
  Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173).
- CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type
  Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172).
- CVE-2023-34968: Spotlight server-side Share Path Disclosure;
  (bso#15388); (bsc#1213171).
- CVE-2023-3347: Samba doesn't require SMB2+ signing if
  `server signing = mandatory` is set; (bso#15397); (bsc#1213170).</changelog>
  <changelog author="nopower@suse.com" date="1689595200">- secure channel faulty since Windows 10/11 update 07/2023;
  (bso#15418); (bsc#1213384).</changelog>
  <changelog author="scabrero@suse.de" date="1690891200">- net ads lookup with unspecified realm fails; (bso#15384);
  (bsc#1213826);</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Move libcluster-samba4.so from samba-libs to samba-client-libs;
  (bsc#1213940);</changelog>
  <changelog author="scabrero@suse.de" date="1692014400">- Fix DFS not working with widelinks enabled; (bsc#1213607);
  (bso#15435);</changelog>
  <changelog author="nopower@suse.com" date="1696420800">- CVE-2023-4091: samba: Client can truncate file with read-only
  permissions; (bsc#1215904); (bso#15439).
- CVE-2023-42669: samba: rpcecho, enabled and running in AD DC,
  allows blocking sleep on request; (bso#1215905); (bso#15474).
- CVE-2023-42670: samba:  The procedure number is out of range
  when starting Active Directory Users and Computers;
  (bsc#1215906); (bso#15473).
- CVE-2023-3961: samba: Unsanitized client pipe name passed to
  local_np_connect(); (bsc#1215907); (bso#15422).
- CVE-2023-4154: samba: dirsync allows SYSTEM access with only
  "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES;
  (bsc#1215908); (bso#15424).</changelog>
  <changelog author="scabrero@suse.de" date="1698062400">- Update to samba 4.17.12
  * Weird filename can cause assert to fail in
    openat_pathref_fsp_nosymlink(); (bso#15419);
  * reply_sesssetup_and_X() can dereference uninitialized tmp
    pointer; (bso#15420);
  * Missing return in reply_exit_done(); (bso#15430);
  * TREE_CONNECT without SETUP causes smbd to use uninitialized
    pointer; (bso#15432);
  * Improve GetNChanges to address some (but not all "Azure AD
    Connect") syncronisation tool looping during the initial user
    sync phase; (bso#15401);
  * Samba replication logs show (null) DN; (bso#15407);
  * Spotlight sometimes returns no results on latest macOS;
    (bso#15342);
  * Renaming results in NT_STATUS_SHARING_VIOLATION if previously
    attempted to remove the destination; (bso#15417);
  * Spotlight results return wrong date in result list; (bso#15427);
  * macOS mdfind returns only 50 results; (bso#15463);
  * 2-3min delays at reconnect with smb2_validate_sequence_number:
    bad message_id 2; (bso#15346);
  * samba-tool ntacl get segfault if aio_pthread appended;
    (bso#15441);
  * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed;
    (bso#15446);
  * File doesn't show when user doesn't have permission if
    aio_pthread is loaded; (bso#15453);
  * net ads lookup (with unspecified realm) fails; (bso#15384);
    (bsc#1213826);
  * Regression DFS not working with widelinks = true; (bso#15435);
    (bsc#1213607);
  * ctdb_killtcp fails to work with --enable-pcap and libpcap 1.9.1;
    (bso#15451);
  * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449);
  * Windows client join fails if a second container CN=System exists
    somewhere; (bso#9959);
- Fix crossing automounter mount points; (bsc#1215212);</changelog>
  <changelog author="scabrero@suse.de" date="1700481600">- Add "net offlinejoin composeodj" command; (bsc#1214076);</changelog>
  <changelog author="scabrero@suse.de" date="1702555200">- Add new idmap_nss option 'use_upn' for those NSS modules able to
  handle UPNs or DOMAIN/user name format; (bsc#1215369);
- Avoid unnecessary locking in idmap parent setup; (bsc#1215369);</changelog>
</package>
<package pkgid="ffc7960a76869ce8825f6df8c164f06933ad4813b4aa89de474b0a8d0e49a58b" name="samba" arch="src">
  <version epoch="0" ver="4.17.9+git.421.abde31ca5c2" rel="150500.3.11.1"/>
  <changelog author="nopower@suse.com" date="1664452800">- Update to 4.15.10
  * Possible use after free of connection_struct when iterating
    smbd_server_connection-&gt;connections; (bso#15128);
    (bsc#1200102).
  * smbXsrv_connection_shutdown_send result leaked; (bso#15174).
  * Spotlight RPC service returns wrong response when Spotlight
    is disabled on a share; (bso#15086).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
    (bso#15153).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * Missing READ_LEASE break could cause data corruption;
    (bso#15148).
  * rpcclient can crash using setuserinfo(2); (bso#15124).
  * Samba fails to build with glibc 2.36 caused by including
    &lt;sys/mount.h&gt; in libreplace; (bso#15132).
  * SMB1 negotiation can fail to handle connection errors;
    (bso#15152).
  * samba-tool domain join segfault when joining a samba ad
    domain; (bso#15078).
- Update to 4.15.9
  * CVE-2022-32742:SMB1 code does not correct verify SMB1write,
    SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085);
    (bsc#1201496).
  * CVE-2022-32746: samba: Use-after-free occurring in database
    audit logging; (bso#15009); (bso#15096); (bsc#1201490).
  * CVE-2022-2031: samba, ldb: AD users can bypass certain
    restrictions associated with changing passwords; (bso#15047);
    (bsc#1201495);
  * CVE-2022-32745: samba: ldb: AD users can crash the server
    process with an LDAP add or modify request; (bso#15008);
    (bso#15096); (bsc#1201492).
  * CVE-2022-2031: samba, ldb: AD users can bypass certain
    restrictions associated with changing passwords; (bso#15047);
    (bsc#1201495);
  * CVE-2022-32744: samba, ldb: AD users can forge password change
    requests for any user; (bso#15074); (bso#15047); (bsc#1201493).</changelog>
  <changelog author="nopower@suse.com" date="1668600000">- Update to 4.15.12
  * CVE-2022-42898: samba: heimdal: Samba buffer overflow
    vulnerabilities on 32-bit systems; (bso#15203); (bsc#1205126).
- Update to 4.15.11
  * Allow rebuild of Centos 8 images after move to vault for
    Samba 4.15; (bso#15193).
  * CVE-2022-3437: samba: Buffer overflow in Heimdal unwrap_des3();
    (bso#15134); (bsc#1204254)</changelog>
  <changelog author="scabrero@suse.de" date="1669636800">- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);</changelog>
  <changelog author="dmulder@suse.com" date="1669896000">- Introduce without-smb1-server spec flag; (bsc#1205104);
- Update to 4.17.3
  * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit
    systems; (bsc#1205126); (bso#15203);
- Replace obsolete python-gpgme with python-gpg
  * Upstream replaced it in v4.9.5 -- bso#13728
- Update to 4.17.2
  * CVE-2022-3592 [SECURITY] samba: Wide links protection broken;
    (bso#15207); (bsc#1204499).
  * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal
    unwrap_des3();(bso#15134); (bsc#1204254).
- Update to 4.17.1
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * smbXsrv_connection_shutdown_send result leaked; (bso#15174).
  * Flush on a named stream never completes; (bso#15182).
  * Permission denied calling SMBC_getatr when file not exists;
    (bso#15195).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * pytest: add file removal helpers for TestCaseInTempDir;
    (bso#15191).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * Flush on a named stream never completes; (bso#15182).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * multi-channel socket passing may hit a race if one of the
    involved processes already existed; (bso#15200).
  * memory leak on temporary of struct imessaging_post_state and
    struct tevent_immediate on struct imessaging_context (in
    rpcd_spoolss and maybe others); (bso#15201).
  * Since popt1.19 various use after free errors using result of
    poptGetArg are now exposed; (bso#15205); (boo#1204279).
  * Remove special case for O_CREAT in SMB_VFS_OPENAT from
    vfs_glusterfs; (bso#15192).
  * GETPWSID in memory cache grows indefinetly with each NTLM
    auth; (bso#15169).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);
- Fix use after free errors resulting from using return of
  poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205).
- s3: smbd: Fix memory leak in
  smbd_server_connection_terminate_done(); (bso#15174).
- Disable SMB1 for tumbleweed builds.
- Update to 4.17.0
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
    (bso#15153).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * Cross-node multi-channel reconnects result in SMB2 Negotiate
    returning NT_STATUS_NOT_SUPPORTED; (bso#15159).
  * winbind at info level debug can coredump when processing
    wb_lookupusergroups; (bso#15160).
  * Make use of glfs_*at() API calls in vfs_glusterfs;
    (bso#15157).
  * Possible use after free of connection_struct when iterating
    smbd_server_connection-&gt;connections; (bso#15128).
  * `net usershare add` fails with flag works with --long but
    fails with -l; (bso#15145).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Missing READ_LEASE break could cause data corruption;
    (bso#15148).
  * libsamba-errors uses a wrong version number; (bso#15141).
  * SMB1 negotiation can fail to handle connection errors;
    (bso#15152).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * 4.17.rc1 still uses symlink-race prone unix_convert();
    (bso#15144).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Manpage for smbstatus json is missing; (bso#15147).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Fix issues found by coverity in smbstatus json code;
    (bso#15140).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Update to 4.16.4
  * CVE-2022-2031: Samba AD users can bypass certain restrictions
    associated with changing passwords; (bsc#1201495); (bso#15047);
  * CVE-2022-32744: Samba AD users can forge password change
    requests for any user; (bsc#1201493); (bso#15074);
  * CVE-2022-32745: Samba AD users can crash the server process
    with an LDAP add or modify request; (bsc#1201492); (bso#15008);
  * CVE-2022-32746: Samba AD users can induce a use-after-free in
    the server process with an LDAP add or modify request;
    (bsc#1201490); (bso#15009);
  * CVE-2022-32742: Server memory information leak via SMB1;
    (bsc#1201496); (bso#15085);
- Update to 4.16.3
  * Using vfs_streams_xattr and deleting a file causes a panic;
    (bso#15099);
  * Add support for bind 9.18; (bso#14986);
  * logging dsdb audit to specific files does not work;
    (bso#15076);
  * Problem when winbind renews Kerberos; (bso#14979);
    (bsc#1196224);
  * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in
    developer mode; (bso#15095);
  * Crash in streams_xattr because fsp-&gt;base_fsp-&gt;fsp_name is
    NULL; (bso#15105);
  * Crash in rpcd_classic - NULL pointer deference in
    mangle_is_mangled(); (bso#15118);
  * smbclient commands del &amp; deltree fail with
    NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
    (bsc#1200556);
  * Fix check for chown when processing NFSv4 ACL; (bso#15120);
  * The pcap background queue process should not be stopped;
    (bso#15082);
  * testparm: Fix typo in idmap rangesize check; (bso#15097);
  * net ads info returns LDAP server and LDAP server name as
    null; (bso#15106);
  * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;
    (bso#15108);
  * CTDB child process logging does not work as expected;
    (bso#15090);
- Update spec file to fix the optional Heimdal DC build
- Fix external trusts with MIT Kerberos 1.20
- Add missing samba-client requirement to samba-winbind package;
  (bsc#1198255);
- Move pdb backends from package samba-libs to package
  samba-client-libs and remove samba-libs requirement from
  samba-winbind; (bsc#1200964); (bsc#1198255);
- Add sysuser-shadow requirement for packages using
  systemd-sysusers
- Use the canonical realm name to refresh the Kerberos tickets;
  (bsc#1196224); (bso#14979);
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Update to 4.16.2
  * Use pathref fd instead of io fd in vfs_default_durable_cookie;
    (bso#15042);
  * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original
    file had been deleted; (bso#15069);
  * Reintroduce netgroups support; (bso#15087);
  * net ads info shows LDAP Server: 0.0.0.0 depending on contacted
    server; (bso#14674);
  * Update from 4.15  to 4.16 breaks discovery of [homes] on
    standalone server from Win and IOS; (bso#15062);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * smbclient -E doesn't work as advertised; (bso#15075);
  * The samba background daemon doesn't refresh the printcap cache
    on startup; (bso#15081);
  * Out-by-4 error in smbd read reply max_send clamp; (bso#14443);
- Fix samba4.blackbox.net_ads_dns_async test with bind9 &gt;= 9.17.7
- Support building with MIT Kerberos 1.20
- Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC;
  (CVE-2020-17049);
- Resource Based Constrained Delegation (RBCD) for Samba AD DC
- Support building with gcc 12.1
- Use requires_eq macro to require the libldb2 version available at
  samba-dsdb-modules build time; (bsc#1199362);
- Update to 4.16.1
  * Share and server swapped in smbget password prompt; (bso#14831);
  * Durable handles won't reconnect if the leased file is written to;
    (bso#15022);
  * rmdir silently fails if directory contains unreadable files and
    hide unreadable is yes; (bso#15023);
  * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information
    on renamed file handle; (bso#15038);
  * Need to describe --builtin-libraries= better (compare with
  - -bundled-libraries); (bso#8731);
  * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback;
    (bso#14957);
  * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes;
    (bso#15035);
  * PAM Kerberos authentication incorrectly fails with a clock skew
    error; (bso#15046);
  * Username map - samba erroneously applies unix group memberships
    to user account entries; (bso#15041);
  * KVNO off by 100000; (bso#14951);
  * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027);
  * vfs_gpfs recalls=no option prevents listing files; (bso#15055);
  * smbd doesn't handle UPNs for looking up names; (bso#15054);
- Update update-apparmor-samba-profile script, replace
  non-printable delimiter with more human readable separator as
  sed can accept separators that can appear in the input data.
- Fix update-apparmor-samba-profile script, sed doesn't like
  multibyte separators; (bsc#1198309).
- Update to 4.16.0
  * New samba-dcerpcd binary to provide DCERPC in the member server
    setup
  * Certificate Auto Enrollment
  * Ability to add ports to dns forwarder addresses in internal DNS
    backend
  * No longer using Linux mandatory locks for sharemodes
  * SMB1 protocol has been deprecated, particularly older dialects
  * SMB1 protocol SMBCopy command removed
  * SMB1 server-side wildcard expansion removed
- Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101);
- Use systemd-sysusers to create system users; (bsc#1182847);</changelog>
  <changelog author="scabrero@suse.de" date="1671105600">- Update to 4.17.4
  * CVE-2022-44640 Upstream Heimdal free of user-controlled
    pointer in FAST; (bsc#14929);
  * CVE-2021-20251 Bad password count not incremented atomically;
    (bsc#14611);
  * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability;
    (bsc#15203);
  * CVE-2022-37966 rc4-hmac Kerberos session keys issued to
    modern servers; (bso#15237);
  * CVE-2022-37967 Kerberos constrained delegation ticket forgery
    possible against Samba AD DC; (bso#15231);
  * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak
    and should be avoided; (bso#15240);
  * pam_winbind uses time_t and pointers assuming they are of the
    same size; (bso#15224);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * filter-subunit is inefficient with large numbers of
    knownfails; (bso#15258);
  * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories;
    (bso#15252);
  * The KDC logic arround msDs-supportedEncryptionTypes differs
    from Windows; (bso#13135);
  * libnet: change_password() doesn't work with
    dcerpc_samr_ChangePasswordUser4(); (bso#15206);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * Memory leak in snprintf replacement functions; (bso#15230);
  * RODC doesn't reset badPwdCount reliable via an RWDC
    (CVE-2021-20251 regression); (bso#15253);
  * Prevent EBADF errors with vfs_glusterfs; (bso#15198);
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243);
  * Stack smashing in net offlinejoin requestodj; (bso#15257);
  * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue;
    (bso#15197);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
- Remove deprecated if-{down,up} scripts; (bsc#1206444);
- Adjust the systemd drop-in file for named service; (bsc#1201689);
  * Paths are additive so do not repeat paths from named.service
  * Prefix the samba DLZ directory with "-" to ignore this path
    if it does not exists</changelog>
  <changelog author="nopower@suse.com" date="1671624000">- Change with_dc default to 0 (for non TW builds), ADDC feature is
  deprecated and will no longer be included in &gt;= SLE15-SP5;
  (jsc#PED-1122).</changelog>
  <changelog author="nopower@suse.com" date="1673524800">- Clean up logic for PAM migration settings in spec file.</changelog>
  <changelog author="nopower@suse.com" date="1674475200">- libdsdb-module-samba4 should be packaged as part of samba-libs and
  not samba-ad-dc-libs. Additionally no need for it to be
  removed conditionally.</changelog>
  <changelog author="nopower@suse.com" date="1674475201">- Remove non functioning ifup/ifdown samba-winbindd scripts;
  (bsc#1207414).</changelog>
  <changelog author="nopower@suse.com" date="1678363200">- Make samba-libs conflict with old samba-ad-dc-libs package
  to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1679745600">- Make (32bit) samba-libs conflict with old samba-ad-dc-libs
  package to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1681300800">- Update to 4.17.7
  * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords
    in cleartext; (bso#15315); (bsc#1209481).
  * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be
    deleted by unprivileged authenticated users; (bso#15276);
    (bsc#1209483).
  * CVE-2023-0614: samba: Access controlled AD LDAP attributes can
    be discovered; (bso#15270); (bsc#1209485).
  * large_ldap test is inefficient; (bso#15332).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
- Update to 4.17.6
  * streams_xattr is creating unexpected locks on folders;
    (bso#15314).
  * Use of the Azure AD Connect cloud sync tool is now supported
    for password hash synchronisation, allowing Samba AD Domains
    to synchronise passwords with this popular cloud environment;
    (bso#10635).
  * Spotlight doesn't work with latest macOS Ventura;
    (bso#15299).
  * New samba-dcerpc architecture does not scale gracefully;
    (bso#15310).
  * vfs_ceph incorrectly uses fsp_get_io_fd() instead of
    fsp_get_pathref_fd() in close and fstat; (bso#15307).
  * With clustering enabled samba-bgqd can core dump due to use
    after free; (bso#15293).
  * fd_load() function implicitly closes the fd where it should
    not; (bso#15311).
- Update to 4.17.5
  * smbc_getxattr() return value is incorrect; (bso#14808).
  * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not
    handled correctly; (bso#15172).
  * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210).
  * samba-tool gpo listall fails IPv6 only - finddcs() fails to
    find DC when there is only an AAAA record for the DC in DNS;
    (bso#15226).
  * smbd crashes if an FSCTL request is done on a stream handle;
    (bso#15236).
  * DFS links don't work anymore on Mac clients since 4.17;
    (bso#15277).
  * vfs_virusfilter segfault on access, directory edgecase
    (accessing NULL value); (bso#15283).
  * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5)
    based SChannel on NETLOGON (additional changes); (bso#15240).
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243).
  * Shares missing from netshareenum response in samba 4.17.4;
    (bso#15266).
  * ctdb: use-after-free in run_proc; (bso#15269).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * auth3_generate_session_info_pac leaks wbcAuthUserInfo;
    (bso#15286).
  * smbclient segfaults with use after free on an optimized
    build; (bso#15268).
  * smbstatus leaking files in msg.sock and msg.lock;
    (bso#15282).
  * Leak in wbcCtxPingDc2; (bso#15164).
  * Access based share enum does not work in Samba 4.16+;
    (bso#15265).
  * Crash during share enumeration; (bso#15267).
  * rep_listxattr on FreeBSD does not properly check for reads
    off end of returned buffer; (bso#15271).
  * Avoid relying on C89 features in a few places; (bso#15281).</changelog>
  <changelog author="nopower@suse.com" date="1686830400">- Update to 4.17.8
  * log flood: smbd_calculate_access_mask_fsp: Access denied:
    message level should be lower; (bso#15302).
  * Floating point exception (FPE) via cli_pull_send at
    source3/libsmb/clireadwrite.c; (bso#15306).
  * test_tstream_more_tcp_user_timeout_spin fails intermittently
    on Rackspace GitLab runners; (bso#15328).
  * Reduce flapping of ridalloc test; (bso#15329).
  * large_ldap test is unreliable; (bso#15351).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * mdssvc may crash when initializing; (bso#15354).
  * Large directory optimization broken for non-lcomp path
    elements; (bso#15313).
  * streams_depot fails to create streams; (bso#15357).
  * shadow_copy2 and streams_depot don't play well together;
    (bso#15358).
  * wbinfo -u fails on ad dc with &gt;1000 users; (bso#15366).
  * winbindd idmap child contacts the domain controller without a
    need; (bso#15317).
  * idmap_autorid may fail to map sids of trusted domains for the
    first time; (bso#15318).
  * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings;
    (bso#15319).
  * net ads search -P doesn't work against servers in other
    domains; (bso#15323).
  * DS ACEs might be inherited to unrelated object classes;
    (bso#15338).
  * Temporary smbXsrv_tcon_global.tdb can't be parsed;
    (bso#15353).
  * Setting veto files = /.*/ break listing directories;
    (bso#15360); (bsc#1212375).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
  * dsgetdcname: assumes local system uses IPv4; (bso#15325).</changelog>
  <changelog author="nopower@suse.com" date="1688644800">- Update to 4.17.9
  * Backport --pidl-developer fixes; (bso#15404).
  * smbd_scavenger crashes when service smbd is stopped;
    (bso#15275).
  * vfs_fruit might cause a failing open for delete; (bso#15378).
  * named crashes on DLZ zone update; (bso#14030).
  * winbind recurses into itself via rpcd_lsad; (bso#15361).
  * cli_list loops 100% CPU against pre-lanman2 servers;
    (bso#15382).
  * smbclient leaks fds with showacls; (bso#15391).
  * aes256 smb3 encryption algorithms are not allowed in
    smb3_sid_parse(); (bso#15374).
  * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR;
    (bso#15413).
  * smbget memory leak if failed to download files recursively;
    (bso#15403).</changelog>
  <changelog author="nopower@suse.com" date="1689249600">- CVE-2022-2127: lm_resp_len not checked properly in
  winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174).
- CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite
  Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173).
- CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type
  Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172).
- CVE-2023-34968: Spotlight server-side Share Path Disclosure;
  (bso#15388); (bsc#1213171).
- CVE-2023-3347: Samba doesn't require SMB2+ signing if
  `server signing = mandatory` is set; (bso#15397); (bsc#1213170).</changelog>
  <changelog author="nopower@suse.com" date="1689595200">- secure channel faulty since Windows 10/11 update 07/2023;
  (bso#15418); (bsc#1213384).</changelog>
  <changelog author="scabrero@suse.de" date="1690891200">- net ads lookup with unspecified realm fails; (bso#15384);
  (bsc#1213826);</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Move libcluster-samba4.so from samba-libs to samba-client-libs;
  (bsc#1213940);</changelog>
  <changelog author="scabrero@suse.de" date="1692014400">- Fix DFS not working with widelinks enabled; (bsc#1213607);
  (bso#15435);</changelog>
  <changelog author="nopower@suse.com" date="1696420800">- CVE-2023-4091: samba: Client can truncate file with read-only
  permissions; (bsc#1215904); (bso#15439).
- CVE-2023-42669: samba: rpcecho, enabled and running in AD DC,
  allows blocking sleep on request; (bso#1215905); (bso#15474).
- CVE-2023-42670: samba:  The procedure number is out of range
  when starting Active Directory Users and Computers;
  (bsc#1215906); (bso#15473).
- CVE-2023-3961: samba: Unsanitized client pipe name passed to
  local_np_connect(); (bsc#1215907); (bso#15422).
- CVE-2023-4154: samba: dirsync allows SYSTEM access with only
  "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES;
  (bsc#1215908); (bso#15424).</changelog>
</package>
<package pkgid="610b67d58f3bc8b6e9473a17a49271a689abcdc4bcdc45bc6b275ed17d01b7cc" name="samba-client-libs" arch="aarch64">
  <version epoch="0" ver="4.17.12+git.427.2619dc0bed" rel="150500.3.14.1"/>
  <changelog author="nopower@suse.com" date="1668600000">- Update to 4.15.12
  * CVE-2022-42898: samba: heimdal: Samba buffer overflow
    vulnerabilities on 32-bit systems; (bso#15203); (bsc#1205126).
- Update to 4.15.11
  * Allow rebuild of Centos 8 images after move to vault for
    Samba 4.15; (bso#15193).
  * CVE-2022-3437: samba: Buffer overflow in Heimdal unwrap_des3();
    (bso#15134); (bsc#1204254)</changelog>
  <changelog author="scabrero@suse.de" date="1669636800">- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);</changelog>
  <changelog author="dmulder@suse.com" date="1669896000">- Introduce without-smb1-server spec flag; (bsc#1205104);
- Update to 4.17.3
  * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit
    systems; (bsc#1205126); (bso#15203);
- Replace obsolete python-gpgme with python-gpg
  * Upstream replaced it in v4.9.5 -- bso#13728
- Update to 4.17.2
  * CVE-2022-3592 [SECURITY] samba: Wide links protection broken;
    (bso#15207); (bsc#1204499).
  * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal
    unwrap_des3();(bso#15134); (bsc#1204254).
- Update to 4.17.1
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * smbXsrv_connection_shutdown_send result leaked; (bso#15174).
  * Flush on a named stream never completes; (bso#15182).
  * Permission denied calling SMBC_getatr when file not exists;
    (bso#15195).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * pytest: add file removal helpers for TestCaseInTempDir;
    (bso#15191).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * Flush on a named stream never completes; (bso#15182).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * multi-channel socket passing may hit a race if one of the
    involved processes already existed; (bso#15200).
  * memory leak on temporary of struct imessaging_post_state and
    struct tevent_immediate on struct imessaging_context (in
    rpcd_spoolss and maybe others); (bso#15201).
  * Since popt1.19 various use after free errors using result of
    poptGetArg are now exposed; (bso#15205); (boo#1204279).
  * Remove special case for O_CREAT in SMB_VFS_OPENAT from
    vfs_glusterfs; (bso#15192).
  * GETPWSID in memory cache grows indefinetly with each NTLM
    auth; (bso#15169).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);
- Fix use after free errors resulting from using return of
  poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205).
- s3: smbd: Fix memory leak in
  smbd_server_connection_terminate_done(); (bso#15174).
- Disable SMB1 for tumbleweed builds.
- Update to 4.17.0
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
    (bso#15153).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * Cross-node multi-channel reconnects result in SMB2 Negotiate
    returning NT_STATUS_NOT_SUPPORTED; (bso#15159).
  * winbind at info level debug can coredump when processing
    wb_lookupusergroups; (bso#15160).
  * Make use of glfs_*at() API calls in vfs_glusterfs;
    (bso#15157).
  * Possible use after free of connection_struct when iterating
    smbd_server_connection-&gt;connections; (bso#15128).
  * `net usershare add` fails with flag works with --long but
    fails with -l; (bso#15145).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Missing READ_LEASE break could cause data corruption;
    (bso#15148).
  * libsamba-errors uses a wrong version number; (bso#15141).
  * SMB1 negotiation can fail to handle connection errors;
    (bso#15152).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * 4.17.rc1 still uses symlink-race prone unix_convert();
    (bso#15144).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Manpage for smbstatus json is missing; (bso#15147).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Fix issues found by coverity in smbstatus json code;
    (bso#15140).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Update to 4.16.4
  * CVE-2022-2031: Samba AD users can bypass certain restrictions
    associated with changing passwords; (bsc#1201495); (bso#15047);
  * CVE-2022-32744: Samba AD users can forge password change
    requests for any user; (bsc#1201493); (bso#15074);
  * CVE-2022-32745: Samba AD users can crash the server process
    with an LDAP add or modify request; (bsc#1201492); (bso#15008);
  * CVE-2022-32746: Samba AD users can induce a use-after-free in
    the server process with an LDAP add or modify request;
    (bsc#1201490); (bso#15009);
  * CVE-2022-32742: Server memory information leak via SMB1;
    (bsc#1201496); (bso#15085);
- Update to 4.16.3
  * Using vfs_streams_xattr and deleting a file causes a panic;
    (bso#15099);
  * Add support for bind 9.18; (bso#14986);
  * logging dsdb audit to specific files does not work;
    (bso#15076);
  * Problem when winbind renews Kerberos; (bso#14979);
    (bsc#1196224);
  * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in
    developer mode; (bso#15095);
  * Crash in streams_xattr because fsp-&gt;base_fsp-&gt;fsp_name is
    NULL; (bso#15105);
  * Crash in rpcd_classic - NULL pointer deference in
    mangle_is_mangled(); (bso#15118);
  * smbclient commands del &amp; deltree fail with
    NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
    (bsc#1200556);
  * Fix check for chown when processing NFSv4 ACL; (bso#15120);
  * The pcap background queue process should not be stopped;
    (bso#15082);
  * testparm: Fix typo in idmap rangesize check; (bso#15097);
  * net ads info returns LDAP server and LDAP server name as
    null; (bso#15106);
  * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;
    (bso#15108);
  * CTDB child process logging does not work as expected;
    (bso#15090);
- Update spec file to fix the optional Heimdal DC build
- Fix external trusts with MIT Kerberos 1.20
- Add missing samba-client requirement to samba-winbind package;
  (bsc#1198255);
- Move pdb backends from package samba-libs to package
  samba-client-libs and remove samba-libs requirement from
  samba-winbind; (bsc#1200964); (bsc#1198255);
- Add sysuser-shadow requirement for packages using
  systemd-sysusers
- Use the canonical realm name to refresh the Kerberos tickets;
  (bsc#1196224); (bso#14979);
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Update to 4.16.2
  * Use pathref fd instead of io fd in vfs_default_durable_cookie;
    (bso#15042);
  * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original
    file had been deleted; (bso#15069);
  * Reintroduce netgroups support; (bso#15087);
  * net ads info shows LDAP Server: 0.0.0.0 depending on contacted
    server; (bso#14674);
  * Update from 4.15  to 4.16 breaks discovery of [homes] on
    standalone server from Win and IOS; (bso#15062);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * smbclient -E doesn't work as advertised; (bso#15075);
  * The samba background daemon doesn't refresh the printcap cache
    on startup; (bso#15081);
  * Out-by-4 error in smbd read reply max_send clamp; (bso#14443);
- Fix samba4.blackbox.net_ads_dns_async test with bind9 &gt;= 9.17.7
- Support building with MIT Kerberos 1.20
- Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC;
  (CVE-2020-17049);
- Resource Based Constrained Delegation (RBCD) for Samba AD DC
- Support building with gcc 12.1
- Use requires_eq macro to require the libldb2 version available at
  samba-dsdb-modules build time; (bsc#1199362);
- Update to 4.16.1
  * Share and server swapped in smbget password prompt; (bso#14831);
  * Durable handles won't reconnect if the leased file is written to;
    (bso#15022);
  * rmdir silently fails if directory contains unreadable files and
    hide unreadable is yes; (bso#15023);
  * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information
    on renamed file handle; (bso#15038);
  * Need to describe --builtin-libraries= better (compare with
  - -bundled-libraries); (bso#8731);
  * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback;
    (bso#14957);
  * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes;
    (bso#15035);
  * PAM Kerberos authentication incorrectly fails with a clock skew
    error; (bso#15046);
  * Username map - samba erroneously applies unix group memberships
    to user account entries; (bso#15041);
  * KVNO off by 100000; (bso#14951);
  * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027);
  * vfs_gpfs recalls=no option prevents listing files; (bso#15055);
  * smbd doesn't handle UPNs for looking up names; (bso#15054);
- Update update-apparmor-samba-profile script, replace
  non-printable delimiter with more human readable separator as
  sed can accept separators that can appear in the input data.
- Fix update-apparmor-samba-profile script, sed doesn't like
  multibyte separators; (bsc#1198309).
- Update to 4.16.0
  * New samba-dcerpcd binary to provide DCERPC in the member server
    setup
  * Certificate Auto Enrollment
  * Ability to add ports to dns forwarder addresses in internal DNS
    backend
  * No longer using Linux mandatory locks for sharemodes
  * SMB1 protocol has been deprecated, particularly older dialects
  * SMB1 protocol SMBCopy command removed
  * SMB1 server-side wildcard expansion removed
- Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101);
- Use systemd-sysusers to create system users; (bsc#1182847);</changelog>
  <changelog author="scabrero@suse.de" date="1671105600">- Update to 4.17.4
  * CVE-2022-44640 Upstream Heimdal free of user-controlled
    pointer in FAST; (bsc#14929);
  * CVE-2021-20251 Bad password count not incremented atomically;
    (bsc#14611);
  * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability;
    (bsc#15203);
  * CVE-2022-37966 rc4-hmac Kerberos session keys issued to
    modern servers; (bso#15237);
  * CVE-2022-37967 Kerberos constrained delegation ticket forgery
    possible against Samba AD DC; (bso#15231);
  * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak
    and should be avoided; (bso#15240);
  * pam_winbind uses time_t and pointers assuming they are of the
    same size; (bso#15224);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * filter-subunit is inefficient with large numbers of
    knownfails; (bso#15258);
  * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories;
    (bso#15252);
  * The KDC logic arround msDs-supportedEncryptionTypes differs
    from Windows; (bso#13135);
  * libnet: change_password() doesn't work with
    dcerpc_samr_ChangePasswordUser4(); (bso#15206);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * Memory leak in snprintf replacement functions; (bso#15230);
  * RODC doesn't reset badPwdCount reliable via an RWDC
    (CVE-2021-20251 regression); (bso#15253);
  * Prevent EBADF errors with vfs_glusterfs; (bso#15198);
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243);
  * Stack smashing in net offlinejoin requestodj; (bso#15257);
  * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue;
    (bso#15197);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
- Remove deprecated if-{down,up} scripts; (bsc#1206444);
- Adjust the systemd drop-in file for named service; (bsc#1201689);
  * Paths are additive so do not repeat paths from named.service
  * Prefix the samba DLZ directory with "-" to ignore this path
    if it does not exists</changelog>
  <changelog author="nopower@suse.com" date="1671624000">- Change with_dc default to 0 (for non TW builds), ADDC feature is
  deprecated and will no longer be included in &gt;= SLE15-SP5;
  (jsc#PED-1122).</changelog>
  <changelog author="nopower@suse.com" date="1673524800">- Clean up logic for PAM migration settings in spec file.</changelog>
  <changelog author="nopower@suse.com" date="1674475200">- libdsdb-module-samba4 should be packaged as part of samba-libs and
  not samba-ad-dc-libs. Additionally no need for it to be
  removed conditionally.</changelog>
  <changelog author="nopower@suse.com" date="1674475201">- Remove non functioning ifup/ifdown samba-winbindd scripts;
  (bsc#1207414).</changelog>
  <changelog author="nopower@suse.com" date="1678363200">- Make samba-libs conflict with old samba-ad-dc-libs package
  to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1679745600">- Make (32bit) samba-libs conflict with old samba-ad-dc-libs
  package to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1681300800">- Update to 4.17.7
  * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords
    in cleartext; (bso#15315); (bsc#1209481).
  * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be
    deleted by unprivileged authenticated users; (bso#15276);
    (bsc#1209483).
  * CVE-2023-0614: samba: Access controlled AD LDAP attributes can
    be discovered; (bso#15270); (bsc#1209485).
  * large_ldap test is inefficient; (bso#15332).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
- Update to 4.17.6
  * streams_xattr is creating unexpected locks on folders;
    (bso#15314).
  * Use of the Azure AD Connect cloud sync tool is now supported
    for password hash synchronisation, allowing Samba AD Domains
    to synchronise passwords with this popular cloud environment;
    (bso#10635).
  * Spotlight doesn't work with latest macOS Ventura;
    (bso#15299).
  * New samba-dcerpc architecture does not scale gracefully;
    (bso#15310).
  * vfs_ceph incorrectly uses fsp_get_io_fd() instead of
    fsp_get_pathref_fd() in close and fstat; (bso#15307).
  * With clustering enabled samba-bgqd can core dump due to use
    after free; (bso#15293).
  * fd_load() function implicitly closes the fd where it should
    not; (bso#15311).
- Update to 4.17.5
  * smbc_getxattr() return value is incorrect; (bso#14808).
  * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not
    handled correctly; (bso#15172).
  * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210).
  * samba-tool gpo listall fails IPv6 only - finddcs() fails to
    find DC when there is only an AAAA record for the DC in DNS;
    (bso#15226).
  * smbd crashes if an FSCTL request is done on a stream handle;
    (bso#15236).
  * DFS links don't work anymore on Mac clients since 4.17;
    (bso#15277).
  * vfs_virusfilter segfault on access, directory edgecase
    (accessing NULL value); (bso#15283).
  * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5)
    based SChannel on NETLOGON (additional changes); (bso#15240).
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243).
  * Shares missing from netshareenum response in samba 4.17.4;
    (bso#15266).
  * ctdb: use-after-free in run_proc; (bso#15269).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * auth3_generate_session_info_pac leaks wbcAuthUserInfo;
    (bso#15286).
  * smbclient segfaults with use after free on an optimized
    build; (bso#15268).
  * smbstatus leaking files in msg.sock and msg.lock;
    (bso#15282).
  * Leak in wbcCtxPingDc2; (bso#15164).
  * Access based share enum does not work in Samba 4.16+;
    (bso#15265).
  * Crash during share enumeration; (bso#15267).
  * rep_listxattr on FreeBSD does not properly check for reads
    off end of returned buffer; (bso#15271).
  * Avoid relying on C89 features in a few places; (bso#15281).</changelog>
  <changelog author="nopower@suse.com" date="1686830400">- Update to 4.17.8
  * log flood: smbd_calculate_access_mask_fsp: Access denied:
    message level should be lower; (bso#15302).
  * Floating point exception (FPE) via cli_pull_send at
    source3/libsmb/clireadwrite.c; (bso#15306).
  * test_tstream_more_tcp_user_timeout_spin fails intermittently
    on Rackspace GitLab runners; (bso#15328).
  * Reduce flapping of ridalloc test; (bso#15329).
  * large_ldap test is unreliable; (bso#15351).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * mdssvc may crash when initializing; (bso#15354).
  * Large directory optimization broken for non-lcomp path
    elements; (bso#15313).
  * streams_depot fails to create streams; (bso#15357).
  * shadow_copy2 and streams_depot don't play well together;
    (bso#15358).
  * wbinfo -u fails on ad dc with &gt;1000 users; (bso#15366).
  * winbindd idmap child contacts the domain controller without a
    need; (bso#15317).
  * idmap_autorid may fail to map sids of trusted domains for the
    first time; (bso#15318).
  * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings;
    (bso#15319).
  * net ads search -P doesn't work against servers in other
    domains; (bso#15323).
  * DS ACEs might be inherited to unrelated object classes;
    (bso#15338).
  * Temporary smbXsrv_tcon_global.tdb can't be parsed;
    (bso#15353).
  * Setting veto files = /.*/ break listing directories;
    (bso#15360); (bsc#1212375).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
  * dsgetdcname: assumes local system uses IPv4; (bso#15325).</changelog>
  <changelog author="nopower@suse.com" date="1688644800">- Update to 4.17.9
  * Backport --pidl-developer fixes; (bso#15404).
  * smbd_scavenger crashes when service smbd is stopped;
    (bso#15275).
  * vfs_fruit might cause a failing open for delete; (bso#15378).
  * named crashes on DLZ zone update; (bso#14030).
  * winbind recurses into itself via rpcd_lsad; (bso#15361).
  * cli_list loops 100% CPU against pre-lanman2 servers;
    (bso#15382).
  * smbclient leaks fds with showacls; (bso#15391).
  * aes256 smb3 encryption algorithms are not allowed in
    smb3_sid_parse(); (bso#15374).
  * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR;
    (bso#15413).
  * smbget memory leak if failed to download files recursively;
    (bso#15403).</changelog>
  <changelog author="nopower@suse.com" date="1689249600">- CVE-2022-2127: lm_resp_len not checked properly in
  winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174).
- CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite
  Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173).
- CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type
  Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172).
- CVE-2023-34968: Spotlight server-side Share Path Disclosure;
  (bso#15388); (bsc#1213171).
- CVE-2023-3347: Samba doesn't require SMB2+ signing if
  `server signing = mandatory` is set; (bso#15397); (bsc#1213170).</changelog>
  <changelog author="nopower@suse.com" date="1689595200">- secure channel faulty since Windows 10/11 update 07/2023;
  (bso#15418); (bsc#1213384).</changelog>
  <changelog author="scabrero@suse.de" date="1690891200">- net ads lookup with unspecified realm fails; (bso#15384);
  (bsc#1213826);</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Move libcluster-samba4.so from samba-libs to samba-client-libs;
  (bsc#1213940);</changelog>
  <changelog author="scabrero@suse.de" date="1692014400">- Fix DFS not working with widelinks enabled; (bsc#1213607);
  (bso#15435);</changelog>
  <changelog author="nopower@suse.com" date="1696420800">- CVE-2023-4091: samba: Client can truncate file with read-only
  permissions; (bsc#1215904); (bso#15439).
- CVE-2023-42669: samba: rpcecho, enabled and running in AD DC,
  allows blocking sleep on request; (bso#1215905); (bso#15474).
- CVE-2023-42670: samba:  The procedure number is out of range
  when starting Active Directory Users and Computers;
  (bsc#1215906); (bso#15473).
- CVE-2023-3961: samba: Unsanitized client pipe name passed to
  local_np_connect(); (bsc#1215907); (bso#15422).
- CVE-2023-4154: samba: dirsync allows SYSTEM access with only
  "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES;
  (bsc#1215908); (bso#15424).</changelog>
  <changelog author="scabrero@suse.de" date="1698062400">- Update to samba 4.17.12
  * Weird filename can cause assert to fail in
    openat_pathref_fsp_nosymlink(); (bso#15419);
  * reply_sesssetup_and_X() can dereference uninitialized tmp
    pointer; (bso#15420);
  * Missing return in reply_exit_done(); (bso#15430);
  * TREE_CONNECT without SETUP causes smbd to use uninitialized
    pointer; (bso#15432);
  * Improve GetNChanges to address some (but not all "Azure AD
    Connect") syncronisation tool looping during the initial user
    sync phase; (bso#15401);
  * Samba replication logs show (null) DN; (bso#15407);
  * Spotlight sometimes returns no results on latest macOS;
    (bso#15342);
  * Renaming results in NT_STATUS_SHARING_VIOLATION if previously
    attempted to remove the destination; (bso#15417);
  * Spotlight results return wrong date in result list; (bso#15427);
  * macOS mdfind returns only 50 results; (bso#15463);
  * 2-3min delays at reconnect with smb2_validate_sequence_number:
    bad message_id 2; (bso#15346);
  * samba-tool ntacl get segfault if aio_pthread appended;
    (bso#15441);
  * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed;
    (bso#15446);
  * File doesn't show when user doesn't have permission if
    aio_pthread is loaded; (bso#15453);
  * net ads lookup (with unspecified realm) fails; (bso#15384);
    (bsc#1213826);
  * Regression DFS not working with widelinks = true; (bso#15435);
    (bsc#1213607);
  * ctdb_killtcp fails to work with --enable-pcap and libpcap 1.9.1;
    (bso#15451);
  * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449);
  * Windows client join fails if a second container CN=System exists
    somewhere; (bso#9959);
- Fix crossing automounter mount points; (bsc#1215212);</changelog>
</package>
<package pkgid="d13b17b189008fe9f054e43ea1b7e5201622657909a082897d72dd21b5b7348e" name="samba-client-libs" arch="s390x">
  <version epoch="0" ver="4.17.12+git.427.2619dc0bed" rel="150500.3.14.1"/>
  <changelog author="nopower@suse.com" date="1668600000">- Update to 4.15.12
  * CVE-2022-42898: samba: heimdal: Samba buffer overflow
    vulnerabilities on 32-bit systems; (bso#15203); (bsc#1205126).
- Update to 4.15.11
  * Allow rebuild of Centos 8 images after move to vault for
    Samba 4.15; (bso#15193).
  * CVE-2022-3437: samba: Buffer overflow in Heimdal unwrap_des3();
    (bso#15134); (bsc#1204254)</changelog>
  <changelog author="scabrero@suse.de" date="1669636800">- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);</changelog>
  <changelog author="dmulder@suse.com" date="1669896000">- Introduce without-smb1-server spec flag; (bsc#1205104);
- Update to 4.17.3
  * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit
    systems; (bsc#1205126); (bso#15203);
- Replace obsolete python-gpgme with python-gpg
  * Upstream replaced it in v4.9.5 -- bso#13728
- Update to 4.17.2
  * CVE-2022-3592 [SECURITY] samba: Wide links protection broken;
    (bso#15207); (bsc#1204499).
  * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal
    unwrap_des3();(bso#15134); (bsc#1204254).
- Update to 4.17.1
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * smbXsrv_connection_shutdown_send result leaked; (bso#15174).
  * Flush on a named stream never completes; (bso#15182).
  * Permission denied calling SMBC_getatr when file not exists;
    (bso#15195).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * pytest: add file removal helpers for TestCaseInTempDir;
    (bso#15191).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * Flush on a named stream never completes; (bso#15182).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * multi-channel socket passing may hit a race if one of the
    involved processes already existed; (bso#15200).
  * memory leak on temporary of struct imessaging_post_state and
    struct tevent_immediate on struct imessaging_context (in
    rpcd_spoolss and maybe others); (bso#15201).
  * Since popt1.19 various use after free errors using result of
    poptGetArg are now exposed; (bso#15205); (boo#1204279).
  * Remove special case for O_CREAT in SMB_VFS_OPENAT from
    vfs_glusterfs; (bso#15192).
  * GETPWSID in memory cache grows indefinetly with each NTLM
    auth; (bso#15169).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);
- Fix use after free errors resulting from using return of
  poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205).
- s3: smbd: Fix memory leak in
  smbd_server_connection_terminate_done(); (bso#15174).
- Disable SMB1 for tumbleweed builds.
- Update to 4.17.0
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
    (bso#15153).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * Cross-node multi-channel reconnects result in SMB2 Negotiate
    returning NT_STATUS_NOT_SUPPORTED; (bso#15159).
  * winbind at info level debug can coredump when processing
    wb_lookupusergroups; (bso#15160).
  * Make use of glfs_*at() API calls in vfs_glusterfs;
    (bso#15157).
  * Possible use after free of connection_struct when iterating
    smbd_server_connection-&gt;connections; (bso#15128).
  * `net usershare add` fails with flag works with --long but
    fails with -l; (bso#15145).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Missing READ_LEASE break could cause data corruption;
    (bso#15148).
  * libsamba-errors uses a wrong version number; (bso#15141).
  * SMB1 negotiation can fail to handle connection errors;
    (bso#15152).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * 4.17.rc1 still uses symlink-race prone unix_convert();
    (bso#15144).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Manpage for smbstatus json is missing; (bso#15147).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Fix issues found by coverity in smbstatus json code;
    (bso#15140).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Update to 4.16.4
  * CVE-2022-2031: Samba AD users can bypass certain restrictions
    associated with changing passwords; (bsc#1201495); (bso#15047);
  * CVE-2022-32744: Samba AD users can forge password change
    requests for any user; (bsc#1201493); (bso#15074);
  * CVE-2022-32745: Samba AD users can crash the server process
    with an LDAP add or modify request; (bsc#1201492); (bso#15008);
  * CVE-2022-32746: Samba AD users can induce a use-after-free in
    the server process with an LDAP add or modify request;
    (bsc#1201490); (bso#15009);
  * CVE-2022-32742: Server memory information leak via SMB1;
    (bsc#1201496); (bso#15085);
- Update to 4.16.3
  * Using vfs_streams_xattr and deleting a file causes a panic;
    (bso#15099);
  * Add support for bind 9.18; (bso#14986);
  * logging dsdb audit to specific files does not work;
    (bso#15076);
  * Problem when winbind renews Kerberos; (bso#14979);
    (bsc#1196224);
  * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in
    developer mode; (bso#15095);
  * Crash in streams_xattr because fsp-&gt;base_fsp-&gt;fsp_name is
    NULL; (bso#15105);
  * Crash in rpcd_classic - NULL pointer deference in
    mangle_is_mangled(); (bso#15118);
  * smbclient commands del &amp; deltree fail with
    NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
    (bsc#1200556);
  * Fix check for chown when processing NFSv4 ACL; (bso#15120);
  * The pcap background queue process should not be stopped;
    (bso#15082);
  * testparm: Fix typo in idmap rangesize check; (bso#15097);
  * net ads info returns LDAP server and LDAP server name as
    null; (bso#15106);
  * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;
    (bso#15108);
  * CTDB child process logging does not work as expected;
    (bso#15090);
- Update spec file to fix the optional Heimdal DC build
- Fix external trusts with MIT Kerberos 1.20
- Add missing samba-client requirement to samba-winbind package;
  (bsc#1198255);
- Move pdb backends from package samba-libs to package
  samba-client-libs and remove samba-libs requirement from
  samba-winbind; (bsc#1200964); (bsc#1198255);
- Add sysuser-shadow requirement for packages using
  systemd-sysusers
- Use the canonical realm name to refresh the Kerberos tickets;
  (bsc#1196224); (bso#14979);
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Update to 4.16.2
  * Use pathref fd instead of io fd in vfs_default_durable_cookie;
    (bso#15042);
  * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original
    file had been deleted; (bso#15069);
  * Reintroduce netgroups support; (bso#15087);
  * net ads info shows LDAP Server: 0.0.0.0 depending on contacted
    server; (bso#14674);
  * Update from 4.15  to 4.16 breaks discovery of [homes] on
    standalone server from Win and IOS; (bso#15062);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * smbclient -E doesn't work as advertised; (bso#15075);
  * The samba background daemon doesn't refresh the printcap cache
    on startup; (bso#15081);
  * Out-by-4 error in smbd read reply max_send clamp; (bso#14443);
- Fix samba4.blackbox.net_ads_dns_async test with bind9 &gt;= 9.17.7
- Support building with MIT Kerberos 1.20
- Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC;
  (CVE-2020-17049);
- Resource Based Constrained Delegation (RBCD) for Samba AD DC
- Support building with gcc 12.1
- Use requires_eq macro to require the libldb2 version available at
  samba-dsdb-modules build time; (bsc#1199362);
- Update to 4.16.1
  * Share and server swapped in smbget password prompt; (bso#14831);
  * Durable handles won't reconnect if the leased file is written to;
    (bso#15022);
  * rmdir silently fails if directory contains unreadable files and
    hide unreadable is yes; (bso#15023);
  * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information
    on renamed file handle; (bso#15038);
  * Need to describe --builtin-libraries= better (compare with
  - -bundled-libraries); (bso#8731);
  * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback;
    (bso#14957);
  * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes;
    (bso#15035);
  * PAM Kerberos authentication incorrectly fails with a clock skew
    error; (bso#15046);
  * Username map - samba erroneously applies unix group memberships
    to user account entries; (bso#15041);
  * KVNO off by 100000; (bso#14951);
  * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027);
  * vfs_gpfs recalls=no option prevents listing files; (bso#15055);
  * smbd doesn't handle UPNs for looking up names; (bso#15054);
- Update update-apparmor-samba-profile script, replace
  non-printable delimiter with more human readable separator as
  sed can accept separators that can appear in the input data.
- Fix update-apparmor-samba-profile script, sed doesn't like
  multibyte separators; (bsc#1198309).
- Update to 4.16.0
  * New samba-dcerpcd binary to provide DCERPC in the member server
    setup
  * Certificate Auto Enrollment
  * Ability to add ports to dns forwarder addresses in internal DNS
    backend
  * No longer using Linux mandatory locks for sharemodes
  * SMB1 protocol has been deprecated, particularly older dialects
  * SMB1 protocol SMBCopy command removed
  * SMB1 server-side wildcard expansion removed
- Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101);
- Use systemd-sysusers to create system users; (bsc#1182847);</changelog>
  <changelog author="scabrero@suse.de" date="1671105600">- Update to 4.17.4
  * CVE-2022-44640 Upstream Heimdal free of user-controlled
    pointer in FAST; (bsc#14929);
  * CVE-2021-20251 Bad password count not incremented atomically;
    (bsc#14611);
  * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability;
    (bsc#15203);
  * CVE-2022-37966 rc4-hmac Kerberos session keys issued to
    modern servers; (bso#15237);
  * CVE-2022-37967 Kerberos constrained delegation ticket forgery
    possible against Samba AD DC; (bso#15231);
  * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak
    and should be avoided; (bso#15240);
  * pam_winbind uses time_t and pointers assuming they are of the
    same size; (bso#15224);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * filter-subunit is inefficient with large numbers of
    knownfails; (bso#15258);
  * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories;
    (bso#15252);
  * The KDC logic arround msDs-supportedEncryptionTypes differs
    from Windows; (bso#13135);
  * libnet: change_password() doesn't work with
    dcerpc_samr_ChangePasswordUser4(); (bso#15206);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * Memory leak in snprintf replacement functions; (bso#15230);
  * RODC doesn't reset badPwdCount reliable via an RWDC
    (CVE-2021-20251 regression); (bso#15253);
  * Prevent EBADF errors with vfs_glusterfs; (bso#15198);
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243);
  * Stack smashing in net offlinejoin requestodj; (bso#15257);
  * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue;
    (bso#15197);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
- Remove deprecated if-{down,up} scripts; (bsc#1206444);
- Adjust the systemd drop-in file for named service; (bsc#1201689);
  * Paths are additive so do not repeat paths from named.service
  * Prefix the samba DLZ directory with "-" to ignore this path
    if it does not exists</changelog>
  <changelog author="nopower@suse.com" date="1671624000">- Change with_dc default to 0 (for non TW builds), ADDC feature is
  deprecated and will no longer be included in &gt;= SLE15-SP5;
  (jsc#PED-1122).</changelog>
  <changelog author="nopower@suse.com" date="1673524800">- Clean up logic for PAM migration settings in spec file.</changelog>
  <changelog author="nopower@suse.com" date="1674475200">- libdsdb-module-samba4 should be packaged as part of samba-libs and
  not samba-ad-dc-libs. Additionally no need for it to be
  removed conditionally.</changelog>
  <changelog author="nopower@suse.com" date="1674475201">- Remove non functioning ifup/ifdown samba-winbindd scripts;
  (bsc#1207414).</changelog>
  <changelog author="nopower@suse.com" date="1678363200">- Make samba-libs conflict with old samba-ad-dc-libs package
  to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1679745600">- Make (32bit) samba-libs conflict with old samba-ad-dc-libs
  package to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1681300800">- Update to 4.17.7
  * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords
    in cleartext; (bso#15315); (bsc#1209481).
  * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be
    deleted by unprivileged authenticated users; (bso#15276);
    (bsc#1209483).
  * CVE-2023-0614: samba: Access controlled AD LDAP attributes can
    be discovered; (bso#15270); (bsc#1209485).
  * large_ldap test is inefficient; (bso#15332).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
- Update to 4.17.6
  * streams_xattr is creating unexpected locks on folders;
    (bso#15314).
  * Use of the Azure AD Connect cloud sync tool is now supported
    for password hash synchronisation, allowing Samba AD Domains
    to synchronise passwords with this popular cloud environment;
    (bso#10635).
  * Spotlight doesn't work with latest macOS Ventura;
    (bso#15299).
  * New samba-dcerpc architecture does not scale gracefully;
    (bso#15310).
  * vfs_ceph incorrectly uses fsp_get_io_fd() instead of
    fsp_get_pathref_fd() in close and fstat; (bso#15307).
  * With clustering enabled samba-bgqd can core dump due to use
    after free; (bso#15293).
  * fd_load() function implicitly closes the fd where it should
    not; (bso#15311).
- Update to 4.17.5
  * smbc_getxattr() return value is incorrect; (bso#14808).
  * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not
    handled correctly; (bso#15172).
  * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210).
  * samba-tool gpo listall fails IPv6 only - finddcs() fails to
    find DC when there is only an AAAA record for the DC in DNS;
    (bso#15226).
  * smbd crashes if an FSCTL request is done on a stream handle;
    (bso#15236).
  * DFS links don't work anymore on Mac clients since 4.17;
    (bso#15277).
  * vfs_virusfilter segfault on access, directory edgecase
    (accessing NULL value); (bso#15283).
  * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5)
    based SChannel on NETLOGON (additional changes); (bso#15240).
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243).
  * Shares missing from netshareenum response in samba 4.17.4;
    (bso#15266).
  * ctdb: use-after-free in run_proc; (bso#15269).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * auth3_generate_session_info_pac leaks wbcAuthUserInfo;
    (bso#15286).
  * smbclient segfaults with use after free on an optimized
    build; (bso#15268).
  * smbstatus leaking files in msg.sock and msg.lock;
    (bso#15282).
  * Leak in wbcCtxPingDc2; (bso#15164).
  * Access based share enum does not work in Samba 4.16+;
    (bso#15265).
  * Crash during share enumeration; (bso#15267).
  * rep_listxattr on FreeBSD does not properly check for reads
    off end of returned buffer; (bso#15271).
  * Avoid relying on C89 features in a few places; (bso#15281).</changelog>
  <changelog author="nopower@suse.com" date="1686830400">- Update to 4.17.8
  * log flood: smbd_calculate_access_mask_fsp: Access denied:
    message level should be lower; (bso#15302).
  * Floating point exception (FPE) via cli_pull_send at
    source3/libsmb/clireadwrite.c; (bso#15306).
  * test_tstream_more_tcp_user_timeout_spin fails intermittently
    on Rackspace GitLab runners; (bso#15328).
  * Reduce flapping of ridalloc test; (bso#15329).
  * large_ldap test is unreliable; (bso#15351).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * mdssvc may crash when initializing; (bso#15354).
  * Large directory optimization broken for non-lcomp path
    elements; (bso#15313).
  * streams_depot fails to create streams; (bso#15357).
  * shadow_copy2 and streams_depot don't play well together;
    (bso#15358).
  * wbinfo -u fails on ad dc with &gt;1000 users; (bso#15366).
  * winbindd idmap child contacts the domain controller without a
    need; (bso#15317).
  * idmap_autorid may fail to map sids of trusted domains for the
    first time; (bso#15318).
  * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings;
    (bso#15319).
  * net ads search -P doesn't work against servers in other
    domains; (bso#15323).
  * DS ACEs might be inherited to unrelated object classes;
    (bso#15338).
  * Temporary smbXsrv_tcon_global.tdb can't be parsed;
    (bso#15353).
  * Setting veto files = /.*/ break listing directories;
    (bso#15360); (bsc#1212375).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
  * dsgetdcname: assumes local system uses IPv4; (bso#15325).</changelog>
  <changelog author="nopower@suse.com" date="1688644800">- Update to 4.17.9
  * Backport --pidl-developer fixes; (bso#15404).
  * smbd_scavenger crashes when service smbd is stopped;
    (bso#15275).
  * vfs_fruit might cause a failing open for delete; (bso#15378).
  * named crashes on DLZ zone update; (bso#14030).
  * winbind recurses into itself via rpcd_lsad; (bso#15361).
  * cli_list loops 100% CPU against pre-lanman2 servers;
    (bso#15382).
  * smbclient leaks fds with showacls; (bso#15391).
  * aes256 smb3 encryption algorithms are not allowed in
    smb3_sid_parse(); (bso#15374).
  * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR;
    (bso#15413).
  * smbget memory leak if failed to download files recursively;
    (bso#15403).</changelog>
  <changelog author="nopower@suse.com" date="1689249600">- CVE-2022-2127: lm_resp_len not checked properly in
  winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174).
- CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite
  Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173).
- CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type
  Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172).
- CVE-2023-34968: Spotlight server-side Share Path Disclosure;
  (bso#15388); (bsc#1213171).
- CVE-2023-3347: Samba doesn't require SMB2+ signing if
  `server signing = mandatory` is set; (bso#15397); (bsc#1213170).</changelog>
  <changelog author="nopower@suse.com" date="1689595200">- secure channel faulty since Windows 10/11 update 07/2023;
  (bso#15418); (bsc#1213384).</changelog>
  <changelog author="scabrero@suse.de" date="1690891200">- net ads lookup with unspecified realm fails; (bso#15384);
  (bsc#1213826);</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Move libcluster-samba4.so from samba-libs to samba-client-libs;
  (bsc#1213940);</changelog>
  <changelog author="scabrero@suse.de" date="1692014400">- Fix DFS not working with widelinks enabled; (bsc#1213607);
  (bso#15435);</changelog>
  <changelog author="nopower@suse.com" date="1696420800">- CVE-2023-4091: samba: Client can truncate file with read-only
  permissions; (bsc#1215904); (bso#15439).
- CVE-2023-42669: samba: rpcecho, enabled and running in AD DC,
  allows blocking sleep on request; (bso#1215905); (bso#15474).
- CVE-2023-42670: samba:  The procedure number is out of range
  when starting Active Directory Users and Computers;
  (bsc#1215906); (bso#15473).
- CVE-2023-3961: samba: Unsanitized client pipe name passed to
  local_np_connect(); (bsc#1215907); (bso#15422).
- CVE-2023-4154: samba: dirsync allows SYSTEM access with only
  "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES;
  (bsc#1215908); (bso#15424).</changelog>
  <changelog author="scabrero@suse.de" date="1698062400">- Update to samba 4.17.12
  * Weird filename can cause assert to fail in
    openat_pathref_fsp_nosymlink(); (bso#15419);
  * reply_sesssetup_and_X() can dereference uninitialized tmp
    pointer; (bso#15420);
  * Missing return in reply_exit_done(); (bso#15430);
  * TREE_CONNECT without SETUP causes smbd to use uninitialized
    pointer; (bso#15432);
  * Improve GetNChanges to address some (but not all "Azure AD
    Connect") syncronisation tool looping during the initial user
    sync phase; (bso#15401);
  * Samba replication logs show (null) DN; (bso#15407);
  * Spotlight sometimes returns no results on latest macOS;
    (bso#15342);
  * Renaming results in NT_STATUS_SHARING_VIOLATION if previously
    attempted to remove the destination; (bso#15417);
  * Spotlight results return wrong date in result list; (bso#15427);
  * macOS mdfind returns only 50 results; (bso#15463);
  * 2-3min delays at reconnect with smb2_validate_sequence_number:
    bad message_id 2; (bso#15346);
  * samba-tool ntacl get segfault if aio_pthread appended;
    (bso#15441);
  * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed;
    (bso#15446);
  * File doesn't show when user doesn't have permission if
    aio_pthread is loaded; (bso#15453);
  * net ads lookup (with unspecified realm) fails; (bso#15384);
    (bsc#1213826);
  * Regression DFS not working with widelinks = true; (bso#15435);
    (bsc#1213607);
  * ctdb_killtcp fails to work with --enable-pcap and libpcap 1.9.1;
    (bso#15451);
  * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449);
  * Windows client join fails if a second container CN=System exists
    somewhere; (bso#9959);
- Fix crossing automounter mount points; (bsc#1215212);</changelog>
</package>
<package pkgid="71a3d26121fb223400c08355bd31f3abe42110f7b7260fdad1f6b7a56032d576" name="samba-client-libs" arch="x86_64">
  <version epoch="0" ver="4.17.12+git.427.2619dc0bed" rel="150500.3.14.1"/>
  <changelog author="nopower@suse.com" date="1668600000">- Update to 4.15.12
  * CVE-2022-42898: samba: heimdal: Samba buffer overflow
    vulnerabilities on 32-bit systems; (bso#15203); (bsc#1205126).
- Update to 4.15.11
  * Allow rebuild of Centos 8 images after move to vault for
    Samba 4.15; (bso#15193).
  * CVE-2022-3437: samba: Buffer overflow in Heimdal unwrap_des3();
    (bso#15134); (bsc#1204254)</changelog>
  <changelog author="scabrero@suse.de" date="1669636800">- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);</changelog>
  <changelog author="dmulder@suse.com" date="1669896000">- Introduce without-smb1-server spec flag; (bsc#1205104);
- Update to 4.17.3
  * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit
    systems; (bsc#1205126); (bso#15203);
- Replace obsolete python-gpgme with python-gpg
  * Upstream replaced it in v4.9.5 -- bso#13728
- Update to 4.17.2
  * CVE-2022-3592 [SECURITY] samba: Wide links protection broken;
    (bso#15207); (bsc#1204499).
  * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal
    unwrap_des3();(bso#15134); (bsc#1204254).
- Update to 4.17.1
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * smbXsrv_connection_shutdown_send result leaked; (bso#15174).
  * Flush on a named stream never completes; (bso#15182).
  * Permission denied calling SMBC_getatr when file not exists;
    (bso#15195).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * pytest: add file removal helpers for TestCaseInTempDir;
    (bso#15191).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * Flush on a named stream never completes; (bso#15182).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * multi-channel socket passing may hit a race if one of the
    involved processes already existed; (bso#15200).
  * memory leak on temporary of struct imessaging_post_state and
    struct tevent_immediate on struct imessaging_context (in
    rpcd_spoolss and maybe others); (bso#15201).
  * Since popt1.19 various use after free errors using result of
    poptGetArg are now exposed; (bso#15205); (boo#1204279).
  * Remove special case for O_CREAT in SMB_VFS_OPENAT from
    vfs_glusterfs; (bso#15192).
  * GETPWSID in memory cache grows indefinetly with each NTLM
    auth; (bso#15169).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);
- Fix use after free errors resulting from using return of
  poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205).
- s3: smbd: Fix memory leak in
  smbd_server_connection_terminate_done(); (bso#15174).
- Disable SMB1 for tumbleweed builds.
- Update to 4.17.0
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
    (bso#15153).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * Cross-node multi-channel reconnects result in SMB2 Negotiate
    returning NT_STATUS_NOT_SUPPORTED; (bso#15159).
  * winbind at info level debug can coredump when processing
    wb_lookupusergroups; (bso#15160).
  * Make use of glfs_*at() API calls in vfs_glusterfs;
    (bso#15157).
  * Possible use after free of connection_struct when iterating
    smbd_server_connection-&gt;connections; (bso#15128).
  * `net usershare add` fails with flag works with --long but
    fails with -l; (bso#15145).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Missing READ_LEASE break could cause data corruption;
    (bso#15148).
  * libsamba-errors uses a wrong version number; (bso#15141).
  * SMB1 negotiation can fail to handle connection errors;
    (bso#15152).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * 4.17.rc1 still uses symlink-race prone unix_convert();
    (bso#15144).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Manpage for smbstatus json is missing; (bso#15147).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Fix issues found by coverity in smbstatus json code;
    (bso#15140).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Update to 4.16.4
  * CVE-2022-2031: Samba AD users can bypass certain restrictions
    associated with changing passwords; (bsc#1201495); (bso#15047);
  * CVE-2022-32744: Samba AD users can forge password change
    requests for any user; (bsc#1201493); (bso#15074);
  * CVE-2022-32745: Samba AD users can crash the server process
    with an LDAP add or modify request; (bsc#1201492); (bso#15008);
  * CVE-2022-32746: Samba AD users can induce a use-after-free in
    the server process with an LDAP add or modify request;
    (bsc#1201490); (bso#15009);
  * CVE-2022-32742: Server memory information leak via SMB1;
    (bsc#1201496); (bso#15085);
- Update to 4.16.3
  * Using vfs_streams_xattr and deleting a file causes a panic;
    (bso#15099);
  * Add support for bind 9.18; (bso#14986);
  * logging dsdb audit to specific files does not work;
    (bso#15076);
  * Problem when winbind renews Kerberos; (bso#14979);
    (bsc#1196224);
  * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in
    developer mode; (bso#15095);
  * Crash in streams_xattr because fsp-&gt;base_fsp-&gt;fsp_name is
    NULL; (bso#15105);
  * Crash in rpcd_classic - NULL pointer deference in
    mangle_is_mangled(); (bso#15118);
  * smbclient commands del &amp; deltree fail with
    NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
    (bsc#1200556);
  * Fix check for chown when processing NFSv4 ACL; (bso#15120);
  * The pcap background queue process should not be stopped;
    (bso#15082);
  * testparm: Fix typo in idmap rangesize check; (bso#15097);
  * net ads info returns LDAP server and LDAP server name as
    null; (bso#15106);
  * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;
    (bso#15108);
  * CTDB child process logging does not work as expected;
    (bso#15090);
- Update spec file to fix the optional Heimdal DC build
- Fix external trusts with MIT Kerberos 1.20
- Add missing samba-client requirement to samba-winbind package;
  (bsc#1198255);
- Move pdb backends from package samba-libs to package
  samba-client-libs and remove samba-libs requirement from
  samba-winbind; (bsc#1200964); (bsc#1198255);
- Add sysuser-shadow requirement for packages using
  systemd-sysusers
- Use the canonical realm name to refresh the Kerberos tickets;
  (bsc#1196224); (bso#14979);
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Update to 4.16.2
  * Use pathref fd instead of io fd in vfs_default_durable_cookie;
    (bso#15042);
  * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original
    file had been deleted; (bso#15069);
  * Reintroduce netgroups support; (bso#15087);
  * net ads info shows LDAP Server: 0.0.0.0 depending on contacted
    server; (bso#14674);
  * Update from 4.15  to 4.16 breaks discovery of [homes] on
    standalone server from Win and IOS; (bso#15062);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * smbclient -E doesn't work as advertised; (bso#15075);
  * The samba background daemon doesn't refresh the printcap cache
    on startup; (bso#15081);
  * Out-by-4 error in smbd read reply max_send clamp; (bso#14443);
- Fix samba4.blackbox.net_ads_dns_async test with bind9 &gt;= 9.17.7
- Support building with MIT Kerberos 1.20
- Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC;
  (CVE-2020-17049);
- Resource Based Constrained Delegation (RBCD) for Samba AD DC
- Support building with gcc 12.1
- Use requires_eq macro to require the libldb2 version available at
  samba-dsdb-modules build time; (bsc#1199362);
- Update to 4.16.1
  * Share and server swapped in smbget password prompt; (bso#14831);
  * Durable handles won't reconnect if the leased file is written to;
    (bso#15022);
  * rmdir silently fails if directory contains unreadable files and
    hide unreadable is yes; (bso#15023);
  * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information
    on renamed file handle; (bso#15038);
  * Need to describe --builtin-libraries= better (compare with
  - -bundled-libraries); (bso#8731);
  * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback;
    (bso#14957);
  * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes;
    (bso#15035);
  * PAM Kerberos authentication incorrectly fails with a clock skew
    error; (bso#15046);
  * Username map - samba erroneously applies unix group memberships
    to user account entries; (bso#15041);
  * KVNO off by 100000; (bso#14951);
  * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027);
  * vfs_gpfs recalls=no option prevents listing files; (bso#15055);
  * smbd doesn't handle UPNs for looking up names; (bso#15054);
- Update update-apparmor-samba-profile script, replace
  non-printable delimiter with more human readable separator as
  sed can accept separators that can appear in the input data.
- Fix update-apparmor-samba-profile script, sed doesn't like
  multibyte separators; (bsc#1198309).
- Update to 4.16.0
  * New samba-dcerpcd binary to provide DCERPC in the member server
    setup
  * Certificate Auto Enrollment
  * Ability to add ports to dns forwarder addresses in internal DNS
    backend
  * No longer using Linux mandatory locks for sharemodes
  * SMB1 protocol has been deprecated, particularly older dialects
  * SMB1 protocol SMBCopy command removed
  * SMB1 server-side wildcard expansion removed
- Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101);
- Use systemd-sysusers to create system users; (bsc#1182847);</changelog>
  <changelog author="scabrero@suse.de" date="1671105600">- Update to 4.17.4
  * CVE-2022-44640 Upstream Heimdal free of user-controlled
    pointer in FAST; (bsc#14929);
  * CVE-2021-20251 Bad password count not incremented atomically;
    (bsc#14611);
  * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability;
    (bsc#15203);
  * CVE-2022-37966 rc4-hmac Kerberos session keys issued to
    modern servers; (bso#15237);
  * CVE-2022-37967 Kerberos constrained delegation ticket forgery
    possible against Samba AD DC; (bso#15231);
  * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak
    and should be avoided; (bso#15240);
  * pam_winbind uses time_t and pointers assuming they are of the
    same size; (bso#15224);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * filter-subunit is inefficient with large numbers of
    knownfails; (bso#15258);
  * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories;
    (bso#15252);
  * The KDC logic arround msDs-supportedEncryptionTypes differs
    from Windows; (bso#13135);
  * libnet: change_password() doesn't work with
    dcerpc_samr_ChangePasswordUser4(); (bso#15206);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * Memory leak in snprintf replacement functions; (bso#15230);
  * RODC doesn't reset badPwdCount reliable via an RWDC
    (CVE-2021-20251 regression); (bso#15253);
  * Prevent EBADF errors with vfs_glusterfs; (bso#15198);
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243);
  * Stack smashing in net offlinejoin requestodj; (bso#15257);
  * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue;
    (bso#15197);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
- Remove deprecated if-{down,up} scripts; (bsc#1206444);
- Adjust the systemd drop-in file for named service; (bsc#1201689);
  * Paths are additive so do not repeat paths from named.service
  * Prefix the samba DLZ directory with "-" to ignore this path
    if it does not exists</changelog>
  <changelog author="nopower@suse.com" date="1671624000">- Change with_dc default to 0 (for non TW builds), ADDC feature is
  deprecated and will no longer be included in &gt;= SLE15-SP5;
  (jsc#PED-1122).</changelog>
  <changelog author="nopower@suse.com" date="1673524800">- Clean up logic for PAM migration settings in spec file.</changelog>
  <changelog author="nopower@suse.com" date="1674475200">- libdsdb-module-samba4 should be packaged as part of samba-libs and
  not samba-ad-dc-libs. Additionally no need for it to be
  removed conditionally.</changelog>
  <changelog author="nopower@suse.com" date="1674475201">- Remove non functioning ifup/ifdown samba-winbindd scripts;
  (bsc#1207414).</changelog>
  <changelog author="nopower@suse.com" date="1678363200">- Make samba-libs conflict with old samba-ad-dc-libs package
  to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1679745600">- Make (32bit) samba-libs conflict with old samba-ad-dc-libs
  package to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1681300800">- Update to 4.17.7
  * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords
    in cleartext; (bso#15315); (bsc#1209481).
  * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be
    deleted by unprivileged authenticated users; (bso#15276);
    (bsc#1209483).
  * CVE-2023-0614: samba: Access controlled AD LDAP attributes can
    be discovered; (bso#15270); (bsc#1209485).
  * large_ldap test is inefficient; (bso#15332).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
- Update to 4.17.6
  * streams_xattr is creating unexpected locks on folders;
    (bso#15314).
  * Use of the Azure AD Connect cloud sync tool is now supported
    for password hash synchronisation, allowing Samba AD Domains
    to synchronise passwords with this popular cloud environment;
    (bso#10635).
  * Spotlight doesn't work with latest macOS Ventura;
    (bso#15299).
  * New samba-dcerpc architecture does not scale gracefully;
    (bso#15310).
  * vfs_ceph incorrectly uses fsp_get_io_fd() instead of
    fsp_get_pathref_fd() in close and fstat; (bso#15307).
  * With clustering enabled samba-bgqd can core dump due to use
    after free; (bso#15293).
  * fd_load() function implicitly closes the fd where it should
    not; (bso#15311).
- Update to 4.17.5
  * smbc_getxattr() return value is incorrect; (bso#14808).
  * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not
    handled correctly; (bso#15172).
  * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210).
  * samba-tool gpo listall fails IPv6 only - finddcs() fails to
    find DC when there is only an AAAA record for the DC in DNS;
    (bso#15226).
  * smbd crashes if an FSCTL request is done on a stream handle;
    (bso#15236).
  * DFS links don't work anymore on Mac clients since 4.17;
    (bso#15277).
  * vfs_virusfilter segfault on access, directory edgecase
    (accessing NULL value); (bso#15283).
  * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5)
    based SChannel on NETLOGON (additional changes); (bso#15240).
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243).
  * Shares missing from netshareenum response in samba 4.17.4;
    (bso#15266).
  * ctdb: use-after-free in run_proc; (bso#15269).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * auth3_generate_session_info_pac leaks wbcAuthUserInfo;
    (bso#15286).
  * smbclient segfaults with use after free on an optimized
    build; (bso#15268).
  * smbstatus leaking files in msg.sock and msg.lock;
    (bso#15282).
  * Leak in wbcCtxPingDc2; (bso#15164).
  * Access based share enum does not work in Samba 4.16+;
    (bso#15265).
  * Crash during share enumeration; (bso#15267).
  * rep_listxattr on FreeBSD does not properly check for reads
    off end of returned buffer; (bso#15271).
  * Avoid relying on C89 features in a few places; (bso#15281).</changelog>
  <changelog author="nopower@suse.com" date="1686830400">- Update to 4.17.8
  * log flood: smbd_calculate_access_mask_fsp: Access denied:
    message level should be lower; (bso#15302).
  * Floating point exception (FPE) via cli_pull_send at
    source3/libsmb/clireadwrite.c; (bso#15306).
  * test_tstream_more_tcp_user_timeout_spin fails intermittently
    on Rackspace GitLab runners; (bso#15328).
  * Reduce flapping of ridalloc test; (bso#15329).
  * large_ldap test is unreliable; (bso#15351).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * mdssvc may crash when initializing; (bso#15354).
  * Large directory optimization broken for non-lcomp path
    elements; (bso#15313).
  * streams_depot fails to create streams; (bso#15357).
  * shadow_copy2 and streams_depot don't play well together;
    (bso#15358).
  * wbinfo -u fails on ad dc with &gt;1000 users; (bso#15366).
  * winbindd idmap child contacts the domain controller without a
    need; (bso#15317).
  * idmap_autorid may fail to map sids of trusted domains for the
    first time; (bso#15318).
  * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings;
    (bso#15319).
  * net ads search -P doesn't work against servers in other
    domains; (bso#15323).
  * DS ACEs might be inherited to unrelated object classes;
    (bso#15338).
  * Temporary smbXsrv_tcon_global.tdb can't be parsed;
    (bso#15353).
  * Setting veto files = /.*/ break listing directories;
    (bso#15360); (bsc#1212375).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
  * dsgetdcname: assumes local system uses IPv4; (bso#15325).</changelog>
  <changelog author="nopower@suse.com" date="1688644800">- Update to 4.17.9
  * Backport --pidl-developer fixes; (bso#15404).
  * smbd_scavenger crashes when service smbd is stopped;
    (bso#15275).
  * vfs_fruit might cause a failing open for delete; (bso#15378).
  * named crashes on DLZ zone update; (bso#14030).
  * winbind recurses into itself via rpcd_lsad; (bso#15361).
  * cli_list loops 100% CPU against pre-lanman2 servers;
    (bso#15382).
  * smbclient leaks fds with showacls; (bso#15391).
  * aes256 smb3 encryption algorithms are not allowed in
    smb3_sid_parse(); (bso#15374).
  * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR;
    (bso#15413).
  * smbget memory leak if failed to download files recursively;
    (bso#15403).</changelog>
  <changelog author="nopower@suse.com" date="1689249600">- CVE-2022-2127: lm_resp_len not checked properly in
  winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174).
- CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite
  Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173).
- CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type
  Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172).
- CVE-2023-34968: Spotlight server-side Share Path Disclosure;
  (bso#15388); (bsc#1213171).
- CVE-2023-3347: Samba doesn't require SMB2+ signing if
  `server signing = mandatory` is set; (bso#15397); (bsc#1213170).</changelog>
  <changelog author="nopower@suse.com" date="1689595200">- secure channel faulty since Windows 10/11 update 07/2023;
  (bso#15418); (bsc#1213384).</changelog>
  <changelog author="scabrero@suse.de" date="1690891200">- net ads lookup with unspecified realm fails; (bso#15384);
  (bsc#1213826);</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Move libcluster-samba4.so from samba-libs to samba-client-libs;
  (bsc#1213940);</changelog>
  <changelog author="scabrero@suse.de" date="1692014400">- Fix DFS not working with widelinks enabled; (bsc#1213607);
  (bso#15435);</changelog>
  <changelog author="nopower@suse.com" date="1696420800">- CVE-2023-4091: samba: Client can truncate file with read-only
  permissions; (bsc#1215904); (bso#15439).
- CVE-2023-42669: samba: rpcecho, enabled and running in AD DC,
  allows blocking sleep on request; (bso#1215905); (bso#15474).
- CVE-2023-42670: samba:  The procedure number is out of range
  when starting Active Directory Users and Computers;
  (bsc#1215906); (bso#15473).
- CVE-2023-3961: samba: Unsanitized client pipe name passed to
  local_np_connect(); (bsc#1215907); (bso#15422).
- CVE-2023-4154: samba: dirsync allows SYSTEM access with only
  "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES;
  (bsc#1215908); (bso#15424).</changelog>
  <changelog author="scabrero@suse.de" date="1698062400">- Update to samba 4.17.12
  * Weird filename can cause assert to fail in
    openat_pathref_fsp_nosymlink(); (bso#15419);
  * reply_sesssetup_and_X() can dereference uninitialized tmp
    pointer; (bso#15420);
  * Missing return in reply_exit_done(); (bso#15430);
  * TREE_CONNECT without SETUP causes smbd to use uninitialized
    pointer; (bso#15432);
  * Improve GetNChanges to address some (but not all "Azure AD
    Connect") syncronisation tool looping during the initial user
    sync phase; (bso#15401);
  * Samba replication logs show (null) DN; (bso#15407);
  * Spotlight sometimes returns no results on latest macOS;
    (bso#15342);
  * Renaming results in NT_STATUS_SHARING_VIOLATION if previously
    attempted to remove the destination; (bso#15417);
  * Spotlight results return wrong date in result list; (bso#15427);
  * macOS mdfind returns only 50 results; (bso#15463);
  * 2-3min delays at reconnect with smb2_validate_sequence_number:
    bad message_id 2; (bso#15346);
  * samba-tool ntacl get segfault if aio_pthread appended;
    (bso#15441);
  * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed;
    (bso#15446);
  * File doesn't show when user doesn't have permission if
    aio_pthread is loaded; (bso#15453);
  * net ads lookup (with unspecified realm) fails; (bso#15384);
    (bsc#1213826);
  * Regression DFS not working with widelinks = true; (bso#15435);
    (bsc#1213607);
  * ctdb_killtcp fails to work with --enable-pcap and libpcap 1.9.1;
    (bso#15451);
  * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449);
  * Windows client join fails if a second container CN=System exists
    somewhere; (bso#9959);
- Fix crossing automounter mount points; (bsc#1215212);</changelog>
</package>
<package pkgid="7770181701543e449cd6ec96fd8d9cb544468d7149153d6c213a673b17604b8e" name="samba-client-libs" arch="aarch64">
  <version epoch="0" ver="4.17.12+git.444.922f3bd625" rel="150500.3.17.1"/>
  <changelog author="scabrero@suse.de" date="1669636800">- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);</changelog>
  <changelog author="dmulder@suse.com" date="1669896000">- Introduce without-smb1-server spec flag; (bsc#1205104);
- Update to 4.17.3
  * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit
    systems; (bsc#1205126); (bso#15203);
- Replace obsolete python-gpgme with python-gpg
  * Upstream replaced it in v4.9.5 -- bso#13728
- Update to 4.17.2
  * CVE-2022-3592 [SECURITY] samba: Wide links protection broken;
    (bso#15207); (bsc#1204499).
  * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal
    unwrap_des3();(bso#15134); (bsc#1204254).
- Update to 4.17.1
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * smbXsrv_connection_shutdown_send result leaked; (bso#15174).
  * Flush on a named stream never completes; (bso#15182).
  * Permission denied calling SMBC_getatr when file not exists;
    (bso#15195).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * pytest: add file removal helpers for TestCaseInTempDir;
    (bso#15191).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * Flush on a named stream never completes; (bso#15182).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * multi-channel socket passing may hit a race if one of the
    involved processes already existed; (bso#15200).
  * memory leak on temporary of struct imessaging_post_state and
    struct tevent_immediate on struct imessaging_context (in
    rpcd_spoolss and maybe others); (bso#15201).
  * Since popt1.19 various use after free errors using result of
    poptGetArg are now exposed; (bso#15205); (boo#1204279).
  * Remove special case for O_CREAT in SMB_VFS_OPENAT from
    vfs_glusterfs; (bso#15192).
  * GETPWSID in memory cache grows indefinetly with each NTLM
    auth; (bso#15169).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);
- Fix use after free errors resulting from using return of
  poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205).
- s3: smbd: Fix memory leak in
  smbd_server_connection_terminate_done(); (bso#15174).
- Disable SMB1 for tumbleweed builds.
- Update to 4.17.0
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
    (bso#15153).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * Cross-node multi-channel reconnects result in SMB2 Negotiate
    returning NT_STATUS_NOT_SUPPORTED; (bso#15159).
  * winbind at info level debug can coredump when processing
    wb_lookupusergroups; (bso#15160).
  * Make use of glfs_*at() API calls in vfs_glusterfs;
    (bso#15157).
  * Possible use after free of connection_struct when iterating
    smbd_server_connection-&gt;connections; (bso#15128).
  * `net usershare add` fails with flag works with --long but
    fails with -l; (bso#15145).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Missing READ_LEASE break could cause data corruption;
    (bso#15148).
  * libsamba-errors uses a wrong version number; (bso#15141).
  * SMB1 negotiation can fail to handle connection errors;
    (bso#15152).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * 4.17.rc1 still uses symlink-race prone unix_convert();
    (bso#15144).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Manpage for smbstatus json is missing; (bso#15147).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Fix issues found by coverity in smbstatus json code;
    (bso#15140).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Update to 4.16.4
  * CVE-2022-2031: Samba AD users can bypass certain restrictions
    associated with changing passwords; (bsc#1201495); (bso#15047);
  * CVE-2022-32744: Samba AD users can forge password change
    requests for any user; (bsc#1201493); (bso#15074);
  * CVE-2022-32745: Samba AD users can crash the server process
    with an LDAP add or modify request; (bsc#1201492); (bso#15008);
  * CVE-2022-32746: Samba AD users can induce a use-after-free in
    the server process with an LDAP add or modify request;
    (bsc#1201490); (bso#15009);
  * CVE-2022-32742: Server memory information leak via SMB1;
    (bsc#1201496); (bso#15085);
- Update to 4.16.3
  * Using vfs_streams_xattr and deleting a file causes a panic;
    (bso#15099);
  * Add support for bind 9.18; (bso#14986);
  * logging dsdb audit to specific files does not work;
    (bso#15076);
  * Problem when winbind renews Kerberos; (bso#14979);
    (bsc#1196224);
  * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in
    developer mode; (bso#15095);
  * Crash in streams_xattr because fsp-&gt;base_fsp-&gt;fsp_name is
    NULL; (bso#15105);
  * Crash in rpcd_classic - NULL pointer deference in
    mangle_is_mangled(); (bso#15118);
  * smbclient commands del &amp; deltree fail with
    NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
    (bsc#1200556);
  * Fix check for chown when processing NFSv4 ACL; (bso#15120);
  * The pcap background queue process should not be stopped;
    (bso#15082);
  * testparm: Fix typo in idmap rangesize check; (bso#15097);
  * net ads info returns LDAP server and LDAP server name as
    null; (bso#15106);
  * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;
    (bso#15108);
  * CTDB child process logging does not work as expected;
    (bso#15090);
- Update spec file to fix the optional Heimdal DC build
- Fix external trusts with MIT Kerberos 1.20
- Add missing samba-client requirement to samba-winbind package;
  (bsc#1198255);
- Move pdb backends from package samba-libs to package
  samba-client-libs and remove samba-libs requirement from
  samba-winbind; (bsc#1200964); (bsc#1198255);
- Add sysuser-shadow requirement for packages using
  systemd-sysusers
- Use the canonical realm name to refresh the Kerberos tickets;
  (bsc#1196224); (bso#14979);
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Update to 4.16.2
  * Use pathref fd instead of io fd in vfs_default_durable_cookie;
    (bso#15042);
  * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original
    file had been deleted; (bso#15069);
  * Reintroduce netgroups support; (bso#15087);
  * net ads info shows LDAP Server: 0.0.0.0 depending on contacted
    server; (bso#14674);
  * Update from 4.15  to 4.16 breaks discovery of [homes] on
    standalone server from Win and IOS; (bso#15062);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * smbclient -E doesn't work as advertised; (bso#15075);
  * The samba background daemon doesn't refresh the printcap cache
    on startup; (bso#15081);
  * Out-by-4 error in smbd read reply max_send clamp; (bso#14443);
- Fix samba4.blackbox.net_ads_dns_async test with bind9 &gt;= 9.17.7
- Support building with MIT Kerberos 1.20
- Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC;
  (CVE-2020-17049);
- Resource Based Constrained Delegation (RBCD) for Samba AD DC
- Support building with gcc 12.1
- Use requires_eq macro to require the libldb2 version available at
  samba-dsdb-modules build time; (bsc#1199362);
- Update to 4.16.1
  * Share and server swapped in smbget password prompt; (bso#14831);
  * Durable handles won't reconnect if the leased file is written to;
    (bso#15022);
  * rmdir silently fails if directory contains unreadable files and
    hide unreadable is yes; (bso#15023);
  * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information
    on renamed file handle; (bso#15038);
  * Need to describe --builtin-libraries= better (compare with
  - -bundled-libraries); (bso#8731);
  * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback;
    (bso#14957);
  * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes;
    (bso#15035);
  * PAM Kerberos authentication incorrectly fails with a clock skew
    error; (bso#15046);
  * Username map - samba erroneously applies unix group memberships
    to user account entries; (bso#15041);
  * KVNO off by 100000; (bso#14951);
  * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027);
  * vfs_gpfs recalls=no option prevents listing files; (bso#15055);
  * smbd doesn't handle UPNs for looking up names; (bso#15054);
- Update update-apparmor-samba-profile script, replace
  non-printable delimiter with more human readable separator as
  sed can accept separators that can appear in the input data.
- Fix update-apparmor-samba-profile script, sed doesn't like
  multibyte separators; (bsc#1198309).
- Update to 4.16.0
  * New samba-dcerpcd binary to provide DCERPC in the member server
    setup
  * Certificate Auto Enrollment
  * Ability to add ports to dns forwarder addresses in internal DNS
    backend
  * No longer using Linux mandatory locks for sharemodes
  * SMB1 protocol has been deprecated, particularly older dialects
  * SMB1 protocol SMBCopy command removed
  * SMB1 server-side wildcard expansion removed
- Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101);
- Use systemd-sysusers to create system users; (bsc#1182847);</changelog>
  <changelog author="scabrero@suse.de" date="1671105600">- Update to 4.17.4
  * CVE-2022-44640 Upstream Heimdal free of user-controlled
    pointer in FAST; (bsc#14929);
  * CVE-2021-20251 Bad password count not incremented atomically;
    (bsc#14611);
  * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability;
    (bsc#15203);
  * CVE-2022-37966 rc4-hmac Kerberos session keys issued to
    modern servers; (bso#15237);
  * CVE-2022-37967 Kerberos constrained delegation ticket forgery
    possible against Samba AD DC; (bso#15231);
  * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak
    and should be avoided; (bso#15240);
  * pam_winbind uses time_t and pointers assuming they are of the
    same size; (bso#15224);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * filter-subunit is inefficient with large numbers of
    knownfails; (bso#15258);
  * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories;
    (bso#15252);
  * The KDC logic arround msDs-supportedEncryptionTypes differs
    from Windows; (bso#13135);
  * libnet: change_password() doesn't work with
    dcerpc_samr_ChangePasswordUser4(); (bso#15206);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * Memory leak in snprintf replacement functions; (bso#15230);
  * RODC doesn't reset badPwdCount reliable via an RWDC
    (CVE-2021-20251 regression); (bso#15253);
  * Prevent EBADF errors with vfs_glusterfs; (bso#15198);
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243);
  * Stack smashing in net offlinejoin requestodj; (bso#15257);
  * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue;
    (bso#15197);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
- Remove deprecated if-{down,up} scripts; (bsc#1206444);
- Adjust the systemd drop-in file for named service; (bsc#1201689);
  * Paths are additive so do not repeat paths from named.service
  * Prefix the samba DLZ directory with "-" to ignore this path
    if it does not exists</changelog>
  <changelog author="nopower@suse.com" date="1671624000">- Change with_dc default to 0 (for non TW builds), ADDC feature is
  deprecated and will no longer be included in &gt;= SLE15-SP5;
  (jsc#PED-1122).</changelog>
  <changelog author="nopower@suse.com" date="1673524800">- Clean up logic for PAM migration settings in spec file.</changelog>
  <changelog author="nopower@suse.com" date="1674475200">- libdsdb-module-samba4 should be packaged as part of samba-libs and
  not samba-ad-dc-libs. Additionally no need for it to be
  removed conditionally.</changelog>
  <changelog author="nopower@suse.com" date="1674475201">- Remove non functioning ifup/ifdown samba-winbindd scripts;
  (bsc#1207414).</changelog>
  <changelog author="nopower@suse.com" date="1678363200">- Make samba-libs conflict with old samba-ad-dc-libs package
  to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1679745600">- Make (32bit) samba-libs conflict with old samba-ad-dc-libs
  package to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1681300800">- Update to 4.17.7
  * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords
    in cleartext; (bso#15315); (bsc#1209481).
  * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be
    deleted by unprivileged authenticated users; (bso#15276);
    (bsc#1209483).
  * CVE-2023-0614: samba: Access controlled AD LDAP attributes can
    be discovered; (bso#15270); (bsc#1209485).
  * large_ldap test is inefficient; (bso#15332).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
- Update to 4.17.6
  * streams_xattr is creating unexpected locks on folders;
    (bso#15314).
  * Use of the Azure AD Connect cloud sync tool is now supported
    for password hash synchronisation, allowing Samba AD Domains
    to synchronise passwords with this popular cloud environment;
    (bso#10635).
  * Spotlight doesn't work with latest macOS Ventura;
    (bso#15299).
  * New samba-dcerpc architecture does not scale gracefully;
    (bso#15310).
  * vfs_ceph incorrectly uses fsp_get_io_fd() instead of
    fsp_get_pathref_fd() in close and fstat; (bso#15307).
  * With clustering enabled samba-bgqd can core dump due to use
    after free; (bso#15293).
  * fd_load() function implicitly closes the fd where it should
    not; (bso#15311).
- Update to 4.17.5
  * smbc_getxattr() return value is incorrect; (bso#14808).
  * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not
    handled correctly; (bso#15172).
  * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210).
  * samba-tool gpo listall fails IPv6 only - finddcs() fails to
    find DC when there is only an AAAA record for the DC in DNS;
    (bso#15226).
  * smbd crashes if an FSCTL request is done on a stream handle;
    (bso#15236).
  * DFS links don't work anymore on Mac clients since 4.17;
    (bso#15277).
  * vfs_virusfilter segfault on access, directory edgecase
    (accessing NULL value); (bso#15283).
  * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5)
    based SChannel on NETLOGON (additional changes); (bso#15240).
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243).
  * Shares missing from netshareenum response in samba 4.17.4;
    (bso#15266).
  * ctdb: use-after-free in run_proc; (bso#15269).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * auth3_generate_session_info_pac leaks wbcAuthUserInfo;
    (bso#15286).
  * smbclient segfaults with use after free on an optimized
    build; (bso#15268).
  * smbstatus leaking files in msg.sock and msg.lock;
    (bso#15282).
  * Leak in wbcCtxPingDc2; (bso#15164).
  * Access based share enum does not work in Samba 4.16+;
    (bso#15265).
  * Crash during share enumeration; (bso#15267).
  * rep_listxattr on FreeBSD does not properly check for reads
    off end of returned buffer; (bso#15271).
  * Avoid relying on C89 features in a few places; (bso#15281).</changelog>
  <changelog author="nopower@suse.com" date="1686830400">- Update to 4.17.8
  * log flood: smbd_calculate_access_mask_fsp: Access denied:
    message level should be lower; (bso#15302).
  * Floating point exception (FPE) via cli_pull_send at
    source3/libsmb/clireadwrite.c; (bso#15306).
  * test_tstream_more_tcp_user_timeout_spin fails intermittently
    on Rackspace GitLab runners; (bso#15328).
  * Reduce flapping of ridalloc test; (bso#15329).
  * large_ldap test is unreliable; (bso#15351).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * mdssvc may crash when initializing; (bso#15354).
  * Large directory optimization broken for non-lcomp path
    elements; (bso#15313).
  * streams_depot fails to create streams; (bso#15357).
  * shadow_copy2 and streams_depot don't play well together;
    (bso#15358).
  * wbinfo -u fails on ad dc with &gt;1000 users; (bso#15366).
  * winbindd idmap child contacts the domain controller without a
    need; (bso#15317).
  * idmap_autorid may fail to map sids of trusted domains for the
    first time; (bso#15318).
  * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings;
    (bso#15319).
  * net ads search -P doesn't work against servers in other
    domains; (bso#15323).
  * DS ACEs might be inherited to unrelated object classes;
    (bso#15338).
  * Temporary smbXsrv_tcon_global.tdb can't be parsed;
    (bso#15353).
  * Setting veto files = /.*/ break listing directories;
    (bso#15360); (bsc#1212375).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
  * dsgetdcname: assumes local system uses IPv4; (bso#15325).</changelog>
  <changelog author="nopower@suse.com" date="1688644800">- Update to 4.17.9
  * Backport --pidl-developer fixes; (bso#15404).
  * smbd_scavenger crashes when service smbd is stopped;
    (bso#15275).
  * vfs_fruit might cause a failing open for delete; (bso#15378).
  * named crashes on DLZ zone update; (bso#14030).
  * winbind recurses into itself via rpcd_lsad; (bso#15361).
  * cli_list loops 100% CPU against pre-lanman2 servers;
    (bso#15382).
  * smbclient leaks fds with showacls; (bso#15391).
  * aes256 smb3 encryption algorithms are not allowed in
    smb3_sid_parse(); (bso#15374).
  * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR;
    (bso#15413).
  * smbget memory leak if failed to download files recursively;
    (bso#15403).</changelog>
  <changelog author="nopower@suse.com" date="1689249600">- CVE-2022-2127: lm_resp_len not checked properly in
  winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174).
- CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite
  Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173).
- CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type
  Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172).
- CVE-2023-34968: Spotlight server-side Share Path Disclosure;
  (bso#15388); (bsc#1213171).
- CVE-2023-3347: Samba doesn't require SMB2+ signing if
  `server signing = mandatory` is set; (bso#15397); (bsc#1213170).</changelog>
  <changelog author="nopower@suse.com" date="1689595200">- secure channel faulty since Windows 10/11 update 07/2023;
  (bso#15418); (bsc#1213384).</changelog>
  <changelog author="scabrero@suse.de" date="1690891200">- net ads lookup with unspecified realm fails; (bso#15384);
  (bsc#1213826);</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Move libcluster-samba4.so from samba-libs to samba-client-libs;
  (bsc#1213940);</changelog>
  <changelog author="scabrero@suse.de" date="1692014400">- Fix DFS not working with widelinks enabled; (bsc#1213607);
  (bso#15435);</changelog>
  <changelog author="nopower@suse.com" date="1696420800">- CVE-2023-4091: samba: Client can truncate file with read-only
  permissions; (bsc#1215904); (bso#15439).
- CVE-2023-42669: samba: rpcecho, enabled and running in AD DC,
  allows blocking sleep on request; (bso#1215905); (bso#15474).
- CVE-2023-42670: samba:  The procedure number is out of range
  when starting Active Directory Users and Computers;
  (bsc#1215906); (bso#15473).
- CVE-2023-3961: samba: Unsanitized client pipe name passed to
  local_np_connect(); (bsc#1215907); (bso#15422).
- CVE-2023-4154: samba: dirsync allows SYSTEM access with only
  "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES;
  (bsc#1215908); (bso#15424).</changelog>
  <changelog author="scabrero@suse.de" date="1698062400">- Update to samba 4.17.12
  * Weird filename can cause assert to fail in
    openat_pathref_fsp_nosymlink(); (bso#15419);
  * reply_sesssetup_and_X() can dereference uninitialized tmp
    pointer; (bso#15420);
  * Missing return in reply_exit_done(); (bso#15430);
  * TREE_CONNECT without SETUP causes smbd to use uninitialized
    pointer; (bso#15432);
  * Improve GetNChanges to address some (but not all "Azure AD
    Connect") syncronisation tool looping during the initial user
    sync phase; (bso#15401);
  * Samba replication logs show (null) DN; (bso#15407);
  * Spotlight sometimes returns no results on latest macOS;
    (bso#15342);
  * Renaming results in NT_STATUS_SHARING_VIOLATION if previously
    attempted to remove the destination; (bso#15417);
  * Spotlight results return wrong date in result list; (bso#15427);
  * macOS mdfind returns only 50 results; (bso#15463);
  * 2-3min delays at reconnect with smb2_validate_sequence_number:
    bad message_id 2; (bso#15346);
  * samba-tool ntacl get segfault if aio_pthread appended;
    (bso#15441);
  * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed;
    (bso#15446);
  * File doesn't show when user doesn't have permission if
    aio_pthread is loaded; (bso#15453);
  * net ads lookup (with unspecified realm) fails; (bso#15384);
    (bsc#1213826);
  * Regression DFS not working with widelinks = true; (bso#15435);
    (bsc#1213607);
  * ctdb_killtcp fails to work with --enable-pcap and libpcap 1.9.1;
    (bso#15451);
  * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449);
  * Windows client join fails if a second container CN=System exists
    somewhere; (bso#9959);
- Fix crossing automounter mount points; (bsc#1215212);</changelog>
  <changelog author="scabrero@suse.de" date="1700481600">- Add "net offlinejoin composeodj" command; (bsc#1214076);</changelog>
</package>
<package pkgid="3c02912090575733bd8ec7c909635a380b70b6635d2db6aa3cfc76e0c98a3a00" name="samba-client-libs" arch="s390x">
  <version epoch="0" ver="4.17.12+git.444.922f3bd625" rel="150500.3.17.1"/>
  <changelog author="scabrero@suse.de" date="1669636800">- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);</changelog>
  <changelog author="dmulder@suse.com" date="1669896000">- Introduce without-smb1-server spec flag; (bsc#1205104);
- Update to 4.17.3
  * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit
    systems; (bsc#1205126); (bso#15203);
- Replace obsolete python-gpgme with python-gpg
  * Upstream replaced it in v4.9.5 -- bso#13728
- Update to 4.17.2
  * CVE-2022-3592 [SECURITY] samba: Wide links protection broken;
    (bso#15207); (bsc#1204499).
  * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal
    unwrap_des3();(bso#15134); (bsc#1204254).
- Update to 4.17.1
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * smbXsrv_connection_shutdown_send result leaked; (bso#15174).
  * Flush on a named stream never completes; (bso#15182).
  * Permission denied calling SMBC_getatr when file not exists;
    (bso#15195).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * pytest: add file removal helpers for TestCaseInTempDir;
    (bso#15191).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * Flush on a named stream never completes; (bso#15182).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * multi-channel socket passing may hit a race if one of the
    involved processes already existed; (bso#15200).
  * memory leak on temporary of struct imessaging_post_state and
    struct tevent_immediate on struct imessaging_context (in
    rpcd_spoolss and maybe others); (bso#15201).
  * Since popt1.19 various use after free errors using result of
    poptGetArg are now exposed; (bso#15205); (boo#1204279).
  * Remove special case for O_CREAT in SMB_VFS_OPENAT from
    vfs_glusterfs; (bso#15192).
  * GETPWSID in memory cache grows indefinetly with each NTLM
    auth; (bso#15169).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);
- Fix use after free errors resulting from using return of
  poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205).
- s3: smbd: Fix memory leak in
  smbd_server_connection_terminate_done(); (bso#15174).
- Disable SMB1 for tumbleweed builds.
- Update to 4.17.0
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
    (bso#15153).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * Cross-node multi-channel reconnects result in SMB2 Negotiate
    returning NT_STATUS_NOT_SUPPORTED; (bso#15159).
  * winbind at info level debug can coredump when processing
    wb_lookupusergroups; (bso#15160).
  * Make use of glfs_*at() API calls in vfs_glusterfs;
    (bso#15157).
  * Possible use after free of connection_struct when iterating
    smbd_server_connection-&gt;connections; (bso#15128).
  * `net usershare add` fails with flag works with --long but
    fails with -l; (bso#15145).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Missing READ_LEASE break could cause data corruption;
    (bso#15148).
  * libsamba-errors uses a wrong version number; (bso#15141).
  * SMB1 negotiation can fail to handle connection errors;
    (bso#15152).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * 4.17.rc1 still uses symlink-race prone unix_convert();
    (bso#15144).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Manpage for smbstatus json is missing; (bso#15147).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Fix issues found by coverity in smbstatus json code;
    (bso#15140).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Update to 4.16.4
  * CVE-2022-2031: Samba AD users can bypass certain restrictions
    associated with changing passwords; (bsc#1201495); (bso#15047);
  * CVE-2022-32744: Samba AD users can forge password change
    requests for any user; (bsc#1201493); (bso#15074);
  * CVE-2022-32745: Samba AD users can crash the server process
    with an LDAP add or modify request; (bsc#1201492); (bso#15008);
  * CVE-2022-32746: Samba AD users can induce a use-after-free in
    the server process with an LDAP add or modify request;
    (bsc#1201490); (bso#15009);
  * CVE-2022-32742: Server memory information leak via SMB1;
    (bsc#1201496); (bso#15085);
- Update to 4.16.3
  * Using vfs_streams_xattr and deleting a file causes a panic;
    (bso#15099);
  * Add support for bind 9.18; (bso#14986);
  * logging dsdb audit to specific files does not work;
    (bso#15076);
  * Problem when winbind renews Kerberos; (bso#14979);
    (bsc#1196224);
  * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in
    developer mode; (bso#15095);
  * Crash in streams_xattr because fsp-&gt;base_fsp-&gt;fsp_name is
    NULL; (bso#15105);
  * Crash in rpcd_classic - NULL pointer deference in
    mangle_is_mangled(); (bso#15118);
  * smbclient commands del &amp; deltree fail with
    NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
    (bsc#1200556);
  * Fix check for chown when processing NFSv4 ACL; (bso#15120);
  * The pcap background queue process should not be stopped;
    (bso#15082);
  * testparm: Fix typo in idmap rangesize check; (bso#15097);
  * net ads info returns LDAP server and LDAP server name as
    null; (bso#15106);
  * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;
    (bso#15108);
  * CTDB child process logging does not work as expected;
    (bso#15090);
- Update spec file to fix the optional Heimdal DC build
- Fix external trusts with MIT Kerberos 1.20
- Add missing samba-client requirement to samba-winbind package;
  (bsc#1198255);
- Move pdb backends from package samba-libs to package
  samba-client-libs and remove samba-libs requirement from
  samba-winbind; (bsc#1200964); (bsc#1198255);
- Add sysuser-shadow requirement for packages using
  systemd-sysusers
- Use the canonical realm name to refresh the Kerberos tickets;
  (bsc#1196224); (bso#14979);
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Update to 4.16.2
  * Use pathref fd instead of io fd in vfs_default_durable_cookie;
    (bso#15042);
  * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original
    file had been deleted; (bso#15069);
  * Reintroduce netgroups support; (bso#15087);
  * net ads info shows LDAP Server: 0.0.0.0 depending on contacted
    server; (bso#14674);
  * Update from 4.15  to 4.16 breaks discovery of [homes] on
    standalone server from Win and IOS; (bso#15062);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * smbclient -E doesn't work as advertised; (bso#15075);
  * The samba background daemon doesn't refresh the printcap cache
    on startup; (bso#15081);
  * Out-by-4 error in smbd read reply max_send clamp; (bso#14443);
- Fix samba4.blackbox.net_ads_dns_async test with bind9 &gt;= 9.17.7
- Support building with MIT Kerberos 1.20
- Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC;
  (CVE-2020-17049);
- Resource Based Constrained Delegation (RBCD) for Samba AD DC
- Support building with gcc 12.1
- Use requires_eq macro to require the libldb2 version available at
  samba-dsdb-modules build time; (bsc#1199362);
- Update to 4.16.1
  * Share and server swapped in smbget password prompt; (bso#14831);
  * Durable handles won't reconnect if the leased file is written to;
    (bso#15022);
  * rmdir silently fails if directory contains unreadable files and
    hide unreadable is yes; (bso#15023);
  * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information
    on renamed file handle; (bso#15038);
  * Need to describe --builtin-libraries= better (compare with
  - -bundled-libraries); (bso#8731);
  * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback;
    (bso#14957);
  * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes;
    (bso#15035);
  * PAM Kerberos authentication incorrectly fails with a clock skew
    error; (bso#15046);
  * Username map - samba erroneously applies unix group memberships
    to user account entries; (bso#15041);
  * KVNO off by 100000; (bso#14951);
  * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027);
  * vfs_gpfs recalls=no option prevents listing files; (bso#15055);
  * smbd doesn't handle UPNs for looking up names; (bso#15054);
- Update update-apparmor-samba-profile script, replace
  non-printable delimiter with more human readable separator as
  sed can accept separators that can appear in the input data.
- Fix update-apparmor-samba-profile script, sed doesn't like
  multibyte separators; (bsc#1198309).
- Update to 4.16.0
  * New samba-dcerpcd binary to provide DCERPC in the member server
    setup
  * Certificate Auto Enrollment
  * Ability to add ports to dns forwarder addresses in internal DNS
    backend
  * No longer using Linux mandatory locks for sharemodes
  * SMB1 protocol has been deprecated, particularly older dialects
  * SMB1 protocol SMBCopy command removed
  * SMB1 server-side wildcard expansion removed
- Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101);
- Use systemd-sysusers to create system users; (bsc#1182847);</changelog>
  <changelog author="scabrero@suse.de" date="1671105600">- Update to 4.17.4
  * CVE-2022-44640 Upstream Heimdal free of user-controlled
    pointer in FAST; (bsc#14929);
  * CVE-2021-20251 Bad password count not incremented atomically;
    (bsc#14611);
  * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability;
    (bsc#15203);
  * CVE-2022-37966 rc4-hmac Kerberos session keys issued to
    modern servers; (bso#15237);
  * CVE-2022-37967 Kerberos constrained delegation ticket forgery
    possible against Samba AD DC; (bso#15231);
  * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak
    and should be avoided; (bso#15240);
  * pam_winbind uses time_t and pointers assuming they are of the
    same size; (bso#15224);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * filter-subunit is inefficient with large numbers of
    knownfails; (bso#15258);
  * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories;
    (bso#15252);
  * The KDC logic arround msDs-supportedEncryptionTypes differs
    from Windows; (bso#13135);
  * libnet: change_password() doesn't work with
    dcerpc_samr_ChangePasswordUser4(); (bso#15206);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * Memory leak in snprintf replacement functions; (bso#15230);
  * RODC doesn't reset badPwdCount reliable via an RWDC
    (CVE-2021-20251 regression); (bso#15253);
  * Prevent EBADF errors with vfs_glusterfs; (bso#15198);
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243);
  * Stack smashing in net offlinejoin requestodj; (bso#15257);
  * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue;
    (bso#15197);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
- Remove deprecated if-{down,up} scripts; (bsc#1206444);
- Adjust the systemd drop-in file for named service; (bsc#1201689);
  * Paths are additive so do not repeat paths from named.service
  * Prefix the samba DLZ directory with "-" to ignore this path
    if it does not exists</changelog>
  <changelog author="nopower@suse.com" date="1671624000">- Change with_dc default to 0 (for non TW builds), ADDC feature is
  deprecated and will no longer be included in &gt;= SLE15-SP5;
  (jsc#PED-1122).</changelog>
  <changelog author="nopower@suse.com" date="1673524800">- Clean up logic for PAM migration settings in spec file.</changelog>
  <changelog author="nopower@suse.com" date="1674475200">- libdsdb-module-samba4 should be packaged as part of samba-libs and
  not samba-ad-dc-libs. Additionally no need for it to be
  removed conditionally.</changelog>
  <changelog author="nopower@suse.com" date="1674475201">- Remove non functioning ifup/ifdown samba-winbindd scripts;
  (bsc#1207414).</changelog>
  <changelog author="nopower@suse.com" date="1678363200">- Make samba-libs conflict with old samba-ad-dc-libs package
  to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1679745600">- Make (32bit) samba-libs conflict with old samba-ad-dc-libs
  package to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1681300800">- Update to 4.17.7
  * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords
    in cleartext; (bso#15315); (bsc#1209481).
  * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be
    deleted by unprivileged authenticated users; (bso#15276);
    (bsc#1209483).
  * CVE-2023-0614: samba: Access controlled AD LDAP attributes can
    be discovered; (bso#15270); (bsc#1209485).
  * large_ldap test is inefficient; (bso#15332).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
- Update to 4.17.6
  * streams_xattr is creating unexpected locks on folders;
    (bso#15314).
  * Use of the Azure AD Connect cloud sync tool is now supported
    for password hash synchronisation, allowing Samba AD Domains
    to synchronise passwords with this popular cloud environment;
    (bso#10635).
  * Spotlight doesn't work with latest macOS Ventura;
    (bso#15299).
  * New samba-dcerpc architecture does not scale gracefully;
    (bso#15310).
  * vfs_ceph incorrectly uses fsp_get_io_fd() instead of
    fsp_get_pathref_fd() in close and fstat; (bso#15307).
  * With clustering enabled samba-bgqd can core dump due to use
    after free; (bso#15293).
  * fd_load() function implicitly closes the fd where it should
    not; (bso#15311).
- Update to 4.17.5
  * smbc_getxattr() return value is incorrect; (bso#14808).
  * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not
    handled correctly; (bso#15172).
  * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210).
  * samba-tool gpo listall fails IPv6 only - finddcs() fails to
    find DC when there is only an AAAA record for the DC in DNS;
    (bso#15226).
  * smbd crashes if an FSCTL request is done on a stream handle;
    (bso#15236).
  * DFS links don't work anymore on Mac clients since 4.17;
    (bso#15277).
  * vfs_virusfilter segfault on access, directory edgecase
    (accessing NULL value); (bso#15283).
  * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5)
    based SChannel on NETLOGON (additional changes); (bso#15240).
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243).
  * Shares missing from netshareenum response in samba 4.17.4;
    (bso#15266).
  * ctdb: use-after-free in run_proc; (bso#15269).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * auth3_generate_session_info_pac leaks wbcAuthUserInfo;
    (bso#15286).
  * smbclient segfaults with use after free on an optimized
    build; (bso#15268).
  * smbstatus leaking files in msg.sock and msg.lock;
    (bso#15282).
  * Leak in wbcCtxPingDc2; (bso#15164).
  * Access based share enum does not work in Samba 4.16+;
    (bso#15265).
  * Crash during share enumeration; (bso#15267).
  * rep_listxattr on FreeBSD does not properly check for reads
    off end of returned buffer; (bso#15271).
  * Avoid relying on C89 features in a few places; (bso#15281).</changelog>
  <changelog author="nopower@suse.com" date="1686830400">- Update to 4.17.8
  * log flood: smbd_calculate_access_mask_fsp: Access denied:
    message level should be lower; (bso#15302).
  * Floating point exception (FPE) via cli_pull_send at
    source3/libsmb/clireadwrite.c; (bso#15306).
  * test_tstream_more_tcp_user_timeout_spin fails intermittently
    on Rackspace GitLab runners; (bso#15328).
  * Reduce flapping of ridalloc test; (bso#15329).
  * large_ldap test is unreliable; (bso#15351).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * mdssvc may crash when initializing; (bso#15354).
  * Large directory optimization broken for non-lcomp path
    elements; (bso#15313).
  * streams_depot fails to create streams; (bso#15357).
  * shadow_copy2 and streams_depot don't play well together;
    (bso#15358).
  * wbinfo -u fails on ad dc with &gt;1000 users; (bso#15366).
  * winbindd idmap child contacts the domain controller without a
    need; (bso#15317).
  * idmap_autorid may fail to map sids of trusted domains for the
    first time; (bso#15318).
  * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings;
    (bso#15319).
  * net ads search -P doesn't work against servers in other
    domains; (bso#15323).
  * DS ACEs might be inherited to unrelated object classes;
    (bso#15338).
  * Temporary smbXsrv_tcon_global.tdb can't be parsed;
    (bso#15353).
  * Setting veto files = /.*/ break listing directories;
    (bso#15360); (bsc#1212375).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
  * dsgetdcname: assumes local system uses IPv4; (bso#15325).</changelog>
  <changelog author="nopower@suse.com" date="1688644800">- Update to 4.17.9
  * Backport --pidl-developer fixes; (bso#15404).
  * smbd_scavenger crashes when service smbd is stopped;
    (bso#15275).
  * vfs_fruit might cause a failing open for delete; (bso#15378).
  * named crashes on DLZ zone update; (bso#14030).
  * winbind recurses into itself via rpcd_lsad; (bso#15361).
  * cli_list loops 100% CPU against pre-lanman2 servers;
    (bso#15382).
  * smbclient leaks fds with showacls; (bso#15391).
  * aes256 smb3 encryption algorithms are not allowed in
    smb3_sid_parse(); (bso#15374).
  * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR;
    (bso#15413).
  * smbget memory leak if failed to download files recursively;
    (bso#15403).</changelog>
  <changelog author="nopower@suse.com" date="1689249600">- CVE-2022-2127: lm_resp_len not checked properly in
  winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174).
- CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite
  Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173).
- CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type
  Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172).
- CVE-2023-34968: Spotlight server-side Share Path Disclosure;
  (bso#15388); (bsc#1213171).
- CVE-2023-3347: Samba doesn't require SMB2+ signing if
  `server signing = mandatory` is set; (bso#15397); (bsc#1213170).</changelog>
  <changelog author="nopower@suse.com" date="1689595200">- secure channel faulty since Windows 10/11 update 07/2023;
  (bso#15418); (bsc#1213384).</changelog>
  <changelog author="scabrero@suse.de" date="1690891200">- net ads lookup with unspecified realm fails; (bso#15384);
  (bsc#1213826);</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Move libcluster-samba4.so from samba-libs to samba-client-libs;
  (bsc#1213940);</changelog>
  <changelog author="scabrero@suse.de" date="1692014400">- Fix DFS not working with widelinks enabled; (bsc#1213607);
  (bso#15435);</changelog>
  <changelog author="nopower@suse.com" date="1696420800">- CVE-2023-4091: samba: Client can truncate file with read-only
  permissions; (bsc#1215904); (bso#15439).
- CVE-2023-42669: samba: rpcecho, enabled and running in AD DC,
  allows blocking sleep on request; (bso#1215905); (bso#15474).
- CVE-2023-42670: samba:  The procedure number is out of range
  when starting Active Directory Users and Computers;
  (bsc#1215906); (bso#15473).
- CVE-2023-3961: samba: Unsanitized client pipe name passed to
  local_np_connect(); (bsc#1215907); (bso#15422).
- CVE-2023-4154: samba: dirsync allows SYSTEM access with only
  "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES;
  (bsc#1215908); (bso#15424).</changelog>
  <changelog author="scabrero@suse.de" date="1698062400">- Update to samba 4.17.12
  * Weird filename can cause assert to fail in
    openat_pathref_fsp_nosymlink(); (bso#15419);
  * reply_sesssetup_and_X() can dereference uninitialized tmp
    pointer; (bso#15420);
  * Missing return in reply_exit_done(); (bso#15430);
  * TREE_CONNECT without SETUP causes smbd to use uninitialized
    pointer; (bso#15432);
  * Improve GetNChanges to address some (but not all "Azure AD
    Connect") syncronisation tool looping during the initial user
    sync phase; (bso#15401);
  * Samba replication logs show (null) DN; (bso#15407);
  * Spotlight sometimes returns no results on latest macOS;
    (bso#15342);
  * Renaming results in NT_STATUS_SHARING_VIOLATION if previously
    attempted to remove the destination; (bso#15417);
  * Spotlight results return wrong date in result list; (bso#15427);
  * macOS mdfind returns only 50 results; (bso#15463);
  * 2-3min delays at reconnect with smb2_validate_sequence_number:
    bad message_id 2; (bso#15346);
  * samba-tool ntacl get segfault if aio_pthread appended;
    (bso#15441);
  * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed;
    (bso#15446);
  * File doesn't show when user doesn't have permission if
    aio_pthread is loaded; (bso#15453);
  * net ads lookup (with unspecified realm) fails; (bso#15384);
    (bsc#1213826);
  * Regression DFS not working with widelinks = true; (bso#15435);
    (bsc#1213607);
  * ctdb_killtcp fails to work with --enable-pcap and libpcap 1.9.1;
    (bso#15451);
  * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449);
  * Windows client join fails if a second container CN=System exists
    somewhere; (bso#9959);
- Fix crossing automounter mount points; (bsc#1215212);</changelog>
  <changelog author="scabrero@suse.de" date="1700481600">- Add "net offlinejoin composeodj" command; (bsc#1214076);</changelog>
</package>
<package pkgid="ddde2d0429b9a806ea1e1e478015a46109e99c29a974fc20c753fe49df045b97" name="samba-client-libs" arch="x86_64">
  <version epoch="0" ver="4.17.12+git.444.922f3bd625" rel="150500.3.17.1"/>
  <changelog author="scabrero@suse.de" date="1669636800">- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);</changelog>
  <changelog author="dmulder@suse.com" date="1669896000">- Introduce without-smb1-server spec flag; (bsc#1205104);
- Update to 4.17.3
  * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit
    systems; (bsc#1205126); (bso#15203);
- Replace obsolete python-gpgme with python-gpg
  * Upstream replaced it in v4.9.5 -- bso#13728
- Update to 4.17.2
  * CVE-2022-3592 [SECURITY] samba: Wide links protection broken;
    (bso#15207); (bsc#1204499).
  * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal
    unwrap_des3();(bso#15134); (bsc#1204254).
- Update to 4.17.1
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * smbXsrv_connection_shutdown_send result leaked; (bso#15174).
  * Flush on a named stream never completes; (bso#15182).
  * Permission denied calling SMBC_getatr when file not exists;
    (bso#15195).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * pytest: add file removal helpers for TestCaseInTempDir;
    (bso#15191).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * Flush on a named stream never completes; (bso#15182).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * multi-channel socket passing may hit a race if one of the
    involved processes already existed; (bso#15200).
  * memory leak on temporary of struct imessaging_post_state and
    struct tevent_immediate on struct imessaging_context (in
    rpcd_spoolss and maybe others); (bso#15201).
  * Since popt1.19 various use after free errors using result of
    poptGetArg are now exposed; (bso#15205); (boo#1204279).
  * Remove special case for O_CREAT in SMB_VFS_OPENAT from
    vfs_glusterfs; (bso#15192).
  * GETPWSID in memory cache grows indefinetly with each NTLM
    auth; (bso#15169).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);
- Fix use after free errors resulting from using return of
  poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205).
- s3: smbd: Fix memory leak in
  smbd_server_connection_terminate_done(); (bso#15174).
- Disable SMB1 for tumbleweed builds.
- Update to 4.17.0
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
    (bso#15153).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * Cross-node multi-channel reconnects result in SMB2 Negotiate
    returning NT_STATUS_NOT_SUPPORTED; (bso#15159).
  * winbind at info level debug can coredump when processing
    wb_lookupusergroups; (bso#15160).
  * Make use of glfs_*at() API calls in vfs_glusterfs;
    (bso#15157).
  * Possible use after free of connection_struct when iterating
    smbd_server_connection-&gt;connections; (bso#15128).
  * `net usershare add` fails with flag works with --long but
    fails with -l; (bso#15145).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Missing READ_LEASE break could cause data corruption;
    (bso#15148).
  * libsamba-errors uses a wrong version number; (bso#15141).
  * SMB1 negotiation can fail to handle connection errors;
    (bso#15152).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * 4.17.rc1 still uses symlink-race prone unix_convert();
    (bso#15144).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Manpage for smbstatus json is missing; (bso#15147).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Fix issues found by coverity in smbstatus json code;
    (bso#15140).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Update to 4.16.4
  * CVE-2022-2031: Samba AD users can bypass certain restrictions
    associated with changing passwords; (bsc#1201495); (bso#15047);
  * CVE-2022-32744: Samba AD users can forge password change
    requests for any user; (bsc#1201493); (bso#15074);
  * CVE-2022-32745: Samba AD users can crash the server process
    with an LDAP add or modify request; (bsc#1201492); (bso#15008);
  * CVE-2022-32746: Samba AD users can induce a use-after-free in
    the server process with an LDAP add or modify request;
    (bsc#1201490); (bso#15009);
  * CVE-2022-32742: Server memory information leak via SMB1;
    (bsc#1201496); (bso#15085);
- Update to 4.16.3
  * Using vfs_streams_xattr and deleting a file causes a panic;
    (bso#15099);
  * Add support for bind 9.18; (bso#14986);
  * logging dsdb audit to specific files does not work;
    (bso#15076);
  * Problem when winbind renews Kerberos; (bso#14979);
    (bsc#1196224);
  * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in
    developer mode; (bso#15095);
  * Crash in streams_xattr because fsp-&gt;base_fsp-&gt;fsp_name is
    NULL; (bso#15105);
  * Crash in rpcd_classic - NULL pointer deference in
    mangle_is_mangled(); (bso#15118);
  * smbclient commands del &amp; deltree fail with
    NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
    (bsc#1200556);
  * Fix check for chown when processing NFSv4 ACL; (bso#15120);
  * The pcap background queue process should not be stopped;
    (bso#15082);
  * testparm: Fix typo in idmap rangesize check; (bso#15097);
  * net ads info returns LDAP server and LDAP server name as
    null; (bso#15106);
  * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;
    (bso#15108);
  * CTDB child process logging does not work as expected;
    (bso#15090);
- Update spec file to fix the optional Heimdal DC build
- Fix external trusts with MIT Kerberos 1.20
- Add missing samba-client requirement to samba-winbind package;
  (bsc#1198255);
- Move pdb backends from package samba-libs to package
  samba-client-libs and remove samba-libs requirement from
  samba-winbind; (bsc#1200964); (bsc#1198255);
- Add sysuser-shadow requirement for packages using
  systemd-sysusers
- Use the canonical realm name to refresh the Kerberos tickets;
  (bsc#1196224); (bso#14979);
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Update to 4.16.2
  * Use pathref fd instead of io fd in vfs_default_durable_cookie;
    (bso#15042);
  * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original
    file had been deleted; (bso#15069);
  * Reintroduce netgroups support; (bso#15087);
  * net ads info shows LDAP Server: 0.0.0.0 depending on contacted
    server; (bso#14674);
  * Update from 4.15  to 4.16 breaks discovery of [homes] on
    standalone server from Win and IOS; (bso#15062);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * smbclient -E doesn't work as advertised; (bso#15075);
  * The samba background daemon doesn't refresh the printcap cache
    on startup; (bso#15081);
  * Out-by-4 error in smbd read reply max_send clamp; (bso#14443);
- Fix samba4.blackbox.net_ads_dns_async test with bind9 &gt;= 9.17.7
- Support building with MIT Kerberos 1.20
- Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC;
  (CVE-2020-17049);
- Resource Based Constrained Delegation (RBCD) for Samba AD DC
- Support building with gcc 12.1
- Use requires_eq macro to require the libldb2 version available at
  samba-dsdb-modules build time; (bsc#1199362);
- Update to 4.16.1
  * Share and server swapped in smbget password prompt; (bso#14831);
  * Durable handles won't reconnect if the leased file is written to;
    (bso#15022);
  * rmdir silently fails if directory contains unreadable files and
    hide unreadable is yes; (bso#15023);
  * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information
    on renamed file handle; (bso#15038);
  * Need to describe --builtin-libraries= better (compare with
  - -bundled-libraries); (bso#8731);
  * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback;
    (bso#14957);
  * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes;
    (bso#15035);
  * PAM Kerberos authentication incorrectly fails with a clock skew
    error; (bso#15046);
  * Username map - samba erroneously applies unix group memberships
    to user account entries; (bso#15041);
  * KVNO off by 100000; (bso#14951);
  * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027);
  * vfs_gpfs recalls=no option prevents listing files; (bso#15055);
  * smbd doesn't handle UPNs for looking up names; (bso#15054);
- Update update-apparmor-samba-profile script, replace
  non-printable delimiter with more human readable separator as
  sed can accept separators that can appear in the input data.
- Fix update-apparmor-samba-profile script, sed doesn't like
  multibyte separators; (bsc#1198309).
- Update to 4.16.0
  * New samba-dcerpcd binary to provide DCERPC in the member server
    setup
  * Certificate Auto Enrollment
  * Ability to add ports to dns forwarder addresses in internal DNS
    backend
  * No longer using Linux mandatory locks for sharemodes
  * SMB1 protocol has been deprecated, particularly older dialects
  * SMB1 protocol SMBCopy command removed
  * SMB1 server-side wildcard expansion removed
- Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101);
- Use systemd-sysusers to create system users; (bsc#1182847);</changelog>
  <changelog author="scabrero@suse.de" date="1671105600">- Update to 4.17.4
  * CVE-2022-44640 Upstream Heimdal free of user-controlled
    pointer in FAST; (bsc#14929);
  * CVE-2021-20251 Bad password count not incremented atomically;
    (bsc#14611);
  * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability;
    (bsc#15203);
  * CVE-2022-37966 rc4-hmac Kerberos session keys issued to
    modern servers; (bso#15237);
  * CVE-2022-37967 Kerberos constrained delegation ticket forgery
    possible against Samba AD DC; (bso#15231);
  * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak
    and should be avoided; (bso#15240);
  * pam_winbind uses time_t and pointers assuming they are of the
    same size; (bso#15224);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * filter-subunit is inefficient with large numbers of
    knownfails; (bso#15258);
  * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories;
    (bso#15252);
  * The KDC logic arround msDs-supportedEncryptionTypes differs
    from Windows; (bso#13135);
  * libnet: change_password() doesn't work with
    dcerpc_samr_ChangePasswordUser4(); (bso#15206);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * Memory leak in snprintf replacement functions; (bso#15230);
  * RODC doesn't reset badPwdCount reliable via an RWDC
    (CVE-2021-20251 regression); (bso#15253);
  * Prevent EBADF errors with vfs_glusterfs; (bso#15198);
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243);
  * Stack smashing in net offlinejoin requestodj; (bso#15257);
  * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue;
    (bso#15197);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
- Remove deprecated if-{down,up} scripts; (bsc#1206444);
- Adjust the systemd drop-in file for named service; (bsc#1201689);
  * Paths are additive so do not repeat paths from named.service
  * Prefix the samba DLZ directory with "-" to ignore this path
    if it does not exists</changelog>
  <changelog author="nopower@suse.com" date="1671624000">- Change with_dc default to 0 (for non TW builds), ADDC feature is
  deprecated and will no longer be included in &gt;= SLE15-SP5;
  (jsc#PED-1122).</changelog>
  <changelog author="nopower@suse.com" date="1673524800">- Clean up logic for PAM migration settings in spec file.</changelog>
  <changelog author="nopower@suse.com" date="1674475200">- libdsdb-module-samba4 should be packaged as part of samba-libs and
  not samba-ad-dc-libs. Additionally no need for it to be
  removed conditionally.</changelog>
  <changelog author="nopower@suse.com" date="1674475201">- Remove non functioning ifup/ifdown samba-winbindd scripts;
  (bsc#1207414).</changelog>
  <changelog author="nopower@suse.com" date="1678363200">- Make samba-libs conflict with old samba-ad-dc-libs package
  to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1679745600">- Make (32bit) samba-libs conflict with old samba-ad-dc-libs
  package to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1681300800">- Update to 4.17.7
  * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords
    in cleartext; (bso#15315); (bsc#1209481).
  * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be
    deleted by unprivileged authenticated users; (bso#15276);
    (bsc#1209483).
  * CVE-2023-0614: samba: Access controlled AD LDAP attributes can
    be discovered; (bso#15270); (bsc#1209485).
  * large_ldap test is inefficient; (bso#15332).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
- Update to 4.17.6
  * streams_xattr is creating unexpected locks on folders;
    (bso#15314).
  * Use of the Azure AD Connect cloud sync tool is now supported
    for password hash synchronisation, allowing Samba AD Domains
    to synchronise passwords with this popular cloud environment;
    (bso#10635).
  * Spotlight doesn't work with latest macOS Ventura;
    (bso#15299).
  * New samba-dcerpc architecture does not scale gracefully;
    (bso#15310).
  * vfs_ceph incorrectly uses fsp_get_io_fd() instead of
    fsp_get_pathref_fd() in close and fstat; (bso#15307).
  * With clustering enabled samba-bgqd can core dump due to use
    after free; (bso#15293).
  * fd_load() function implicitly closes the fd where it should
    not; (bso#15311).
- Update to 4.17.5
  * smbc_getxattr() return value is incorrect; (bso#14808).
  * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not
    handled correctly; (bso#15172).
  * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210).
  * samba-tool gpo listall fails IPv6 only - finddcs() fails to
    find DC when there is only an AAAA record for the DC in DNS;
    (bso#15226).
  * smbd crashes if an FSCTL request is done on a stream handle;
    (bso#15236).
  * DFS links don't work anymore on Mac clients since 4.17;
    (bso#15277).
  * vfs_virusfilter segfault on access, directory edgecase
    (accessing NULL value); (bso#15283).
  * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5)
    based SChannel on NETLOGON (additional changes); (bso#15240).
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243).
  * Shares missing from netshareenum response in samba 4.17.4;
    (bso#15266).
  * ctdb: use-after-free in run_proc; (bso#15269).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * auth3_generate_session_info_pac leaks wbcAuthUserInfo;
    (bso#15286).
  * smbclient segfaults with use after free on an optimized
    build; (bso#15268).
  * smbstatus leaking files in msg.sock and msg.lock;
    (bso#15282).
  * Leak in wbcCtxPingDc2; (bso#15164).
  * Access based share enum does not work in Samba 4.16+;
    (bso#15265).
  * Crash during share enumeration; (bso#15267).
  * rep_listxattr on FreeBSD does not properly check for reads
    off end of returned buffer; (bso#15271).
  * Avoid relying on C89 features in a few places; (bso#15281).</changelog>
  <changelog author="nopower@suse.com" date="1686830400">- Update to 4.17.8
  * log flood: smbd_calculate_access_mask_fsp: Access denied:
    message level should be lower; (bso#15302).
  * Floating point exception (FPE) via cli_pull_send at
    source3/libsmb/clireadwrite.c; (bso#15306).
  * test_tstream_more_tcp_user_timeout_spin fails intermittently
    on Rackspace GitLab runners; (bso#15328).
  * Reduce flapping of ridalloc test; (bso#15329).
  * large_ldap test is unreliable; (bso#15351).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * mdssvc may crash when initializing; (bso#15354).
  * Large directory optimization broken for non-lcomp path
    elements; (bso#15313).
  * streams_depot fails to create streams; (bso#15357).
  * shadow_copy2 and streams_depot don't play well together;
    (bso#15358).
  * wbinfo -u fails on ad dc with &gt;1000 users; (bso#15366).
  * winbindd idmap child contacts the domain controller without a
    need; (bso#15317).
  * idmap_autorid may fail to map sids of trusted domains for the
    first time; (bso#15318).
  * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings;
    (bso#15319).
  * net ads search -P doesn't work against servers in other
    domains; (bso#15323).
  * DS ACEs might be inherited to unrelated object classes;
    (bso#15338).
  * Temporary smbXsrv_tcon_global.tdb can't be parsed;
    (bso#15353).
  * Setting veto files = /.*/ break listing directories;
    (bso#15360); (bsc#1212375).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
  * dsgetdcname: assumes local system uses IPv4; (bso#15325).</changelog>
  <changelog author="nopower@suse.com" date="1688644800">- Update to 4.17.9
  * Backport --pidl-developer fixes; (bso#15404).
  * smbd_scavenger crashes when service smbd is stopped;
    (bso#15275).
  * vfs_fruit might cause a failing open for delete; (bso#15378).
  * named crashes on DLZ zone update; (bso#14030).
  * winbind recurses into itself via rpcd_lsad; (bso#15361).
  * cli_list loops 100% CPU against pre-lanman2 servers;
    (bso#15382).
  * smbclient leaks fds with showacls; (bso#15391).
  * aes256 smb3 encryption algorithms are not allowed in
    smb3_sid_parse(); (bso#15374).
  * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR;
    (bso#15413).
  * smbget memory leak if failed to download files recursively;
    (bso#15403).</changelog>
  <changelog author="nopower@suse.com" date="1689249600">- CVE-2022-2127: lm_resp_len not checked properly in
  winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174).
- CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite
  Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173).
- CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type
  Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172).
- CVE-2023-34968: Spotlight server-side Share Path Disclosure;
  (bso#15388); (bsc#1213171).
- CVE-2023-3347: Samba doesn't require SMB2+ signing if
  `server signing = mandatory` is set; (bso#15397); (bsc#1213170).</changelog>
  <changelog author="nopower@suse.com" date="1689595200">- secure channel faulty since Windows 10/11 update 07/2023;
  (bso#15418); (bsc#1213384).</changelog>
  <changelog author="scabrero@suse.de" date="1690891200">- net ads lookup with unspecified realm fails; (bso#15384);
  (bsc#1213826);</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Move libcluster-samba4.so from samba-libs to samba-client-libs;
  (bsc#1213940);</changelog>
  <changelog author="scabrero@suse.de" date="1692014400">- Fix DFS not working with widelinks enabled; (bsc#1213607);
  (bso#15435);</changelog>
  <changelog author="nopower@suse.com" date="1696420800">- CVE-2023-4091: samba: Client can truncate file with read-only
  permissions; (bsc#1215904); (bso#15439).
- CVE-2023-42669: samba: rpcecho, enabled and running in AD DC,
  allows blocking sleep on request; (bso#1215905); (bso#15474).
- CVE-2023-42670: samba:  The procedure number is out of range
  when starting Active Directory Users and Computers;
  (bsc#1215906); (bso#15473).
- CVE-2023-3961: samba: Unsanitized client pipe name passed to
  local_np_connect(); (bsc#1215907); (bso#15422).
- CVE-2023-4154: samba: dirsync allows SYSTEM access with only
  "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES;
  (bsc#1215908); (bso#15424).</changelog>
  <changelog author="scabrero@suse.de" date="1698062400">- Update to samba 4.17.12
  * Weird filename can cause assert to fail in
    openat_pathref_fsp_nosymlink(); (bso#15419);
  * reply_sesssetup_and_X() can dereference uninitialized tmp
    pointer; (bso#15420);
  * Missing return in reply_exit_done(); (bso#15430);
  * TREE_CONNECT without SETUP causes smbd to use uninitialized
    pointer; (bso#15432);
  * Improve GetNChanges to address some (but not all "Azure AD
    Connect") syncronisation tool looping during the initial user
    sync phase; (bso#15401);
  * Samba replication logs show (null) DN; (bso#15407);
  * Spotlight sometimes returns no results on latest macOS;
    (bso#15342);
  * Renaming results in NT_STATUS_SHARING_VIOLATION if previously
    attempted to remove the destination; (bso#15417);
  * Spotlight results return wrong date in result list; (bso#15427);
  * macOS mdfind returns only 50 results; (bso#15463);
  * 2-3min delays at reconnect with smb2_validate_sequence_number:
    bad message_id 2; (bso#15346);
  * samba-tool ntacl get segfault if aio_pthread appended;
    (bso#15441);
  * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed;
    (bso#15446);
  * File doesn't show when user doesn't have permission if
    aio_pthread is loaded; (bso#15453);
  * net ads lookup (with unspecified realm) fails; (bso#15384);
    (bsc#1213826);
  * Regression DFS not working with widelinks = true; (bso#15435);
    (bsc#1213607);
  * ctdb_killtcp fails to work with --enable-pcap and libpcap 1.9.1;
    (bso#15451);
  * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449);
  * Windows client join fails if a second container CN=System exists
    somewhere; (bso#9959);
- Fix crossing automounter mount points; (bsc#1215212);</changelog>
  <changelog author="scabrero@suse.de" date="1700481600">- Add "net offlinejoin composeodj" command; (bsc#1214076);</changelog>
</package>
<package pkgid="578399429dd4700cd21f2406f9b2f6c3782b8e22ca534ca30009ad5bc74930c2" name="samba-client-libs" arch="aarch64">
  <version epoch="0" ver="4.17.12+git.455.b299ac1e60" rel="150500.3.20.1"/>
  <changelog author="dmulder@suse.com" date="1669896000">- Introduce without-smb1-server spec flag; (bsc#1205104);
- Update to 4.17.3
  * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit
    systems; (bsc#1205126); (bso#15203);
- Replace obsolete python-gpgme with python-gpg
  * Upstream replaced it in v4.9.5 -- bso#13728
- Update to 4.17.2
  * CVE-2022-3592 [SECURITY] samba: Wide links protection broken;
    (bso#15207); (bsc#1204499).
  * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal
    unwrap_des3();(bso#15134); (bsc#1204254).
- Update to 4.17.1
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * smbXsrv_connection_shutdown_send result leaked; (bso#15174).
  * Flush on a named stream never completes; (bso#15182).
  * Permission denied calling SMBC_getatr when file not exists;
    (bso#15195).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * pytest: add file removal helpers for TestCaseInTempDir;
    (bso#15191).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * Flush on a named stream never completes; (bso#15182).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * multi-channel socket passing may hit a race if one of the
    involved processes already existed; (bso#15200).
  * memory leak on temporary of struct imessaging_post_state and
    struct tevent_immediate on struct imessaging_context (in
    rpcd_spoolss and maybe others); (bso#15201).
  * Since popt1.19 various use after free errors using result of
    poptGetArg are now exposed; (bso#15205); (boo#1204279).
  * Remove special case for O_CREAT in SMB_VFS_OPENAT from
    vfs_glusterfs; (bso#15192).
  * GETPWSID in memory cache grows indefinetly with each NTLM
    auth; (bso#15169).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);
- Fix use after free errors resulting from using return of
  poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205).
- s3: smbd: Fix memory leak in
  smbd_server_connection_terminate_done(); (bso#15174).
- Disable SMB1 for tumbleweed builds.
- Update to 4.17.0
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
    (bso#15153).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * Cross-node multi-channel reconnects result in SMB2 Negotiate
    returning NT_STATUS_NOT_SUPPORTED; (bso#15159).
  * winbind at info level debug can coredump when processing
    wb_lookupusergroups; (bso#15160).
  * Make use of glfs_*at() API calls in vfs_glusterfs;
    (bso#15157).
  * Possible use after free of connection_struct when iterating
    smbd_server_connection-&gt;connections; (bso#15128).
  * `net usershare add` fails with flag works with --long but
    fails with -l; (bso#15145).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Missing READ_LEASE break could cause data corruption;
    (bso#15148).
  * libsamba-errors uses a wrong version number; (bso#15141).
  * SMB1 negotiation can fail to handle connection errors;
    (bso#15152).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * 4.17.rc1 still uses symlink-race prone unix_convert();
    (bso#15144).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Manpage for smbstatus json is missing; (bso#15147).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Fix issues found by coverity in smbstatus json code;
    (bso#15140).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Update to 4.16.4
  * CVE-2022-2031: Samba AD users can bypass certain restrictions
    associated with changing passwords; (bsc#1201495); (bso#15047);
  * CVE-2022-32744: Samba AD users can forge password change
    requests for any user; (bsc#1201493); (bso#15074);
  * CVE-2022-32745: Samba AD users can crash the server process
    with an LDAP add or modify request; (bsc#1201492); (bso#15008);
  * CVE-2022-32746: Samba AD users can induce a use-after-free in
    the server process with an LDAP add or modify request;
    (bsc#1201490); (bso#15009);
  * CVE-2022-32742: Server memory information leak via SMB1;
    (bsc#1201496); (bso#15085);
- Update to 4.16.3
  * Using vfs_streams_xattr and deleting a file causes a panic;
    (bso#15099);
  * Add support for bind 9.18; (bso#14986);
  * logging dsdb audit to specific files does not work;
    (bso#15076);
  * Problem when winbind renews Kerberos; (bso#14979);
    (bsc#1196224);
  * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in
    developer mode; (bso#15095);
  * Crash in streams_xattr because fsp-&gt;base_fsp-&gt;fsp_name is
    NULL; (bso#15105);
  * Crash in rpcd_classic - NULL pointer deference in
    mangle_is_mangled(); (bso#15118);
  * smbclient commands del &amp; deltree fail with
    NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
    (bsc#1200556);
  * Fix check for chown when processing NFSv4 ACL; (bso#15120);
  * The pcap background queue process should not be stopped;
    (bso#15082);
  * testparm: Fix typo in idmap rangesize check; (bso#15097);
  * net ads info returns LDAP server and LDAP server name as
    null; (bso#15106);
  * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;
    (bso#15108);
  * CTDB child process logging does not work as expected;
    (bso#15090);
- Update spec file to fix the optional Heimdal DC build
- Fix external trusts with MIT Kerberos 1.20
- Add missing samba-client requirement to samba-winbind package;
  (bsc#1198255);
- Move pdb backends from package samba-libs to package
  samba-client-libs and remove samba-libs requirement from
  samba-winbind; (bsc#1200964); (bsc#1198255);
- Add sysuser-shadow requirement for packages using
  systemd-sysusers
- Use the canonical realm name to refresh the Kerberos tickets;
  (bsc#1196224); (bso#14979);
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Update to 4.16.2
  * Use pathref fd instead of io fd in vfs_default_durable_cookie;
    (bso#15042);
  * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original
    file had been deleted; (bso#15069);
  * Reintroduce netgroups support; (bso#15087);
  * net ads info shows LDAP Server: 0.0.0.0 depending on contacted
    server; (bso#14674);
  * Update from 4.15  to 4.16 breaks discovery of [homes] on
    standalone server from Win and IOS; (bso#15062);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * smbclient -E doesn't work as advertised; (bso#15075);
  * The samba background daemon doesn't refresh the printcap cache
    on startup; (bso#15081);
  * Out-by-4 error in smbd read reply max_send clamp; (bso#14443);
- Fix samba4.blackbox.net_ads_dns_async test with bind9 &gt;= 9.17.7
- Support building with MIT Kerberos 1.20
- Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC;
  (CVE-2020-17049);
- Resource Based Constrained Delegation (RBCD) for Samba AD DC
- Support building with gcc 12.1
- Use requires_eq macro to require the libldb2 version available at
  samba-dsdb-modules build time; (bsc#1199362);
- Update to 4.16.1
  * Share and server swapped in smbget password prompt; (bso#14831);
  * Durable handles won't reconnect if the leased file is written to;
    (bso#15022);
  * rmdir silently fails if directory contains unreadable files and
    hide unreadable is yes; (bso#15023);
  * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information
    on renamed file handle; (bso#15038);
  * Need to describe --builtin-libraries= better (compare with
  - -bundled-libraries); (bso#8731);
  * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback;
    (bso#14957);
  * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes;
    (bso#15035);
  * PAM Kerberos authentication incorrectly fails with a clock skew
    error; (bso#15046);
  * Username map - samba erroneously applies unix group memberships
    to user account entries; (bso#15041);
  * KVNO off by 100000; (bso#14951);
  * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027);
  * vfs_gpfs recalls=no option prevents listing files; (bso#15055);
  * smbd doesn't handle UPNs for looking up names; (bso#15054);
- Update update-apparmor-samba-profile script, replace
  non-printable delimiter with more human readable separator as
  sed can accept separators that can appear in the input data.
- Fix update-apparmor-samba-profile script, sed doesn't like
  multibyte separators; (bsc#1198309).
- Update to 4.16.0
  * New samba-dcerpcd binary to provide DCERPC in the member server
    setup
  * Certificate Auto Enrollment
  * Ability to add ports to dns forwarder addresses in internal DNS
    backend
  * No longer using Linux mandatory locks for sharemodes
  * SMB1 protocol has been deprecated, particularly older dialects
  * SMB1 protocol SMBCopy command removed
  * SMB1 server-side wildcard expansion removed
- Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101);
- Use systemd-sysusers to create system users; (bsc#1182847);</changelog>
  <changelog author="scabrero@suse.de" date="1671105600">- Update to 4.17.4
  * CVE-2022-44640 Upstream Heimdal free of user-controlled
    pointer in FAST; (bsc#14929);
  * CVE-2021-20251 Bad password count not incremented atomically;
    (bsc#14611);
  * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability;
    (bsc#15203);
  * CVE-2022-37966 rc4-hmac Kerberos session keys issued to
    modern servers; (bso#15237);
  * CVE-2022-37967 Kerberos constrained delegation ticket forgery
    possible against Samba AD DC; (bso#15231);
  * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak
    and should be avoided; (bso#15240);
  * pam_winbind uses time_t and pointers assuming they are of the
    same size; (bso#15224);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * filter-subunit is inefficient with large numbers of
    knownfails; (bso#15258);
  * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories;
    (bso#15252);
  * The KDC logic arround msDs-supportedEncryptionTypes differs
    from Windows; (bso#13135);
  * libnet: change_password() doesn't work with
    dcerpc_samr_ChangePasswordUser4(); (bso#15206);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * Memory leak in snprintf replacement functions; (bso#15230);
  * RODC doesn't reset badPwdCount reliable via an RWDC
    (CVE-2021-20251 regression); (bso#15253);
  * Prevent EBADF errors with vfs_glusterfs; (bso#15198);
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243);
  * Stack smashing in net offlinejoin requestodj; (bso#15257);
  * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue;
    (bso#15197);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
- Remove deprecated if-{down,up} scripts; (bsc#1206444);
- Adjust the systemd drop-in file for named service; (bsc#1201689);
  * Paths are additive so do not repeat paths from named.service
  * Prefix the samba DLZ directory with "-" to ignore this path
    if it does not exists</changelog>
  <changelog author="nopower@suse.com" date="1671624000">- Change with_dc default to 0 (for non TW builds), ADDC feature is
  deprecated and will no longer be included in &gt;= SLE15-SP5;
  (jsc#PED-1122).</changelog>
  <changelog author="nopower@suse.com" date="1673524800">- Clean up logic for PAM migration settings in spec file.</changelog>
  <changelog author="nopower@suse.com" date="1674475200">- libdsdb-module-samba4 should be packaged as part of samba-libs and
  not samba-ad-dc-libs. Additionally no need for it to be
  removed conditionally.</changelog>
  <changelog author="nopower@suse.com" date="1674475201">- Remove non functioning ifup/ifdown samba-winbindd scripts;
  (bsc#1207414).</changelog>
  <changelog author="nopower@suse.com" date="1678363200">- Make samba-libs conflict with old samba-ad-dc-libs package
  to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1679745600">- Make (32bit) samba-libs conflict with old samba-ad-dc-libs
  package to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1681300800">- Update to 4.17.7
  * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords
    in cleartext; (bso#15315); (bsc#1209481).
  * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be
    deleted by unprivileged authenticated users; (bso#15276);
    (bsc#1209483).
  * CVE-2023-0614: samba: Access controlled AD LDAP attributes can
    be discovered; (bso#15270); (bsc#1209485).
  * large_ldap test is inefficient; (bso#15332).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
- Update to 4.17.6
  * streams_xattr is creating unexpected locks on folders;
    (bso#15314).
  * Use of the Azure AD Connect cloud sync tool is now supported
    for password hash synchronisation, allowing Samba AD Domains
    to synchronise passwords with this popular cloud environment;
    (bso#10635).
  * Spotlight doesn't work with latest macOS Ventura;
    (bso#15299).
  * New samba-dcerpc architecture does not scale gracefully;
    (bso#15310).
  * vfs_ceph incorrectly uses fsp_get_io_fd() instead of
    fsp_get_pathref_fd() in close and fstat; (bso#15307).
  * With clustering enabled samba-bgqd can core dump due to use
    after free; (bso#15293).
  * fd_load() function implicitly closes the fd where it should
    not; (bso#15311).
- Update to 4.17.5
  * smbc_getxattr() return value is incorrect; (bso#14808).
  * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not
    handled correctly; (bso#15172).
  * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210).
  * samba-tool gpo listall fails IPv6 only - finddcs() fails to
    find DC when there is only an AAAA record for the DC in DNS;
    (bso#15226).
  * smbd crashes if an FSCTL request is done on a stream handle;
    (bso#15236).
  * DFS links don't work anymore on Mac clients since 4.17;
    (bso#15277).
  * vfs_virusfilter segfault on access, directory edgecase
    (accessing NULL value); (bso#15283).
  * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5)
    based SChannel on NETLOGON (additional changes); (bso#15240).
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243).
  * Shares missing from netshareenum response in samba 4.17.4;
    (bso#15266).
  * ctdb: use-after-free in run_proc; (bso#15269).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * auth3_generate_session_info_pac leaks wbcAuthUserInfo;
    (bso#15286).
  * smbclient segfaults with use after free on an optimized
    build; (bso#15268).
  * smbstatus leaking files in msg.sock and msg.lock;
    (bso#15282).
  * Leak in wbcCtxPingDc2; (bso#15164).
  * Access based share enum does not work in Samba 4.16+;
    (bso#15265).
  * Crash during share enumeration; (bso#15267).
  * rep_listxattr on FreeBSD does not properly check for reads
    off end of returned buffer; (bso#15271).
  * Avoid relying on C89 features in a few places; (bso#15281).</changelog>
  <changelog author="nopower@suse.com" date="1686830400">- Update to 4.17.8
  * log flood: smbd_calculate_access_mask_fsp: Access denied:
    message level should be lower; (bso#15302).
  * Floating point exception (FPE) via cli_pull_send at
    source3/libsmb/clireadwrite.c; (bso#15306).
  * test_tstream_more_tcp_user_timeout_spin fails intermittently
    on Rackspace GitLab runners; (bso#15328).
  * Reduce flapping of ridalloc test; (bso#15329).
  * large_ldap test is unreliable; (bso#15351).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * mdssvc may crash when initializing; (bso#15354).
  * Large directory optimization broken for non-lcomp path
    elements; (bso#15313).
  * streams_depot fails to create streams; (bso#15357).
  * shadow_copy2 and streams_depot don't play well together;
    (bso#15358).
  * wbinfo -u fails on ad dc with &gt;1000 users; (bso#15366).
  * winbindd idmap child contacts the domain controller without a
    need; (bso#15317).
  * idmap_autorid may fail to map sids of trusted domains for the
    first time; (bso#15318).
  * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings;
    (bso#15319).
  * net ads search -P doesn't work against servers in other
    domains; (bso#15323).
  * DS ACEs might be inherited to unrelated object classes;
    (bso#15338).
  * Temporary smbXsrv_tcon_global.tdb can't be parsed;
    (bso#15353).
  * Setting veto files = /.*/ break listing directories;
    (bso#15360); (bsc#1212375).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
  * dsgetdcname: assumes local system uses IPv4; (bso#15325).</changelog>
  <changelog author="nopower@suse.com" date="1688644800">- Update to 4.17.9
  * Backport --pidl-developer fixes; (bso#15404).
  * smbd_scavenger crashes when service smbd is stopped;
    (bso#15275).
  * vfs_fruit might cause a failing open for delete; (bso#15378).
  * named crashes on DLZ zone update; (bso#14030).
  * winbind recurses into itself via rpcd_lsad; (bso#15361).
  * cli_list loops 100% CPU against pre-lanman2 servers;
    (bso#15382).
  * smbclient leaks fds with showacls; (bso#15391).
  * aes256 smb3 encryption algorithms are not allowed in
    smb3_sid_parse(); (bso#15374).
  * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR;
    (bso#15413).
  * smbget memory leak if failed to download files recursively;
    (bso#15403).</changelog>
  <changelog author="nopower@suse.com" date="1689249600">- CVE-2022-2127: lm_resp_len not checked properly in
  winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174).
- CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite
  Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173).
- CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type
  Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172).
- CVE-2023-34968: Spotlight server-side Share Path Disclosure;
  (bso#15388); (bsc#1213171).
- CVE-2023-3347: Samba doesn't require SMB2+ signing if
  `server signing = mandatory` is set; (bso#15397); (bsc#1213170).</changelog>
  <changelog author="nopower@suse.com" date="1689595200">- secure channel faulty since Windows 10/11 update 07/2023;
  (bso#15418); (bsc#1213384).</changelog>
  <changelog author="scabrero@suse.de" date="1690891200">- net ads lookup with unspecified realm fails; (bso#15384);
  (bsc#1213826);</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Move libcluster-samba4.so from samba-libs to samba-client-libs;
  (bsc#1213940);</changelog>
  <changelog author="scabrero@suse.de" date="1692014400">- Fix DFS not working with widelinks enabled; (bsc#1213607);
  (bso#15435);</changelog>
  <changelog author="nopower@suse.com" date="1696420800">- CVE-2023-4091: samba: Client can truncate file with read-only
  permissions; (bsc#1215904); (bso#15439).
- CVE-2023-42669: samba: rpcecho, enabled and running in AD DC,
  allows blocking sleep on request; (bso#1215905); (bso#15474).
- CVE-2023-42670: samba:  The procedure number is out of range
  when starting Active Directory Users and Computers;
  (bsc#1215906); (bso#15473).
- CVE-2023-3961: samba: Unsanitized client pipe name passed to
  local_np_connect(); (bsc#1215907); (bso#15422).
- CVE-2023-4154: samba: dirsync allows SYSTEM access with only
  "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES;
  (bsc#1215908); (bso#15424).</changelog>
  <changelog author="scabrero@suse.de" date="1698062400">- Update to samba 4.17.12
  * Weird filename can cause assert to fail in
    openat_pathref_fsp_nosymlink(); (bso#15419);
  * reply_sesssetup_and_X() can dereference uninitialized tmp
    pointer; (bso#15420);
  * Missing return in reply_exit_done(); (bso#15430);
  * TREE_CONNECT without SETUP causes smbd to use uninitialized
    pointer; (bso#15432);
  * Improve GetNChanges to address some (but not all "Azure AD
    Connect") syncronisation tool looping during the initial user
    sync phase; (bso#15401);
  * Samba replication logs show (null) DN; (bso#15407);
  * Spotlight sometimes returns no results on latest macOS;
    (bso#15342);
  * Renaming results in NT_STATUS_SHARING_VIOLATION if previously
    attempted to remove the destination; (bso#15417);
  * Spotlight results return wrong date in result list; (bso#15427);
  * macOS mdfind returns only 50 results; (bso#15463);
  * 2-3min delays at reconnect with smb2_validate_sequence_number:
    bad message_id 2; (bso#15346);
  * samba-tool ntacl get segfault if aio_pthread appended;
    (bso#15441);
  * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed;
    (bso#15446);
  * File doesn't show when user doesn't have permission if
    aio_pthread is loaded; (bso#15453);
  * net ads lookup (with unspecified realm) fails; (bso#15384);
    (bsc#1213826);
  * Regression DFS not working with widelinks = true; (bso#15435);
    (bsc#1213607);
  * ctdb_killtcp fails to work with --enable-pcap and libpcap 1.9.1;
    (bso#15451);
  * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449);
  * Windows client join fails if a second container CN=System exists
    somewhere; (bso#9959);
- Fix crossing automounter mount points; (bsc#1215212);</changelog>
  <changelog author="scabrero@suse.de" date="1700481600">- Add "net offlinejoin composeodj" command; (bsc#1214076);</changelog>
  <changelog author="scabrero@suse.de" date="1702555200">- Add new idmap_nss option 'use_upn' for those NSS modules able to
  handle UPNs or DOMAIN/user name format; (bsc#1215369);
- Avoid unnecessary locking in idmap parent setup; (bsc#1215369);</changelog>
</package>
<package pkgid="f311bf644d6fb554def4483ec825ff27ef29d917d554ef947038ad85b40d9dab" name="samba-client-libs" arch="s390x">
  <version epoch="0" ver="4.17.12+git.455.b299ac1e60" rel="150500.3.20.1"/>
  <changelog author="dmulder@suse.com" date="1669896000">- Introduce without-smb1-server spec flag; (bsc#1205104);
- Update to 4.17.3
  * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit
    systems; (bsc#1205126); (bso#15203);
- Replace obsolete python-gpgme with python-gpg
  * Upstream replaced it in v4.9.5 -- bso#13728
- Update to 4.17.2
  * CVE-2022-3592 [SECURITY] samba: Wide links protection broken;
    (bso#15207); (bsc#1204499).
  * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal
    unwrap_des3();(bso#15134); (bsc#1204254).
- Update to 4.17.1
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * smbXsrv_connection_shutdown_send result leaked; (bso#15174).
  * Flush on a named stream never completes; (bso#15182).
  * Permission denied calling SMBC_getatr when file not exists;
    (bso#15195).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * pytest: add file removal helpers for TestCaseInTempDir;
    (bso#15191).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * Flush on a named stream never completes; (bso#15182).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * multi-channel socket passing may hit a race if one of the
    involved processes already existed; (bso#15200).
  * memory leak on temporary of struct imessaging_post_state and
    struct tevent_immediate on struct imessaging_context (in
    rpcd_spoolss and maybe others); (bso#15201).
  * Since popt1.19 various use after free errors using result of
    poptGetArg are now exposed; (bso#15205); (boo#1204279).
  * Remove special case for O_CREAT in SMB_VFS_OPENAT from
    vfs_glusterfs; (bso#15192).
  * GETPWSID in memory cache grows indefinetly with each NTLM
    auth; (bso#15169).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);
- Fix use after free errors resulting from using return of
  poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205).
- s3: smbd: Fix memory leak in
  smbd_server_connection_terminate_done(); (bso#15174).
- Disable SMB1 for tumbleweed builds.
- Update to 4.17.0
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
    (bso#15153).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * Cross-node multi-channel reconnects result in SMB2 Negotiate
    returning NT_STATUS_NOT_SUPPORTED; (bso#15159).
  * winbind at info level debug can coredump when processing
    wb_lookupusergroups; (bso#15160).
  * Make use of glfs_*at() API calls in vfs_glusterfs;
    (bso#15157).
  * Possible use after free of connection_struct when iterating
    smbd_server_connection-&gt;connections; (bso#15128).
  * `net usershare add` fails with flag works with --long but
    fails with -l; (bso#15145).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Missing READ_LEASE break could cause data corruption;
    (bso#15148).
  * libsamba-errors uses a wrong version number; (bso#15141).
  * SMB1 negotiation can fail to handle connection errors;
    (bso#15152).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * 4.17.rc1 still uses symlink-race prone unix_convert();
    (bso#15144).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Manpage for smbstatus json is missing; (bso#15147).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Fix issues found by coverity in smbstatus json code;
    (bso#15140).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Update to 4.16.4
  * CVE-2022-2031: Samba AD users can bypass certain restrictions
    associated with changing passwords; (bsc#1201495); (bso#15047);
  * CVE-2022-32744: Samba AD users can forge password change
    requests for any user; (bsc#1201493); (bso#15074);
  * CVE-2022-32745: Samba AD users can crash the server process
    with an LDAP add or modify request; (bsc#1201492); (bso#15008);
  * CVE-2022-32746: Samba AD users can induce a use-after-free in
    the server process with an LDAP add or modify request;
    (bsc#1201490); (bso#15009);
  * CVE-2022-32742: Server memory information leak via SMB1;
    (bsc#1201496); (bso#15085);
- Update to 4.16.3
  * Using vfs_streams_xattr and deleting a file causes a panic;
    (bso#15099);
  * Add support for bind 9.18; (bso#14986);
  * logging dsdb audit to specific files does not work;
    (bso#15076);
  * Problem when winbind renews Kerberos; (bso#14979);
    (bsc#1196224);
  * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in
    developer mode; (bso#15095);
  * Crash in streams_xattr because fsp-&gt;base_fsp-&gt;fsp_name is
    NULL; (bso#15105);
  * Crash in rpcd_classic - NULL pointer deference in
    mangle_is_mangled(); (bso#15118);
  * smbclient commands del &amp; deltree fail with
    NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
    (bsc#1200556);
  * Fix check for chown when processing NFSv4 ACL; (bso#15120);
  * The pcap background queue process should not be stopped;
    (bso#15082);
  * testparm: Fix typo in idmap rangesize check; (bso#15097);
  * net ads info returns LDAP server and LDAP server name as
    null; (bso#15106);
  * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;
    (bso#15108);
  * CTDB child process logging does not work as expected;
    (bso#15090);
- Update spec file to fix the optional Heimdal DC build
- Fix external trusts with MIT Kerberos 1.20
- Add missing samba-client requirement to samba-winbind package;
  (bsc#1198255);
- Move pdb backends from package samba-libs to package
  samba-client-libs and remove samba-libs requirement from
  samba-winbind; (bsc#1200964); (bsc#1198255);
- Add sysuser-shadow requirement for packages using
  systemd-sysusers
- Use the canonical realm name to refresh the Kerberos tickets;
  (bsc#1196224); (bso#14979);
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Update to 4.16.2
  * Use pathref fd instead of io fd in vfs_default_durable_cookie;
    (bso#15042);
  * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original
    file had been deleted; (bso#15069);
  * Reintroduce netgroups support; (bso#15087);
  * net ads info shows LDAP Server: 0.0.0.0 depending on contacted
    server; (bso#14674);
  * Update from 4.15  to 4.16 breaks discovery of [homes] on
    standalone server from Win and IOS; (bso#15062);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * smbclient -E doesn't work as advertised; (bso#15075);
  * The samba background daemon doesn't refresh the printcap cache
    on startup; (bso#15081);
  * Out-by-4 error in smbd read reply max_send clamp; (bso#14443);
- Fix samba4.blackbox.net_ads_dns_async test with bind9 &gt;= 9.17.7
- Support building with MIT Kerberos 1.20
- Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC;
  (CVE-2020-17049);
- Resource Based Constrained Delegation (RBCD) for Samba AD DC
- Support building with gcc 12.1
- Use requires_eq macro to require the libldb2 version available at
  samba-dsdb-modules build time; (bsc#1199362);
- Update to 4.16.1
  * Share and server swapped in smbget password prompt; (bso#14831);
  * Durable handles won't reconnect if the leased file is written to;
    (bso#15022);
  * rmdir silently fails if directory contains unreadable files and
    hide unreadable is yes; (bso#15023);
  * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information
    on renamed file handle; (bso#15038);
  * Need to describe --builtin-libraries= better (compare with
  - -bundled-libraries); (bso#8731);
  * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback;
    (bso#14957);
  * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes;
    (bso#15035);
  * PAM Kerberos authentication incorrectly fails with a clock skew
    error; (bso#15046);
  * Username map - samba erroneously applies unix group memberships
    to user account entries; (bso#15041);
  * KVNO off by 100000; (bso#14951);
  * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027);
  * vfs_gpfs recalls=no option prevents listing files; (bso#15055);
  * smbd doesn't handle UPNs for looking up names; (bso#15054);
- Update update-apparmor-samba-profile script, replace
  non-printable delimiter with more human readable separator as
  sed can accept separators that can appear in the input data.
- Fix update-apparmor-samba-profile script, sed doesn't like
  multibyte separators; (bsc#1198309).
- Update to 4.16.0
  * New samba-dcerpcd binary to provide DCERPC in the member server
    setup
  * Certificate Auto Enrollment
  * Ability to add ports to dns forwarder addresses in internal DNS
    backend
  * No longer using Linux mandatory locks for sharemodes
  * SMB1 protocol has been deprecated, particularly older dialects
  * SMB1 protocol SMBCopy command removed
  * SMB1 server-side wildcard expansion removed
- Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101);
- Use systemd-sysusers to create system users; (bsc#1182847);</changelog>
  <changelog author="scabrero@suse.de" date="1671105600">- Update to 4.17.4
  * CVE-2022-44640 Upstream Heimdal free of user-controlled
    pointer in FAST; (bsc#14929);
  * CVE-2021-20251 Bad password count not incremented atomically;
    (bsc#14611);
  * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability;
    (bsc#15203);
  * CVE-2022-37966 rc4-hmac Kerberos session keys issued to
    modern servers; (bso#15237);
  * CVE-2022-37967 Kerberos constrained delegation ticket forgery
    possible against Samba AD DC; (bso#15231);
  * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak
    and should be avoided; (bso#15240);
  * pam_winbind uses time_t and pointers assuming they are of the
    same size; (bso#15224);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * filter-subunit is inefficient with large numbers of
    knownfails; (bso#15258);
  * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories;
    (bso#15252);
  * The KDC logic arround msDs-supportedEncryptionTypes differs
    from Windows; (bso#13135);
  * libnet: change_password() doesn't work with
    dcerpc_samr_ChangePasswordUser4(); (bso#15206);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * Memory leak in snprintf replacement functions; (bso#15230);
  * RODC doesn't reset badPwdCount reliable via an RWDC
    (CVE-2021-20251 regression); (bso#15253);
  * Prevent EBADF errors with vfs_glusterfs; (bso#15198);
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243);
  * Stack smashing in net offlinejoin requestodj; (bso#15257);
  * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue;
    (bso#15197);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
- Remove deprecated if-{down,up} scripts; (bsc#1206444);
- Adjust the systemd drop-in file for named service; (bsc#1201689);
  * Paths are additive so do not repeat paths from named.service
  * Prefix the samba DLZ directory with "-" to ignore this path
    if it does not exists</changelog>
  <changelog author="nopower@suse.com" date="1671624000">- Change with_dc default to 0 (for non TW builds), ADDC feature is
  deprecated and will no longer be included in &gt;= SLE15-SP5;
  (jsc#PED-1122).</changelog>
  <changelog author="nopower@suse.com" date="1673524800">- Clean up logic for PAM migration settings in spec file.</changelog>
  <changelog author="nopower@suse.com" date="1674475200">- libdsdb-module-samba4 should be packaged as part of samba-libs and
  not samba-ad-dc-libs. Additionally no need for it to be
  removed conditionally.</changelog>
  <changelog author="nopower@suse.com" date="1674475201">- Remove non functioning ifup/ifdown samba-winbindd scripts;
  (bsc#1207414).</changelog>
  <changelog author="nopower@suse.com" date="1678363200">- Make samba-libs conflict with old samba-ad-dc-libs package
  to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1679745600">- Make (32bit) samba-libs conflict with old samba-ad-dc-libs
  package to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1681300800">- Update to 4.17.7
  * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords
    in cleartext; (bso#15315); (bsc#1209481).
  * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be
    deleted by unprivileged authenticated users; (bso#15276);
    (bsc#1209483).
  * CVE-2023-0614: samba: Access controlled AD LDAP attributes can
    be discovered; (bso#15270); (bsc#1209485).
  * large_ldap test is inefficient; (bso#15332).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
- Update to 4.17.6
  * streams_xattr is creating unexpected locks on folders;
    (bso#15314).
  * Use of the Azure AD Connect cloud sync tool is now supported
    for password hash synchronisation, allowing Samba AD Domains
    to synchronise passwords with this popular cloud environment;
    (bso#10635).
  * Spotlight doesn't work with latest macOS Ventura;
    (bso#15299).
  * New samba-dcerpc architecture does not scale gracefully;
    (bso#15310).
  * vfs_ceph incorrectly uses fsp_get_io_fd() instead of
    fsp_get_pathref_fd() in close and fstat; (bso#15307).
  * With clustering enabled samba-bgqd can core dump due to use
    after free; (bso#15293).
  * fd_load() function implicitly closes the fd where it should
    not; (bso#15311).
- Update to 4.17.5
  * smbc_getxattr() return value is incorrect; (bso#14808).
  * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not
    handled correctly; (bso#15172).
  * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210).
  * samba-tool gpo listall fails IPv6 only - finddcs() fails to
    find DC when there is only an AAAA record for the DC in DNS;
    (bso#15226).
  * smbd crashes if an FSCTL request is done on a stream handle;
    (bso#15236).
  * DFS links don't work anymore on Mac clients since 4.17;
    (bso#15277).
  * vfs_virusfilter segfault on access, directory edgecase
    (accessing NULL value); (bso#15283).
  * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5)
    based SChannel on NETLOGON (additional changes); (bso#15240).
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243).
  * Shares missing from netshareenum response in samba 4.17.4;
    (bso#15266).
  * ctdb: use-after-free in run_proc; (bso#15269).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * auth3_generate_session_info_pac leaks wbcAuthUserInfo;
    (bso#15286).
  * smbclient segfaults with use after free on an optimized
    build; (bso#15268).
  * smbstatus leaking files in msg.sock and msg.lock;
    (bso#15282).
  * Leak in wbcCtxPingDc2; (bso#15164).
  * Access based share enum does not work in Samba 4.16+;
    (bso#15265).
  * Crash during share enumeration; (bso#15267).
  * rep_listxattr on FreeBSD does not properly check for reads
    off end of returned buffer; (bso#15271).
  * Avoid relying on C89 features in a few places; (bso#15281).</changelog>
  <changelog author="nopower@suse.com" date="1686830400">- Update to 4.17.8
  * log flood: smbd_calculate_access_mask_fsp: Access denied:
    message level should be lower; (bso#15302).
  * Floating point exception (FPE) via cli_pull_send at
    source3/libsmb/clireadwrite.c; (bso#15306).
  * test_tstream_more_tcp_user_timeout_spin fails intermittently
    on Rackspace GitLab runners; (bso#15328).
  * Reduce flapping of ridalloc test; (bso#15329).
  * large_ldap test is unreliable; (bso#15351).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * mdssvc may crash when initializing; (bso#15354).
  * Large directory optimization broken for non-lcomp path
    elements; (bso#15313).
  * streams_depot fails to create streams; (bso#15357).
  * shadow_copy2 and streams_depot don't play well together;
    (bso#15358).
  * wbinfo -u fails on ad dc with &gt;1000 users; (bso#15366).
  * winbindd idmap child contacts the domain controller without a
    need; (bso#15317).
  * idmap_autorid may fail to map sids of trusted domains for the
    first time; (bso#15318).
  * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings;
    (bso#15319).
  * net ads search -P doesn't work against servers in other
    domains; (bso#15323).
  * DS ACEs might be inherited to unrelated object classes;
    (bso#15338).
  * Temporary smbXsrv_tcon_global.tdb can't be parsed;
    (bso#15353).
  * Setting veto files = /.*/ break listing directories;
    (bso#15360); (bsc#1212375).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
  * dsgetdcname: assumes local system uses IPv4; (bso#15325).</changelog>
  <changelog author="nopower@suse.com" date="1688644800">- Update to 4.17.9
  * Backport --pidl-developer fixes; (bso#15404).
  * smbd_scavenger crashes when service smbd is stopped;
    (bso#15275).
  * vfs_fruit might cause a failing open for delete; (bso#15378).
  * named crashes on DLZ zone update; (bso#14030).
  * winbind recurses into itself via rpcd_lsad; (bso#15361).
  * cli_list loops 100% CPU against pre-lanman2 servers;
    (bso#15382).
  * smbclient leaks fds with showacls; (bso#15391).
  * aes256 smb3 encryption algorithms are not allowed in
    smb3_sid_parse(); (bso#15374).
  * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR;
    (bso#15413).
  * smbget memory leak if failed to download files recursively;
    (bso#15403).</changelog>
  <changelog author="nopower@suse.com" date="1689249600">- CVE-2022-2127: lm_resp_len not checked properly in
  winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174).
- CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite
  Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173).
- CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type
  Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172).
- CVE-2023-34968: Spotlight server-side Share Path Disclosure;
  (bso#15388); (bsc#1213171).
- CVE-2023-3347: Samba doesn't require SMB2+ signing if
  `server signing = mandatory` is set; (bso#15397); (bsc#1213170).</changelog>
  <changelog author="nopower@suse.com" date="1689595200">- secure channel faulty since Windows 10/11 update 07/2023;
  (bso#15418); (bsc#1213384).</changelog>
  <changelog author="scabrero@suse.de" date="1690891200">- net ads lookup with unspecified realm fails; (bso#15384);
  (bsc#1213826);</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Move libcluster-samba4.so from samba-libs to samba-client-libs;
  (bsc#1213940);</changelog>
  <changelog author="scabrero@suse.de" date="1692014400">- Fix DFS not working with widelinks enabled; (bsc#1213607);
  (bso#15435);</changelog>
  <changelog author="nopower@suse.com" date="1696420800">- CVE-2023-4091: samba: Client can truncate file with read-only
  permissions; (bsc#1215904); (bso#15439).
- CVE-2023-42669: samba: rpcecho, enabled and running in AD DC,
  allows blocking sleep on request; (bso#1215905); (bso#15474).
- CVE-2023-42670: samba:  The procedure number is out of range
  when starting Active Directory Users and Computers;
  (bsc#1215906); (bso#15473).
- CVE-2023-3961: samba: Unsanitized client pipe name passed to
  local_np_connect(); (bsc#1215907); (bso#15422).
- CVE-2023-4154: samba: dirsync allows SYSTEM access with only
  "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES;
  (bsc#1215908); (bso#15424).</changelog>
  <changelog author="scabrero@suse.de" date="1698062400">- Update to samba 4.17.12
  * Weird filename can cause assert to fail in
    openat_pathref_fsp_nosymlink(); (bso#15419);
  * reply_sesssetup_and_X() can dereference uninitialized tmp
    pointer; (bso#15420);
  * Missing return in reply_exit_done(); (bso#15430);
  * TREE_CONNECT without SETUP causes smbd to use uninitialized
    pointer; (bso#15432);
  * Improve GetNChanges to address some (but not all "Azure AD
    Connect") syncronisation tool looping during the initial user
    sync phase; (bso#15401);
  * Samba replication logs show (null) DN; (bso#15407);
  * Spotlight sometimes returns no results on latest macOS;
    (bso#15342);
  * Renaming results in NT_STATUS_SHARING_VIOLATION if previously
    attempted to remove the destination; (bso#15417);
  * Spotlight results return wrong date in result list; (bso#15427);
  * macOS mdfind returns only 50 results; (bso#15463);
  * 2-3min delays at reconnect with smb2_validate_sequence_number:
    bad message_id 2; (bso#15346);
  * samba-tool ntacl get segfault if aio_pthread appended;
    (bso#15441);
  * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed;
    (bso#15446);
  * File doesn't show when user doesn't have permission if
    aio_pthread is loaded; (bso#15453);
  * net ads lookup (with unspecified realm) fails; (bso#15384);
    (bsc#1213826);
  * Regression DFS not working with widelinks = true; (bso#15435);
    (bsc#1213607);
  * ctdb_killtcp fails to work with --enable-pcap and libpcap 1.9.1;
    (bso#15451);
  * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449);
  * Windows client join fails if a second container CN=System exists
    somewhere; (bso#9959);
- Fix crossing automounter mount points; (bsc#1215212);</changelog>
  <changelog author="scabrero@suse.de" date="1700481600">- Add "net offlinejoin composeodj" command; (bsc#1214076);</changelog>
  <changelog author="scabrero@suse.de" date="1702555200">- Add new idmap_nss option 'use_upn' for those NSS modules able to
  handle UPNs or DOMAIN/user name format; (bsc#1215369);
- Avoid unnecessary locking in idmap parent setup; (bsc#1215369);</changelog>
</package>
<package pkgid="e5efdf2c59f0e4f4290f3182f4c47e86f75ed46fb0cf3423e2e6bf7fe42d9b24" name="samba-client-libs" arch="x86_64">
  <version epoch="0" ver="4.17.12+git.455.b299ac1e60" rel="150500.3.20.1"/>
  <changelog author="dmulder@suse.com" date="1669896000">- Introduce without-smb1-server spec flag; (bsc#1205104);
- Update to 4.17.3
  * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit
    systems; (bsc#1205126); (bso#15203);
- Replace obsolete python-gpgme with python-gpg
  * Upstream replaced it in v4.9.5 -- bso#13728
- Update to 4.17.2
  * CVE-2022-3592 [SECURITY] samba: Wide links protection broken;
    (bso#15207); (bsc#1204499).
  * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal
    unwrap_des3();(bso#15134); (bsc#1204254).
- Update to 4.17.1
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * smbXsrv_connection_shutdown_send result leaked; (bso#15174).
  * Flush on a named stream never completes; (bso#15182).
  * Permission denied calling SMBC_getatr when file not exists;
    (bso#15195).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * pytest: add file removal helpers for TestCaseInTempDir;
    (bso#15191).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * Flush on a named stream never completes; (bso#15182).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * multi-channel socket passing may hit a race if one of the
    involved processes already existed; (bso#15200).
  * memory leak on temporary of struct imessaging_post_state and
    struct tevent_immediate on struct imessaging_context (in
    rpcd_spoolss and maybe others); (bso#15201).
  * Since popt1.19 various use after free errors using result of
    poptGetArg are now exposed; (bso#15205); (boo#1204279).
  * Remove special case for O_CREAT in SMB_VFS_OPENAT from
    vfs_glusterfs; (bso#15192).
  * GETPWSID in memory cache grows indefinetly with each NTLM
    auth; (bso#15169).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);
- Fix use after free errors resulting from using return of
  poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205).
- s3: smbd: Fix memory leak in
  smbd_server_connection_terminate_done(); (bso#15174).
- Disable SMB1 for tumbleweed builds.
- Update to 4.17.0
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
    (bso#15153).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * Cross-node multi-channel reconnects result in SMB2 Negotiate
    returning NT_STATUS_NOT_SUPPORTED; (bso#15159).
  * winbind at info level debug can coredump when processing
    wb_lookupusergroups; (bso#15160).
  * Make use of glfs_*at() API calls in vfs_glusterfs;
    (bso#15157).
  * Possible use after free of connection_struct when iterating
    smbd_server_connection-&gt;connections; (bso#15128).
  * `net usershare add` fails with flag works with --long but
    fails with -l; (bso#15145).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Missing READ_LEASE break could cause data corruption;
    (bso#15148).
  * libsamba-errors uses a wrong version number; (bso#15141).
  * SMB1 negotiation can fail to handle connection errors;
    (bso#15152).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * 4.17.rc1 still uses symlink-race prone unix_convert();
    (bso#15144).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Manpage for smbstatus json is missing; (bso#15147).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Fix issues found by coverity in smbstatus json code;
    (bso#15140).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Update to 4.16.4
  * CVE-2022-2031: Samba AD users can bypass certain restrictions
    associated with changing passwords; (bsc#1201495); (bso#15047);
  * CVE-2022-32744: Samba AD users can forge password change
    requests for any user; (bsc#1201493); (bso#15074);
  * CVE-2022-32745: Samba AD users can crash the server process
    with an LDAP add or modify request; (bsc#1201492); (bso#15008);
  * CVE-2022-32746: Samba AD users can induce a use-after-free in
    the server process with an LDAP add or modify request;
    (bsc#1201490); (bso#15009);
  * CVE-2022-32742: Server memory information leak via SMB1;
    (bsc#1201496); (bso#15085);
- Update to 4.16.3
  * Using vfs_streams_xattr and deleting a file causes a panic;
    (bso#15099);
  * Add support for bind 9.18; (bso#14986);
  * logging dsdb audit to specific files does not work;
    (bso#15076);
  * Problem when winbind renews Kerberos; (bso#14979);
    (bsc#1196224);
  * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in
    developer mode; (bso#15095);
  * Crash in streams_xattr because fsp-&gt;base_fsp-&gt;fsp_name is
    NULL; (bso#15105);
  * Crash in rpcd_classic - NULL pointer deference in
    mangle_is_mangled(); (bso#15118);
  * smbclient commands del &amp; deltree fail with
    NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
    (bsc#1200556);
  * Fix check for chown when processing NFSv4 ACL; (bso#15120);
  * The pcap background queue process should not be stopped;
    (bso#15082);
  * testparm: Fix typo in idmap rangesize check; (bso#15097);
  * net ads info returns LDAP server and LDAP server name as
    null; (bso#15106);
  * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;
    (bso#15108);
  * CTDB child process logging does not work as expected;
    (bso#15090);
- Update spec file to fix the optional Heimdal DC build
- Fix external trusts with MIT Kerberos 1.20
- Add missing samba-client requirement to samba-winbind package;
  (bsc#1198255);
- Move pdb backends from package samba-libs to package
  samba-client-libs and remove samba-libs requirement from
  samba-winbind; (bsc#1200964); (bsc#1198255);
- Add sysuser-shadow requirement for packages using
  systemd-sysusers
- Use the canonical realm name to refresh the Kerberos tickets;
  (bsc#1196224); (bso#14979);
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Update to 4.16.2
  * Use pathref fd instead of io fd in vfs_default_durable_cookie;
    (bso#15042);
  * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original
    file had been deleted; (bso#15069);
  * Reintroduce netgroups support; (bso#15087);
  * net ads info shows LDAP Server: 0.0.0.0 depending on contacted
    server; (bso#14674);
  * Update from 4.15  to 4.16 breaks discovery of [homes] on
    standalone server from Win and IOS; (bso#15062);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * smbclient -E doesn't work as advertised; (bso#15075);
  * The samba background daemon doesn't refresh the printcap cache
    on startup; (bso#15081);
  * Out-by-4 error in smbd read reply max_send clamp; (bso#14443);
- Fix samba4.blackbox.net_ads_dns_async test with bind9 &gt;= 9.17.7
- Support building with MIT Kerberos 1.20
- Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC;
  (CVE-2020-17049);
- Resource Based Constrained Delegation (RBCD) for Samba AD DC
- Support building with gcc 12.1
- Use requires_eq macro to require the libldb2 version available at
  samba-dsdb-modules build time; (bsc#1199362);
- Update to 4.16.1
  * Share and server swapped in smbget password prompt; (bso#14831);
  * Durable handles won't reconnect if the leased file is written to;
    (bso#15022);
  * rmdir silently fails if directory contains unreadable files and
    hide unreadable is yes; (bso#15023);
  * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information
    on renamed file handle; (bso#15038);
  * Need to describe --builtin-libraries= better (compare with
  - -bundled-libraries); (bso#8731);
  * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback;
    (bso#14957);
  * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes;
    (bso#15035);
  * PAM Kerberos authentication incorrectly fails with a clock skew
    error; (bso#15046);
  * Username map - samba erroneously applies unix group memberships
    to user account entries; (bso#15041);
  * KVNO off by 100000; (bso#14951);
  * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027);
  * vfs_gpfs recalls=no option prevents listing files; (bso#15055);
  * smbd doesn't handle UPNs for looking up names; (bso#15054);
- Update update-apparmor-samba-profile script, replace
  non-printable delimiter with more human readable separator as
  sed can accept separators that can appear in the input data.
- Fix update-apparmor-samba-profile script, sed doesn't like
  multibyte separators; (bsc#1198309).
- Update to 4.16.0
  * New samba-dcerpcd binary to provide DCERPC in the member server
    setup
  * Certificate Auto Enrollment
  * Ability to add ports to dns forwarder addresses in internal DNS
    backend
  * No longer using Linux mandatory locks for sharemodes
  * SMB1 protocol has been deprecated, particularly older dialects
  * SMB1 protocol SMBCopy command removed
  * SMB1 server-side wildcard expansion removed
- Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101);
- Use systemd-sysusers to create system users; (bsc#1182847);</changelog>
  <changelog author="scabrero@suse.de" date="1671105600">- Update to 4.17.4
  * CVE-2022-44640 Upstream Heimdal free of user-controlled
    pointer in FAST; (bsc#14929);
  * CVE-2021-20251 Bad password count not incremented atomically;
    (bsc#14611);
  * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability;
    (bsc#15203);
  * CVE-2022-37966 rc4-hmac Kerberos session keys issued to
    modern servers; (bso#15237);
  * CVE-2022-37967 Kerberos constrained delegation ticket forgery
    possible against Samba AD DC; (bso#15231);
  * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak
    and should be avoided; (bso#15240);
  * pam_winbind uses time_t and pointers assuming they are of the
    same size; (bso#15224);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * filter-subunit is inefficient with large numbers of
    knownfails; (bso#15258);
  * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories;
    (bso#15252);
  * The KDC logic arround msDs-supportedEncryptionTypes differs
    from Windows; (bso#13135);
  * libnet: change_password() doesn't work with
    dcerpc_samr_ChangePasswordUser4(); (bso#15206);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * Memory leak in snprintf replacement functions; (bso#15230);
  * RODC doesn't reset badPwdCount reliable via an RWDC
    (CVE-2021-20251 regression); (bso#15253);
  * Prevent EBADF errors with vfs_glusterfs; (bso#15198);
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243);
  * Stack smashing in net offlinejoin requestodj; (bso#15257);
  * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue;
    (bso#15197);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
- Remove deprecated if-{down,up} scripts; (bsc#1206444);
- Adjust the systemd drop-in file for named service; (bsc#1201689);
  * Paths are additive so do not repeat paths from named.service
  * Prefix the samba DLZ directory with "-" to ignore this path
    if it does not exists</changelog>
  <changelog author="nopower@suse.com" date="1671624000">- Change with_dc default to 0 (for non TW builds), ADDC feature is
  deprecated and will no longer be included in &gt;= SLE15-SP5;
  (jsc#PED-1122).</changelog>
  <changelog author="nopower@suse.com" date="1673524800">- Clean up logic for PAM migration settings in spec file.</changelog>
  <changelog author="nopower@suse.com" date="1674475200">- libdsdb-module-samba4 should be packaged as part of samba-libs and
  not samba-ad-dc-libs. Additionally no need for it to be
  removed conditionally.</changelog>
  <changelog author="nopower@suse.com" date="1674475201">- Remove non functioning ifup/ifdown samba-winbindd scripts;
  (bsc#1207414).</changelog>
  <changelog author="nopower@suse.com" date="1678363200">- Make samba-libs conflict with old samba-ad-dc-libs package
  to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1679745600">- Make (32bit) samba-libs conflict with old samba-ad-dc-libs
  package to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1681300800">- Update to 4.17.7
  * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords
    in cleartext; (bso#15315); (bsc#1209481).
  * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be
    deleted by unprivileged authenticated users; (bso#15276);
    (bsc#1209483).
  * CVE-2023-0614: samba: Access controlled AD LDAP attributes can
    be discovered; (bso#15270); (bsc#1209485).
  * large_ldap test is inefficient; (bso#15332).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
- Update to 4.17.6
  * streams_xattr is creating unexpected locks on folders;
    (bso#15314).
  * Use of the Azure AD Connect cloud sync tool is now supported
    for password hash synchronisation, allowing Samba AD Domains
    to synchronise passwords with this popular cloud environment;
    (bso#10635).
  * Spotlight doesn't work with latest macOS Ventura;
    (bso#15299).
  * New samba-dcerpc architecture does not scale gracefully;
    (bso#15310).
  * vfs_ceph incorrectly uses fsp_get_io_fd() instead of
    fsp_get_pathref_fd() in close and fstat; (bso#15307).
  * With clustering enabled samba-bgqd can core dump due to use
    after free; (bso#15293).
  * fd_load() function implicitly closes the fd where it should
    not; (bso#15311).
- Update to 4.17.5
  * smbc_getxattr() return value is incorrect; (bso#14808).
  * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not
    handled correctly; (bso#15172).
  * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210).
  * samba-tool gpo listall fails IPv6 only - finddcs() fails to
    find DC when there is only an AAAA record for the DC in DNS;
    (bso#15226).
  * smbd crashes if an FSCTL request is done on a stream handle;
    (bso#15236).
  * DFS links don't work anymore on Mac clients since 4.17;
    (bso#15277).
  * vfs_virusfilter segfault on access, directory edgecase
    (accessing NULL value); (bso#15283).
  * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5)
    based SChannel on NETLOGON (additional changes); (bso#15240).
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243).
  * Shares missing from netshareenum response in samba 4.17.4;
    (bso#15266).
  * ctdb: use-after-free in run_proc; (bso#15269).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * auth3_generate_session_info_pac leaks wbcAuthUserInfo;
    (bso#15286).
  * smbclient segfaults with use after free on an optimized
    build; (bso#15268).
  * smbstatus leaking files in msg.sock and msg.lock;
    (bso#15282).
  * Leak in wbcCtxPingDc2; (bso#15164).
  * Access based share enum does not work in Samba 4.16+;
    (bso#15265).
  * Crash during share enumeration; (bso#15267).
  * rep_listxattr on FreeBSD does not properly check for reads
    off end of returned buffer; (bso#15271).
  * Avoid relying on C89 features in a few places; (bso#15281).</changelog>
  <changelog author="nopower@suse.com" date="1686830400">- Update to 4.17.8
  * log flood: smbd_calculate_access_mask_fsp: Access denied:
    message level should be lower; (bso#15302).
  * Floating point exception (FPE) via cli_pull_send at
    source3/libsmb/clireadwrite.c; (bso#15306).
  * test_tstream_more_tcp_user_timeout_spin fails intermittently
    on Rackspace GitLab runners; (bso#15328).
  * Reduce flapping of ridalloc test; (bso#15329).
  * large_ldap test is unreliable; (bso#15351).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * mdssvc may crash when initializing; (bso#15354).
  * Large directory optimization broken for non-lcomp path
    elements; (bso#15313).
  * streams_depot fails to create streams; (bso#15357).
  * shadow_copy2 and streams_depot don't play well together;
    (bso#15358).
  * wbinfo -u fails on ad dc with &gt;1000 users; (bso#15366).
  * winbindd idmap child contacts the domain controller without a
    need; (bso#15317).
  * idmap_autorid may fail to map sids of trusted domains for the
    first time; (bso#15318).
  * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings;
    (bso#15319).
  * net ads search -P doesn't work against servers in other
    domains; (bso#15323).
  * DS ACEs might be inherited to unrelated object classes;
    (bso#15338).
  * Temporary smbXsrv_tcon_global.tdb can't be parsed;
    (bso#15353).
  * Setting veto files = /.*/ break listing directories;
    (bso#15360); (bsc#1212375).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
  * dsgetdcname: assumes local system uses IPv4; (bso#15325).</changelog>
  <changelog author="nopower@suse.com" date="1688644800">- Update to 4.17.9
  * Backport --pidl-developer fixes; (bso#15404).
  * smbd_scavenger crashes when service smbd is stopped;
    (bso#15275).
  * vfs_fruit might cause a failing open for delete; (bso#15378).
  * named crashes on DLZ zone update; (bso#14030).
  * winbind recurses into itself via rpcd_lsad; (bso#15361).
  * cli_list loops 100% CPU against pre-lanman2 servers;
    (bso#15382).
  * smbclient leaks fds with showacls; (bso#15391).
  * aes256 smb3 encryption algorithms are not allowed in
    smb3_sid_parse(); (bso#15374).
  * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR;
    (bso#15413).
  * smbget memory leak if failed to download files recursively;
    (bso#15403).</changelog>
  <changelog author="nopower@suse.com" date="1689249600">- CVE-2022-2127: lm_resp_len not checked properly in
  winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174).
- CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite
  Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173).
- CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type
  Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172).
- CVE-2023-34968: Spotlight server-side Share Path Disclosure;
  (bso#15388); (bsc#1213171).
- CVE-2023-3347: Samba doesn't require SMB2+ signing if
  `server signing = mandatory` is set; (bso#15397); (bsc#1213170).</changelog>
  <changelog author="nopower@suse.com" date="1689595200">- secure channel faulty since Windows 10/11 update 07/2023;
  (bso#15418); (bsc#1213384).</changelog>
  <changelog author="scabrero@suse.de" date="1690891200">- net ads lookup with unspecified realm fails; (bso#15384);
  (bsc#1213826);</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Move libcluster-samba4.so from samba-libs to samba-client-libs;
  (bsc#1213940);</changelog>
  <changelog author="scabrero@suse.de" date="1692014400">- Fix DFS not working with widelinks enabled; (bsc#1213607);
  (bso#15435);</changelog>
  <changelog author="nopower@suse.com" date="1696420800">- CVE-2023-4091: samba: Client can truncate file with read-only
  permissions; (bsc#1215904); (bso#15439).
- CVE-2023-42669: samba: rpcecho, enabled and running in AD DC,
  allows blocking sleep on request; (bso#1215905); (bso#15474).
- CVE-2023-42670: samba:  The procedure number is out of range
  when starting Active Directory Users and Computers;
  (bsc#1215906); (bso#15473).
- CVE-2023-3961: samba: Unsanitized client pipe name passed to
  local_np_connect(); (bsc#1215907); (bso#15422).
- CVE-2023-4154: samba: dirsync allows SYSTEM access with only
  "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES;
  (bsc#1215908); (bso#15424).</changelog>
  <changelog author="scabrero@suse.de" date="1698062400">- Update to samba 4.17.12
  * Weird filename can cause assert to fail in
    openat_pathref_fsp_nosymlink(); (bso#15419);
  * reply_sesssetup_and_X() can dereference uninitialized tmp
    pointer; (bso#15420);
  * Missing return in reply_exit_done(); (bso#15430);
  * TREE_CONNECT without SETUP causes smbd to use uninitialized
    pointer; (bso#15432);
  * Improve GetNChanges to address some (but not all "Azure AD
    Connect") syncronisation tool looping during the initial user
    sync phase; (bso#15401);
  * Samba replication logs show (null) DN; (bso#15407);
  * Spotlight sometimes returns no results on latest macOS;
    (bso#15342);
  * Renaming results in NT_STATUS_SHARING_VIOLATION if previously
    attempted to remove the destination; (bso#15417);
  * Spotlight results return wrong date in result list; (bso#15427);
  * macOS mdfind returns only 50 results; (bso#15463);
  * 2-3min delays at reconnect with smb2_validate_sequence_number:
    bad message_id 2; (bso#15346);
  * samba-tool ntacl get segfault if aio_pthread appended;
    (bso#15441);
  * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed;
    (bso#15446);
  * File doesn't show when user doesn't have permission if
    aio_pthread is loaded; (bso#15453);
  * net ads lookup (with unspecified realm) fails; (bso#15384);
    (bsc#1213826);
  * Regression DFS not working with widelinks = true; (bso#15435);
    (bsc#1213607);
  * ctdb_killtcp fails to work with --enable-pcap and libpcap 1.9.1;
    (bso#15451);
  * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449);
  * Windows client join fails if a second container CN=System exists
    somewhere; (bso#9959);
- Fix crossing automounter mount points; (bsc#1215212);</changelog>
  <changelog author="scabrero@suse.de" date="1700481600">- Add "net offlinejoin composeodj" command; (bsc#1214076);</changelog>
  <changelog author="scabrero@suse.de" date="1702555200">- Add new idmap_nss option 'use_upn' for those NSS modules able to
  handle UPNs or DOMAIN/user name format; (bsc#1215369);
- Avoid unnecessary locking in idmap parent setup; (bsc#1215369);</changelog>
</package>
<package pkgid="48a8a77c1454ed3a4ffa2f7b62208fb0ed8b923a28125741067cdc9bae470bc0" name="samba-client-libs" arch="aarch64">
  <version epoch="0" ver="4.17.9+git.421.abde31ca5c2" rel="150500.3.11.1"/>
  <changelog author="nopower@suse.com" date="1664452800">- Update to 4.15.10
  * Possible use after free of connection_struct when iterating
    smbd_server_connection-&gt;connections; (bso#15128);
    (bsc#1200102).
  * smbXsrv_connection_shutdown_send result leaked; (bso#15174).
  * Spotlight RPC service returns wrong response when Spotlight
    is disabled on a share; (bso#15086).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
    (bso#15153).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * Missing READ_LEASE break could cause data corruption;
    (bso#15148).
  * rpcclient can crash using setuserinfo(2); (bso#15124).
  * Samba fails to build with glibc 2.36 caused by including
    &lt;sys/mount.h&gt; in libreplace; (bso#15132).
  * SMB1 negotiation can fail to handle connection errors;
    (bso#15152).
  * samba-tool domain join segfault when joining a samba ad
    domain; (bso#15078).
- Update to 4.15.9
  * CVE-2022-32742:SMB1 code does not correct verify SMB1write,
    SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085);
    (bsc#1201496).
  * CVE-2022-32746: samba: Use-after-free occurring in database
    audit logging; (bso#15009); (bso#15096); (bsc#1201490).
  * CVE-2022-2031: samba, ldb: AD users can bypass certain
    restrictions associated with changing passwords; (bso#15047);
    (bsc#1201495);
  * CVE-2022-32745: samba: ldb: AD users can crash the server
    process with an LDAP add or modify request; (bso#15008);
    (bso#15096); (bsc#1201492).
  * CVE-2022-2031: samba, ldb: AD users can bypass certain
    restrictions associated with changing passwords; (bso#15047);
    (bsc#1201495);
  * CVE-2022-32744: samba, ldb: AD users can forge password change
    requests for any user; (bso#15074); (bso#15047); (bsc#1201493).</changelog>
  <changelog author="nopower@suse.com" date="1668600000">- Update to 4.15.12
  * CVE-2022-42898: samba: heimdal: Samba buffer overflow
    vulnerabilities on 32-bit systems; (bso#15203); (bsc#1205126).
- Update to 4.15.11
  * Allow rebuild of Centos 8 images after move to vault for
    Samba 4.15; (bso#15193).
  * CVE-2022-3437: samba: Buffer overflow in Heimdal unwrap_des3();
    (bso#15134); (bsc#1204254)</changelog>
  <changelog author="scabrero@suse.de" date="1669636800">- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);</changelog>
  <changelog author="dmulder@suse.com" date="1669896000">- Introduce without-smb1-server spec flag; (bsc#1205104);
- Update to 4.17.3
  * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit
    systems; (bsc#1205126); (bso#15203);
- Replace obsolete python-gpgme with python-gpg
  * Upstream replaced it in v4.9.5 -- bso#13728
- Update to 4.17.2
  * CVE-2022-3592 [SECURITY] samba: Wide links protection broken;
    (bso#15207); (bsc#1204499).
  * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal
    unwrap_des3();(bso#15134); (bsc#1204254).
- Update to 4.17.1
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * smbXsrv_connection_shutdown_send result leaked; (bso#15174).
  * Flush on a named stream never completes; (bso#15182).
  * Permission denied calling SMBC_getatr when file not exists;
    (bso#15195).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * pytest: add file removal helpers for TestCaseInTempDir;
    (bso#15191).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * Flush on a named stream never completes; (bso#15182).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * multi-channel socket passing may hit a race if one of the
    involved processes already existed; (bso#15200).
  * memory leak on temporary of struct imessaging_post_state and
    struct tevent_immediate on struct imessaging_context (in
    rpcd_spoolss and maybe others); (bso#15201).
  * Since popt1.19 various use after free errors using result of
    poptGetArg are now exposed; (bso#15205); (boo#1204279).
  * Remove special case for O_CREAT in SMB_VFS_OPENAT from
    vfs_glusterfs; (bso#15192).
  * GETPWSID in memory cache grows indefinetly with each NTLM
    auth; (bso#15169).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);
- Fix use after free errors resulting from using return of
  poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205).
- s3: smbd: Fix memory leak in
  smbd_server_connection_terminate_done(); (bso#15174).
- Disable SMB1 for tumbleweed builds.
- Update to 4.17.0
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
    (bso#15153).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * Cross-node multi-channel reconnects result in SMB2 Negotiate
    returning NT_STATUS_NOT_SUPPORTED; (bso#15159).
  * winbind at info level debug can coredump when processing
    wb_lookupusergroups; (bso#15160).
  * Make use of glfs_*at() API calls in vfs_glusterfs;
    (bso#15157).
  * Possible use after free of connection_struct when iterating
    smbd_server_connection-&gt;connections; (bso#15128).
  * `net usershare add` fails with flag works with --long but
    fails with -l; (bso#15145).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Missing READ_LEASE break could cause data corruption;
    (bso#15148).
  * libsamba-errors uses a wrong version number; (bso#15141).
  * SMB1 negotiation can fail to handle connection errors;
    (bso#15152).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * 4.17.rc1 still uses symlink-race prone unix_convert();
    (bso#15144).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Manpage for smbstatus json is missing; (bso#15147).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Fix issues found by coverity in smbstatus json code;
    (bso#15140).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Update to 4.16.4
  * CVE-2022-2031: Samba AD users can bypass certain restrictions
    associated with changing passwords; (bsc#1201495); (bso#15047);
  * CVE-2022-32744: Samba AD users can forge password change
    requests for any user; (bsc#1201493); (bso#15074);
  * CVE-2022-32745: Samba AD users can crash the server process
    with an LDAP add or modify request; (bsc#1201492); (bso#15008);
  * CVE-2022-32746: Samba AD users can induce a use-after-free in
    the server process with an LDAP add or modify request;
    (bsc#1201490); (bso#15009);
  * CVE-2022-32742: Server memory information leak via SMB1;
    (bsc#1201496); (bso#15085);
- Update to 4.16.3
  * Using vfs_streams_xattr and deleting a file causes a panic;
    (bso#15099);
  * Add support for bind 9.18; (bso#14986);
  * logging dsdb audit to specific files does not work;
    (bso#15076);
  * Problem when winbind renews Kerberos; (bso#14979);
    (bsc#1196224);
  * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in
    developer mode; (bso#15095);
  * Crash in streams_xattr because fsp-&gt;base_fsp-&gt;fsp_name is
    NULL; (bso#15105);
  * Crash in rpcd_classic - NULL pointer deference in
    mangle_is_mangled(); (bso#15118);
  * smbclient commands del &amp; deltree fail with
    NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
    (bsc#1200556);
  * Fix check for chown when processing NFSv4 ACL; (bso#15120);
  * The pcap background queue process should not be stopped;
    (bso#15082);
  * testparm: Fix typo in idmap rangesize check; (bso#15097);
  * net ads info returns LDAP server and LDAP server name as
    null; (bso#15106);
  * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;
    (bso#15108);
  * CTDB child process logging does not work as expected;
    (bso#15090);
- Update spec file to fix the optional Heimdal DC build
- Fix external trusts with MIT Kerberos 1.20
- Add missing samba-client requirement to samba-winbind package;
  (bsc#1198255);
- Move pdb backends from package samba-libs to package
  samba-client-libs and remove samba-libs requirement from
  samba-winbind; (bsc#1200964); (bsc#1198255);
- Add sysuser-shadow requirement for packages using
  systemd-sysusers
- Use the canonical realm name to refresh the Kerberos tickets;
  (bsc#1196224); (bso#14979);
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Update to 4.16.2
  * Use pathref fd instead of io fd in vfs_default_durable_cookie;
    (bso#15042);
  * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original
    file had been deleted; (bso#15069);
  * Reintroduce netgroups support; (bso#15087);
  * net ads info shows LDAP Server: 0.0.0.0 depending on contacted
    server; (bso#14674);
  * Update from 4.15  to 4.16 breaks discovery of [homes] on
    standalone server from Win and IOS; (bso#15062);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * smbclient -E doesn't work as advertised; (bso#15075);
  * The samba background daemon doesn't refresh the printcap cache
    on startup; (bso#15081);
  * Out-by-4 error in smbd read reply max_send clamp; (bso#14443);
- Fix samba4.blackbox.net_ads_dns_async test with bind9 &gt;= 9.17.7
- Support building with MIT Kerberos 1.20
- Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC;
  (CVE-2020-17049);
- Resource Based Constrained Delegation (RBCD) for Samba AD DC
- Support building with gcc 12.1
- Use requires_eq macro to require the libldb2 version available at
  samba-dsdb-modules build time; (bsc#1199362);
- Update to 4.16.1
  * Share and server swapped in smbget password prompt; (bso#14831);
  * Durable handles won't reconnect if the leased file is written to;
    (bso#15022);
  * rmdir silently fails if directory contains unreadable files and
    hide unreadable is yes; (bso#15023);
  * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information
    on renamed file handle; (bso#15038);
  * Need to describe --builtin-libraries= better (compare with
  - -bundled-libraries); (bso#8731);
  * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback;
    (bso#14957);
  * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes;
    (bso#15035);
  * PAM Kerberos authentication incorrectly fails with a clock skew
    error; (bso#15046);
  * Username map - samba erroneously applies unix group memberships
    to user account entries; (bso#15041);
  * KVNO off by 100000; (bso#14951);
  * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027);
  * vfs_gpfs recalls=no option prevents listing files; (bso#15055);
  * smbd doesn't handle UPNs for looking up names; (bso#15054);
- Update update-apparmor-samba-profile script, replace
  non-printable delimiter with more human readable separator as
  sed can accept separators that can appear in the input data.
- Fix update-apparmor-samba-profile script, sed doesn't like
  multibyte separators; (bsc#1198309).
- Update to 4.16.0
  * New samba-dcerpcd binary to provide DCERPC in the member server
    setup
  * Certificate Auto Enrollment
  * Ability to add ports to dns forwarder addresses in internal DNS
    backend
  * No longer using Linux mandatory locks for sharemodes
  * SMB1 protocol has been deprecated, particularly older dialects
  * SMB1 protocol SMBCopy command removed
  * SMB1 server-side wildcard expansion removed
- Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101);
- Use systemd-sysusers to create system users; (bsc#1182847);</changelog>
  <changelog author="scabrero@suse.de" date="1671105600">- Update to 4.17.4
  * CVE-2022-44640 Upstream Heimdal free of user-controlled
    pointer in FAST; (bsc#14929);
  * CVE-2021-20251 Bad password count not incremented atomically;
    (bsc#14611);
  * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability;
    (bsc#15203);
  * CVE-2022-37966 rc4-hmac Kerberos session keys issued to
    modern servers; (bso#15237);
  * CVE-2022-37967 Kerberos constrained delegation ticket forgery
    possible against Samba AD DC; (bso#15231);
  * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak
    and should be avoided; (bso#15240);
  * pam_winbind uses time_t and pointers assuming they are of the
    same size; (bso#15224);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * filter-subunit is inefficient with large numbers of
    knownfails; (bso#15258);
  * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories;
    (bso#15252);
  * The KDC logic arround msDs-supportedEncryptionTypes differs
    from Windows; (bso#13135);
  * libnet: change_password() doesn't work with
    dcerpc_samr_ChangePasswordUser4(); (bso#15206);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * Memory leak in snprintf replacement functions; (bso#15230);
  * RODC doesn't reset badPwdCount reliable via an RWDC
    (CVE-2021-20251 regression); (bso#15253);
  * Prevent EBADF errors with vfs_glusterfs; (bso#15198);
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243);
  * Stack smashing in net offlinejoin requestodj; (bso#15257);
  * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue;
    (bso#15197);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
- Remove deprecated if-{down,up} scripts; (bsc#1206444);
- Adjust the systemd drop-in file for named service; (bsc#1201689);
  * Paths are additive so do not repeat paths from named.service
  * Prefix the samba DLZ directory with "-" to ignore this path
    if it does not exists</changelog>
  <changelog author="nopower@suse.com" date="1671624000">- Change with_dc default to 0 (for non TW builds), ADDC feature is
  deprecated and will no longer be included in &gt;= SLE15-SP5;
  (jsc#PED-1122).</changelog>
  <changelog author="nopower@suse.com" date="1673524800">- Clean up logic for PAM migration settings in spec file.</changelog>
  <changelog author="nopower@suse.com" date="1674475200">- libdsdb-module-samba4 should be packaged as part of samba-libs and
  not samba-ad-dc-libs. Additionally no need for it to be
  removed conditionally.</changelog>
  <changelog author="nopower@suse.com" date="1674475201">- Remove non functioning ifup/ifdown samba-winbindd scripts;
  (bsc#1207414).</changelog>
  <changelog author="nopower@suse.com" date="1678363200">- Make samba-libs conflict with old samba-ad-dc-libs package
  to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1679745600">- Make (32bit) samba-libs conflict with old samba-ad-dc-libs
  package to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1681300800">- Update to 4.17.7
  * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords
    in cleartext; (bso#15315); (bsc#1209481).
  * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be
    deleted by unprivileged authenticated users; (bso#15276);
    (bsc#1209483).
  * CVE-2023-0614: samba: Access controlled AD LDAP attributes can
    be discovered; (bso#15270); (bsc#1209485).
  * large_ldap test is inefficient; (bso#15332).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
- Update to 4.17.6
  * streams_xattr is creating unexpected locks on folders;
    (bso#15314).
  * Use of the Azure AD Connect cloud sync tool is now supported
    for password hash synchronisation, allowing Samba AD Domains
    to synchronise passwords with this popular cloud environment;
    (bso#10635).
  * Spotlight doesn't work with latest macOS Ventura;
    (bso#15299).
  * New samba-dcerpc architecture does not scale gracefully;
    (bso#15310).
  * vfs_ceph incorrectly uses fsp_get_io_fd() instead of
    fsp_get_pathref_fd() in close and fstat; (bso#15307).
  * With clustering enabled samba-bgqd can core dump due to use
    after free; (bso#15293).
  * fd_load() function implicitly closes the fd where it should
    not; (bso#15311).
- Update to 4.17.5
  * smbc_getxattr() return value is incorrect; (bso#14808).
  * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not
    handled correctly; (bso#15172).
  * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210).
  * samba-tool gpo listall fails IPv6 only - finddcs() fails to
    find DC when there is only an AAAA record for the DC in DNS;
    (bso#15226).
  * smbd crashes if an FSCTL request is done on a stream handle;
    (bso#15236).
  * DFS links don't work anymore on Mac clients since 4.17;
    (bso#15277).
  * vfs_virusfilter segfault on access, directory edgecase
    (accessing NULL value); (bso#15283).
  * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5)
    based SChannel on NETLOGON (additional changes); (bso#15240).
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243).
  * Shares missing from netshareenum response in samba 4.17.4;
    (bso#15266).
  * ctdb: use-after-free in run_proc; (bso#15269).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * auth3_generate_session_info_pac leaks wbcAuthUserInfo;
    (bso#15286).
  * smbclient segfaults with use after free on an optimized
    build; (bso#15268).
  * smbstatus leaking files in msg.sock and msg.lock;
    (bso#15282).
  * Leak in wbcCtxPingDc2; (bso#15164).
  * Access based share enum does not work in Samba 4.16+;
    (bso#15265).
  * Crash during share enumeration; (bso#15267).
  * rep_listxattr on FreeBSD does not properly check for reads
    off end of returned buffer; (bso#15271).
  * Avoid relying on C89 features in a few places; (bso#15281).</changelog>
  <changelog author="nopower@suse.com" date="1686830400">- Update to 4.17.8
  * log flood: smbd_calculate_access_mask_fsp: Access denied:
    message level should be lower; (bso#15302).
  * Floating point exception (FPE) via cli_pull_send at
    source3/libsmb/clireadwrite.c; (bso#15306).
  * test_tstream_more_tcp_user_timeout_spin fails intermittently
    on Rackspace GitLab runners; (bso#15328).
  * Reduce flapping of ridalloc test; (bso#15329).
  * large_ldap test is unreliable; (bso#15351).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * mdssvc may crash when initializing; (bso#15354).
  * Large directory optimization broken for non-lcomp path
    elements; (bso#15313).
  * streams_depot fails to create streams; (bso#15357).
  * shadow_copy2 and streams_depot don't play well together;
    (bso#15358).
  * wbinfo -u fails on ad dc with &gt;1000 users; (bso#15366).
  * winbindd idmap child contacts the domain controller without a
    need; (bso#15317).
  * idmap_autorid may fail to map sids of trusted domains for the
    first time; (bso#15318).
  * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings;
    (bso#15319).
  * net ads search -P doesn't work against servers in other
    domains; (bso#15323).
  * DS ACEs might be inherited to unrelated object classes;
    (bso#15338).
  * Temporary smbXsrv_tcon_global.tdb can't be parsed;
    (bso#15353).
  * Setting veto files = /.*/ break listing directories;
    (bso#15360); (bsc#1212375).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
  * dsgetdcname: assumes local system uses IPv4; (bso#15325).</changelog>
  <changelog author="nopower@suse.com" date="1688644800">- Update to 4.17.9
  * Backport --pidl-developer fixes; (bso#15404).
  * smbd_scavenger crashes when service smbd is stopped;
    (bso#15275).
  * vfs_fruit might cause a failing open for delete; (bso#15378).
  * named crashes on DLZ zone update; (bso#14030).
  * winbind recurses into itself via rpcd_lsad; (bso#15361).
  * cli_list loops 100% CPU against pre-lanman2 servers;
    (bso#15382).
  * smbclient leaks fds with showacls; (bso#15391).
  * aes256 smb3 encryption algorithms are not allowed in
    smb3_sid_parse(); (bso#15374).
  * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR;
    (bso#15413).
  * smbget memory leak if failed to download files recursively;
    (bso#15403).</changelog>
  <changelog author="nopower@suse.com" date="1689249600">- CVE-2022-2127: lm_resp_len not checked properly in
  winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174).
- CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite
  Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173).
- CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type
  Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172).
- CVE-2023-34968: Spotlight server-side Share Path Disclosure;
  (bso#15388); (bsc#1213171).
- CVE-2023-3347: Samba doesn't require SMB2+ signing if
  `server signing = mandatory` is set; (bso#15397); (bsc#1213170).</changelog>
  <changelog author="nopower@suse.com" date="1689595200">- secure channel faulty since Windows 10/11 update 07/2023;
  (bso#15418); (bsc#1213384).</changelog>
  <changelog author="scabrero@suse.de" date="1690891200">- net ads lookup with unspecified realm fails; (bso#15384);
  (bsc#1213826);</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Move libcluster-samba4.so from samba-libs to samba-client-libs;
  (bsc#1213940);</changelog>
  <changelog author="scabrero@suse.de" date="1692014400">- Fix DFS not working with widelinks enabled; (bsc#1213607);
  (bso#15435);</changelog>
  <changelog author="nopower@suse.com" date="1696420800">- CVE-2023-4091: samba: Client can truncate file with read-only
  permissions; (bsc#1215904); (bso#15439).
- CVE-2023-42669: samba: rpcecho, enabled and running in AD DC,
  allows blocking sleep on request; (bso#1215905); (bso#15474).
- CVE-2023-42670: samba:  The procedure number is out of range
  when starting Active Directory Users and Computers;
  (bsc#1215906); (bso#15473).
- CVE-2023-3961: samba: Unsanitized client pipe name passed to
  local_np_connect(); (bsc#1215907); (bso#15422).
- CVE-2023-4154: samba: dirsync allows SYSTEM access with only
  "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES;
  (bsc#1215908); (bso#15424).</changelog>
</package>
<package pkgid="10ee51d1c82b4b1d5182b09fde679d71d3878b979ab3aa779a1fd84262deefbe" name="samba-client-libs" arch="s390x">
  <version epoch="0" ver="4.17.9+git.421.abde31ca5c2" rel="150500.3.11.1"/>
  <changelog author="nopower@suse.com" date="1664452800">- Update to 4.15.10
  * Possible use after free of connection_struct when iterating
    smbd_server_connection-&gt;connections; (bso#15128);
    (bsc#1200102).
  * smbXsrv_connection_shutdown_send result leaked; (bso#15174).
  * Spotlight RPC service returns wrong response when Spotlight
    is disabled on a share; (bso#15086).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
    (bso#15153).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * Missing READ_LEASE break could cause data corruption;
    (bso#15148).
  * rpcclient can crash using setuserinfo(2); (bso#15124).
  * Samba fails to build with glibc 2.36 caused by including
    &lt;sys/mount.h&gt; in libreplace; (bso#15132).
  * SMB1 negotiation can fail to handle connection errors;
    (bso#15152).
  * samba-tool domain join segfault when joining a samba ad
    domain; (bso#15078).
- Update to 4.15.9
  * CVE-2022-32742:SMB1 code does not correct verify SMB1write,
    SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085);
    (bsc#1201496).
  * CVE-2022-32746: samba: Use-after-free occurring in database
    audit logging; (bso#15009); (bso#15096); (bsc#1201490).
  * CVE-2022-2031: samba, ldb: AD users can bypass certain
    restrictions associated with changing passwords; (bso#15047);
    (bsc#1201495);
  * CVE-2022-32745: samba: ldb: AD users can crash the server
    process with an LDAP add or modify request; (bso#15008);
    (bso#15096); (bsc#1201492).
  * CVE-2022-2031: samba, ldb: AD users can bypass certain
    restrictions associated with changing passwords; (bso#15047);
    (bsc#1201495);
  * CVE-2022-32744: samba, ldb: AD users can forge password change
    requests for any user; (bso#15074); (bso#15047); (bsc#1201493).</changelog>
  <changelog author="nopower@suse.com" date="1668600000">- Update to 4.15.12
  * CVE-2022-42898: samba: heimdal: Samba buffer overflow
    vulnerabilities on 32-bit systems; (bso#15203); (bsc#1205126).
- Update to 4.15.11
  * Allow rebuild of Centos 8 images after move to vault for
    Samba 4.15; (bso#15193).
  * CVE-2022-3437: samba: Buffer overflow in Heimdal unwrap_des3();
    (bso#15134); (bsc#1204254)</changelog>
  <changelog author="scabrero@suse.de" date="1669636800">- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);</changelog>
  <changelog author="dmulder@suse.com" date="1669896000">- Introduce without-smb1-server spec flag; (bsc#1205104);
- Update to 4.17.3
  * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit
    systems; (bsc#1205126); (bso#15203);
- Replace obsolete python-gpgme with python-gpg
  * Upstream replaced it in v4.9.5 -- bso#13728
- Update to 4.17.2
  * CVE-2022-3592 [SECURITY] samba: Wide links protection broken;
    (bso#15207); (bsc#1204499).
  * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal
    unwrap_des3();(bso#15134); (bsc#1204254).
- Update to 4.17.1
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * smbXsrv_connection_shutdown_send result leaked; (bso#15174).
  * Flush on a named stream never completes; (bso#15182).
  * Permission denied calling SMBC_getatr when file not exists;
    (bso#15195).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * pytest: add file removal helpers for TestCaseInTempDir;
    (bso#15191).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * Flush on a named stream never completes; (bso#15182).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * multi-channel socket passing may hit a race if one of the
    involved processes already existed; (bso#15200).
  * memory leak on temporary of struct imessaging_post_state and
    struct tevent_immediate on struct imessaging_context (in
    rpcd_spoolss and maybe others); (bso#15201).
  * Since popt1.19 various use after free errors using result of
    poptGetArg are now exposed; (bso#15205); (boo#1204279).
  * Remove special case for O_CREAT in SMB_VFS_OPENAT from
    vfs_glusterfs; (bso#15192).
  * GETPWSID in memory cache grows indefinetly with each NTLM
    auth; (bso#15169).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);
- Fix use after free errors resulting from using return of
  poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205).
- s3: smbd: Fix memory leak in
  smbd_server_connection_terminate_done(); (bso#15174).
- Disable SMB1 for tumbleweed builds.
- Update to 4.17.0
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
    (bso#15153).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * Cross-node multi-channel reconnects result in SMB2 Negotiate
    returning NT_STATUS_NOT_SUPPORTED; (bso#15159).
  * winbind at info level debug can coredump when processing
    wb_lookupusergroups; (bso#15160).
  * Make use of glfs_*at() API calls in vfs_glusterfs;
    (bso#15157).
  * Possible use after free of connection_struct when iterating
    smbd_server_connection-&gt;connections; (bso#15128).
  * `net usershare add` fails with flag works with --long but
    fails with -l; (bso#15145).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Missing READ_LEASE break could cause data corruption;
    (bso#15148).
  * libsamba-errors uses a wrong version number; (bso#15141).
  * SMB1 negotiation can fail to handle connection errors;
    (bso#15152).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * 4.17.rc1 still uses symlink-race prone unix_convert();
    (bso#15144).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Manpage for smbstatus json is missing; (bso#15147).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Fix issues found by coverity in smbstatus json code;
    (bso#15140).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Update to 4.16.4
  * CVE-2022-2031: Samba AD users can bypass certain restrictions
    associated with changing passwords; (bsc#1201495); (bso#15047);
  * CVE-2022-32744: Samba AD users can forge password change
    requests for any user; (bsc#1201493); (bso#15074);
  * CVE-2022-32745: Samba AD users can crash the server process
    with an LDAP add or modify request; (bsc#1201492); (bso#15008);
  * CVE-2022-32746: Samba AD users can induce a use-after-free in
    the server process with an LDAP add or modify request;
    (bsc#1201490); (bso#15009);
  * CVE-2022-32742: Server memory information leak via SMB1;
    (bsc#1201496); (bso#15085);
- Update to 4.16.3
  * Using vfs_streams_xattr and deleting a file causes a panic;
    (bso#15099);
  * Add support for bind 9.18; (bso#14986);
  * logging dsdb audit to specific files does not work;
    (bso#15076);
  * Problem when winbind renews Kerberos; (bso#14979);
    (bsc#1196224);
  * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in
    developer mode; (bso#15095);
  * Crash in streams_xattr because fsp-&gt;base_fsp-&gt;fsp_name is
    NULL; (bso#15105);
  * Crash in rpcd_classic - NULL pointer deference in
    mangle_is_mangled(); (bso#15118);
  * smbclient commands del &amp; deltree fail with
    NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
    (bsc#1200556);
  * Fix check for chown when processing NFSv4 ACL; (bso#15120);
  * The pcap background queue process should not be stopped;
    (bso#15082);
  * testparm: Fix typo in idmap rangesize check; (bso#15097);
  * net ads info returns LDAP server and LDAP server name as
    null; (bso#15106);
  * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;
    (bso#15108);
  * CTDB child process logging does not work as expected;
    (bso#15090);
- Update spec file to fix the optional Heimdal DC build
- Fix external trusts with MIT Kerberos 1.20
- Add missing samba-client requirement to samba-winbind package;
  (bsc#1198255);
- Move pdb backends from package samba-libs to package
  samba-client-libs and remove samba-libs requirement from
  samba-winbind; (bsc#1200964); (bsc#1198255);
- Add sysuser-shadow requirement for packages using
  systemd-sysusers
- Use the canonical realm name to refresh the Kerberos tickets;
  (bsc#1196224); (bso#14979);
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Update to 4.16.2
  * Use pathref fd instead of io fd in vfs_default_durable_cookie;
    (bso#15042);
  * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original
    file had been deleted; (bso#15069);
  * Reintroduce netgroups support; (bso#15087);
  * net ads info shows LDAP Server: 0.0.0.0 depending on contacted
    server; (bso#14674);
  * Update from 4.15  to 4.16 breaks discovery of [homes] on
    standalone server from Win and IOS; (bso#15062);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * smbclient -E doesn't work as advertised; (bso#15075);
  * The samba background daemon doesn't refresh the printcap cache
    on startup; (bso#15081);
  * Out-by-4 error in smbd read reply max_send clamp; (bso#14443);
- Fix samba4.blackbox.net_ads_dns_async test with bind9 &gt;= 9.17.7
- Support building with MIT Kerberos 1.20
- Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC;
  (CVE-2020-17049);
- Resource Based Constrained Delegation (RBCD) for Samba AD DC
- Support building with gcc 12.1
- Use requires_eq macro to require the libldb2 version available at
  samba-dsdb-modules build time; (bsc#1199362);
- Update to 4.16.1
  * Share and server swapped in smbget password prompt; (bso#14831);
  * Durable handles won't reconnect if the leased file is written to;
    (bso#15022);
  * rmdir silently fails if directory contains unreadable files and
    hide unreadable is yes; (bso#15023);
  * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information
    on renamed file handle; (bso#15038);
  * Need to describe --builtin-libraries= better (compare with
  - -bundled-libraries); (bso#8731);
  * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback;
    (bso#14957);
  * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes;
    (bso#15035);
  * PAM Kerberos authentication incorrectly fails with a clock skew
    error; (bso#15046);
  * Username map - samba erroneously applies unix group memberships
    to user account entries; (bso#15041);
  * KVNO off by 100000; (bso#14951);
  * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027);
  * vfs_gpfs recalls=no option prevents listing files; (bso#15055);
  * smbd doesn't handle UPNs for looking up names; (bso#15054);
- Update update-apparmor-samba-profile script, replace
  non-printable delimiter with more human readable separator as
  sed can accept separators that can appear in the input data.
- Fix update-apparmor-samba-profile script, sed doesn't like
  multibyte separators; (bsc#1198309).
- Update to 4.16.0
  * New samba-dcerpcd binary to provide DCERPC in the member server
    setup
  * Certificate Auto Enrollment
  * Ability to add ports to dns forwarder addresses in internal DNS
    backend
  * No longer using Linux mandatory locks for sharemodes
  * SMB1 protocol has been deprecated, particularly older dialects
  * SMB1 protocol SMBCopy command removed
  * SMB1 server-side wildcard expansion removed
- Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101);
- Use systemd-sysusers to create system users; (bsc#1182847);</changelog>
  <changelog author="scabrero@suse.de" date="1671105600">- Update to 4.17.4
  * CVE-2022-44640 Upstream Heimdal free of user-controlled
    pointer in FAST; (bsc#14929);
  * CVE-2021-20251 Bad password count not incremented atomically;
    (bsc#14611);
  * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability;
    (bsc#15203);
  * CVE-2022-37966 rc4-hmac Kerberos session keys issued to
    modern servers; (bso#15237);
  * CVE-2022-37967 Kerberos constrained delegation ticket forgery
    possible against Samba AD DC; (bso#15231);
  * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak
    and should be avoided; (bso#15240);
  * pam_winbind uses time_t and pointers assuming they are of the
    same size; (bso#15224);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * filter-subunit is inefficient with large numbers of
    knownfails; (bso#15258);
  * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories;
    (bso#15252);
  * The KDC logic arround msDs-supportedEncryptionTypes differs
    from Windows; (bso#13135);
  * libnet: change_password() doesn't work with
    dcerpc_samr_ChangePasswordUser4(); (bso#15206);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * Memory leak in snprintf replacement functions; (bso#15230);
  * RODC doesn't reset badPwdCount reliable via an RWDC
    (CVE-2021-20251 regression); (bso#15253);
  * Prevent EBADF errors with vfs_glusterfs; (bso#15198);
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243);
  * Stack smashing in net offlinejoin requestodj; (bso#15257);
  * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue;
    (bso#15197);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
- Remove deprecated if-{down,up} scripts; (bsc#1206444);
- Adjust the systemd drop-in file for named service; (bsc#1201689);
  * Paths are additive so do not repeat paths from named.service
  * Prefix the samba DLZ directory with "-" to ignore this path
    if it does not exists</changelog>
  <changelog author="nopower@suse.com" date="1671624000">- Change with_dc default to 0 (for non TW builds), ADDC feature is
  deprecated and will no longer be included in &gt;= SLE15-SP5;
  (jsc#PED-1122).</changelog>
  <changelog author="nopower@suse.com" date="1673524800">- Clean up logic for PAM migration settings in spec file.</changelog>
  <changelog author="nopower@suse.com" date="1674475200">- libdsdb-module-samba4 should be packaged as part of samba-libs and
  not samba-ad-dc-libs. Additionally no need for it to be
  removed conditionally.</changelog>
  <changelog author="nopower@suse.com" date="1674475201">- Remove non functioning ifup/ifdown samba-winbindd scripts;
  (bsc#1207414).</changelog>
  <changelog author="nopower@suse.com" date="1678363200">- Make samba-libs conflict with old samba-ad-dc-libs package
  to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1679745600">- Make (32bit) samba-libs conflict with old samba-ad-dc-libs
  package to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1681300800">- Update to 4.17.7
  * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords
    in cleartext; (bso#15315); (bsc#1209481).
  * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be
    deleted by unprivileged authenticated users; (bso#15276);
    (bsc#1209483).
  * CVE-2023-0614: samba: Access controlled AD LDAP attributes can
    be discovered; (bso#15270); (bsc#1209485).
  * large_ldap test is inefficient; (bso#15332).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
- Update to 4.17.6
  * streams_xattr is creating unexpected locks on folders;
    (bso#15314).
  * Use of the Azure AD Connect cloud sync tool is now supported
    for password hash synchronisation, allowing Samba AD Domains
    to synchronise passwords with this popular cloud environment;
    (bso#10635).
  * Spotlight doesn't work with latest macOS Ventura;
    (bso#15299).
  * New samba-dcerpc architecture does not scale gracefully;
    (bso#15310).
  * vfs_ceph incorrectly uses fsp_get_io_fd() instead of
    fsp_get_pathref_fd() in close and fstat; (bso#15307).
  * With clustering enabled samba-bgqd can core dump due to use
    after free; (bso#15293).
  * fd_load() function implicitly closes the fd where it should
    not; (bso#15311).
- Update to 4.17.5
  * smbc_getxattr() return value is incorrect; (bso#14808).
  * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not
    handled correctly; (bso#15172).
  * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210).
  * samba-tool gpo listall fails IPv6 only - finddcs() fails to
    find DC when there is only an AAAA record for the DC in DNS;
    (bso#15226).
  * smbd crashes if an FSCTL request is done on a stream handle;
    (bso#15236).
  * DFS links don't work anymore on Mac clients since 4.17;
    (bso#15277).
  * vfs_virusfilter segfault on access, directory edgecase
    (accessing NULL value); (bso#15283).
  * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5)
    based SChannel on NETLOGON (additional changes); (bso#15240).
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243).
  * Shares missing from netshareenum response in samba 4.17.4;
    (bso#15266).
  * ctdb: use-after-free in run_proc; (bso#15269).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * auth3_generate_session_info_pac leaks wbcAuthUserInfo;
    (bso#15286).
  * smbclient segfaults with use after free on an optimized
    build; (bso#15268).
  * smbstatus leaking files in msg.sock and msg.lock;
    (bso#15282).
  * Leak in wbcCtxPingDc2; (bso#15164).
  * Access based share enum does not work in Samba 4.16+;
    (bso#15265).
  * Crash during share enumeration; (bso#15267).
  * rep_listxattr on FreeBSD does not properly check for reads
    off end of returned buffer; (bso#15271).
  * Avoid relying on C89 features in a few places; (bso#15281).</changelog>
  <changelog author="nopower@suse.com" date="1686830400">- Update to 4.17.8
  * log flood: smbd_calculate_access_mask_fsp: Access denied:
    message level should be lower; (bso#15302).
  * Floating point exception (FPE) via cli_pull_send at
    source3/libsmb/clireadwrite.c; (bso#15306).
  * test_tstream_more_tcp_user_timeout_spin fails intermittently
    on Rackspace GitLab runners; (bso#15328).
  * Reduce flapping of ridalloc test; (bso#15329).
  * large_ldap test is unreliable; (bso#15351).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * mdssvc may crash when initializing; (bso#15354).
  * Large directory optimization broken for non-lcomp path
    elements; (bso#15313).
  * streams_depot fails to create streams; (bso#15357).
  * shadow_copy2 and streams_depot don't play well together;
    (bso#15358).
  * wbinfo -u fails on ad dc with &gt;1000 users; (bso#15366).
  * winbindd idmap child contacts the domain controller without a
    need; (bso#15317).
  * idmap_autorid may fail to map sids of trusted domains for the
    first time; (bso#15318).
  * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings;
    (bso#15319).
  * net ads search -P doesn't work against servers in other
    domains; (bso#15323).
  * DS ACEs might be inherited to unrelated object classes;
    (bso#15338).
  * Temporary smbXsrv_tcon_global.tdb can't be parsed;
    (bso#15353).
  * Setting veto files = /.*/ break listing directories;
    (bso#15360); (bsc#1212375).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
  * dsgetdcname: assumes local system uses IPv4; (bso#15325).</changelog>
  <changelog author="nopower@suse.com" date="1688644800">- Update to 4.17.9
  * Backport --pidl-developer fixes; (bso#15404).
  * smbd_scavenger crashes when service smbd is stopped;
    (bso#15275).
  * vfs_fruit might cause a failing open for delete; (bso#15378).
  * named crashes on DLZ zone update; (bso#14030).
  * winbind recurses into itself via rpcd_lsad; (bso#15361).
  * cli_list loops 100% CPU against pre-lanman2 servers;
    (bso#15382).
  * smbclient leaks fds with showacls; (bso#15391).
  * aes256 smb3 encryption algorithms are not allowed in
    smb3_sid_parse(); (bso#15374).
  * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR;
    (bso#15413).
  * smbget memory leak if failed to download files recursively;
    (bso#15403).</changelog>
  <changelog author="nopower@suse.com" date="1689249600">- CVE-2022-2127: lm_resp_len not checked properly in
  winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174).
- CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite
  Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173).
- CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type
  Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172).
- CVE-2023-34968: Spotlight server-side Share Path Disclosure;
  (bso#15388); (bsc#1213171).
- CVE-2023-3347: Samba doesn't require SMB2+ signing if
  `server signing = mandatory` is set; (bso#15397); (bsc#1213170).</changelog>
  <changelog author="nopower@suse.com" date="1689595200">- secure channel faulty since Windows 10/11 update 07/2023;
  (bso#15418); (bsc#1213384).</changelog>
  <changelog author="scabrero@suse.de" date="1690891200">- net ads lookup with unspecified realm fails; (bso#15384);
  (bsc#1213826);</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Move libcluster-samba4.so from samba-libs to samba-client-libs;
  (bsc#1213940);</changelog>
  <changelog author="scabrero@suse.de" date="1692014400">- Fix DFS not working with widelinks enabled; (bsc#1213607);
  (bso#15435);</changelog>
  <changelog author="nopower@suse.com" date="1696420800">- CVE-2023-4091: samba: Client can truncate file with read-only
  permissions; (bsc#1215904); (bso#15439).
- CVE-2023-42669: samba: rpcecho, enabled and running in AD DC,
  allows blocking sleep on request; (bso#1215905); (bso#15474).
- CVE-2023-42670: samba:  The procedure number is out of range
  when starting Active Directory Users and Computers;
  (bsc#1215906); (bso#15473).
- CVE-2023-3961: samba: Unsanitized client pipe name passed to
  local_np_connect(); (bsc#1215907); (bso#15422).
- CVE-2023-4154: samba: dirsync allows SYSTEM access with only
  "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES;
  (bsc#1215908); (bso#15424).</changelog>
</package>
<package pkgid="e98de9324cf4595ff81a5d2621b6ee9b0259394c5e0901ed54a63c245cfe6a60" name="samba-client-libs" arch="x86_64">
  <version epoch="0" ver="4.17.9+git.421.abde31ca5c2" rel="150500.3.11.1"/>
  <changelog author="nopower@suse.com" date="1664452800">- Update to 4.15.10
  * Possible use after free of connection_struct when iterating
    smbd_server_connection-&gt;connections; (bso#15128);
    (bsc#1200102).
  * smbXsrv_connection_shutdown_send result leaked; (bso#15174).
  * Spotlight RPC service returns wrong response when Spotlight
    is disabled on a share; (bso#15086).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
    (bso#15153).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * Missing READ_LEASE break could cause data corruption;
    (bso#15148).
  * rpcclient can crash using setuserinfo(2); (bso#15124).
  * Samba fails to build with glibc 2.36 caused by including
    &lt;sys/mount.h&gt; in libreplace; (bso#15132).
  * SMB1 negotiation can fail to handle connection errors;
    (bso#15152).
  * samba-tool domain join segfault when joining a samba ad
    domain; (bso#15078).
- Update to 4.15.9
  * CVE-2022-32742:SMB1 code does not correct verify SMB1write,
    SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085);
    (bsc#1201496).
  * CVE-2022-32746: samba: Use-after-free occurring in database
    audit logging; (bso#15009); (bso#15096); (bsc#1201490).
  * CVE-2022-2031: samba, ldb: AD users can bypass certain
    restrictions associated with changing passwords; (bso#15047);
    (bsc#1201495);
  * CVE-2022-32745: samba: ldb: AD users can crash the server
    process with an LDAP add or modify request; (bso#15008);
    (bso#15096); (bsc#1201492).
  * CVE-2022-2031: samba, ldb: AD users can bypass certain
    restrictions associated with changing passwords; (bso#15047);
    (bsc#1201495);
  * CVE-2022-32744: samba, ldb: AD users can forge password change
    requests for any user; (bso#15074); (bso#15047); (bsc#1201493).</changelog>
  <changelog author="nopower@suse.com" date="1668600000">- Update to 4.15.12
  * CVE-2022-42898: samba: heimdal: Samba buffer overflow
    vulnerabilities on 32-bit systems; (bso#15203); (bsc#1205126).
- Update to 4.15.11
  * Allow rebuild of Centos 8 images after move to vault for
    Samba 4.15; (bso#15193).
  * CVE-2022-3437: samba: Buffer overflow in Heimdal unwrap_des3();
    (bso#15134); (bsc#1204254)</changelog>
  <changelog author="scabrero@suse.de" date="1669636800">- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);</changelog>
  <changelog author="dmulder@suse.com" date="1669896000">- Introduce without-smb1-server spec flag; (bsc#1205104);
- Update to 4.17.3
  * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit
    systems; (bsc#1205126); (bso#15203);
- Replace obsolete python-gpgme with python-gpg
  * Upstream replaced it in v4.9.5 -- bso#13728
- Update to 4.17.2
  * CVE-2022-3592 [SECURITY] samba: Wide links protection broken;
    (bso#15207); (bsc#1204499).
  * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal
    unwrap_des3();(bso#15134); (bsc#1204254).
- Update to 4.17.1
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * smbXsrv_connection_shutdown_send result leaked; (bso#15174).
  * Flush on a named stream never completes; (bso#15182).
  * Permission denied calling SMBC_getatr when file not exists;
    (bso#15195).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * pytest: add file removal helpers for TestCaseInTempDir;
    (bso#15191).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * Flush on a named stream never completes; (bso#15182).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * multi-channel socket passing may hit a race if one of the
    involved processes already existed; (bso#15200).
  * memory leak on temporary of struct imessaging_post_state and
    struct tevent_immediate on struct imessaging_context (in
    rpcd_spoolss and maybe others); (bso#15201).
  * Since popt1.19 various use after free errors using result of
    poptGetArg are now exposed; (bso#15205); (boo#1204279).
  * Remove special case for O_CREAT in SMB_VFS_OPENAT from
    vfs_glusterfs; (bso#15192).
  * GETPWSID in memory cache grows indefinetly with each NTLM
    auth; (bso#15169).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);
- Fix use after free errors resulting from using return of
  poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205).
- s3: smbd: Fix memory leak in
  smbd_server_connection_terminate_done(); (bso#15174).
- Disable SMB1 for tumbleweed builds.
- Update to 4.17.0
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
    (bso#15153).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * Cross-node multi-channel reconnects result in SMB2 Negotiate
    returning NT_STATUS_NOT_SUPPORTED; (bso#15159).
  * winbind at info level debug can coredump when processing
    wb_lookupusergroups; (bso#15160).
  * Make use of glfs_*at() API calls in vfs_glusterfs;
    (bso#15157).
  * Possible use after free of connection_struct when iterating
    smbd_server_connection-&gt;connections; (bso#15128).
  * `net usershare add` fails with flag works with --long but
    fails with -l; (bso#15145).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Missing READ_LEASE break could cause data corruption;
    (bso#15148).
  * libsamba-errors uses a wrong version number; (bso#15141).
  * SMB1 negotiation can fail to handle connection errors;
    (bso#15152).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * 4.17.rc1 still uses symlink-race prone unix_convert();
    (bso#15144).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Manpage for smbstatus json is missing; (bso#15147).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Fix issues found by coverity in smbstatus json code;
    (bso#15140).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Update to 4.16.4
  * CVE-2022-2031: Samba AD users can bypass certain restrictions
    associated with changing passwords; (bsc#1201495); (bso#15047);
  * CVE-2022-32744: Samba AD users can forge password change
    requests for any user; (bsc#1201493); (bso#15074);
  * CVE-2022-32745: Samba AD users can crash the server process
    with an LDAP add or modify request; (bsc#1201492); (bso#15008);
  * CVE-2022-32746: Samba AD users can induce a use-after-free in
    the server process with an LDAP add or modify request;
    (bsc#1201490); (bso#15009);
  * CVE-2022-32742: Server memory information leak via SMB1;
    (bsc#1201496); (bso#15085);
- Update to 4.16.3
  * Using vfs_streams_xattr and deleting a file causes a panic;
    (bso#15099);
  * Add support for bind 9.18; (bso#14986);
  * logging dsdb audit to specific files does not work;
    (bso#15076);
  * Problem when winbind renews Kerberos; (bso#14979);
    (bsc#1196224);
  * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in
    developer mode; (bso#15095);
  * Crash in streams_xattr because fsp-&gt;base_fsp-&gt;fsp_name is
    NULL; (bso#15105);
  * Crash in rpcd_classic - NULL pointer deference in
    mangle_is_mangled(); (bso#15118);
  * smbclient commands del &amp; deltree fail with
    NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
    (bsc#1200556);
  * Fix check for chown when processing NFSv4 ACL; (bso#15120);
  * The pcap background queue process should not be stopped;
    (bso#15082);
  * testparm: Fix typo in idmap rangesize check; (bso#15097);
  * net ads info returns LDAP server and LDAP server name as
    null; (bso#15106);
  * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;
    (bso#15108);
  * CTDB child process logging does not work as expected;
    (bso#15090);
- Update spec file to fix the optional Heimdal DC build
- Fix external trusts with MIT Kerberos 1.20
- Add missing samba-client requirement to samba-winbind package;
  (bsc#1198255);
- Move pdb backends from package samba-libs to package
  samba-client-libs and remove samba-libs requirement from
  samba-winbind; (bsc#1200964); (bsc#1198255);
- Add sysuser-shadow requirement for packages using
  systemd-sysusers
- Use the canonical realm name to refresh the Kerberos tickets;
  (bsc#1196224); (bso#14979);
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Update to 4.16.2
  * Use pathref fd instead of io fd in vfs_default_durable_cookie;
    (bso#15042);
  * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original
    file had been deleted; (bso#15069);
  * Reintroduce netgroups support; (bso#15087);
  * net ads info shows LDAP Server: 0.0.0.0 depending on contacted
    server; (bso#14674);
  * Update from 4.15  to 4.16 breaks discovery of [homes] on
    standalone server from Win and IOS; (bso#15062);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * smbclient -E doesn't work as advertised; (bso#15075);
  * The samba background daemon doesn't refresh the printcap cache
    on startup; (bso#15081);
  * Out-by-4 error in smbd read reply max_send clamp; (bso#14443);
- Fix samba4.blackbox.net_ads_dns_async test with bind9 &gt;= 9.17.7
- Support building with MIT Kerberos 1.20
- Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC;
  (CVE-2020-17049);
- Resource Based Constrained Delegation (RBCD) for Samba AD DC
- Support building with gcc 12.1
- Use requires_eq macro to require the libldb2 version available at
  samba-dsdb-modules build time; (bsc#1199362);
- Update to 4.16.1
  * Share and server swapped in smbget password prompt; (bso#14831);
  * Durable handles won't reconnect if the leased file is written to;
    (bso#15022);
  * rmdir silently fails if directory contains unreadable files and
    hide unreadable is yes; (bso#15023);
  * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information
    on renamed file handle; (bso#15038);
  * Need to describe --builtin-libraries= better (compare with
  - -bundled-libraries); (bso#8731);
  * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback;
    (bso#14957);
  * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes;
    (bso#15035);
  * PAM Kerberos authentication incorrectly fails with a clock skew
    error; (bso#15046);
  * Username map - samba erroneously applies unix group memberships
    to user account entries; (bso#15041);
  * KVNO off by 100000; (bso#14951);
  * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027);
  * vfs_gpfs recalls=no option prevents listing files; (bso#15055);
  * smbd doesn't handle UPNs for looking up names; (bso#15054);
- Update update-apparmor-samba-profile script, replace
  non-printable delimiter with more human readable separator as
  sed can accept separators that can appear in the input data.
- Fix update-apparmor-samba-profile script, sed doesn't like
  multibyte separators; (bsc#1198309).
- Update to 4.16.0
  * New samba-dcerpcd binary to provide DCERPC in the member server
    setup
  * Certificate Auto Enrollment
  * Ability to add ports to dns forwarder addresses in internal DNS
    backend
  * No longer using Linux mandatory locks for sharemodes
  * SMB1 protocol has been deprecated, particularly older dialects
  * SMB1 protocol SMBCopy command removed
  * SMB1 server-side wildcard expansion removed
- Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101);
- Use systemd-sysusers to create system users; (bsc#1182847);</changelog>
  <changelog author="scabrero@suse.de" date="1671105600">- Update to 4.17.4
  * CVE-2022-44640 Upstream Heimdal free of user-controlled
    pointer in FAST; (bsc#14929);
  * CVE-2021-20251 Bad password count not incremented atomically;
    (bsc#14611);
  * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability;
    (bsc#15203);
  * CVE-2022-37966 rc4-hmac Kerberos session keys issued to
    modern servers; (bso#15237);
  * CVE-2022-37967 Kerberos constrained delegation ticket forgery
    possible against Samba AD DC; (bso#15231);
  * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak
    and should be avoided; (bso#15240);
  * pam_winbind uses time_t and pointers assuming they are of the
    same size; (bso#15224);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * filter-subunit is inefficient with large numbers of
    knownfails; (bso#15258);
  * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories;
    (bso#15252);
  * The KDC logic arround msDs-supportedEncryptionTypes differs
    from Windows; (bso#13135);
  * libnet: change_password() doesn't work with
    dcerpc_samr_ChangePasswordUser4(); (bso#15206);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * Memory leak in snprintf replacement functions; (bso#15230);
  * RODC doesn't reset badPwdCount reliable via an RWDC
    (CVE-2021-20251 regression); (bso#15253);
  * Prevent EBADF errors with vfs_glusterfs; (bso#15198);
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243);
  * Stack smashing in net offlinejoin requestodj; (bso#15257);
  * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue;
    (bso#15197);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
- Remove deprecated if-{down,up} scripts; (bsc#1206444);
- Adjust the systemd drop-in file for named service; (bsc#1201689);
  * Paths are additive so do not repeat paths from named.service
  * Prefix the samba DLZ directory with "-" to ignore this path
    if it does not exists</changelog>
  <changelog author="nopower@suse.com" date="1671624000">- Change with_dc default to 0 (for non TW builds), ADDC feature is
  deprecated and will no longer be included in &gt;= SLE15-SP5;
  (jsc#PED-1122).</changelog>
  <changelog author="nopower@suse.com" date="1673524800">- Clean up logic for PAM migration settings in spec file.</changelog>
  <changelog author="nopower@suse.com" date="1674475200">- libdsdb-module-samba4 should be packaged as part of samba-libs and
  not samba-ad-dc-libs. Additionally no need for it to be
  removed conditionally.</changelog>
  <changelog author="nopower@suse.com" date="1674475201">- Remove non functioning ifup/ifdown samba-winbindd scripts;
  (bsc#1207414).</changelog>
  <changelog author="nopower@suse.com" date="1678363200">- Make samba-libs conflict with old samba-ad-dc-libs package
  to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1679745600">- Make (32bit) samba-libs conflict with old samba-ad-dc-libs
  package to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1681300800">- Update to 4.17.7
  * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords
    in cleartext; (bso#15315); (bsc#1209481).
  * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be
    deleted by unprivileged authenticated users; (bso#15276);
    (bsc#1209483).
  * CVE-2023-0614: samba: Access controlled AD LDAP attributes can
    be discovered; (bso#15270); (bsc#1209485).
  * large_ldap test is inefficient; (bso#15332).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
- Update to 4.17.6
  * streams_xattr is creating unexpected locks on folders;
    (bso#15314).
  * Use of the Azure AD Connect cloud sync tool is now supported
    for password hash synchronisation, allowing Samba AD Domains
    to synchronise passwords with this popular cloud environment;
    (bso#10635).
  * Spotlight doesn't work with latest macOS Ventura;
    (bso#15299).
  * New samba-dcerpc architecture does not scale gracefully;
    (bso#15310).
  * vfs_ceph incorrectly uses fsp_get_io_fd() instead of
    fsp_get_pathref_fd() in close and fstat; (bso#15307).
  * With clustering enabled samba-bgqd can core dump due to use
    after free; (bso#15293).
  * fd_load() function implicitly closes the fd where it should
    not; (bso#15311).
- Update to 4.17.5
  * smbc_getxattr() return value is incorrect; (bso#14808).
  * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not
    handled correctly; (bso#15172).
  * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210).
  * samba-tool gpo listall fails IPv6 only - finddcs() fails to
    find DC when there is only an AAAA record for the DC in DNS;
    (bso#15226).
  * smbd crashes if an FSCTL request is done on a stream handle;
    (bso#15236).
  * DFS links don't work anymore on Mac clients since 4.17;
    (bso#15277).
  * vfs_virusfilter segfault on access, directory edgecase
    (accessing NULL value); (bso#15283).
  * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5)
    based SChannel on NETLOGON (additional changes); (bso#15240).
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243).
  * Shares missing from netshareenum response in samba 4.17.4;
    (bso#15266).
  * ctdb: use-after-free in run_proc; (bso#15269).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * auth3_generate_session_info_pac leaks wbcAuthUserInfo;
    (bso#15286).
  * smbclient segfaults with use after free on an optimized
    build; (bso#15268).
  * smbstatus leaking files in msg.sock and msg.lock;
    (bso#15282).
  * Leak in wbcCtxPingDc2; (bso#15164).
  * Access based share enum does not work in Samba 4.16+;
    (bso#15265).
  * Crash during share enumeration; (bso#15267).
  * rep_listxattr on FreeBSD does not properly check for reads
    off end of returned buffer; (bso#15271).
  * Avoid relying on C89 features in a few places; (bso#15281).</changelog>
  <changelog author="nopower@suse.com" date="1686830400">- Update to 4.17.8
  * log flood: smbd_calculate_access_mask_fsp: Access denied:
    message level should be lower; (bso#15302).
  * Floating point exception (FPE) via cli_pull_send at
    source3/libsmb/clireadwrite.c; (bso#15306).
  * test_tstream_more_tcp_user_timeout_spin fails intermittently
    on Rackspace GitLab runners; (bso#15328).
  * Reduce flapping of ridalloc test; (bso#15329).
  * large_ldap test is unreliable; (bso#15351).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * mdssvc may crash when initializing; (bso#15354).
  * Large directory optimization broken for non-lcomp path
    elements; (bso#15313).
  * streams_depot fails to create streams; (bso#15357).
  * shadow_copy2 and streams_depot don't play well together;
    (bso#15358).
  * wbinfo -u fails on ad dc with &gt;1000 users; (bso#15366).
  * winbindd idmap child contacts the domain controller without a
    need; (bso#15317).
  * idmap_autorid may fail to map sids of trusted domains for the
    first time; (bso#15318).
  * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings;
    (bso#15319).
  * net ads search -P doesn't work against servers in other
    domains; (bso#15323).
  * DS ACEs might be inherited to unrelated object classes;
    (bso#15338).
  * Temporary smbXsrv_tcon_global.tdb can't be parsed;
    (bso#15353).
  * Setting veto files = /.*/ break listing directories;
    (bso#15360); (bsc#1212375).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
  * dsgetdcname: assumes local system uses IPv4; (bso#15325).</changelog>
  <changelog author="nopower@suse.com" date="1688644800">- Update to 4.17.9
  * Backport --pidl-developer fixes; (bso#15404).
  * smbd_scavenger crashes when service smbd is stopped;
    (bso#15275).
  * vfs_fruit might cause a failing open for delete; (bso#15378).
  * named crashes on DLZ zone update; (bso#14030).
  * winbind recurses into itself via rpcd_lsad; (bso#15361).
  * cli_list loops 100% CPU against pre-lanman2 servers;
    (bso#15382).
  * smbclient leaks fds with showacls; (bso#15391).
  * aes256 smb3 encryption algorithms are not allowed in
    smb3_sid_parse(); (bso#15374).
  * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR;
    (bso#15413).
  * smbget memory leak if failed to download files recursively;
    (bso#15403).</changelog>
  <changelog author="nopower@suse.com" date="1689249600">- CVE-2022-2127: lm_resp_len not checked properly in
  winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174).
- CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite
  Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173).
- CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type
  Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172).
- CVE-2023-34968: Spotlight server-side Share Path Disclosure;
  (bso#15388); (bsc#1213171).
- CVE-2023-3347: Samba doesn't require SMB2+ signing if
  `server signing = mandatory` is set; (bso#15397); (bsc#1213170).</changelog>
  <changelog author="nopower@suse.com" date="1689595200">- secure channel faulty since Windows 10/11 update 07/2023;
  (bso#15418); (bsc#1213384).</changelog>
  <changelog author="scabrero@suse.de" date="1690891200">- net ads lookup with unspecified realm fails; (bso#15384);
  (bsc#1213826);</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Move libcluster-samba4.so from samba-libs to samba-client-libs;
  (bsc#1213940);</changelog>
  <changelog author="scabrero@suse.de" date="1692014400">- Fix DFS not working with widelinks enabled; (bsc#1213607);
  (bso#15435);</changelog>
  <changelog author="nopower@suse.com" date="1696420800">- CVE-2023-4091: samba: Client can truncate file with read-only
  permissions; (bsc#1215904); (bso#15439).
- CVE-2023-42669: samba: rpcecho, enabled and running in AD DC,
  allows blocking sleep on request; (bso#1215905); (bso#15474).
- CVE-2023-42670: samba:  The procedure number is out of range
  when starting Active Directory Users and Computers;
  (bsc#1215906); (bso#15473).
- CVE-2023-3961: samba: Unsanitized client pipe name passed to
  local_np_connect(); (bsc#1215907); (bso#15422).
- CVE-2023-4154: samba: dirsync allows SYSTEM access with only
  "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES;
  (bsc#1215908); (bso#15424).</changelog>
</package>
<package pkgid="2610f4bbd6a2869a0f0ab589024cbd79446a6be29bd4cec18628f89cd164176a" name="screen" arch="aarch64">
  <version epoch="0" ver="4.6.2" rel="150000.5.5.1"/>
  <changelog author="alexander_naumov@opensuse.org" date="1434369600">- GNU screen 4.3.0:
  * Introduce Xx string escape showing the executed command of a window
  * Implement dead/zombie window polling, allowing for auto reconnecting
  * Allow setting hardstatus on first line
  * 'sort' command sorting windows by title
  * 'bumpleft', 'bumpright' - manually move windows on window list
  * 'collapse' removing numbering 'gaps' between windows, by renumbering
  * 'windows' command now accepts arguments for use with querying
- packaging changes:
  * move screen-poll-zombies.patch to savannah git
  * move screen-4.0.3-ipv6.patch to savannah git
  * move sort_command.patch to savannah git
  * move xX_string_escape.patch to savannah git
  * move screen_enhance_windows_list.patch to savannah git</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1435752000">- GNU screen 4.3.1
  * This is a bug fix release.
  * Visible content get messed up after window resize</changelog>
  <changelog author="trenn@suse.de" date="1435752001">- Add license file as documentation</changelog>
  <changelog author="meissner@suse.com" date="1439985600">- enable pam support, so screenlocking uses the password of the
  current user.</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1470916800">- GNU screen 4.4.0:
  * Support up to 24 function keys
  * 'logfile' command, starts logging into new file upon changing
  * Fix runtime issues</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1471435200">- Remove %postun - it tried to delete "screen.info.gz" file
  second time.</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1484740800">- GNU Screen 4.5.0:
  * It's possible to specify logfile's name via command line
  parameter '-L'.
  Fixes:
  * broken handling of "bind u digraph U+"
  * crash with long $TERM
  * crash when bumping blank window
  * build for AIX
  * %x improperly separating arguments
  * install with custom DESTDIR</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1485518400">- Add fix_enable_logfile.patch
  * fix loging screen API (bnc#1020870)
  * fix privilege escalation</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- GNU Screen 4.5.1:
  * logfile permissions problem (CVE-2017-5618) bsc#1021743
    This issues does not affect the SUSE package as setuid/setid
    is not used.
- drop upstreamed fix_enable_logfile.patch
- add 0001-Follow-up-to-bc5ea98-fix-texinfo-syntax-errors.patch</changelog>
  <changelog author="jengelh@inai.de" date="1494504000">- Ensure /usr/share/terminfo/s/screen is present when screen is
  [boo#812067].</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1498737600">- GNU Screen 4.6.0:
  * Update Unicode wide tables to 9.0
  * Support more serial speeds
  * Improved namespaces support
  * Migrate from fifos to sockets
  * Start viewing scrollback at first line of output
- drop upstreamed 0001-Follow-up-to-bc5ea98-fix-texinfo-syntax-errors.patch</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1499774400">- GNU Screen 4.6.1: bugfix release
  * problems with starting session in some cases
  * parallel make install
  * segfault when querying info on nonUTF locale</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1499774401">- spec file: adding PreReq for permissions</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1499774402">- adding %set_permissions and %verify_permissions macros
  for /run/uscreens/
- adding %tmpfiles_create macro for /usr/lib/tmpfiles.d/screen.conf</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1508760000">- GNU Screen 4.6.2:
  * revert changes to cursor position restore behavour
  * set freed pointer to NULL
  * documentation fixes
  * fix windowlist crashes</changelog>
  <changelog author="mls@suse.de" date="1513857600">- install pam file to make screen locking work again [bnc#1056192]
  new file: screen.pam</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mls@suse.de" date="1613131200">- Fix double width combining char handling that could lead
  to a segfault [bnc#1182092] [CVE-2021-26937]
  new patch: combchar.diff</changelog>
</package>
<package pkgid="1e5cd0760fafff5f46a79aa8eaa8c59ec66b0492c36f1b92018fcdfc99c3c715" name="screen" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="150000.5.5.1"/>
  <changelog author="alexander_naumov@opensuse.org" date="1434369600">- GNU screen 4.3.0:
  * Introduce Xx string escape showing the executed command of a window
  * Implement dead/zombie window polling, allowing for auto reconnecting
  * Allow setting hardstatus on first line
  * 'sort' command sorting windows by title
  * 'bumpleft', 'bumpright' - manually move windows on window list
  * 'collapse' removing numbering 'gaps' between windows, by renumbering
  * 'windows' command now accepts arguments for use with querying
- packaging changes:
  * move screen-poll-zombies.patch to savannah git
  * move screen-4.0.3-ipv6.patch to savannah git
  * move sort_command.patch to savannah git
  * move xX_string_escape.patch to savannah git
  * move screen_enhance_windows_list.patch to savannah git</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1435752000">- GNU screen 4.3.1
  * This is a bug fix release.
  * Visible content get messed up after window resize</changelog>
  <changelog author="trenn@suse.de" date="1435752001">- Add license file as documentation</changelog>
  <changelog author="meissner@suse.com" date="1439985600">- enable pam support, so screenlocking uses the password of the
  current user.</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1470916800">- GNU screen 4.4.0:
  * Support up to 24 function keys
  * 'logfile' command, starts logging into new file upon changing
  * Fix runtime issues</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1471435200">- Remove %postun - it tried to delete "screen.info.gz" file
  second time.</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1484740800">- GNU Screen 4.5.0:
  * It's possible to specify logfile's name via command line
  parameter '-L'.
  Fixes:
  * broken handling of "bind u digraph U+"
  * crash with long $TERM
  * crash when bumping blank window
  * build for AIX
  * %x improperly separating arguments
  * install with custom DESTDIR</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1485518400">- Add fix_enable_logfile.patch
  * fix loging screen API (bnc#1020870)
  * fix privilege escalation</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- GNU Screen 4.5.1:
  * logfile permissions problem (CVE-2017-5618) bsc#1021743
    This issues does not affect the SUSE package as setuid/setid
    is not used.
- drop upstreamed fix_enable_logfile.patch
- add 0001-Follow-up-to-bc5ea98-fix-texinfo-syntax-errors.patch</changelog>
  <changelog author="jengelh@inai.de" date="1494504000">- Ensure /usr/share/terminfo/s/screen is present when screen is
  [boo#812067].</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1498737600">- GNU Screen 4.6.0:
  * Update Unicode wide tables to 9.0
  * Support more serial speeds
  * Improved namespaces support
  * Migrate from fifos to sockets
  * Start viewing scrollback at first line of output
- drop upstreamed 0001-Follow-up-to-bc5ea98-fix-texinfo-syntax-errors.patch</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1499774400">- GNU Screen 4.6.1: bugfix release
  * problems with starting session in some cases
  * parallel make install
  * segfault when querying info on nonUTF locale</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1499774401">- spec file: adding PreReq for permissions</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1499774402">- adding %set_permissions and %verify_permissions macros
  for /run/uscreens/
- adding %tmpfiles_create macro for /usr/lib/tmpfiles.d/screen.conf</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1508760000">- GNU Screen 4.6.2:
  * revert changes to cursor position restore behavour
  * set freed pointer to NULL
  * documentation fixes
  * fix windowlist crashes</changelog>
  <changelog author="mls@suse.de" date="1513857600">- install pam file to make screen locking work again [bnc#1056192]
  new file: screen.pam</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mls@suse.de" date="1613131200">- Fix double width combining char handling that could lead
  to a segfault [bnc#1182092] [CVE-2021-26937]
  new patch: combchar.diff</changelog>
</package>
<package pkgid="f020403ad2c8fd54d0714f7020d3bdaf5b15d5de0a83be21659991e216edeb03" name="screen" arch="s390x">
  <version epoch="0" ver="4.6.2" rel="150000.5.5.1"/>
  <changelog author="alexander_naumov@opensuse.org" date="1434369600">- GNU screen 4.3.0:
  * Introduce Xx string escape showing the executed command of a window
  * Implement dead/zombie window polling, allowing for auto reconnecting
  * Allow setting hardstatus on first line
  * 'sort' command sorting windows by title
  * 'bumpleft', 'bumpright' - manually move windows on window list
  * 'collapse' removing numbering 'gaps' between windows, by renumbering
  * 'windows' command now accepts arguments for use with querying
- packaging changes:
  * move screen-poll-zombies.patch to savannah git
  * move screen-4.0.3-ipv6.patch to savannah git
  * move sort_command.patch to savannah git
  * move xX_string_escape.patch to savannah git
  * move screen_enhance_windows_list.patch to savannah git</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1435752000">- GNU screen 4.3.1
  * This is a bug fix release.
  * Visible content get messed up after window resize</changelog>
  <changelog author="trenn@suse.de" date="1435752001">- Add license file as documentation</changelog>
  <changelog author="meissner@suse.com" date="1439985600">- enable pam support, so screenlocking uses the password of the
  current user.</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1470916800">- GNU screen 4.4.0:
  * Support up to 24 function keys
  * 'logfile' command, starts logging into new file upon changing
  * Fix runtime issues</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1471435200">- Remove %postun - it tried to delete "screen.info.gz" file
  second time.</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1484740800">- GNU Screen 4.5.0:
  * It's possible to specify logfile's name via command line
  parameter '-L'.
  Fixes:
  * broken handling of "bind u digraph U+"
  * crash with long $TERM
  * crash when bumping blank window
  * build for AIX
  * %x improperly separating arguments
  * install with custom DESTDIR</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1485518400">- Add fix_enable_logfile.patch
  * fix loging screen API (bnc#1020870)
  * fix privilege escalation</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- GNU Screen 4.5.1:
  * logfile permissions problem (CVE-2017-5618) bsc#1021743
    This issues does not affect the SUSE package as setuid/setid
    is not used.
- drop upstreamed fix_enable_logfile.patch
- add 0001-Follow-up-to-bc5ea98-fix-texinfo-syntax-errors.patch</changelog>
  <changelog author="jengelh@inai.de" date="1494504000">- Ensure /usr/share/terminfo/s/screen is present when screen is
  [boo#812067].</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1498737600">- GNU Screen 4.6.0:
  * Update Unicode wide tables to 9.0
  * Support more serial speeds
  * Improved namespaces support
  * Migrate from fifos to sockets
  * Start viewing scrollback at first line of output
- drop upstreamed 0001-Follow-up-to-bc5ea98-fix-texinfo-syntax-errors.patch</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1499774400">- GNU Screen 4.6.1: bugfix release
  * problems with starting session in some cases
  * parallel make install
  * segfault when querying info on nonUTF locale</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1499774401">- spec file: adding PreReq for permissions</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1499774402">- adding %set_permissions and %verify_permissions macros
  for /run/uscreens/
- adding %tmpfiles_create macro for /usr/lib/tmpfiles.d/screen.conf</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1508760000">- GNU Screen 4.6.2:
  * revert changes to cursor position restore behavour
  * set freed pointer to NULL
  * documentation fixes
  * fix windowlist crashes</changelog>
  <changelog author="mls@suse.de" date="1513857600">- install pam file to make screen locking work again [bnc#1056192]
  new file: screen.pam</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mls@suse.de" date="1613131200">- Fix double width combining char handling that could lead
  to a segfault [bnc#1182092] [CVE-2021-26937]
  new patch: combchar.diff</changelog>
</package>
<package pkgid="d123678dd2e76d0dae3dade142200d97baac7220dd7888ad639ecc2379622784" name="screen" arch="src">
  <version epoch="0" ver="4.6.2" rel="150000.5.5.1"/>
  <changelog author="jw@suse.com" date="1397736000">- Update to 4.2.0 as released on screen-devel@gnu.org yesterday.
  Thank you Amadeusz!
  * keep libtinfo.diff (from coolo 2011, why exactly?)
  * keep global_screenrc.patch (renamed from screen-4.0.2.dif)
  * keep screen-man-loginshell.diff (to be upstreamed)
  * dropped screen-__P.diff (not needed)
  * keep term_too_long.diff (savannah#30880, to be upstreamed)
  * keep use_locale.diff (from lnt-sysadmin@lists.lrz.de 2012, check?)
  * keep screen-4.0.3-ipv6.patch (builtin telnet, to be upstreamed)
  * keep screen_enhance_windows_list.patch (to be upstreamed)
  * keep screen-poll-zombies.patch (to be upstreamed)
  * keep xX_string_escape.patch (renamed from show_all_active.patch, to be upstreamed)
  * keep sort_command.patch (from trenn 2011, to be upstreamed)
  * added msg_version_3.patch (ouch, incompatible protocol, to be upstreamed)
- added %rundir with /var/run for 1310 and before; but /run afterwards.
  aj advocates /run for Factory; for 1310 it was banned by
  suse-filelist-forbidden-fhs23</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1399032000">- GNU screen 4.2.1:
  * allow for terminal with long $TERM (up to 32 characters)
    (already patched in this package previously)
  * allow to use long logins
  * documentation fixes
  * runtime fixes
- packaging changes:
  * use source URLs
  * verify source signatures
  * drop screen-man-loginshell.diff, equivalent change upstream
  * drop term_too_long.diff, equivalent change upstream
  * drop use_locale.diff, applied upstream
  * drop msg_version_3.patch, obsolete after upstream changes</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1434369600">- GNU screen 4.3.0:
  * Introduce Xx string escape showing the executed command of a window
  * Implement dead/zombie window polling, allowing for auto reconnecting
  * Allow setting hardstatus on first line
  * 'sort' command sorting windows by title
  * 'bumpleft', 'bumpright' - manually move windows on window list
  * 'collapse' removing numbering 'gaps' between windows, by renumbering
  * 'windows' command now accepts arguments for use with querying
- packaging changes:
  * move screen-poll-zombies.patch to savannah git
  * move screen-4.0.3-ipv6.patch to savannah git
  * move sort_command.patch to savannah git
  * move xX_string_escape.patch to savannah git
  * move screen_enhance_windows_list.patch to savannah git</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1435752000">- GNU screen 4.3.1
  * This is a bug fix release.
  * Visible content get messed up after window resize</changelog>
  <changelog author="trenn@suse.de" date="1435752001">- Add license file as documentation</changelog>
  <changelog author="meissner@suse.com" date="1439985600">- enable pam support, so screenlocking uses the password of the
  current user.</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1470916800">- GNU screen 4.4.0:
  * Support up to 24 function keys
  * 'logfile' command, starts logging into new file upon changing
  * Fix runtime issues</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1471435200">- Remove %postun - it tried to delete "screen.info.gz" file
  second time.</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1484740800">- GNU Screen 4.5.0:
  * It's possible to specify logfile's name via command line
  parameter '-L'.
  Fixes:
  * broken handling of "bind u digraph U+"
  * crash with long $TERM
  * crash when bumping blank window
  * build for AIX
  * %x improperly separating arguments
  * install with custom DESTDIR</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1485518400">- Add fix_enable_logfile.patch
  * fix loging screen API (bnc#1020870)
  * fix privilege escalation</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- GNU Screen 4.5.1:
  * logfile permissions problem (CVE-2017-5618) bsc#1021743
    This issues does not affect the SUSE package as setuid/setid
    is not used.
- drop upstreamed fix_enable_logfile.patch
- add 0001-Follow-up-to-bc5ea98-fix-texinfo-syntax-errors.patch</changelog>
  <changelog author="jengelh@inai.de" date="1494504000">- Ensure /usr/share/terminfo/s/screen is present when screen is
  [boo#812067].</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1498737600">- GNU Screen 4.6.0:
  * Update Unicode wide tables to 9.0
  * Support more serial speeds
  * Improved namespaces support
  * Migrate from fifos to sockets
  * Start viewing scrollback at first line of output
- drop upstreamed 0001-Follow-up-to-bc5ea98-fix-texinfo-syntax-errors.patch</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1499774400">- GNU Screen 4.6.1: bugfix release
  * problems with starting session in some cases
  * parallel make install
  * segfault when querying info on nonUTF locale</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1499774401">- spec file: adding PreReq for permissions</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1499774402">- adding %set_permissions and %verify_permissions macros
  for /run/uscreens/
- adding %tmpfiles_create macro for /usr/lib/tmpfiles.d/screen.conf</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1508760000">- GNU Screen 4.6.2:
  * revert changes to cursor position restore behavour
  * set freed pointer to NULL
  * documentation fixes
  * fix windowlist crashes</changelog>
  <changelog author="mls@suse.de" date="1513857600">- install pam file to make screen locking work again [bnc#1056192]
  new file: screen.pam</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mls@suse.de" date="1613131200">- Fix double width combining char handling that could lead
  to a segfault [bnc#1182092] [CVE-2021-26937]
  new patch: combchar.diff</changelog>
</package>
<package pkgid="08a88bcba6e887a259016985a61b88dcb42af9edb7ca60bf4f46836781f5ecea" name="screen" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="150000.5.5.1"/>
  <changelog author="alexander_naumov@opensuse.org" date="1434369600">- GNU screen 4.3.0:
  * Introduce Xx string escape showing the executed command of a window
  * Implement dead/zombie window polling, allowing for auto reconnecting
  * Allow setting hardstatus on first line
  * 'sort' command sorting windows by title
  * 'bumpleft', 'bumpright' - manually move windows on window list
  * 'collapse' removing numbering 'gaps' between windows, by renumbering
  * 'windows' command now accepts arguments for use with querying
- packaging changes:
  * move screen-poll-zombies.patch to savannah git
  * move screen-4.0.3-ipv6.patch to savannah git
  * move sort_command.patch to savannah git
  * move xX_string_escape.patch to savannah git
  * move screen_enhance_windows_list.patch to savannah git</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1435752000">- GNU screen 4.3.1
  * This is a bug fix release.
  * Visible content get messed up after window resize</changelog>
  <changelog author="trenn@suse.de" date="1435752001">- Add license file as documentation</changelog>
  <changelog author="meissner@suse.com" date="1439985600">- enable pam support, so screenlocking uses the password of the
  current user.</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1470916800">- GNU screen 4.4.0:
  * Support up to 24 function keys
  * 'logfile' command, starts logging into new file upon changing
  * Fix runtime issues</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1471435200">- Remove %postun - it tried to delete "screen.info.gz" file
  second time.</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1484740800">- GNU Screen 4.5.0:
  * It's possible to specify logfile's name via command line
  parameter '-L'.
  Fixes:
  * broken handling of "bind u digraph U+"
  * crash with long $TERM
  * crash when bumping blank window
  * build for AIX
  * %x improperly separating arguments
  * install with custom DESTDIR</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1485518400">- Add fix_enable_logfile.patch
  * fix loging screen API (bnc#1020870)
  * fix privilege escalation</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- GNU Screen 4.5.1:
  * logfile permissions problem (CVE-2017-5618) bsc#1021743
    This issues does not affect the SUSE package as setuid/setid
    is not used.
- drop upstreamed fix_enable_logfile.patch
- add 0001-Follow-up-to-bc5ea98-fix-texinfo-syntax-errors.patch</changelog>
  <changelog author="jengelh@inai.de" date="1494504000">- Ensure /usr/share/terminfo/s/screen is present when screen is
  [boo#812067].</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1498737600">- GNU Screen 4.6.0:
  * Update Unicode wide tables to 9.0
  * Support more serial speeds
  * Improved namespaces support
  * Migrate from fifos to sockets
  * Start viewing scrollback at first line of output
- drop upstreamed 0001-Follow-up-to-bc5ea98-fix-texinfo-syntax-errors.patch</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1499774400">- GNU Screen 4.6.1: bugfix release
  * problems with starting session in some cases
  * parallel make install
  * segfault when querying info on nonUTF locale</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1499774401">- spec file: adding PreReq for permissions</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1499774402">- adding %set_permissions and %verify_permissions macros
  for /run/uscreens/
- adding %tmpfiles_create macro for /usr/lib/tmpfiles.d/screen.conf</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1508760000">- GNU Screen 4.6.2:
  * revert changes to cursor position restore behavour
  * set freed pointer to NULL
  * documentation fixes
  * fix windowlist crashes</changelog>
  <changelog author="mls@suse.de" date="1513857600">- install pam file to make screen locking work again [bnc#1056192]
  new file: screen.pam</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mls@suse.de" date="1613131200">- Fix double width combining char handling that could lead
  to a segfault [bnc#1182092] [CVE-2021-26937]
  new patch: combchar.diff</changelog>
</package>
<package pkgid="9e29a7bf469318c5da2b8f88ffb0b1c7b9911033759dada26d716f7c7072ad8a" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="20230511+git13.edb03d70" rel="150500.3.12.1"/>
  <changelog author="filippo.bonazzi@suse.com" date="1664280000">- Update fix_xserver.patch to add greetd support (bsc#1198559)</changelog>
  <changelog author="jsegitz@suse.com" date="1664452800">- Update fix_networkmanager.patch to ensure NetworkManager chrony
  dispatcher is properly labled and update fix_chronyd.patch to ensure
  chrony helper script has proper label to be used by NetworkManager.
  Also allow NetworkManager_dispatcher_custom_t to query systemd status
  (bsc#1203824)</changelog>
  <changelog author="jsegitz@suse.com" date="1664539200">- Updated quilt couldn't unpack tarball. This will cause ongoing issues
  so drop the sed statement in the %prep section and add
  distro_suse_to_distro_redhat.patch to add the necessary changes
  via a patch</changelog>
  <changelog author="jsegitz@suse.com" date="1666180800">- Update to version 20221019. Refreshed:
  * distro_suse_to_distro_redhat.patch
  * fix_apache.patch
  * fix_chronyd.patch
  * fix_cron.patch
  * fix_init.patch
  * fix_kernel_sysctl.patch
  * fix_networkmanager.patch
  * fix_rpm.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_xserver.patch
- Dropped fix_cockpit.patch as this is now packaged with cockpit itself
- Remove the ipa module, freeip ships their own module
- Added fix_alsa.patch to allow reading of config files in home directories
- Extended fix_networkmanager.patch and fix_postfix.patch to account
  for SUSE systems
- Added dontaudit_interface_kmod_tmpfs.patch to prevent AVCs when startproc
  queries the running processes
- Updated fix_snapper.patch to allow snapper to talk to rpm via dbus</changelog>
  <changelog author="cathy.hu@suse.com" date="1669291200">- fix_sysnetwork.patch: firewalld uses /etc/sysconfig/network/ for
  network interface definition instead of /etc/sysconfig/network-scripts/,
  modified sysnetwork.fc to reflect that (bsc#1205580).</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809600">- Drop fix_irqbalance.patch: superseded by upstream</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809601">- Add fix_irqbalance.patch: support netlink socket operations (bsc#1205434)</changelog>
  <changelog author="jsegitz@suse.com" date="1670328000">- Updated fix_networkmanager.patch to allow NetworkManager to watch
  net_conf_t (bsc#1206109)</changelog>
  <changelog author="jsegitz@suse.com" date="1670932800">- Updated fix_networkmanager.patch to fixe labeling of nm-dispatcher and
  nm-priv-helper until the packaging is adjusted (bsc#1206355)
- Update fix_chronyd.patch to allow  sendto towards
  NetworkManager_dispatcher_custom_t. Added new interface
  networkmanager_dispatcher_custom_dgram_send for this (bsc#1206357)
- Update fix_dbus.patch to allow dbus to watch lib directories (bsc#1205895)</changelog>
  <changelog author="jsegitz@suse.com" date="1682424000">- Added fix_filesystem.patch to prevent labeling of overlayfs
  mountpoint</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684843200">- Packaging rework. Move policy to git repository
  Please use `osc service manualrun` to update this OBS package to the
  newest git version.
  * Added README.Update describing how to update this package
  * Added _service file that pulls from selinux-policy and tar it
  * Updated selinux-policy.spec to build selinux-policy with
    container-selinux
  * Updated update.sh
  * Removed suse specific modules as they are now covered by git commits
  * packagekit.te packagekit.if packagekit.fc
  * rebootmgr.te rebootmgr.if rebootmgr.fc
  * rtorrent.te rtorrent.if rtorrent.fc
  * wicked.te wicked.if wicked.fc
  * Removed *.patch as they are now covered by git commits:
  * distro_suse_to_distro_redhat.patch
  * dontaudit_interface_kmod_tmpfs.patch
  * fix_accountsd.patch
  * fix_alsa.patch
  * fix_apache.patch
  * fix_auditd.patch
  * fix_authlogin.patch
  * fix_automount.patch
  * fix_bitlbee.patch
  * fix_chronyd.patch
  * fix_cloudform.patch
  * fix_colord.patch
  * fix_corecommand.patch
  * fix_cron.patch
  * fix_dbus.patch
  * fix_djbdns.patch
  * fix_dnsmasq.patch
  * fix_dovecot.patch
  * fix_firewalld.patch
  * fix_filesystem.patch
  * fix_fwupd.patch
  * fix_geoclue.patch
  * fix_hypervkvp.patch
  * fix_init.patch
  * fix_iptables.patch
  * fix_irqbalance.patch
  * fix_java.patch
  * fix_kernel_sysctl.patch
  * fix_libraries.patch
  * fix_locallogin.patch
  * fix_logging.patch
  * fix_logrotate.patch
  * fix_mcelog.patch
  * fix_miscfiles.patch
  * fix_nagios.patch
  * fix_networkmanager.patch
  * fix_nis.patch
  * fix_nscd.patch
  * fix_ntp.patch
  * fix_openvpn.patch
  * fix_postfix.patch
  * fix_rpm.patch
  * fix_screen.patch
  * fix_selinuxutil.patch
  * fix_smartmon.patch
  * fix_snapper.patch
  * fix_sslh.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_thunderbird.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_userdomain.patch
  * fix_usermanage.patch
  * fix_wine.patch
  * fix_xserver.patch
  * sedoctool.patch
  * systemd_domain_dyntrans_type.patch
  * fedora-policy-20221019.tar.bz2</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684929600">- Update to version 20230511+git3.b78f5aff:
  * fix entropy daemon (bsc#1211045)</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1690286400">- Update to version 20230511+git4.8c35010e:
  * allow haveged to manage tmpfs directories (bsc#1213594)</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1691064000">- Use /var/adm/update-scripts in macros.selinux-policy. The rpm state
  directory doesn't exist on SUSE systems (bsc#1213593)</changelog>
  <changelog author="jsegitz@suse.com" date="1694520000">- Create path in macros.selinux-policy since is might not exist on
  transactional systems</changelog>
  <changelog author="jsegitz@suse.com" date="1695124800">- Update to version 20230511+git5.ad830265b:
  * Allow sysadm_t run kernel bpf programs
  * allow init to run bpf programs. We do this during early startup
    (bsc#1215423)
  * Modified update.sh to require first parameter "full" to also
    update container-selinux</changelog>
  <changelog author="cathy.hu@suse.com" date="1697198400">- Update to version 20230511+git9.1b35a6ab:
  * Allow keepalived to manage its tmp files (bsc#1216060)</changelog>
  <changelog author="jsegitz@suse.com" date="1700740800">- Extend module list for targeted policy
  * timedatex
  * rrdcached
  * stratisd
  * ica (bsc#1215405)
  * fedoratp
  * stalld
  * rhcd
  * wireguard</changelog>
  <changelog author="cathy.hu@suse.com" date="1701172800">- Trigger rebuild of the policy when pcre2 gets updated to avoid
  regex version mismatch errors (bsc#1216747).</changelog>
  <changelog author="cathy.hu@suse.com" date="1704801600">- Update to version 20230511+git13.edb03d70:
  * allow rebootmgr to read the system state (bsc#1205931)
  * Allow keepalived_t read+write kernel_t pipes (bsc#1216060)</changelog>
</package>
<package pkgid="b2c78f5388bff25f2e0e73ed8dfd2b4300a6e36bd69d53e665773c5eb3b83e1b" name="selinux-policy" arch="src">
  <version epoch="0" ver="20230511+git13.edb03d70" rel="150500.3.12.1"/>
  <changelog author="filippo.bonazzi@suse.com" date="1664280000">- Update fix_xserver.patch to add greetd support (bsc#1198559)</changelog>
  <changelog author="jsegitz@suse.com" date="1664452800">- Update fix_networkmanager.patch to ensure NetworkManager chrony
  dispatcher is properly labled and update fix_chronyd.patch to ensure
  chrony helper script has proper label to be used by NetworkManager.
  Also allow NetworkManager_dispatcher_custom_t to query systemd status
  (bsc#1203824)</changelog>
  <changelog author="jsegitz@suse.com" date="1664539200">- Updated quilt couldn't unpack tarball. This will cause ongoing issues
  so drop the sed statement in the %prep section and add
  distro_suse_to_distro_redhat.patch to add the necessary changes
  via a patch</changelog>
  <changelog author="jsegitz@suse.com" date="1666180800">- Update to version 20221019. Refreshed:
  * distro_suse_to_distro_redhat.patch
  * fix_apache.patch
  * fix_chronyd.patch
  * fix_cron.patch
  * fix_init.patch
  * fix_kernel_sysctl.patch
  * fix_networkmanager.patch
  * fix_rpm.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_xserver.patch
- Dropped fix_cockpit.patch as this is now packaged with cockpit itself
- Remove the ipa module, freeip ships their own module
- Added fix_alsa.patch to allow reading of config files in home directories
- Extended fix_networkmanager.patch and fix_postfix.patch to account
  for SUSE systems
- Added dontaudit_interface_kmod_tmpfs.patch to prevent AVCs when startproc
  queries the running processes
- Updated fix_snapper.patch to allow snapper to talk to rpm via dbus</changelog>
  <changelog author="cathy.hu@suse.com" date="1669291200">- fix_sysnetwork.patch: firewalld uses /etc/sysconfig/network/ for
  network interface definition instead of /etc/sysconfig/network-scripts/,
  modified sysnetwork.fc to reflect that (bsc#1205580).</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809600">- Drop fix_irqbalance.patch: superseded by upstream</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809601">- Add fix_irqbalance.patch: support netlink socket operations (bsc#1205434)</changelog>
  <changelog author="jsegitz@suse.com" date="1670328000">- Updated fix_networkmanager.patch to allow NetworkManager to watch
  net_conf_t (bsc#1206109)</changelog>
  <changelog author="jsegitz@suse.com" date="1670932800">- Updated fix_networkmanager.patch to fixe labeling of nm-dispatcher and
  nm-priv-helper until the packaging is adjusted (bsc#1206355)
- Update fix_chronyd.patch to allow  sendto towards
  NetworkManager_dispatcher_custom_t. Added new interface
  networkmanager_dispatcher_custom_dgram_send for this (bsc#1206357)
- Update fix_dbus.patch to allow dbus to watch lib directories (bsc#1205895)</changelog>
  <changelog author="jsegitz@suse.com" date="1682424000">- Added fix_filesystem.patch to prevent labeling of overlayfs
  mountpoint</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684843200">- Packaging rework. Move policy to git repository
  Please use `osc service manualrun` to update this OBS package to the
  newest git version.
  * Added README.Update describing how to update this package
  * Added _service file that pulls from selinux-policy and tar it
  * Updated selinux-policy.spec to build selinux-policy with
    container-selinux
  * Updated update.sh
  * Removed suse specific modules as they are now covered by git commits
  * packagekit.te packagekit.if packagekit.fc
  * rebootmgr.te rebootmgr.if rebootmgr.fc
  * rtorrent.te rtorrent.if rtorrent.fc
  * wicked.te wicked.if wicked.fc
  * Removed *.patch as they are now covered by git commits:
  * distro_suse_to_distro_redhat.patch
  * dontaudit_interface_kmod_tmpfs.patch
  * fix_accountsd.patch
  * fix_alsa.patch
  * fix_apache.patch
  * fix_auditd.patch
  * fix_authlogin.patch
  * fix_automount.patch
  * fix_bitlbee.patch
  * fix_chronyd.patch
  * fix_cloudform.patch
  * fix_colord.patch
  * fix_corecommand.patch
  * fix_cron.patch
  * fix_dbus.patch
  * fix_djbdns.patch
  * fix_dnsmasq.patch
  * fix_dovecot.patch
  * fix_firewalld.patch
  * fix_filesystem.patch
  * fix_fwupd.patch
  * fix_geoclue.patch
  * fix_hypervkvp.patch
  * fix_init.patch
  * fix_iptables.patch
  * fix_irqbalance.patch
  * fix_java.patch
  * fix_kernel_sysctl.patch
  * fix_libraries.patch
  * fix_locallogin.patch
  * fix_logging.patch
  * fix_logrotate.patch
  * fix_mcelog.patch
  * fix_miscfiles.patch
  * fix_nagios.patch
  * fix_networkmanager.patch
  * fix_nis.patch
  * fix_nscd.patch
  * fix_ntp.patch
  * fix_openvpn.patch
  * fix_postfix.patch
  * fix_rpm.patch
  * fix_screen.patch
  * fix_selinuxutil.patch
  * fix_smartmon.patch
  * fix_snapper.patch
  * fix_sslh.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_thunderbird.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_userdomain.patch
  * fix_usermanage.patch
  * fix_wine.patch
  * fix_xserver.patch
  * sedoctool.patch
  * systemd_domain_dyntrans_type.patch
  * fedora-policy-20221019.tar.bz2</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684929600">- Update to version 20230511+git3.b78f5aff:
  * fix entropy daemon (bsc#1211045)</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1690286400">- Update to version 20230511+git4.8c35010e:
  * allow haveged to manage tmpfs directories (bsc#1213594)</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1691064000">- Use /var/adm/update-scripts in macros.selinux-policy. The rpm state
  directory doesn't exist on SUSE systems (bsc#1213593)</changelog>
  <changelog author="jsegitz@suse.com" date="1694520000">- Create path in macros.selinux-policy since is might not exist on
  transactional systems</changelog>
  <changelog author="jsegitz@suse.com" date="1695124800">- Update to version 20230511+git5.ad830265b:
  * Allow sysadm_t run kernel bpf programs
  * allow init to run bpf programs. We do this during early startup
    (bsc#1215423)
  * Modified update.sh to require first parameter "full" to also
    update container-selinux</changelog>
  <changelog author="cathy.hu@suse.com" date="1697198400">- Update to version 20230511+git9.1b35a6ab:
  * Allow keepalived to manage its tmp files (bsc#1216060)</changelog>
  <changelog author="jsegitz@suse.com" date="1700740800">- Extend module list for targeted policy
  * timedatex
  * rrdcached
  * stratisd
  * ica (bsc#1215405)
  * fedoratp
  * stalld
  * rhcd
  * wireguard</changelog>
  <changelog author="cathy.hu@suse.com" date="1701172800">- Trigger rebuild of the policy when pcre2 gets updated to avoid
  regex version mismatch errors (bsc#1216747).</changelog>
  <changelog author="cathy.hu@suse.com" date="1704801600">- Update to version 20230511+git13.edb03d70:
  * allow rebootmgr to read the system state (bsc#1205931)
  * Allow keepalived_t read+write kernel_t pipes (bsc#1216060)</changelog>
</package>
<package pkgid="0baef6f5e8c8b585dee12dc82c9f334bce7355bf7982b8c2133815915f32cfdc" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="20230511+git9.1b35a6ab" rel="150500.3.3.1"/>
  <changelog author="cathy.hu@suse.com" date="1658923200">- fix_networkmanager.patch: Allow NetworkManager_dispatcher_tlp_t
  and NetworkManager_dispatcher_custom_t to access nscd socket
  (bsc#1201741)</changelog>
  <changelog author="kukuk@suse.com" date="1661515200">- Move SUSE directory from manual page section to html docu</changelog>
  <changelog author="jsegitz@suse.com" date="1662984000">- Revamped rtorrent module</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1664280000">- Update fix_xserver.patch to add greetd support (bsc#1198559)</changelog>
  <changelog author="jsegitz@suse.com" date="1664452800">- Update fix_networkmanager.patch to ensure NetworkManager chrony
  dispatcher is properly labled and update fix_chronyd.patch to ensure
  chrony helper script has proper label to be used by NetworkManager.
  Also allow NetworkManager_dispatcher_custom_t to query systemd status
  (bsc#1203824)</changelog>
  <changelog author="jsegitz@suse.com" date="1664539200">- Updated quilt couldn't unpack tarball. This will cause ongoing issues
  so drop the sed statement in the %prep section and add
  distro_suse_to_distro_redhat.patch to add the necessary changes
  via a patch</changelog>
  <changelog author="jsegitz@suse.com" date="1666180800">- Update to version 20221019. Refreshed:
  * distro_suse_to_distro_redhat.patch
  * fix_apache.patch
  * fix_chronyd.patch
  * fix_cron.patch
  * fix_init.patch
  * fix_kernel_sysctl.patch
  * fix_networkmanager.patch
  * fix_rpm.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_xserver.patch
- Dropped fix_cockpit.patch as this is now packaged with cockpit itself
- Remove the ipa module, freeip ships their own module
- Added fix_alsa.patch to allow reading of config files in home directories
- Extended fix_networkmanager.patch and fix_postfix.patch to account
  for SUSE systems
- Added dontaudit_interface_kmod_tmpfs.patch to prevent AVCs when startproc
  queries the running processes
- Updated fix_snapper.patch to allow snapper to talk to rpm via dbus</changelog>
  <changelog author="cathy.hu@suse.com" date="1669291200">- fix_sysnetwork.patch: firewalld uses /etc/sysconfig/network/ for
  network interface definition instead of /etc/sysconfig/network-scripts/,
  modified sysnetwork.fc to reflect that (bsc#1205580).</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809600">- Drop fix_irqbalance.patch: superseded by upstream</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809601">- Add fix_irqbalance.patch: support netlink socket operations (bsc#1205434)</changelog>
  <changelog author="jsegitz@suse.com" date="1670328000">- Updated fix_networkmanager.patch to allow NetworkManager to watch
  net_conf_t (bsc#1206109)</changelog>
  <changelog author="jsegitz@suse.com" date="1670932800">- Updated fix_networkmanager.patch to fixe labeling of nm-dispatcher and
  nm-priv-helper until the packaging is adjusted (bsc#1206355)
- Update fix_chronyd.patch to allow  sendto towards
  NetworkManager_dispatcher_custom_t. Added new interface
  networkmanager_dispatcher_custom_dgram_send for this (bsc#1206357)
- Update fix_dbus.patch to allow dbus to watch lib directories (bsc#1205895)</changelog>
  <changelog author="jsegitz@suse.com" date="1682424000">- Added fix_filesystem.patch to prevent labeling of overlayfs
  mountpoint</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684843200">- Packaging rework. Move policy to git repository
  Please use `osc service manualrun` to update this OBS package to the
  newest git version.
  * Added README.Update describing how to update this package
  * Added _service file that pulls from selinux-policy and tar it
  * Updated selinux-policy.spec to build selinux-policy with
    container-selinux
  * Updated update.sh
  * Removed suse specific modules as they are now covered by git commits
  * packagekit.te packagekit.if packagekit.fc
  * rebootmgr.te rebootmgr.if rebootmgr.fc
  * rtorrent.te rtorrent.if rtorrent.fc
  * wicked.te wicked.if wicked.fc
  * Removed *.patch as they are now covered by git commits:
  * distro_suse_to_distro_redhat.patch
  * dontaudit_interface_kmod_tmpfs.patch
  * fix_accountsd.patch
  * fix_alsa.patch
  * fix_apache.patch
  * fix_auditd.patch
  * fix_authlogin.patch
  * fix_automount.patch
  * fix_bitlbee.patch
  * fix_chronyd.patch
  * fix_cloudform.patch
  * fix_colord.patch
  * fix_corecommand.patch
  * fix_cron.patch
  * fix_dbus.patch
  * fix_djbdns.patch
  * fix_dnsmasq.patch
  * fix_dovecot.patch
  * fix_firewalld.patch
  * fix_filesystem.patch
  * fix_fwupd.patch
  * fix_geoclue.patch
  * fix_hypervkvp.patch
  * fix_init.patch
  * fix_iptables.patch
  * fix_irqbalance.patch
  * fix_java.patch
  * fix_kernel_sysctl.patch
  * fix_libraries.patch
  * fix_locallogin.patch
  * fix_logging.patch
  * fix_logrotate.patch
  * fix_mcelog.patch
  * fix_miscfiles.patch
  * fix_nagios.patch
  * fix_networkmanager.patch
  * fix_nis.patch
  * fix_nscd.patch
  * fix_ntp.patch
  * fix_openvpn.patch
  * fix_postfix.patch
  * fix_rpm.patch
  * fix_screen.patch
  * fix_selinuxutil.patch
  * fix_smartmon.patch
  * fix_snapper.patch
  * fix_sslh.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_thunderbird.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_userdomain.patch
  * fix_usermanage.patch
  * fix_wine.patch
  * fix_xserver.patch
  * sedoctool.patch
  * systemd_domain_dyntrans_type.patch
  * fedora-policy-20221019.tar.bz2</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684929600">- Update to version 20230511+git3.b78f5aff:
  * fix entropy daemon (bsc#1211045)</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1690286400">- Update to version 20230511+git4.8c35010e:
  * allow haveged to manage tmpfs directories (bsc#1213594)</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1691064000">- Use /var/adm/update-scripts in macros.selinux-policy. The rpm state
  directory doesn't exist on SUSE systems (bsc#1213593)</changelog>
  <changelog author="jsegitz@suse.com" date="1694520000">- Create path in macros.selinux-policy since is might not exist on
  transactional systems</changelog>
  <changelog author="jsegitz@suse.com" date="1695124800">- Update to version 20230511+git5.ad830265b:
  * Allow sysadm_t run kernel bpf programs
  * allow init to run bpf programs. We do this during early startup
    (bsc#1215423)
  * Modified update.sh to require first parameter "full" to also
    update container-selinux</changelog>
  <changelog author="cathy.hu@suse.com" date="1697198400">- Update to version 20230511+git9.1b35a6ab:
  * Allow keepalived to manage its tmp files (bsc#1216060)</changelog>
</package>
<package pkgid="a09137635ed3c9d08592ef3c3d3be9bd4fb7024fadbcaeaf73ac2e4040436556" name="selinux-policy" arch="src">
  <version epoch="0" ver="20230511+git9.1b35a6ab" rel="150500.3.3.1"/>
  <changelog author="cathy.hu@suse.com" date="1658923200">- fix_networkmanager.patch: Allow NetworkManager_dispatcher_tlp_t
  and NetworkManager_dispatcher_custom_t to access nscd socket
  (bsc#1201741)</changelog>
  <changelog author="kukuk@suse.com" date="1661515200">- Move SUSE directory from manual page section to html docu</changelog>
  <changelog author="jsegitz@suse.com" date="1662984000">- Revamped rtorrent module</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1664280000">- Update fix_xserver.patch to add greetd support (bsc#1198559)</changelog>
  <changelog author="jsegitz@suse.com" date="1664452800">- Update fix_networkmanager.patch to ensure NetworkManager chrony
  dispatcher is properly labled and update fix_chronyd.patch to ensure
  chrony helper script has proper label to be used by NetworkManager.
  Also allow NetworkManager_dispatcher_custom_t to query systemd status
  (bsc#1203824)</changelog>
  <changelog author="jsegitz@suse.com" date="1664539200">- Updated quilt couldn't unpack tarball. This will cause ongoing issues
  so drop the sed statement in the %prep section and add
  distro_suse_to_distro_redhat.patch to add the necessary changes
  via a patch</changelog>
  <changelog author="jsegitz@suse.com" date="1666180800">- Update to version 20221019. Refreshed:
  * distro_suse_to_distro_redhat.patch
  * fix_apache.patch
  * fix_chronyd.patch
  * fix_cron.patch
  * fix_init.patch
  * fix_kernel_sysctl.patch
  * fix_networkmanager.patch
  * fix_rpm.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_xserver.patch
- Dropped fix_cockpit.patch as this is now packaged with cockpit itself
- Remove the ipa module, freeip ships their own module
- Added fix_alsa.patch to allow reading of config files in home directories
- Extended fix_networkmanager.patch and fix_postfix.patch to account
  for SUSE systems
- Added dontaudit_interface_kmod_tmpfs.patch to prevent AVCs when startproc
  queries the running processes
- Updated fix_snapper.patch to allow snapper to talk to rpm via dbus</changelog>
  <changelog author="cathy.hu@suse.com" date="1669291200">- fix_sysnetwork.patch: firewalld uses /etc/sysconfig/network/ for
  network interface definition instead of /etc/sysconfig/network-scripts/,
  modified sysnetwork.fc to reflect that (bsc#1205580).</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809600">- Drop fix_irqbalance.patch: superseded by upstream</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809601">- Add fix_irqbalance.patch: support netlink socket operations (bsc#1205434)</changelog>
  <changelog author="jsegitz@suse.com" date="1670328000">- Updated fix_networkmanager.patch to allow NetworkManager to watch
  net_conf_t (bsc#1206109)</changelog>
  <changelog author="jsegitz@suse.com" date="1670932800">- Updated fix_networkmanager.patch to fixe labeling of nm-dispatcher and
  nm-priv-helper until the packaging is adjusted (bsc#1206355)
- Update fix_chronyd.patch to allow  sendto towards
  NetworkManager_dispatcher_custom_t. Added new interface
  networkmanager_dispatcher_custom_dgram_send for this (bsc#1206357)
- Update fix_dbus.patch to allow dbus to watch lib directories (bsc#1205895)</changelog>
  <changelog author="jsegitz@suse.com" date="1682424000">- Added fix_filesystem.patch to prevent labeling of overlayfs
  mountpoint</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684843200">- Packaging rework. Move policy to git repository
  Please use `osc service manualrun` to update this OBS package to the
  newest git version.
  * Added README.Update describing how to update this package
  * Added _service file that pulls from selinux-policy and tar it
  * Updated selinux-policy.spec to build selinux-policy with
    container-selinux
  * Updated update.sh
  * Removed suse specific modules as they are now covered by git commits
  * packagekit.te packagekit.if packagekit.fc
  * rebootmgr.te rebootmgr.if rebootmgr.fc
  * rtorrent.te rtorrent.if rtorrent.fc
  * wicked.te wicked.if wicked.fc
  * Removed *.patch as they are now covered by git commits:
  * distro_suse_to_distro_redhat.patch
  * dontaudit_interface_kmod_tmpfs.patch
  * fix_accountsd.patch
  * fix_alsa.patch
  * fix_apache.patch
  * fix_auditd.patch
  * fix_authlogin.patch
  * fix_automount.patch
  * fix_bitlbee.patch
  * fix_chronyd.patch
  * fix_cloudform.patch
  * fix_colord.patch
  * fix_corecommand.patch
  * fix_cron.patch
  * fix_dbus.patch
  * fix_djbdns.patch
  * fix_dnsmasq.patch
  * fix_dovecot.patch
  * fix_firewalld.patch
  * fix_filesystem.patch
  * fix_fwupd.patch
  * fix_geoclue.patch
  * fix_hypervkvp.patch
  * fix_init.patch
  * fix_iptables.patch
  * fix_irqbalance.patch
  * fix_java.patch
  * fix_kernel_sysctl.patch
  * fix_libraries.patch
  * fix_locallogin.patch
  * fix_logging.patch
  * fix_logrotate.patch
  * fix_mcelog.patch
  * fix_miscfiles.patch
  * fix_nagios.patch
  * fix_networkmanager.patch
  * fix_nis.patch
  * fix_nscd.patch
  * fix_ntp.patch
  * fix_openvpn.patch
  * fix_postfix.patch
  * fix_rpm.patch
  * fix_screen.patch
  * fix_selinuxutil.patch
  * fix_smartmon.patch
  * fix_snapper.patch
  * fix_sslh.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_thunderbird.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_userdomain.patch
  * fix_usermanage.patch
  * fix_wine.patch
  * fix_xserver.patch
  * sedoctool.patch
  * systemd_domain_dyntrans_type.patch
  * fedora-policy-20221019.tar.bz2</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684929600">- Update to version 20230511+git3.b78f5aff:
  * fix entropy daemon (bsc#1211045)</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1690286400">- Update to version 20230511+git4.8c35010e:
  * allow haveged to manage tmpfs directories (bsc#1213594)</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1691064000">- Use /var/adm/update-scripts in macros.selinux-policy. The rpm state
  directory doesn't exist on SUSE systems (bsc#1213593)</changelog>
  <changelog author="jsegitz@suse.com" date="1694520000">- Create path in macros.selinux-policy since is might not exist on
  transactional systems</changelog>
  <changelog author="jsegitz@suse.com" date="1695124800">- Update to version 20230511+git5.ad830265b:
  * Allow sysadm_t run kernel bpf programs
  * allow init to run bpf programs. We do this during early startup
    (bsc#1215423)
  * Modified update.sh to require first parameter "full" to also
    update container-selinux</changelog>
  <changelog author="cathy.hu@suse.com" date="1697198400">- Update to version 20230511+git9.1b35a6ab:
  * Allow keepalived to manage its tmp files (bsc#1216060)</changelog>
</package>
<package pkgid="499612ab5e0cfc9495baacc266c4950eddea13fb8bd1828adb70a80ac5534e87" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="20230511+git9.1b35a6ab" rel="150500.3.6.1"/>
  <changelog author="kukuk@suse.com" date="1661515200">- Move SUSE directory from manual page section to html docu</changelog>
  <changelog author="jsegitz@suse.com" date="1662984000">- Revamped rtorrent module</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1664280000">- Update fix_xserver.patch to add greetd support (bsc#1198559)</changelog>
  <changelog author="jsegitz@suse.com" date="1664452800">- Update fix_networkmanager.patch to ensure NetworkManager chrony
  dispatcher is properly labled and update fix_chronyd.patch to ensure
  chrony helper script has proper label to be used by NetworkManager.
  Also allow NetworkManager_dispatcher_custom_t to query systemd status
  (bsc#1203824)</changelog>
  <changelog author="jsegitz@suse.com" date="1664539200">- Updated quilt couldn't unpack tarball. This will cause ongoing issues
  so drop the sed statement in the %prep section and add
  distro_suse_to_distro_redhat.patch to add the necessary changes
  via a patch</changelog>
  <changelog author="jsegitz@suse.com" date="1666180800">- Update to version 20221019. Refreshed:
  * distro_suse_to_distro_redhat.patch
  * fix_apache.patch
  * fix_chronyd.patch
  * fix_cron.patch
  * fix_init.patch
  * fix_kernel_sysctl.patch
  * fix_networkmanager.patch
  * fix_rpm.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_xserver.patch
- Dropped fix_cockpit.patch as this is now packaged with cockpit itself
- Remove the ipa module, freeip ships their own module
- Added fix_alsa.patch to allow reading of config files in home directories
- Extended fix_networkmanager.patch and fix_postfix.patch to account
  for SUSE systems
- Added dontaudit_interface_kmod_tmpfs.patch to prevent AVCs when startproc
  queries the running processes
- Updated fix_snapper.patch to allow snapper to talk to rpm via dbus</changelog>
  <changelog author="cathy.hu@suse.com" date="1669291200">- fix_sysnetwork.patch: firewalld uses /etc/sysconfig/network/ for
  network interface definition instead of /etc/sysconfig/network-scripts/,
  modified sysnetwork.fc to reflect that (bsc#1205580).</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809600">- Drop fix_irqbalance.patch: superseded by upstream</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809601">- Add fix_irqbalance.patch: support netlink socket operations (bsc#1205434)</changelog>
  <changelog author="jsegitz@suse.com" date="1670328000">- Updated fix_networkmanager.patch to allow NetworkManager to watch
  net_conf_t (bsc#1206109)</changelog>
  <changelog author="jsegitz@suse.com" date="1670932800">- Updated fix_networkmanager.patch to fixe labeling of nm-dispatcher and
  nm-priv-helper until the packaging is adjusted (bsc#1206355)
- Update fix_chronyd.patch to allow  sendto towards
  NetworkManager_dispatcher_custom_t. Added new interface
  networkmanager_dispatcher_custom_dgram_send for this (bsc#1206357)
- Update fix_dbus.patch to allow dbus to watch lib directories (bsc#1205895)</changelog>
  <changelog author="jsegitz@suse.com" date="1682424000">- Added fix_filesystem.patch to prevent labeling of overlayfs
  mountpoint</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684843200">- Packaging rework. Move policy to git repository
  Please use `osc service manualrun` to update this OBS package to the
  newest git version.
  * Added README.Update describing how to update this package
  * Added _service file that pulls from selinux-policy and tar it
  * Updated selinux-policy.spec to build selinux-policy with
    container-selinux
  * Updated update.sh
  * Removed suse specific modules as they are now covered by git commits
  * packagekit.te packagekit.if packagekit.fc
  * rebootmgr.te rebootmgr.if rebootmgr.fc
  * rtorrent.te rtorrent.if rtorrent.fc
  * wicked.te wicked.if wicked.fc
  * Removed *.patch as they are now covered by git commits:
  * distro_suse_to_distro_redhat.patch
  * dontaudit_interface_kmod_tmpfs.patch
  * fix_accountsd.patch
  * fix_alsa.patch
  * fix_apache.patch
  * fix_auditd.patch
  * fix_authlogin.patch
  * fix_automount.patch
  * fix_bitlbee.patch
  * fix_chronyd.patch
  * fix_cloudform.patch
  * fix_colord.patch
  * fix_corecommand.patch
  * fix_cron.patch
  * fix_dbus.patch
  * fix_djbdns.patch
  * fix_dnsmasq.patch
  * fix_dovecot.patch
  * fix_firewalld.patch
  * fix_filesystem.patch
  * fix_fwupd.patch
  * fix_geoclue.patch
  * fix_hypervkvp.patch
  * fix_init.patch
  * fix_iptables.patch
  * fix_irqbalance.patch
  * fix_java.patch
  * fix_kernel_sysctl.patch
  * fix_libraries.patch
  * fix_locallogin.patch
  * fix_logging.patch
  * fix_logrotate.patch
  * fix_mcelog.patch
  * fix_miscfiles.patch
  * fix_nagios.patch
  * fix_networkmanager.patch
  * fix_nis.patch
  * fix_nscd.patch
  * fix_ntp.patch
  * fix_openvpn.patch
  * fix_postfix.patch
  * fix_rpm.patch
  * fix_screen.patch
  * fix_selinuxutil.patch
  * fix_smartmon.patch
  * fix_snapper.patch
  * fix_sslh.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_thunderbird.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_userdomain.patch
  * fix_usermanage.patch
  * fix_wine.patch
  * fix_xserver.patch
  * sedoctool.patch
  * systemd_domain_dyntrans_type.patch
  * fedora-policy-20221019.tar.bz2</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684929600">- Update to version 20230511+git3.b78f5aff:
  * fix entropy daemon (bsc#1211045)</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1690286400">- Update to version 20230511+git4.8c35010e:
  * allow haveged to manage tmpfs directories (bsc#1213594)</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1691064000">- Use /var/adm/update-scripts in macros.selinux-policy. The rpm state
  directory doesn't exist on SUSE systems (bsc#1213593)</changelog>
  <changelog author="jsegitz@suse.com" date="1694520000">- Create path in macros.selinux-policy since is might not exist on
  transactional systems</changelog>
  <changelog author="jsegitz@suse.com" date="1695124800">- Update to version 20230511+git5.ad830265b:
  * Allow sysadm_t run kernel bpf programs
  * allow init to run bpf programs. We do this during early startup
    (bsc#1215423)
  * Modified update.sh to require first parameter "full" to also
    update container-selinux</changelog>
  <changelog author="cathy.hu@suse.com" date="1697198400">- Update to version 20230511+git9.1b35a6ab:
  * Allow keepalived to manage its tmp files (bsc#1216060)</changelog>
  <changelog author="jsegitz@suse.com" date="1700740800">- Extend module list for targeted policy
  * timedatex
  * rrdcached
  * stratisd
  * ica (bsc#1215405)
  * fedoratp
  * stalld
  * rhcd
  * wireguard</changelog>
</package>
<package pkgid="e6e3f820694c362a21eac6c5f4278dbd8b3c8dd21e8b70cbaf115a516eec7999" name="selinux-policy" arch="src">
  <version epoch="0" ver="20230511+git9.1b35a6ab" rel="150500.3.6.1"/>
  <changelog author="kukuk@suse.com" date="1661515200">- Move SUSE directory from manual page section to html docu</changelog>
  <changelog author="jsegitz@suse.com" date="1662984000">- Revamped rtorrent module</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1664280000">- Update fix_xserver.patch to add greetd support (bsc#1198559)</changelog>
  <changelog author="jsegitz@suse.com" date="1664452800">- Update fix_networkmanager.patch to ensure NetworkManager chrony
  dispatcher is properly labled and update fix_chronyd.patch to ensure
  chrony helper script has proper label to be used by NetworkManager.
  Also allow NetworkManager_dispatcher_custom_t to query systemd status
  (bsc#1203824)</changelog>
  <changelog author="jsegitz@suse.com" date="1664539200">- Updated quilt couldn't unpack tarball. This will cause ongoing issues
  so drop the sed statement in the %prep section and add
  distro_suse_to_distro_redhat.patch to add the necessary changes
  via a patch</changelog>
  <changelog author="jsegitz@suse.com" date="1666180800">- Update to version 20221019. Refreshed:
  * distro_suse_to_distro_redhat.patch
  * fix_apache.patch
  * fix_chronyd.patch
  * fix_cron.patch
  * fix_init.patch
  * fix_kernel_sysctl.patch
  * fix_networkmanager.patch
  * fix_rpm.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_xserver.patch
- Dropped fix_cockpit.patch as this is now packaged with cockpit itself
- Remove the ipa module, freeip ships their own module
- Added fix_alsa.patch to allow reading of config files in home directories
- Extended fix_networkmanager.patch and fix_postfix.patch to account
  for SUSE systems
- Added dontaudit_interface_kmod_tmpfs.patch to prevent AVCs when startproc
  queries the running processes
- Updated fix_snapper.patch to allow snapper to talk to rpm via dbus</changelog>
  <changelog author="cathy.hu@suse.com" date="1669291200">- fix_sysnetwork.patch: firewalld uses /etc/sysconfig/network/ for
  network interface definition instead of /etc/sysconfig/network-scripts/,
  modified sysnetwork.fc to reflect that (bsc#1205580).</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809600">- Drop fix_irqbalance.patch: superseded by upstream</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809601">- Add fix_irqbalance.patch: support netlink socket operations (bsc#1205434)</changelog>
  <changelog author="jsegitz@suse.com" date="1670328000">- Updated fix_networkmanager.patch to allow NetworkManager to watch
  net_conf_t (bsc#1206109)</changelog>
  <changelog author="jsegitz@suse.com" date="1670932800">- Updated fix_networkmanager.patch to fixe labeling of nm-dispatcher and
  nm-priv-helper until the packaging is adjusted (bsc#1206355)
- Update fix_chronyd.patch to allow  sendto towards
  NetworkManager_dispatcher_custom_t. Added new interface
  networkmanager_dispatcher_custom_dgram_send for this (bsc#1206357)
- Update fix_dbus.patch to allow dbus to watch lib directories (bsc#1205895)</changelog>
  <changelog author="jsegitz@suse.com" date="1682424000">- Added fix_filesystem.patch to prevent labeling of overlayfs
  mountpoint</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684843200">- Packaging rework. Move policy to git repository
  Please use `osc service manualrun` to update this OBS package to the
  newest git version.
  * Added README.Update describing how to update this package
  * Added _service file that pulls from selinux-policy and tar it
  * Updated selinux-policy.spec to build selinux-policy with
    container-selinux
  * Updated update.sh
  * Removed suse specific modules as they are now covered by git commits
  * packagekit.te packagekit.if packagekit.fc
  * rebootmgr.te rebootmgr.if rebootmgr.fc
  * rtorrent.te rtorrent.if rtorrent.fc
  * wicked.te wicked.if wicked.fc
  * Removed *.patch as they are now covered by git commits:
  * distro_suse_to_distro_redhat.patch
  * dontaudit_interface_kmod_tmpfs.patch
  * fix_accountsd.patch
  * fix_alsa.patch
  * fix_apache.patch
  * fix_auditd.patch
  * fix_authlogin.patch
  * fix_automount.patch
  * fix_bitlbee.patch
  * fix_chronyd.patch
  * fix_cloudform.patch
  * fix_colord.patch
  * fix_corecommand.patch
  * fix_cron.patch
  * fix_dbus.patch
  * fix_djbdns.patch
  * fix_dnsmasq.patch
  * fix_dovecot.patch
  * fix_firewalld.patch
  * fix_filesystem.patch
  * fix_fwupd.patch
  * fix_geoclue.patch
  * fix_hypervkvp.patch
  * fix_init.patch
  * fix_iptables.patch
  * fix_irqbalance.patch
  * fix_java.patch
  * fix_kernel_sysctl.patch
  * fix_libraries.patch
  * fix_locallogin.patch
  * fix_logging.patch
  * fix_logrotate.patch
  * fix_mcelog.patch
  * fix_miscfiles.patch
  * fix_nagios.patch
  * fix_networkmanager.patch
  * fix_nis.patch
  * fix_nscd.patch
  * fix_ntp.patch
  * fix_openvpn.patch
  * fix_postfix.patch
  * fix_rpm.patch
  * fix_screen.patch
  * fix_selinuxutil.patch
  * fix_smartmon.patch
  * fix_snapper.patch
  * fix_sslh.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_thunderbird.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_userdomain.patch
  * fix_usermanage.patch
  * fix_wine.patch
  * fix_xserver.patch
  * sedoctool.patch
  * systemd_domain_dyntrans_type.patch
  * fedora-policy-20221019.tar.bz2</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684929600">- Update to version 20230511+git3.b78f5aff:
  * fix entropy daemon (bsc#1211045)</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1690286400">- Update to version 20230511+git4.8c35010e:
  * allow haveged to manage tmpfs directories (bsc#1213594)</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1691064000">- Use /var/adm/update-scripts in macros.selinux-policy. The rpm state
  directory doesn't exist on SUSE systems (bsc#1213593)</changelog>
  <changelog author="jsegitz@suse.com" date="1694520000">- Create path in macros.selinux-policy since is might not exist on
  transactional systems</changelog>
  <changelog author="jsegitz@suse.com" date="1695124800">- Update to version 20230511+git5.ad830265b:
  * Allow sysadm_t run kernel bpf programs
  * allow init to run bpf programs. We do this during early startup
    (bsc#1215423)
  * Modified update.sh to require first parameter "full" to also
    update container-selinux</changelog>
  <changelog author="cathy.hu@suse.com" date="1697198400">- Update to version 20230511+git9.1b35a6ab:
  * Allow keepalived to manage its tmp files (bsc#1216060)</changelog>
  <changelog author="jsegitz@suse.com" date="1700740800">- Extend module list for targeted policy
  * timedatex
  * rrdcached
  * stratisd
  * ica (bsc#1215405)
  * fedoratp
  * stalld
  * rhcd
  * wireguard</changelog>
</package>
<package pkgid="b4380b7e2fd5acda3582a9700246a7cd8b2e3e2eb6d7f8c44f0c2519bb89e896" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="20230511+git9.1b35a6ab" rel="150500.3.9.1"/>
  <changelog author="jsegitz@suse.com" date="1662984000">- Revamped rtorrent module</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1664280000">- Update fix_xserver.patch to add greetd support (bsc#1198559)</changelog>
  <changelog author="jsegitz@suse.com" date="1664452800">- Update fix_networkmanager.patch to ensure NetworkManager chrony
  dispatcher is properly labled and update fix_chronyd.patch to ensure
  chrony helper script has proper label to be used by NetworkManager.
  Also allow NetworkManager_dispatcher_custom_t to query systemd status
  (bsc#1203824)</changelog>
  <changelog author="jsegitz@suse.com" date="1664539200">- Updated quilt couldn't unpack tarball. This will cause ongoing issues
  so drop the sed statement in the %prep section and add
  distro_suse_to_distro_redhat.patch to add the necessary changes
  via a patch</changelog>
  <changelog author="jsegitz@suse.com" date="1666180800">- Update to version 20221019. Refreshed:
  * distro_suse_to_distro_redhat.patch
  * fix_apache.patch
  * fix_chronyd.patch
  * fix_cron.patch
  * fix_init.patch
  * fix_kernel_sysctl.patch
  * fix_networkmanager.patch
  * fix_rpm.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_xserver.patch
- Dropped fix_cockpit.patch as this is now packaged with cockpit itself
- Remove the ipa module, freeip ships their own module
- Added fix_alsa.patch to allow reading of config files in home directories
- Extended fix_networkmanager.patch and fix_postfix.patch to account
  for SUSE systems
- Added dontaudit_interface_kmod_tmpfs.patch to prevent AVCs when startproc
  queries the running processes
- Updated fix_snapper.patch to allow snapper to talk to rpm via dbus</changelog>
  <changelog author="cathy.hu@suse.com" date="1669291200">- fix_sysnetwork.patch: firewalld uses /etc/sysconfig/network/ for
  network interface definition instead of /etc/sysconfig/network-scripts/,
  modified sysnetwork.fc to reflect that (bsc#1205580).</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809600">- Drop fix_irqbalance.patch: superseded by upstream</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809601">- Add fix_irqbalance.patch: support netlink socket operations (bsc#1205434)</changelog>
  <changelog author="jsegitz@suse.com" date="1670328000">- Updated fix_networkmanager.patch to allow NetworkManager to watch
  net_conf_t (bsc#1206109)</changelog>
  <changelog author="jsegitz@suse.com" date="1670932800">- Updated fix_networkmanager.patch to fixe labeling of nm-dispatcher and
  nm-priv-helper until the packaging is adjusted (bsc#1206355)
- Update fix_chronyd.patch to allow  sendto towards
  NetworkManager_dispatcher_custom_t. Added new interface
  networkmanager_dispatcher_custom_dgram_send for this (bsc#1206357)
- Update fix_dbus.patch to allow dbus to watch lib directories (bsc#1205895)</changelog>
  <changelog author="jsegitz@suse.com" date="1682424000">- Added fix_filesystem.patch to prevent labeling of overlayfs
  mountpoint</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684843200">- Packaging rework. Move policy to git repository
  Please use `osc service manualrun` to update this OBS package to the
  newest git version.
  * Added README.Update describing how to update this package
  * Added _service file that pulls from selinux-policy and tar it
  * Updated selinux-policy.spec to build selinux-policy with
    container-selinux
  * Updated update.sh
  * Removed suse specific modules as they are now covered by git commits
  * packagekit.te packagekit.if packagekit.fc
  * rebootmgr.te rebootmgr.if rebootmgr.fc
  * rtorrent.te rtorrent.if rtorrent.fc
  * wicked.te wicked.if wicked.fc
  * Removed *.patch as they are now covered by git commits:
  * distro_suse_to_distro_redhat.patch
  * dontaudit_interface_kmod_tmpfs.patch
  * fix_accountsd.patch
  * fix_alsa.patch
  * fix_apache.patch
  * fix_auditd.patch
  * fix_authlogin.patch
  * fix_automount.patch
  * fix_bitlbee.patch
  * fix_chronyd.patch
  * fix_cloudform.patch
  * fix_colord.patch
  * fix_corecommand.patch
  * fix_cron.patch
  * fix_dbus.patch
  * fix_djbdns.patch
  * fix_dnsmasq.patch
  * fix_dovecot.patch
  * fix_firewalld.patch
  * fix_filesystem.patch
  * fix_fwupd.patch
  * fix_geoclue.patch
  * fix_hypervkvp.patch
  * fix_init.patch
  * fix_iptables.patch
  * fix_irqbalance.patch
  * fix_java.patch
  * fix_kernel_sysctl.patch
  * fix_libraries.patch
  * fix_locallogin.patch
  * fix_logging.patch
  * fix_logrotate.patch
  * fix_mcelog.patch
  * fix_miscfiles.patch
  * fix_nagios.patch
  * fix_networkmanager.patch
  * fix_nis.patch
  * fix_nscd.patch
  * fix_ntp.patch
  * fix_openvpn.patch
  * fix_postfix.patch
  * fix_rpm.patch
  * fix_screen.patch
  * fix_selinuxutil.patch
  * fix_smartmon.patch
  * fix_snapper.patch
  * fix_sslh.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_thunderbird.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_userdomain.patch
  * fix_usermanage.patch
  * fix_wine.patch
  * fix_xserver.patch
  * sedoctool.patch
  * systemd_domain_dyntrans_type.patch
  * fedora-policy-20221019.tar.bz2</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684929600">- Update to version 20230511+git3.b78f5aff:
  * fix entropy daemon (bsc#1211045)</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1690286400">- Update to version 20230511+git4.8c35010e:
  * allow haveged to manage tmpfs directories (bsc#1213594)</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1691064000">- Use /var/adm/update-scripts in macros.selinux-policy. The rpm state
  directory doesn't exist on SUSE systems (bsc#1213593)</changelog>
  <changelog author="jsegitz@suse.com" date="1694520000">- Create path in macros.selinux-policy since is might not exist on
  transactional systems</changelog>
  <changelog author="jsegitz@suse.com" date="1695124800">- Update to version 20230511+git5.ad830265b:
  * Allow sysadm_t run kernel bpf programs
  * allow init to run bpf programs. We do this during early startup
    (bsc#1215423)
  * Modified update.sh to require first parameter "full" to also
    update container-selinux</changelog>
  <changelog author="cathy.hu@suse.com" date="1697198400">- Update to version 20230511+git9.1b35a6ab:
  * Allow keepalived to manage its tmp files (bsc#1216060)</changelog>
  <changelog author="jsegitz@suse.com" date="1700740800">- Extend module list for targeted policy
  * timedatex
  * rrdcached
  * stratisd
  * ica (bsc#1215405)
  * fedoratp
  * stalld
  * rhcd
  * wireguard</changelog>
  <changelog author="cathy.hu@suse.com" date="1701172800">- Trigger rebuild of the policy when pcre2 gets updated to avoid
  regex version mismatch errors (bsc#1216747).</changelog>
</package>
<package pkgid="e6efde88105bb9527a8461e1cc0fa8e412d5299106758fe47e03b92bc7defb6f" name="selinux-policy" arch="src">
  <version epoch="0" ver="20230511+git9.1b35a6ab" rel="150500.3.9.1"/>
  <changelog author="jsegitz@suse.com" date="1662984000">- Revamped rtorrent module</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1664280000">- Update fix_xserver.patch to add greetd support (bsc#1198559)</changelog>
  <changelog author="jsegitz@suse.com" date="1664452800">- Update fix_networkmanager.patch to ensure NetworkManager chrony
  dispatcher is properly labled and update fix_chronyd.patch to ensure
  chrony helper script has proper label to be used by NetworkManager.
  Also allow NetworkManager_dispatcher_custom_t to query systemd status
  (bsc#1203824)</changelog>
  <changelog author="jsegitz@suse.com" date="1664539200">- Updated quilt couldn't unpack tarball. This will cause ongoing issues
  so drop the sed statement in the %prep section and add
  distro_suse_to_distro_redhat.patch to add the necessary changes
  via a patch</changelog>
  <changelog author="jsegitz@suse.com" date="1666180800">- Update to version 20221019. Refreshed:
  * distro_suse_to_distro_redhat.patch
  * fix_apache.patch
  * fix_chronyd.patch
  * fix_cron.patch
  * fix_init.patch
  * fix_kernel_sysctl.patch
  * fix_networkmanager.patch
  * fix_rpm.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_xserver.patch
- Dropped fix_cockpit.patch as this is now packaged with cockpit itself
- Remove the ipa module, freeip ships their own module
- Added fix_alsa.patch to allow reading of config files in home directories
- Extended fix_networkmanager.patch and fix_postfix.patch to account
  for SUSE systems
- Added dontaudit_interface_kmod_tmpfs.patch to prevent AVCs when startproc
  queries the running processes
- Updated fix_snapper.patch to allow snapper to talk to rpm via dbus</changelog>
  <changelog author="cathy.hu@suse.com" date="1669291200">- fix_sysnetwork.patch: firewalld uses /etc/sysconfig/network/ for
  network interface definition instead of /etc/sysconfig/network-scripts/,
  modified sysnetwork.fc to reflect that (bsc#1205580).</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809600">- Drop fix_irqbalance.patch: superseded by upstream</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809601">- Add fix_irqbalance.patch: support netlink socket operations (bsc#1205434)</changelog>
  <changelog author="jsegitz@suse.com" date="1670328000">- Updated fix_networkmanager.patch to allow NetworkManager to watch
  net_conf_t (bsc#1206109)</changelog>
  <changelog author="jsegitz@suse.com" date="1670932800">- Updated fix_networkmanager.patch to fixe labeling of nm-dispatcher and
  nm-priv-helper until the packaging is adjusted (bsc#1206355)
- Update fix_chronyd.patch to allow  sendto towards
  NetworkManager_dispatcher_custom_t. Added new interface
  networkmanager_dispatcher_custom_dgram_send for this (bsc#1206357)
- Update fix_dbus.patch to allow dbus to watch lib directories (bsc#1205895)</changelog>
  <changelog author="jsegitz@suse.com" date="1682424000">- Added fix_filesystem.patch to prevent labeling of overlayfs
  mountpoint</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684843200">- Packaging rework. Move policy to git repository
  Please use `osc service manualrun` to update this OBS package to the
  newest git version.
  * Added README.Update describing how to update this package
  * Added _service file that pulls from selinux-policy and tar it
  * Updated selinux-policy.spec to build selinux-policy with
    container-selinux
  * Updated update.sh
  * Removed suse specific modules as they are now covered by git commits
  * packagekit.te packagekit.if packagekit.fc
  * rebootmgr.te rebootmgr.if rebootmgr.fc
  * rtorrent.te rtorrent.if rtorrent.fc
  * wicked.te wicked.if wicked.fc
  * Removed *.patch as they are now covered by git commits:
  * distro_suse_to_distro_redhat.patch
  * dontaudit_interface_kmod_tmpfs.patch
  * fix_accountsd.patch
  * fix_alsa.patch
  * fix_apache.patch
  * fix_auditd.patch
  * fix_authlogin.patch
  * fix_automount.patch
  * fix_bitlbee.patch
  * fix_chronyd.patch
  * fix_cloudform.patch
  * fix_colord.patch
  * fix_corecommand.patch
  * fix_cron.patch
  * fix_dbus.patch
  * fix_djbdns.patch
  * fix_dnsmasq.patch
  * fix_dovecot.patch
  * fix_firewalld.patch
  * fix_filesystem.patch
  * fix_fwupd.patch
  * fix_geoclue.patch
  * fix_hypervkvp.patch
  * fix_init.patch
  * fix_iptables.patch
  * fix_irqbalance.patch
  * fix_java.patch
  * fix_kernel_sysctl.patch
  * fix_libraries.patch
  * fix_locallogin.patch
  * fix_logging.patch
  * fix_logrotate.patch
  * fix_mcelog.patch
  * fix_miscfiles.patch
  * fix_nagios.patch
  * fix_networkmanager.patch
  * fix_nis.patch
  * fix_nscd.patch
  * fix_ntp.patch
  * fix_openvpn.patch
  * fix_postfix.patch
  * fix_rpm.patch
  * fix_screen.patch
  * fix_selinuxutil.patch
  * fix_smartmon.patch
  * fix_snapper.patch
  * fix_sslh.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_thunderbird.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_userdomain.patch
  * fix_usermanage.patch
  * fix_wine.patch
  * fix_xserver.patch
  * sedoctool.patch
  * systemd_domain_dyntrans_type.patch
  * fedora-policy-20221019.tar.bz2</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684929600">- Update to version 20230511+git3.b78f5aff:
  * fix entropy daemon (bsc#1211045)</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1690286400">- Update to version 20230511+git4.8c35010e:
  * allow haveged to manage tmpfs directories (bsc#1213594)</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1691064000">- Use /var/adm/update-scripts in macros.selinux-policy. The rpm state
  directory doesn't exist on SUSE systems (bsc#1213593)</changelog>
  <changelog author="jsegitz@suse.com" date="1694520000">- Create path in macros.selinux-policy since is might not exist on
  transactional systems</changelog>
  <changelog author="jsegitz@suse.com" date="1695124800">- Update to version 20230511+git5.ad830265b:
  * Allow sysadm_t run kernel bpf programs
  * allow init to run bpf programs. We do this during early startup
    (bsc#1215423)
  * Modified update.sh to require first parameter "full" to also
    update container-selinux</changelog>
  <changelog author="cathy.hu@suse.com" date="1697198400">- Update to version 20230511+git9.1b35a6ab:
  * Allow keepalived to manage its tmp files (bsc#1216060)</changelog>
  <changelog author="jsegitz@suse.com" date="1700740800">- Extend module list for targeted policy
  * timedatex
  * rrdcached
  * stratisd
  * ica (bsc#1215405)
  * fedoratp
  * stalld
  * rhcd
  * wireguard</changelog>
  <changelog author="cathy.hu@suse.com" date="1701172800">- Trigger rebuild of the policy when pcre2 gets updated to avoid
  regex version mismatch errors (bsc#1216747).</changelog>
</package>
<package pkgid="79e9e5b01cd4bdae0d6602f1aab5c497b5e0c742837666d040d9d97ce4c0ba83" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="20230511+git13.edb03d70" rel="150500.3.12.1"/>
  <changelog author="filippo.bonazzi@suse.com" date="1664280000">- Update fix_xserver.patch to add greetd support (bsc#1198559)</changelog>
  <changelog author="jsegitz@suse.com" date="1664452800">- Update fix_networkmanager.patch to ensure NetworkManager chrony
  dispatcher is properly labled and update fix_chronyd.patch to ensure
  chrony helper script has proper label to be used by NetworkManager.
  Also allow NetworkManager_dispatcher_custom_t to query systemd status
  (bsc#1203824)</changelog>
  <changelog author="jsegitz@suse.com" date="1664539200">- Updated quilt couldn't unpack tarball. This will cause ongoing issues
  so drop the sed statement in the %prep section and add
  distro_suse_to_distro_redhat.patch to add the necessary changes
  via a patch</changelog>
  <changelog author="jsegitz@suse.com" date="1666180800">- Update to version 20221019. Refreshed:
  * distro_suse_to_distro_redhat.patch
  * fix_apache.patch
  * fix_chronyd.patch
  * fix_cron.patch
  * fix_init.patch
  * fix_kernel_sysctl.patch
  * fix_networkmanager.patch
  * fix_rpm.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_xserver.patch
- Dropped fix_cockpit.patch as this is now packaged with cockpit itself
- Remove the ipa module, freeip ships their own module
- Added fix_alsa.patch to allow reading of config files in home directories
- Extended fix_networkmanager.patch and fix_postfix.patch to account
  for SUSE systems
- Added dontaudit_interface_kmod_tmpfs.patch to prevent AVCs when startproc
  queries the running processes
- Updated fix_snapper.patch to allow snapper to talk to rpm via dbus</changelog>
  <changelog author="cathy.hu@suse.com" date="1669291200">- fix_sysnetwork.patch: firewalld uses /etc/sysconfig/network/ for
  network interface definition instead of /etc/sysconfig/network-scripts/,
  modified sysnetwork.fc to reflect that (bsc#1205580).</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809600">- Drop fix_irqbalance.patch: superseded by upstream</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809601">- Add fix_irqbalance.patch: support netlink socket operations (bsc#1205434)</changelog>
  <changelog author="jsegitz@suse.com" date="1670328000">- Updated fix_networkmanager.patch to allow NetworkManager to watch
  net_conf_t (bsc#1206109)</changelog>
  <changelog author="jsegitz@suse.com" date="1670932800">- Updated fix_networkmanager.patch to fixe labeling of nm-dispatcher and
  nm-priv-helper until the packaging is adjusted (bsc#1206355)
- Update fix_chronyd.patch to allow  sendto towards
  NetworkManager_dispatcher_custom_t. Added new interface
  networkmanager_dispatcher_custom_dgram_send for this (bsc#1206357)
- Update fix_dbus.patch to allow dbus to watch lib directories (bsc#1205895)</changelog>
  <changelog author="jsegitz@suse.com" date="1682424000">- Added fix_filesystem.patch to prevent labeling of overlayfs
  mountpoint</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684843200">- Packaging rework. Move policy to git repository
  Please use `osc service manualrun` to update this OBS package to the
  newest git version.
  * Added README.Update describing how to update this package
  * Added _service file that pulls from selinux-policy and tar it
  * Updated selinux-policy.spec to build selinux-policy with
    container-selinux
  * Updated update.sh
  * Removed suse specific modules as they are now covered by git commits
  * packagekit.te packagekit.if packagekit.fc
  * rebootmgr.te rebootmgr.if rebootmgr.fc
  * rtorrent.te rtorrent.if rtorrent.fc
  * wicked.te wicked.if wicked.fc
  * Removed *.patch as they are now covered by git commits:
  * distro_suse_to_distro_redhat.patch
  * dontaudit_interface_kmod_tmpfs.patch
  * fix_accountsd.patch
  * fix_alsa.patch
  * fix_apache.patch
  * fix_auditd.patch
  * fix_authlogin.patch
  * fix_automount.patch
  * fix_bitlbee.patch
  * fix_chronyd.patch
  * fix_cloudform.patch
  * fix_colord.patch
  * fix_corecommand.patch
  * fix_cron.patch
  * fix_dbus.patch
  * fix_djbdns.patch
  * fix_dnsmasq.patch
  * fix_dovecot.patch
  * fix_firewalld.patch
  * fix_filesystem.patch
  * fix_fwupd.patch
  * fix_geoclue.patch
  * fix_hypervkvp.patch
  * fix_init.patch
  * fix_iptables.patch
  * fix_irqbalance.patch
  * fix_java.patch
  * fix_kernel_sysctl.patch
  * fix_libraries.patch
  * fix_locallogin.patch
  * fix_logging.patch
  * fix_logrotate.patch
  * fix_mcelog.patch
  * fix_miscfiles.patch
  * fix_nagios.patch
  * fix_networkmanager.patch
  * fix_nis.patch
  * fix_nscd.patch
  * fix_ntp.patch
  * fix_openvpn.patch
  * fix_postfix.patch
  * fix_rpm.patch
  * fix_screen.patch
  * fix_selinuxutil.patch
  * fix_smartmon.patch
  * fix_snapper.patch
  * fix_sslh.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_thunderbird.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_userdomain.patch
  * fix_usermanage.patch
  * fix_wine.patch
  * fix_xserver.patch
  * sedoctool.patch
  * systemd_domain_dyntrans_type.patch
  * fedora-policy-20221019.tar.bz2</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684929600">- Update to version 20230511+git3.b78f5aff:
  * fix entropy daemon (bsc#1211045)</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1690286400">- Update to version 20230511+git4.8c35010e:
  * allow haveged to manage tmpfs directories (bsc#1213594)</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1691064000">- Use /var/adm/update-scripts in macros.selinux-policy. The rpm state
  directory doesn't exist on SUSE systems (bsc#1213593)</changelog>
  <changelog author="jsegitz@suse.com" date="1694520000">- Create path in macros.selinux-policy since is might not exist on
  transactional systems</changelog>
  <changelog author="jsegitz@suse.com" date="1695124800">- Update to version 20230511+git5.ad830265b:
  * Allow sysadm_t run kernel bpf programs
  * allow init to run bpf programs. We do this during early startup
    (bsc#1215423)
  * Modified update.sh to require first parameter "full" to also
    update container-selinux</changelog>
  <changelog author="cathy.hu@suse.com" date="1697198400">- Update to version 20230511+git9.1b35a6ab:
  * Allow keepalived to manage its tmp files (bsc#1216060)</changelog>
  <changelog author="jsegitz@suse.com" date="1700740800">- Extend module list for targeted policy
  * timedatex
  * rrdcached
  * stratisd
  * ica (bsc#1215405)
  * fedoratp
  * stalld
  * rhcd
  * wireguard</changelog>
  <changelog author="cathy.hu@suse.com" date="1701172800">- Trigger rebuild of the policy when pcre2 gets updated to avoid
  regex version mismatch errors (bsc#1216747).</changelog>
  <changelog author="cathy.hu@suse.com" date="1704801600">- Update to version 20230511+git13.edb03d70:
  * allow rebootmgr to read the system state (bsc#1205931)
  * Allow keepalived_t read+write kernel_t pipes (bsc#1216060)</changelog>
</package>
<package pkgid="6846c891504e476fa19c64d92ab2911d5578c1dab127591ea5db3d1353cb2e35" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="20230511+git9.1b35a6ab" rel="150500.3.3.1"/>
  <changelog author="cathy.hu@suse.com" date="1658923200">- fix_networkmanager.patch: Allow NetworkManager_dispatcher_tlp_t
  and NetworkManager_dispatcher_custom_t to access nscd socket
  (bsc#1201741)</changelog>
  <changelog author="kukuk@suse.com" date="1661515200">- Move SUSE directory from manual page section to html docu</changelog>
  <changelog author="jsegitz@suse.com" date="1662984000">- Revamped rtorrent module</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1664280000">- Update fix_xserver.patch to add greetd support (bsc#1198559)</changelog>
  <changelog author="jsegitz@suse.com" date="1664452800">- Update fix_networkmanager.patch to ensure NetworkManager chrony
  dispatcher is properly labled and update fix_chronyd.patch to ensure
  chrony helper script has proper label to be used by NetworkManager.
  Also allow NetworkManager_dispatcher_custom_t to query systemd status
  (bsc#1203824)</changelog>
  <changelog author="jsegitz@suse.com" date="1664539200">- Updated quilt couldn't unpack tarball. This will cause ongoing issues
  so drop the sed statement in the %prep section and add
  distro_suse_to_distro_redhat.patch to add the necessary changes
  via a patch</changelog>
  <changelog author="jsegitz@suse.com" date="1666180800">- Update to version 20221019. Refreshed:
  * distro_suse_to_distro_redhat.patch
  * fix_apache.patch
  * fix_chronyd.patch
  * fix_cron.patch
  * fix_init.patch
  * fix_kernel_sysctl.patch
  * fix_networkmanager.patch
  * fix_rpm.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_xserver.patch
- Dropped fix_cockpit.patch as this is now packaged with cockpit itself
- Remove the ipa module, freeip ships their own module
- Added fix_alsa.patch to allow reading of config files in home directories
- Extended fix_networkmanager.patch and fix_postfix.patch to account
  for SUSE systems
- Added dontaudit_interface_kmod_tmpfs.patch to prevent AVCs when startproc
  queries the running processes
- Updated fix_snapper.patch to allow snapper to talk to rpm via dbus</changelog>
  <changelog author="cathy.hu@suse.com" date="1669291200">- fix_sysnetwork.patch: firewalld uses /etc/sysconfig/network/ for
  network interface definition instead of /etc/sysconfig/network-scripts/,
  modified sysnetwork.fc to reflect that (bsc#1205580).</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809600">- Drop fix_irqbalance.patch: superseded by upstream</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809601">- Add fix_irqbalance.patch: support netlink socket operations (bsc#1205434)</changelog>
  <changelog author="jsegitz@suse.com" date="1670328000">- Updated fix_networkmanager.patch to allow NetworkManager to watch
  net_conf_t (bsc#1206109)</changelog>
  <changelog author="jsegitz@suse.com" date="1670932800">- Updated fix_networkmanager.patch to fixe labeling of nm-dispatcher and
  nm-priv-helper until the packaging is adjusted (bsc#1206355)
- Update fix_chronyd.patch to allow  sendto towards
  NetworkManager_dispatcher_custom_t. Added new interface
  networkmanager_dispatcher_custom_dgram_send for this (bsc#1206357)
- Update fix_dbus.patch to allow dbus to watch lib directories (bsc#1205895)</changelog>
  <changelog author="jsegitz@suse.com" date="1682424000">- Added fix_filesystem.patch to prevent labeling of overlayfs
  mountpoint</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684843200">- Packaging rework. Move policy to git repository
  Please use `osc service manualrun` to update this OBS package to the
  newest git version.
  * Added README.Update describing how to update this package
  * Added _service file that pulls from selinux-policy and tar it
  * Updated selinux-policy.spec to build selinux-policy with
    container-selinux
  * Updated update.sh
  * Removed suse specific modules as they are now covered by git commits
  * packagekit.te packagekit.if packagekit.fc
  * rebootmgr.te rebootmgr.if rebootmgr.fc
  * rtorrent.te rtorrent.if rtorrent.fc
  * wicked.te wicked.if wicked.fc
  * Removed *.patch as they are now covered by git commits:
  * distro_suse_to_distro_redhat.patch
  * dontaudit_interface_kmod_tmpfs.patch
  * fix_accountsd.patch
  * fix_alsa.patch
  * fix_apache.patch
  * fix_auditd.patch
  * fix_authlogin.patch
  * fix_automount.patch
  * fix_bitlbee.patch
  * fix_chronyd.patch
  * fix_cloudform.patch
  * fix_colord.patch
  * fix_corecommand.patch
  * fix_cron.patch
  * fix_dbus.patch
  * fix_djbdns.patch
  * fix_dnsmasq.patch
  * fix_dovecot.patch
  * fix_firewalld.patch
  * fix_filesystem.patch
  * fix_fwupd.patch
  * fix_geoclue.patch
  * fix_hypervkvp.patch
  * fix_init.patch
  * fix_iptables.patch
  * fix_irqbalance.patch
  * fix_java.patch
  * fix_kernel_sysctl.patch
  * fix_libraries.patch
  * fix_locallogin.patch
  * fix_logging.patch
  * fix_logrotate.patch
  * fix_mcelog.patch
  * fix_miscfiles.patch
  * fix_nagios.patch
  * fix_networkmanager.patch
  * fix_nis.patch
  * fix_nscd.patch
  * fix_ntp.patch
  * fix_openvpn.patch
  * fix_postfix.patch
  * fix_rpm.patch
  * fix_screen.patch
  * fix_selinuxutil.patch
  * fix_smartmon.patch
  * fix_snapper.patch
  * fix_sslh.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_thunderbird.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_userdomain.patch
  * fix_usermanage.patch
  * fix_wine.patch
  * fix_xserver.patch
  * sedoctool.patch
  * systemd_domain_dyntrans_type.patch
  * fedora-policy-20221019.tar.bz2</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684929600">- Update to version 20230511+git3.b78f5aff:
  * fix entropy daemon (bsc#1211045)</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1690286400">- Update to version 20230511+git4.8c35010e:
  * allow haveged to manage tmpfs directories (bsc#1213594)</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1691064000">- Use /var/adm/update-scripts in macros.selinux-policy. The rpm state
  directory doesn't exist on SUSE systems (bsc#1213593)</changelog>
  <changelog author="jsegitz@suse.com" date="1694520000">- Create path in macros.selinux-policy since is might not exist on
  transactional systems</changelog>
  <changelog author="jsegitz@suse.com" date="1695124800">- Update to version 20230511+git5.ad830265b:
  * Allow sysadm_t run kernel bpf programs
  * allow init to run bpf programs. We do this during early startup
    (bsc#1215423)
  * Modified update.sh to require first parameter "full" to also
    update container-selinux</changelog>
  <changelog author="cathy.hu@suse.com" date="1697198400">- Update to version 20230511+git9.1b35a6ab:
  * Allow keepalived to manage its tmp files (bsc#1216060)</changelog>
</package>
<package pkgid="c1ef4e6129b63a6f79070d4eafb8bb53b558c017348313592b9358539530addd" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="20230511+git9.1b35a6ab" rel="150500.3.6.1"/>
  <changelog author="kukuk@suse.com" date="1661515200">- Move SUSE directory from manual page section to html docu</changelog>
  <changelog author="jsegitz@suse.com" date="1662984000">- Revamped rtorrent module</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1664280000">- Update fix_xserver.patch to add greetd support (bsc#1198559)</changelog>
  <changelog author="jsegitz@suse.com" date="1664452800">- Update fix_networkmanager.patch to ensure NetworkManager chrony
  dispatcher is properly labled and update fix_chronyd.patch to ensure
  chrony helper script has proper label to be used by NetworkManager.
  Also allow NetworkManager_dispatcher_custom_t to query systemd status
  (bsc#1203824)</changelog>
  <changelog author="jsegitz@suse.com" date="1664539200">- Updated quilt couldn't unpack tarball. This will cause ongoing issues
  so drop the sed statement in the %prep section and add
  distro_suse_to_distro_redhat.patch to add the necessary changes
  via a patch</changelog>
  <changelog author="jsegitz@suse.com" date="1666180800">- Update to version 20221019. Refreshed:
  * distro_suse_to_distro_redhat.patch
  * fix_apache.patch
  * fix_chronyd.patch
  * fix_cron.patch
  * fix_init.patch
  * fix_kernel_sysctl.patch
  * fix_networkmanager.patch
  * fix_rpm.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_xserver.patch
- Dropped fix_cockpit.patch as this is now packaged with cockpit itself
- Remove the ipa module, freeip ships their own module
- Added fix_alsa.patch to allow reading of config files in home directories
- Extended fix_networkmanager.patch and fix_postfix.patch to account
  for SUSE systems
- Added dontaudit_interface_kmod_tmpfs.patch to prevent AVCs when startproc
  queries the running processes
- Updated fix_snapper.patch to allow snapper to talk to rpm via dbus</changelog>
  <changelog author="cathy.hu@suse.com" date="1669291200">- fix_sysnetwork.patch: firewalld uses /etc/sysconfig/network/ for
  network interface definition instead of /etc/sysconfig/network-scripts/,
  modified sysnetwork.fc to reflect that (bsc#1205580).</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809600">- Drop fix_irqbalance.patch: superseded by upstream</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809601">- Add fix_irqbalance.patch: support netlink socket operations (bsc#1205434)</changelog>
  <changelog author="jsegitz@suse.com" date="1670328000">- Updated fix_networkmanager.patch to allow NetworkManager to watch
  net_conf_t (bsc#1206109)</changelog>
  <changelog author="jsegitz@suse.com" date="1670932800">- Updated fix_networkmanager.patch to fixe labeling of nm-dispatcher and
  nm-priv-helper until the packaging is adjusted (bsc#1206355)
- Update fix_chronyd.patch to allow  sendto towards
  NetworkManager_dispatcher_custom_t. Added new interface
  networkmanager_dispatcher_custom_dgram_send for this (bsc#1206357)
- Update fix_dbus.patch to allow dbus to watch lib directories (bsc#1205895)</changelog>
  <changelog author="jsegitz@suse.com" date="1682424000">- Added fix_filesystem.patch to prevent labeling of overlayfs
  mountpoint</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684843200">- Packaging rework. Move policy to git repository
  Please use `osc service manualrun` to update this OBS package to the
  newest git version.
  * Added README.Update describing how to update this package
  * Added _service file that pulls from selinux-policy and tar it
  * Updated selinux-policy.spec to build selinux-policy with
    container-selinux
  * Updated update.sh
  * Removed suse specific modules as they are now covered by git commits
  * packagekit.te packagekit.if packagekit.fc
  * rebootmgr.te rebootmgr.if rebootmgr.fc
  * rtorrent.te rtorrent.if rtorrent.fc
  * wicked.te wicked.if wicked.fc
  * Removed *.patch as they are now covered by git commits:
  * distro_suse_to_distro_redhat.patch
  * dontaudit_interface_kmod_tmpfs.patch
  * fix_accountsd.patch
  * fix_alsa.patch
  * fix_apache.patch
  * fix_auditd.patch
  * fix_authlogin.patch
  * fix_automount.patch
  * fix_bitlbee.patch
  * fix_chronyd.patch
  * fix_cloudform.patch
  * fix_colord.patch
  * fix_corecommand.patch
  * fix_cron.patch
  * fix_dbus.patch
  * fix_djbdns.patch
  * fix_dnsmasq.patch
  * fix_dovecot.patch
  * fix_firewalld.patch
  * fix_filesystem.patch
  * fix_fwupd.patch
  * fix_geoclue.patch
  * fix_hypervkvp.patch
  * fix_init.patch
  * fix_iptables.patch
  * fix_irqbalance.patch
  * fix_java.patch
  * fix_kernel_sysctl.patch
  * fix_libraries.patch
  * fix_locallogin.patch
  * fix_logging.patch
  * fix_logrotate.patch
  * fix_mcelog.patch
  * fix_miscfiles.patch
  * fix_nagios.patch
  * fix_networkmanager.patch
  * fix_nis.patch
  * fix_nscd.patch
  * fix_ntp.patch
  * fix_openvpn.patch
  * fix_postfix.patch
  * fix_rpm.patch
  * fix_screen.patch
  * fix_selinuxutil.patch
  * fix_smartmon.patch
  * fix_snapper.patch
  * fix_sslh.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_thunderbird.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_userdomain.patch
  * fix_usermanage.patch
  * fix_wine.patch
  * fix_xserver.patch
  * sedoctool.patch
  * systemd_domain_dyntrans_type.patch
  * fedora-policy-20221019.tar.bz2</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684929600">- Update to version 20230511+git3.b78f5aff:
  * fix entropy daemon (bsc#1211045)</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1690286400">- Update to version 20230511+git4.8c35010e:
  * allow haveged to manage tmpfs directories (bsc#1213594)</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1691064000">- Use /var/adm/update-scripts in macros.selinux-policy. The rpm state
  directory doesn't exist on SUSE systems (bsc#1213593)</changelog>
  <changelog author="jsegitz@suse.com" date="1694520000">- Create path in macros.selinux-policy since is might not exist on
  transactional systems</changelog>
  <changelog author="jsegitz@suse.com" date="1695124800">- Update to version 20230511+git5.ad830265b:
  * Allow sysadm_t run kernel bpf programs
  * allow init to run bpf programs. We do this during early startup
    (bsc#1215423)
  * Modified update.sh to require first parameter "full" to also
    update container-selinux</changelog>
  <changelog author="cathy.hu@suse.com" date="1697198400">- Update to version 20230511+git9.1b35a6ab:
  * Allow keepalived to manage its tmp files (bsc#1216060)</changelog>
  <changelog author="jsegitz@suse.com" date="1700740800">- Extend module list for targeted policy
  * timedatex
  * rrdcached
  * stratisd
  * ica (bsc#1215405)
  * fedoratp
  * stalld
  * rhcd
  * wireguard</changelog>
</package>
<package pkgid="a6f2003099657e406c1135d2bdbb4c40003d6a8fc0ad6de9e8b4c63162138233" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="20230511+git9.1b35a6ab" rel="150500.3.9.1"/>
  <changelog author="jsegitz@suse.com" date="1662984000">- Revamped rtorrent module</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1664280000">- Update fix_xserver.patch to add greetd support (bsc#1198559)</changelog>
  <changelog author="jsegitz@suse.com" date="1664452800">- Update fix_networkmanager.patch to ensure NetworkManager chrony
  dispatcher is properly labled and update fix_chronyd.patch to ensure
  chrony helper script has proper label to be used by NetworkManager.
  Also allow NetworkManager_dispatcher_custom_t to query systemd status
  (bsc#1203824)</changelog>
  <changelog author="jsegitz@suse.com" date="1664539200">- Updated quilt couldn't unpack tarball. This will cause ongoing issues
  so drop the sed statement in the %prep section and add
  distro_suse_to_distro_redhat.patch to add the necessary changes
  via a patch</changelog>
  <changelog author="jsegitz@suse.com" date="1666180800">- Update to version 20221019. Refreshed:
  * distro_suse_to_distro_redhat.patch
  * fix_apache.patch
  * fix_chronyd.patch
  * fix_cron.patch
  * fix_init.patch
  * fix_kernel_sysctl.patch
  * fix_networkmanager.patch
  * fix_rpm.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_xserver.patch
- Dropped fix_cockpit.patch as this is now packaged with cockpit itself
- Remove the ipa module, freeip ships their own module
- Added fix_alsa.patch to allow reading of config files in home directories
- Extended fix_networkmanager.patch and fix_postfix.patch to account
  for SUSE systems
- Added dontaudit_interface_kmod_tmpfs.patch to prevent AVCs when startproc
  queries the running processes
- Updated fix_snapper.patch to allow snapper to talk to rpm via dbus</changelog>
  <changelog author="cathy.hu@suse.com" date="1669291200">- fix_sysnetwork.patch: firewalld uses /etc/sysconfig/network/ for
  network interface definition instead of /etc/sysconfig/network-scripts/,
  modified sysnetwork.fc to reflect that (bsc#1205580).</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809600">- Drop fix_irqbalance.patch: superseded by upstream</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809601">- Add fix_irqbalance.patch: support netlink socket operations (bsc#1205434)</changelog>
  <changelog author="jsegitz@suse.com" date="1670328000">- Updated fix_networkmanager.patch to allow NetworkManager to watch
  net_conf_t (bsc#1206109)</changelog>
  <changelog author="jsegitz@suse.com" date="1670932800">- Updated fix_networkmanager.patch to fixe labeling of nm-dispatcher and
  nm-priv-helper until the packaging is adjusted (bsc#1206355)
- Update fix_chronyd.patch to allow  sendto towards
  NetworkManager_dispatcher_custom_t. Added new interface
  networkmanager_dispatcher_custom_dgram_send for this (bsc#1206357)
- Update fix_dbus.patch to allow dbus to watch lib directories (bsc#1205895)</changelog>
  <changelog author="jsegitz@suse.com" date="1682424000">- Added fix_filesystem.patch to prevent labeling of overlayfs
  mountpoint</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684843200">- Packaging rework. Move policy to git repository
  Please use `osc service manualrun` to update this OBS package to the
  newest git version.
  * Added README.Update describing how to update this package
  * Added _service file that pulls from selinux-policy and tar it
  * Updated selinux-policy.spec to build selinux-policy with
    container-selinux
  * Updated update.sh
  * Removed suse specific modules as they are now covered by git commits
  * packagekit.te packagekit.if packagekit.fc
  * rebootmgr.te rebootmgr.if rebootmgr.fc
  * rtorrent.te rtorrent.if rtorrent.fc
  * wicked.te wicked.if wicked.fc
  * Removed *.patch as they are now covered by git commits:
  * distro_suse_to_distro_redhat.patch
  * dontaudit_interface_kmod_tmpfs.patch
  * fix_accountsd.patch
  * fix_alsa.patch
  * fix_apache.patch
  * fix_auditd.patch
  * fix_authlogin.patch
  * fix_automount.patch
  * fix_bitlbee.patch
  * fix_chronyd.patch
  * fix_cloudform.patch
  * fix_colord.patch
  * fix_corecommand.patch
  * fix_cron.patch
  * fix_dbus.patch
  * fix_djbdns.patch
  * fix_dnsmasq.patch
  * fix_dovecot.patch
  * fix_firewalld.patch
  * fix_filesystem.patch
  * fix_fwupd.patch
  * fix_geoclue.patch
  * fix_hypervkvp.patch
  * fix_init.patch
  * fix_iptables.patch
  * fix_irqbalance.patch
  * fix_java.patch
  * fix_kernel_sysctl.patch
  * fix_libraries.patch
  * fix_locallogin.patch
  * fix_logging.patch
  * fix_logrotate.patch
  * fix_mcelog.patch
  * fix_miscfiles.patch
  * fix_nagios.patch
  * fix_networkmanager.patch
  * fix_nis.patch
  * fix_nscd.patch
  * fix_ntp.patch
  * fix_openvpn.patch
  * fix_postfix.patch
  * fix_rpm.patch
  * fix_screen.patch
  * fix_selinuxutil.patch
  * fix_smartmon.patch
  * fix_snapper.patch
  * fix_sslh.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_thunderbird.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_userdomain.patch
  * fix_usermanage.patch
  * fix_wine.patch
  * fix_xserver.patch
  * sedoctool.patch
  * systemd_domain_dyntrans_type.patch
  * fedora-policy-20221019.tar.bz2</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684929600">- Update to version 20230511+git3.b78f5aff:
  * fix entropy daemon (bsc#1211045)</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1690286400">- Update to version 20230511+git4.8c35010e:
  * allow haveged to manage tmpfs directories (bsc#1213594)</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1691064000">- Use /var/adm/update-scripts in macros.selinux-policy. The rpm state
  directory doesn't exist on SUSE systems (bsc#1213593)</changelog>
  <changelog author="jsegitz@suse.com" date="1694520000">- Create path in macros.selinux-policy since is might not exist on
  transactional systems</changelog>
  <changelog author="jsegitz@suse.com" date="1695124800">- Update to version 20230511+git5.ad830265b:
  * Allow sysadm_t run kernel bpf programs
  * allow init to run bpf programs. We do this during early startup
    (bsc#1215423)
  * Modified update.sh to require first parameter "full" to also
    update container-selinux</changelog>
  <changelog author="cathy.hu@suse.com" date="1697198400">- Update to version 20230511+git9.1b35a6ab:
  * Allow keepalived to manage its tmp files (bsc#1216060)</changelog>
  <changelog author="jsegitz@suse.com" date="1700740800">- Extend module list for targeted policy
  * timedatex
  * rrdcached
  * stratisd
  * ica (bsc#1215405)
  * fedoratp
  * stalld
  * rhcd
  * wireguard</changelog>
  <changelog author="cathy.hu@suse.com" date="1701172800">- Trigger rebuild of the policy when pcre2 gets updated to avoid
  regex version mismatch errors (bsc#1216747).</changelog>
</package>
<package pkgid="902ee4f3474d8da3e38973c0b5deeadff66b63f20a9de0480766738d9996cefe" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="20230511+git13.edb03d70" rel="150500.3.12.1"/>
  <changelog author="filippo.bonazzi@suse.com" date="1664280000">- Update fix_xserver.patch to add greetd support (bsc#1198559)</changelog>
  <changelog author="jsegitz@suse.com" date="1664452800">- Update fix_networkmanager.patch to ensure NetworkManager chrony
  dispatcher is properly labled and update fix_chronyd.patch to ensure
  chrony helper script has proper label to be used by NetworkManager.
  Also allow NetworkManager_dispatcher_custom_t to query systemd status
  (bsc#1203824)</changelog>
  <changelog author="jsegitz@suse.com" date="1664539200">- Updated quilt couldn't unpack tarball. This will cause ongoing issues
  so drop the sed statement in the %prep section and add
  distro_suse_to_distro_redhat.patch to add the necessary changes
  via a patch</changelog>
  <changelog author="jsegitz@suse.com" date="1666180800">- Update to version 20221019. Refreshed:
  * distro_suse_to_distro_redhat.patch
  * fix_apache.patch
  * fix_chronyd.patch
  * fix_cron.patch
  * fix_init.patch
  * fix_kernel_sysctl.patch
  * fix_networkmanager.patch
  * fix_rpm.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_xserver.patch
- Dropped fix_cockpit.patch as this is now packaged with cockpit itself
- Remove the ipa module, freeip ships their own module
- Added fix_alsa.patch to allow reading of config files in home directories
- Extended fix_networkmanager.patch and fix_postfix.patch to account
  for SUSE systems
- Added dontaudit_interface_kmod_tmpfs.patch to prevent AVCs when startproc
  queries the running processes
- Updated fix_snapper.patch to allow snapper to talk to rpm via dbus</changelog>
  <changelog author="cathy.hu@suse.com" date="1669291200">- fix_sysnetwork.patch: firewalld uses /etc/sysconfig/network/ for
  network interface definition instead of /etc/sysconfig/network-scripts/,
  modified sysnetwork.fc to reflect that (bsc#1205580).</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809600">- Drop fix_irqbalance.patch: superseded by upstream</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809601">- Add fix_irqbalance.patch: support netlink socket operations (bsc#1205434)</changelog>
  <changelog author="jsegitz@suse.com" date="1670328000">- Updated fix_networkmanager.patch to allow NetworkManager to watch
  net_conf_t (bsc#1206109)</changelog>
  <changelog author="jsegitz@suse.com" date="1670932800">- Updated fix_networkmanager.patch to fixe labeling of nm-dispatcher and
  nm-priv-helper until the packaging is adjusted (bsc#1206355)
- Update fix_chronyd.patch to allow  sendto towards
  NetworkManager_dispatcher_custom_t. Added new interface
  networkmanager_dispatcher_custom_dgram_send for this (bsc#1206357)
- Update fix_dbus.patch to allow dbus to watch lib directories (bsc#1205895)</changelog>
  <changelog author="jsegitz@suse.com" date="1682424000">- Added fix_filesystem.patch to prevent labeling of overlayfs
  mountpoint</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684843200">- Packaging rework. Move policy to git repository
  Please use `osc service manualrun` to update this OBS package to the
  newest git version.
  * Added README.Update describing how to update this package
  * Added _service file that pulls from selinux-policy and tar it
  * Updated selinux-policy.spec to build selinux-policy with
    container-selinux
  * Updated update.sh
  * Removed suse specific modules as they are now covered by git commits
  * packagekit.te packagekit.if packagekit.fc
  * rebootmgr.te rebootmgr.if rebootmgr.fc
  * rtorrent.te rtorrent.if rtorrent.fc
  * wicked.te wicked.if wicked.fc
  * Removed *.patch as they are now covered by git commits:
  * distro_suse_to_distro_redhat.patch
  * dontaudit_interface_kmod_tmpfs.patch
  * fix_accountsd.patch
  * fix_alsa.patch
  * fix_apache.patch
  * fix_auditd.patch
  * fix_authlogin.patch
  * fix_automount.patch
  * fix_bitlbee.patch
  * fix_chronyd.patch
  * fix_cloudform.patch
  * fix_colord.patch
  * fix_corecommand.patch
  * fix_cron.patch
  * fix_dbus.patch
  * fix_djbdns.patch
  * fix_dnsmasq.patch
  * fix_dovecot.patch
  * fix_firewalld.patch
  * fix_filesystem.patch
  * fix_fwupd.patch
  * fix_geoclue.patch
  * fix_hypervkvp.patch
  * fix_init.patch
  * fix_iptables.patch
  * fix_irqbalance.patch
  * fix_java.patch
  * fix_kernel_sysctl.patch
  * fix_libraries.patch
  * fix_locallogin.patch
  * fix_logging.patch
  * fix_logrotate.patch
  * fix_mcelog.patch
  * fix_miscfiles.patch
  * fix_nagios.patch
  * fix_networkmanager.patch
  * fix_nis.patch
  * fix_nscd.patch
  * fix_ntp.patch
  * fix_openvpn.patch
  * fix_postfix.patch
  * fix_rpm.patch
  * fix_screen.patch
  * fix_selinuxutil.patch
  * fix_smartmon.patch
  * fix_snapper.patch
  * fix_sslh.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_thunderbird.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_userdomain.patch
  * fix_usermanage.patch
  * fix_wine.patch
  * fix_xserver.patch
  * sedoctool.patch
  * systemd_domain_dyntrans_type.patch
  * fedora-policy-20221019.tar.bz2</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684929600">- Update to version 20230511+git3.b78f5aff:
  * fix entropy daemon (bsc#1211045)</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1690286400">- Update to version 20230511+git4.8c35010e:
  * allow haveged to manage tmpfs directories (bsc#1213594)</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1691064000">- Use /var/adm/update-scripts in macros.selinux-policy. The rpm state
  directory doesn't exist on SUSE systems (bsc#1213593)</changelog>
  <changelog author="jsegitz@suse.com" date="1694520000">- Create path in macros.selinux-policy since is might not exist on
  transactional systems</changelog>
  <changelog author="jsegitz@suse.com" date="1695124800">- Update to version 20230511+git5.ad830265b:
  * Allow sysadm_t run kernel bpf programs
  * allow init to run bpf programs. We do this during early startup
    (bsc#1215423)
  * Modified update.sh to require first parameter "full" to also
    update container-selinux</changelog>
  <changelog author="cathy.hu@suse.com" date="1697198400">- Update to version 20230511+git9.1b35a6ab:
  * Allow keepalived to manage its tmp files (bsc#1216060)</changelog>
  <changelog author="jsegitz@suse.com" date="1700740800">- Extend module list for targeted policy
  * timedatex
  * rrdcached
  * stratisd
  * ica (bsc#1215405)
  * fedoratp
  * stalld
  * rhcd
  * wireguard</changelog>
  <changelog author="cathy.hu@suse.com" date="1701172800">- Trigger rebuild of the policy when pcre2 gets updated to avoid
  regex version mismatch errors (bsc#1216747).</changelog>
  <changelog author="cathy.hu@suse.com" date="1704801600">- Update to version 20230511+git13.edb03d70:
  * allow rebootmgr to read the system state (bsc#1205931)
  * Allow keepalived_t read+write kernel_t pipes (bsc#1216060)</changelog>
</package>
<package pkgid="8ff80c57783c0a5e4a8893829f705096a737ea8666fe78ad8a32156f3e4e223b" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="20230511+git9.1b35a6ab" rel="150500.3.3.1"/>
  <changelog author="cathy.hu@suse.com" date="1658923200">- fix_networkmanager.patch: Allow NetworkManager_dispatcher_tlp_t
  and NetworkManager_dispatcher_custom_t to access nscd socket
  (bsc#1201741)</changelog>
  <changelog author="kukuk@suse.com" date="1661515200">- Move SUSE directory from manual page section to html docu</changelog>
  <changelog author="jsegitz@suse.com" date="1662984000">- Revamped rtorrent module</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1664280000">- Update fix_xserver.patch to add greetd support (bsc#1198559)</changelog>
  <changelog author="jsegitz@suse.com" date="1664452800">- Update fix_networkmanager.patch to ensure NetworkManager chrony
  dispatcher is properly labled and update fix_chronyd.patch to ensure
  chrony helper script has proper label to be used by NetworkManager.
  Also allow NetworkManager_dispatcher_custom_t to query systemd status
  (bsc#1203824)</changelog>
  <changelog author="jsegitz@suse.com" date="1664539200">- Updated quilt couldn't unpack tarball. This will cause ongoing issues
  so drop the sed statement in the %prep section and add
  distro_suse_to_distro_redhat.patch to add the necessary changes
  via a patch</changelog>
  <changelog author="jsegitz@suse.com" date="1666180800">- Update to version 20221019. Refreshed:
  * distro_suse_to_distro_redhat.patch
  * fix_apache.patch
  * fix_chronyd.patch
  * fix_cron.patch
  * fix_init.patch
  * fix_kernel_sysctl.patch
  * fix_networkmanager.patch
  * fix_rpm.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_xserver.patch
- Dropped fix_cockpit.patch as this is now packaged with cockpit itself
- Remove the ipa module, freeip ships their own module
- Added fix_alsa.patch to allow reading of config files in home directories
- Extended fix_networkmanager.patch and fix_postfix.patch to account
  for SUSE systems
- Added dontaudit_interface_kmod_tmpfs.patch to prevent AVCs when startproc
  queries the running processes
- Updated fix_snapper.patch to allow snapper to talk to rpm via dbus</changelog>
  <changelog author="cathy.hu@suse.com" date="1669291200">- fix_sysnetwork.patch: firewalld uses /etc/sysconfig/network/ for
  network interface definition instead of /etc/sysconfig/network-scripts/,
  modified sysnetwork.fc to reflect that (bsc#1205580).</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809600">- Drop fix_irqbalance.patch: superseded by upstream</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809601">- Add fix_irqbalance.patch: support netlink socket operations (bsc#1205434)</changelog>
  <changelog author="jsegitz@suse.com" date="1670328000">- Updated fix_networkmanager.patch to allow NetworkManager to watch
  net_conf_t (bsc#1206109)</changelog>
  <changelog author="jsegitz@suse.com" date="1670932800">- Updated fix_networkmanager.patch to fixe labeling of nm-dispatcher and
  nm-priv-helper until the packaging is adjusted (bsc#1206355)
- Update fix_chronyd.patch to allow  sendto towards
  NetworkManager_dispatcher_custom_t. Added new interface
  networkmanager_dispatcher_custom_dgram_send for this (bsc#1206357)
- Update fix_dbus.patch to allow dbus to watch lib directories (bsc#1205895)</changelog>
  <changelog author="jsegitz@suse.com" date="1682424000">- Added fix_filesystem.patch to prevent labeling of overlayfs
  mountpoint</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684843200">- Packaging rework. Move policy to git repository
  Please use `osc service manualrun` to update this OBS package to the
  newest git version.
  * Added README.Update describing how to update this package
  * Added _service file that pulls from selinux-policy and tar it
  * Updated selinux-policy.spec to build selinux-policy with
    container-selinux
  * Updated update.sh
  * Removed suse specific modules as they are now covered by git commits
  * packagekit.te packagekit.if packagekit.fc
  * rebootmgr.te rebootmgr.if rebootmgr.fc
  * rtorrent.te rtorrent.if rtorrent.fc
  * wicked.te wicked.if wicked.fc
  * Removed *.patch as they are now covered by git commits:
  * distro_suse_to_distro_redhat.patch
  * dontaudit_interface_kmod_tmpfs.patch
  * fix_accountsd.patch
  * fix_alsa.patch
  * fix_apache.patch
  * fix_auditd.patch
  * fix_authlogin.patch
  * fix_automount.patch
  * fix_bitlbee.patch
  * fix_chronyd.patch
  * fix_cloudform.patch
  * fix_colord.patch
  * fix_corecommand.patch
  * fix_cron.patch
  * fix_dbus.patch
  * fix_djbdns.patch
  * fix_dnsmasq.patch
  * fix_dovecot.patch
  * fix_firewalld.patch
  * fix_filesystem.patch
  * fix_fwupd.patch
  * fix_geoclue.patch
  * fix_hypervkvp.patch
  * fix_init.patch
  * fix_iptables.patch
  * fix_irqbalance.patch
  * fix_java.patch
  * fix_kernel_sysctl.patch
  * fix_libraries.patch
  * fix_locallogin.patch
  * fix_logging.patch
  * fix_logrotate.patch
  * fix_mcelog.patch
  * fix_miscfiles.patch
  * fix_nagios.patch
  * fix_networkmanager.patch
  * fix_nis.patch
  * fix_nscd.patch
  * fix_ntp.patch
  * fix_openvpn.patch
  * fix_postfix.patch
  * fix_rpm.patch
  * fix_screen.patch
  * fix_selinuxutil.patch
  * fix_smartmon.patch
  * fix_snapper.patch
  * fix_sslh.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_thunderbird.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_userdomain.patch
  * fix_usermanage.patch
  * fix_wine.patch
  * fix_xserver.patch
  * sedoctool.patch
  * systemd_domain_dyntrans_type.patch
  * fedora-policy-20221019.tar.bz2</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684929600">- Update to version 20230511+git3.b78f5aff:
  * fix entropy daemon (bsc#1211045)</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1690286400">- Update to version 20230511+git4.8c35010e:
  * allow haveged to manage tmpfs directories (bsc#1213594)</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1691064000">- Use /var/adm/update-scripts in macros.selinux-policy. The rpm state
  directory doesn't exist on SUSE systems (bsc#1213593)</changelog>
  <changelog author="jsegitz@suse.com" date="1694520000">- Create path in macros.selinux-policy since is might not exist on
  transactional systems</changelog>
  <changelog author="jsegitz@suse.com" date="1695124800">- Update to version 20230511+git5.ad830265b:
  * Allow sysadm_t run kernel bpf programs
  * allow init to run bpf programs. We do this during early startup
    (bsc#1215423)
  * Modified update.sh to require first parameter "full" to also
    update container-selinux</changelog>
  <changelog author="cathy.hu@suse.com" date="1697198400">- Update to version 20230511+git9.1b35a6ab:
  * Allow keepalived to manage its tmp files (bsc#1216060)</changelog>
</package>
<package pkgid="c3da436aeba0eb192b1da291477f986470b7c52e5ed8af79befb41bb8a471977" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="20230511+git9.1b35a6ab" rel="150500.3.6.1"/>
  <changelog author="kukuk@suse.com" date="1661515200">- Move SUSE directory from manual page section to html docu</changelog>
  <changelog author="jsegitz@suse.com" date="1662984000">- Revamped rtorrent module</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1664280000">- Update fix_xserver.patch to add greetd support (bsc#1198559)</changelog>
  <changelog author="jsegitz@suse.com" date="1664452800">- Update fix_networkmanager.patch to ensure NetworkManager chrony
  dispatcher is properly labled and update fix_chronyd.patch to ensure
  chrony helper script has proper label to be used by NetworkManager.
  Also allow NetworkManager_dispatcher_custom_t to query systemd status
  (bsc#1203824)</changelog>
  <changelog author="jsegitz@suse.com" date="1664539200">- Updated quilt couldn't unpack tarball. This will cause ongoing issues
  so drop the sed statement in the %prep section and add
  distro_suse_to_distro_redhat.patch to add the necessary changes
  via a patch</changelog>
  <changelog author="jsegitz@suse.com" date="1666180800">- Update to version 20221019. Refreshed:
  * distro_suse_to_distro_redhat.patch
  * fix_apache.patch
  * fix_chronyd.patch
  * fix_cron.patch
  * fix_init.patch
  * fix_kernel_sysctl.patch
  * fix_networkmanager.patch
  * fix_rpm.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_xserver.patch
- Dropped fix_cockpit.patch as this is now packaged with cockpit itself
- Remove the ipa module, freeip ships their own module
- Added fix_alsa.patch to allow reading of config files in home directories
- Extended fix_networkmanager.patch and fix_postfix.patch to account
  for SUSE systems
- Added dontaudit_interface_kmod_tmpfs.patch to prevent AVCs when startproc
  queries the running processes
- Updated fix_snapper.patch to allow snapper to talk to rpm via dbus</changelog>
  <changelog author="cathy.hu@suse.com" date="1669291200">- fix_sysnetwork.patch: firewalld uses /etc/sysconfig/network/ for
  network interface definition instead of /etc/sysconfig/network-scripts/,
  modified sysnetwork.fc to reflect that (bsc#1205580).</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809600">- Drop fix_irqbalance.patch: superseded by upstream</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809601">- Add fix_irqbalance.patch: support netlink socket operations (bsc#1205434)</changelog>
  <changelog author="jsegitz@suse.com" date="1670328000">- Updated fix_networkmanager.patch to allow NetworkManager to watch
  net_conf_t (bsc#1206109)</changelog>
  <changelog author="jsegitz@suse.com" date="1670932800">- Updated fix_networkmanager.patch to fixe labeling of nm-dispatcher and
  nm-priv-helper until the packaging is adjusted (bsc#1206355)
- Update fix_chronyd.patch to allow  sendto towards
  NetworkManager_dispatcher_custom_t. Added new interface
  networkmanager_dispatcher_custom_dgram_send for this (bsc#1206357)
- Update fix_dbus.patch to allow dbus to watch lib directories (bsc#1205895)</changelog>
  <changelog author="jsegitz@suse.com" date="1682424000">- Added fix_filesystem.patch to prevent labeling of overlayfs
  mountpoint</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684843200">- Packaging rework. Move policy to git repository
  Please use `osc service manualrun` to update this OBS package to the
  newest git version.
  * Added README.Update describing how to update this package
  * Added _service file that pulls from selinux-policy and tar it
  * Updated selinux-policy.spec to build selinux-policy with
    container-selinux
  * Updated update.sh
  * Removed suse specific modules as they are now covered by git commits
  * packagekit.te packagekit.if packagekit.fc
  * rebootmgr.te rebootmgr.if rebootmgr.fc
  * rtorrent.te rtorrent.if rtorrent.fc
  * wicked.te wicked.if wicked.fc
  * Removed *.patch as they are now covered by git commits:
  * distro_suse_to_distro_redhat.patch
  * dontaudit_interface_kmod_tmpfs.patch
  * fix_accountsd.patch
  * fix_alsa.patch
  * fix_apache.patch
  * fix_auditd.patch
  * fix_authlogin.patch
  * fix_automount.patch
  * fix_bitlbee.patch
  * fix_chronyd.patch
  * fix_cloudform.patch
  * fix_colord.patch
  * fix_corecommand.patch
  * fix_cron.patch
  * fix_dbus.patch
  * fix_djbdns.patch
  * fix_dnsmasq.patch
  * fix_dovecot.patch
  * fix_firewalld.patch
  * fix_filesystem.patch
  * fix_fwupd.patch
  * fix_geoclue.patch
  * fix_hypervkvp.patch
  * fix_init.patch
  * fix_iptables.patch
  * fix_irqbalance.patch
  * fix_java.patch
  * fix_kernel_sysctl.patch
  * fix_libraries.patch
  * fix_locallogin.patch
  * fix_logging.patch
  * fix_logrotate.patch
  * fix_mcelog.patch
  * fix_miscfiles.patch
  * fix_nagios.patch
  * fix_networkmanager.patch
  * fix_nis.patch
  * fix_nscd.patch
  * fix_ntp.patch
  * fix_openvpn.patch
  * fix_postfix.patch
  * fix_rpm.patch
  * fix_screen.patch
  * fix_selinuxutil.patch
  * fix_smartmon.patch
  * fix_snapper.patch
  * fix_sslh.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_thunderbird.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_userdomain.patch
  * fix_usermanage.patch
  * fix_wine.patch
  * fix_xserver.patch
  * sedoctool.patch
  * systemd_domain_dyntrans_type.patch
  * fedora-policy-20221019.tar.bz2</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684929600">- Update to version 20230511+git3.b78f5aff:
  * fix entropy daemon (bsc#1211045)</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1690286400">- Update to version 20230511+git4.8c35010e:
  * allow haveged to manage tmpfs directories (bsc#1213594)</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1691064000">- Use /var/adm/update-scripts in macros.selinux-policy. The rpm state
  directory doesn't exist on SUSE systems (bsc#1213593)</changelog>
  <changelog author="jsegitz@suse.com" date="1694520000">- Create path in macros.selinux-policy since is might not exist on
  transactional systems</changelog>
  <changelog author="jsegitz@suse.com" date="1695124800">- Update to version 20230511+git5.ad830265b:
  * Allow sysadm_t run kernel bpf programs
  * allow init to run bpf programs. We do this during early startup
    (bsc#1215423)
  * Modified update.sh to require first parameter "full" to also
    update container-selinux</changelog>
  <changelog author="cathy.hu@suse.com" date="1697198400">- Update to version 20230511+git9.1b35a6ab:
  * Allow keepalived to manage its tmp files (bsc#1216060)</changelog>
  <changelog author="jsegitz@suse.com" date="1700740800">- Extend module list for targeted policy
  * timedatex
  * rrdcached
  * stratisd
  * ica (bsc#1215405)
  * fedoratp
  * stalld
  * rhcd
  * wireguard</changelog>
</package>
<package pkgid="99b3f063fb00c855f8890cbd538f25a532faf26ecbaa5d070a2ebf191e8a9116" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="20230511+git9.1b35a6ab" rel="150500.3.9.1"/>
  <changelog author="jsegitz@suse.com" date="1662984000">- Revamped rtorrent module</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1664280000">- Update fix_xserver.patch to add greetd support (bsc#1198559)</changelog>
  <changelog author="jsegitz@suse.com" date="1664452800">- Update fix_networkmanager.patch to ensure NetworkManager chrony
  dispatcher is properly labled and update fix_chronyd.patch to ensure
  chrony helper script has proper label to be used by NetworkManager.
  Also allow NetworkManager_dispatcher_custom_t to query systemd status
  (bsc#1203824)</changelog>
  <changelog author="jsegitz@suse.com" date="1664539200">- Updated quilt couldn't unpack tarball. This will cause ongoing issues
  so drop the sed statement in the %prep section and add
  distro_suse_to_distro_redhat.patch to add the necessary changes
  via a patch</changelog>
  <changelog author="jsegitz@suse.com" date="1666180800">- Update to version 20221019. Refreshed:
  * distro_suse_to_distro_redhat.patch
  * fix_apache.patch
  * fix_chronyd.patch
  * fix_cron.patch
  * fix_init.patch
  * fix_kernel_sysctl.patch
  * fix_networkmanager.patch
  * fix_rpm.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_xserver.patch
- Dropped fix_cockpit.patch as this is now packaged with cockpit itself
- Remove the ipa module, freeip ships their own module
- Added fix_alsa.patch to allow reading of config files in home directories
- Extended fix_networkmanager.patch and fix_postfix.patch to account
  for SUSE systems
- Added dontaudit_interface_kmod_tmpfs.patch to prevent AVCs when startproc
  queries the running processes
- Updated fix_snapper.patch to allow snapper to talk to rpm via dbus</changelog>
  <changelog author="cathy.hu@suse.com" date="1669291200">- fix_sysnetwork.patch: firewalld uses /etc/sysconfig/network/ for
  network interface definition instead of /etc/sysconfig/network-scripts/,
  modified sysnetwork.fc to reflect that (bsc#1205580).</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809600">- Drop fix_irqbalance.patch: superseded by upstream</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809601">- Add fix_irqbalance.patch: support netlink socket operations (bsc#1205434)</changelog>
  <changelog author="jsegitz@suse.com" date="1670328000">- Updated fix_networkmanager.patch to allow NetworkManager to watch
  net_conf_t (bsc#1206109)</changelog>
  <changelog author="jsegitz@suse.com" date="1670932800">- Updated fix_networkmanager.patch to fixe labeling of nm-dispatcher and
  nm-priv-helper until the packaging is adjusted (bsc#1206355)
- Update fix_chronyd.patch to allow  sendto towards
  NetworkManager_dispatcher_custom_t. Added new interface
  networkmanager_dispatcher_custom_dgram_send for this (bsc#1206357)
- Update fix_dbus.patch to allow dbus to watch lib directories (bsc#1205895)</changelog>
  <changelog author="jsegitz@suse.com" date="1682424000">- Added fix_filesystem.patch to prevent labeling of overlayfs
  mountpoint</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684843200">- Packaging rework. Move policy to git repository
  Please use `osc service manualrun` to update this OBS package to the
  newest git version.
  * Added README.Update describing how to update this package
  * Added _service file that pulls from selinux-policy and tar it
  * Updated selinux-policy.spec to build selinux-policy with
    container-selinux
  * Updated update.sh
  * Removed suse specific modules as they are now covered by git commits
  * packagekit.te packagekit.if packagekit.fc
  * rebootmgr.te rebootmgr.if rebootmgr.fc
  * rtorrent.te rtorrent.if rtorrent.fc
  * wicked.te wicked.if wicked.fc
  * Removed *.patch as they are now covered by git commits:
  * distro_suse_to_distro_redhat.patch
  * dontaudit_interface_kmod_tmpfs.patch
  * fix_accountsd.patch
  * fix_alsa.patch
  * fix_apache.patch
  * fix_auditd.patch
  * fix_authlogin.patch
  * fix_automount.patch
  * fix_bitlbee.patch
  * fix_chronyd.patch
  * fix_cloudform.patch
  * fix_colord.patch
  * fix_corecommand.patch
  * fix_cron.patch
  * fix_dbus.patch
  * fix_djbdns.patch
  * fix_dnsmasq.patch
  * fix_dovecot.patch
  * fix_firewalld.patch
  * fix_filesystem.patch
  * fix_fwupd.patch
  * fix_geoclue.patch
  * fix_hypervkvp.patch
  * fix_init.patch
  * fix_iptables.patch
  * fix_irqbalance.patch
  * fix_java.patch
  * fix_kernel_sysctl.patch
  * fix_libraries.patch
  * fix_locallogin.patch
  * fix_logging.patch
  * fix_logrotate.patch
  * fix_mcelog.patch
  * fix_miscfiles.patch
  * fix_nagios.patch
  * fix_networkmanager.patch
  * fix_nis.patch
  * fix_nscd.patch
  * fix_ntp.patch
  * fix_openvpn.patch
  * fix_postfix.patch
  * fix_rpm.patch
  * fix_screen.patch
  * fix_selinuxutil.patch
  * fix_smartmon.patch
  * fix_snapper.patch
  * fix_sslh.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_thunderbird.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_userdomain.patch
  * fix_usermanage.patch
  * fix_wine.patch
  * fix_xserver.patch
  * sedoctool.patch
  * systemd_domain_dyntrans_type.patch
  * fedora-policy-20221019.tar.bz2</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684929600">- Update to version 20230511+git3.b78f5aff:
  * fix entropy daemon (bsc#1211045)</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1690286400">- Update to version 20230511+git4.8c35010e:
  * allow haveged to manage tmpfs directories (bsc#1213594)</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1691064000">- Use /var/adm/update-scripts in macros.selinux-policy. The rpm state
  directory doesn't exist on SUSE systems (bsc#1213593)</changelog>
  <changelog author="jsegitz@suse.com" date="1694520000">- Create path in macros.selinux-policy since is might not exist on
  transactional systems</changelog>
  <changelog author="jsegitz@suse.com" date="1695124800">- Update to version 20230511+git5.ad830265b:
  * Allow sysadm_t run kernel bpf programs
  * allow init to run bpf programs. We do this during early startup
    (bsc#1215423)
  * Modified update.sh to require first parameter "full" to also
    update container-selinux</changelog>
  <changelog author="cathy.hu@suse.com" date="1697198400">- Update to version 20230511+git9.1b35a6ab:
  * Allow keepalived to manage its tmp files (bsc#1216060)</changelog>
  <changelog author="jsegitz@suse.com" date="1700740800">- Extend module list for targeted policy
  * timedatex
  * rrdcached
  * stratisd
  * ica (bsc#1215405)
  * fedoratp
  * stalld
  * rhcd
  * wireguard</changelog>
  <changelog author="cathy.hu@suse.com" date="1701172800">- Trigger rebuild of the policy when pcre2 gets updated to avoid
  regex version mismatch errors (bsc#1216747).</changelog>
</package>
<package pkgid="3fbd31337614ba2e2272a436714e06f00838c020c2a134a1ebde8b70edbbb96e" name="sg3_utils" arch="aarch64">
  <version epoch="0" ver="1.47+15.b6898b8" rel="150400.3.11.1"/>
  <changelog author="hare@suse.de" date="1511956800">- Update to svn r730:
  * Move testing utilities to 'testing' directory
  * sg_opcode: check resid and trim response
  * sg_rep_zones: expand --help option
  * sg_mode: Add Out-of-band management control page
  * sg_ses: filer join output on dpage element presence
  * documentation cleanup
- rescan-scsi-bus.sh: Add '--ignore-rev' option
- Supplement SCSI modaliases (bsc#1065212)</changelog>
  <changelog author="hare@suse.de" date="1513598400">- sg_inq: decode standard INQUIRY for CD-ROMs correctly (bsc#1070431)
- rescan-scsi-bus.sh: new option for ignore rev change
- rescan-scsi-bus.sh: Remove white space
- Add 'coreutils' to Requires (bsc#1072744)
- Add 'posttrans' to rpm spec (bsc#1071972)</changelog>
  <changelog author="hare@suse.de" date="1513944000">- sg_inq: check VPD page 0x0 before reading serial number
  (bsc#1067839)
- sg_inq: add option '-o/--only' to skip reading VPD pages
  (bsc#1067839)
- Revert 'postun' rpm spec changes after review</changelog>
  <changelog author="hare@suse.de" date="1518004800">- Update to svn r744:
  * sg_write_x: new command for normal/atomic/orwrite etc
    SCSI WRITE variants
  * sg_ses: add NVMe support
  * sg_inq: decode NVMe controller / NSIDs
- rescan_scsi_bus.sh: Fix manpage for --forcerescan
- 55-scsi-sg3_id.rules: fixes for scsi_id compability (bsc#1079873)
- 55-scsi-sg3_id.rules: run sg_inq for SPC devices (bsc#1079873)</changelog>
  <changelog author="hare@suse.de" date="1518091200">- Merge local patch with git repository
  * Delete sgut-libversioning.diff</changelog>
  <changelog author="hare@suse.de" date="1518177600">- Update to svn r751:
  * NVMe bugfixes
  * sg_seek: new utility
  * sg_stream_ctl: new utility program
- 54-before-scsi-sg3_id.rules: compability rule for systemd
  (bsc#1079873)
- Add dracut.conf to install new rule with dracut</changelog>
  <changelog author="mwilck@suse.com" date="1518436800">- dracut.conf: add whitespace at end of line (bsc#1080562)</changelog>
  <changelog author="hare@suse.de" date="1523016000">- Update to svn r763:
  * More NVMe bugfixes
  * sg_vpd: add device constituents vpd
  * sg_raw: add --raw option
  * sg_turs: add --low option
  * sg_ses: decoding dpage fixes; add --quiet option
- rescan-scsi-bus.sh: Fixup syntax error (bsc#1087008)
- rescan-scsi-bus.sh: Fixes from shellcheck</changelog>
  <changelog author="mwilck@suse.com" date="1553601600">- Spec file:
  * add fc_wwpn_id (bsc#1005063)
  * add lun masking service (bsc#954600)
  * drop BuildRequires on udev
  * replace unversioned "Provides: scsi" with versioned
- Update to version sg3_utils-1.45~803+31.564be3d:
  * New versioning scheme for upstream pre-release:
    1.45 - upstream release target, 803 - upstream svn id,
    +31: SUSE commits on top of svn, 564be3d - git hash
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008)
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212)
  * Add scsi-enable-target-scan.sh (bsc#954600)
- Update to svn r803:
  * sg_opcodes: expand MLU (18-102r0)
  * sg_format: add --dcrt used twice (FOV=1 DCRT=0)
  * rescan-scsi-bus: widen LUN 0 only scanning
  (bsc#1069384)
- Earlier SUSE fixes included in 1.45:
  * rescan-scsi-bus.sh: use LUN wildcard in idlist (bsc#1069384)
  [svn: r795]
  * sg_ses: fixup page decoding (bsc#1077787) [svn: r795]
  * sg_ses: allow to decode raw data instead of reading from a device
  (bsc#1050943) [svn: r795]
- Update to sg3_utils-1.44 [20180912] [svn: r791]
  * rescan-scsi-bus.sh: harden code
  - bump version to 20180615
  - add --ignore-rev to ignore revision change
  * introduce SG3_UTILS_DSENSE environment variable
  * sginfo: don't open /dev/snapshot
  * sg_timestamp: add '--no-timestamp' option
  - add --elapsed and --hex options
  * sg_wr_mode: add --rtd option for RTD bi
  * sg_unmap: add --all=ST,RN[,LA] option
  * sgm_dd, sg_dd: add --dry-run and --verbose options
  * sg_inq+sg_vpd: update Extended inquiry data vpd page
  * sg_ses: add 'hw_reset' and 'sw_reset' to enclosure services
    controller electronics element type (18-047r1)
  * sg_decode sense: add --cdb and --err=ES options
  * sg_format: add --dry-run option
  - extend --wait timeout for &gt; 4TB disks
  * sg_sanitize: add --dry-run option
- Earlier SUSE fixes included in 1.44:
  * sg_inq: decode standard INQUIRY for CD-ROMs correctly
  (bsc#1065448, bsc#1070431) [svn: r742]
  * sg_inq: export all NAA values (bsc#1050767) [svn: r715]
  * Add fc_wwpn_id to generate by-path links for fibrechannel
  (bsc#1005063) (svn@715)
  * sg_vpd: struct opts_t misaligment (bsc#1050943) [svn: r707]</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.47+13.75d23ac:
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option</changelog>
  <changelog author="mwilck@suse.com" date="1697803200">- Update to version 1.47+15.b6898b8:
  * rescan-scsi-bus.sh: remove /tmp/rescan-scsi-mpath-info.txt
  (gh#doug-gilbert/sg3_utils#44)
  * rescan_scsi_bus.sh: fix multipath issue when called with -s and
  without -u (bsc#1215720, bsc#1216355)</changelog>
  <changelog author="mwilck@suse.com" date="1698408000">- Make sure initrd is rebuilt when sg3_utils is updated
  (bsc#1215772)</changelog>
</package>
<package pkgid="a0de696da438f94144697d74769982e61840cdbe9a8ef8030f3d2dfc7cd49f88" name="sg3_utils" arch="s390x">
  <version epoch="0" ver="1.47+15.b6898b8" rel="150400.3.11.1"/>
  <changelog author="hare@suse.de" date="1511956800">- Update to svn r730:
  * Move testing utilities to 'testing' directory
  * sg_opcode: check resid and trim response
  * sg_rep_zones: expand --help option
  * sg_mode: Add Out-of-band management control page
  * sg_ses: filer join output on dpage element presence
  * documentation cleanup
- rescan-scsi-bus.sh: Add '--ignore-rev' option
- Supplement SCSI modaliases (bsc#1065212)</changelog>
  <changelog author="hare@suse.de" date="1513598400">- sg_inq: decode standard INQUIRY for CD-ROMs correctly (bsc#1070431)
- rescan-scsi-bus.sh: new option for ignore rev change
- rescan-scsi-bus.sh: Remove white space
- Add 'coreutils' to Requires (bsc#1072744)
- Add 'posttrans' to rpm spec (bsc#1071972)</changelog>
  <changelog author="hare@suse.de" date="1513944000">- sg_inq: check VPD page 0x0 before reading serial number
  (bsc#1067839)
- sg_inq: add option '-o/--only' to skip reading VPD pages
  (bsc#1067839)
- Revert 'postun' rpm spec changes after review</changelog>
  <changelog author="hare@suse.de" date="1518004800">- Update to svn r744:
  * sg_write_x: new command for normal/atomic/orwrite etc
    SCSI WRITE variants
  * sg_ses: add NVMe support
  * sg_inq: decode NVMe controller / NSIDs
- rescan_scsi_bus.sh: Fix manpage for --forcerescan
- 55-scsi-sg3_id.rules: fixes for scsi_id compability (bsc#1079873)
- 55-scsi-sg3_id.rules: run sg_inq for SPC devices (bsc#1079873)</changelog>
  <changelog author="hare@suse.de" date="1518091200">- Merge local patch with git repository
  * Delete sgut-libversioning.diff</changelog>
  <changelog author="hare@suse.de" date="1518177600">- Update to svn r751:
  * NVMe bugfixes
  * sg_seek: new utility
  * sg_stream_ctl: new utility program
- 54-before-scsi-sg3_id.rules: compability rule for systemd
  (bsc#1079873)
- Add dracut.conf to install new rule with dracut</changelog>
  <changelog author="mwilck@suse.com" date="1518436800">- dracut.conf: add whitespace at end of line (bsc#1080562)</changelog>
  <changelog author="hare@suse.de" date="1523016000">- Update to svn r763:
  * More NVMe bugfixes
  * sg_vpd: add device constituents vpd
  * sg_raw: add --raw option
  * sg_turs: add --low option
  * sg_ses: decoding dpage fixes; add --quiet option
- rescan-scsi-bus.sh: Fixup syntax error (bsc#1087008)
- rescan-scsi-bus.sh: Fixes from shellcheck</changelog>
  <changelog author="mwilck@suse.com" date="1553601600">- Spec file:
  * add fc_wwpn_id (bsc#1005063)
  * add lun masking service (bsc#954600)
  * drop BuildRequires on udev
  * replace unversioned "Provides: scsi" with versioned
- Update to version sg3_utils-1.45~803+31.564be3d:
  * New versioning scheme for upstream pre-release:
    1.45 - upstream release target, 803 - upstream svn id,
    +31: SUSE commits on top of svn, 564be3d - git hash
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008)
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212)
  * Add scsi-enable-target-scan.sh (bsc#954600)
- Update to svn r803:
  * sg_opcodes: expand MLU (18-102r0)
  * sg_format: add --dcrt used twice (FOV=1 DCRT=0)
  * rescan-scsi-bus: widen LUN 0 only scanning
  (bsc#1069384)
- Earlier SUSE fixes included in 1.45:
  * rescan-scsi-bus.sh: use LUN wildcard in idlist (bsc#1069384)
  [svn: r795]
  * sg_ses: fixup page decoding (bsc#1077787) [svn: r795]
  * sg_ses: allow to decode raw data instead of reading from a device
  (bsc#1050943) [svn: r795]
- Update to sg3_utils-1.44 [20180912] [svn: r791]
  * rescan-scsi-bus.sh: harden code
  - bump version to 20180615
  - add --ignore-rev to ignore revision change
  * introduce SG3_UTILS_DSENSE environment variable
  * sginfo: don't open /dev/snapshot
  * sg_timestamp: add '--no-timestamp' option
  - add --elapsed and --hex options
  * sg_wr_mode: add --rtd option for RTD bi
  * sg_unmap: add --all=ST,RN[,LA] option
  * sgm_dd, sg_dd: add --dry-run and --verbose options
  * sg_inq+sg_vpd: update Extended inquiry data vpd page
  * sg_ses: add 'hw_reset' and 'sw_reset' to enclosure services
    controller electronics element type (18-047r1)
  * sg_decode sense: add --cdb and --err=ES options
  * sg_format: add --dry-run option
  - extend --wait timeout for &gt; 4TB disks
  * sg_sanitize: add --dry-run option
- Earlier SUSE fixes included in 1.44:
  * sg_inq: decode standard INQUIRY for CD-ROMs correctly
  (bsc#1065448, bsc#1070431) [svn: r742]
  * sg_inq: export all NAA values (bsc#1050767) [svn: r715]
  * Add fc_wwpn_id to generate by-path links for fibrechannel
  (bsc#1005063) (svn@715)
  * sg_vpd: struct opts_t misaligment (bsc#1050943) [svn: r707]</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.47+13.75d23ac:
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option</changelog>
  <changelog author="mwilck@suse.com" date="1697803200">- Update to version 1.47+15.b6898b8:
  * rescan-scsi-bus.sh: remove /tmp/rescan-scsi-mpath-info.txt
  (gh#doug-gilbert/sg3_utils#44)
  * rescan_scsi_bus.sh: fix multipath issue when called with -s and
  without -u (bsc#1215720, bsc#1216355)</changelog>
  <changelog author="mwilck@suse.com" date="1698408000">- Make sure initrd is rebuilt when sg3_utils is updated
  (bsc#1215772)</changelog>
</package>
<package pkgid="fd5140896457cc4ebe9774765fce88d0c2ba90271ae854b9392104938e9e7d3f" name="sg3_utils" arch="src">
  <version epoch="0" ver="1.47+15.b6898b8" rel="150400.3.11.1"/>
  <changelog author="hare@suse.de" date="1511956800">- Update to svn r730:
  * Move testing utilities to 'testing' directory
  * sg_opcode: check resid and trim response
  * sg_rep_zones: expand --help option
  * sg_mode: Add Out-of-band management control page
  * sg_ses: filer join output on dpage element presence
  * documentation cleanup
- rescan-scsi-bus.sh: Add '--ignore-rev' option
- Supplement SCSI modaliases (bsc#1065212)</changelog>
  <changelog author="hare@suse.de" date="1513598400">- sg_inq: decode standard INQUIRY for CD-ROMs correctly (bsc#1070431)
- rescan-scsi-bus.sh: new option for ignore rev change
- rescan-scsi-bus.sh: Remove white space
- Add 'coreutils' to Requires (bsc#1072744)
- Add 'posttrans' to rpm spec (bsc#1071972)</changelog>
  <changelog author="hare@suse.de" date="1513944000">- sg_inq: check VPD page 0x0 before reading serial number
  (bsc#1067839)
- sg_inq: add option '-o/--only' to skip reading VPD pages
  (bsc#1067839)
- Revert 'postun' rpm spec changes after review</changelog>
  <changelog author="hare@suse.de" date="1518004800">- Update to svn r744:
  * sg_write_x: new command for normal/atomic/orwrite etc
    SCSI WRITE variants
  * sg_ses: add NVMe support
  * sg_inq: decode NVMe controller / NSIDs
- rescan_scsi_bus.sh: Fix manpage for --forcerescan
- 55-scsi-sg3_id.rules: fixes for scsi_id compability (bsc#1079873)
- 55-scsi-sg3_id.rules: run sg_inq for SPC devices (bsc#1079873)</changelog>
  <changelog author="hare@suse.de" date="1518091200">- Merge local patch with git repository
  * Delete sgut-libversioning.diff</changelog>
  <changelog author="hare@suse.de" date="1518177600">- Update to svn r751:
  * NVMe bugfixes
  * sg_seek: new utility
  * sg_stream_ctl: new utility program
- 54-before-scsi-sg3_id.rules: compability rule for systemd
  (bsc#1079873)
- Add dracut.conf to install new rule with dracut</changelog>
  <changelog author="mwilck@suse.com" date="1518436800">- dracut.conf: add whitespace at end of line (bsc#1080562)</changelog>
  <changelog author="hare@suse.de" date="1523016000">- Update to svn r763:
  * More NVMe bugfixes
  * sg_vpd: add device constituents vpd
  * sg_raw: add --raw option
  * sg_turs: add --low option
  * sg_ses: decoding dpage fixes; add --quiet option
- rescan-scsi-bus.sh: Fixup syntax error (bsc#1087008)
- rescan-scsi-bus.sh: Fixes from shellcheck</changelog>
  <changelog author="mwilck@suse.com" date="1553601600">- Spec file:
  * add fc_wwpn_id (bsc#1005063)
  * add lun masking service (bsc#954600)
  * drop BuildRequires on udev
  * replace unversioned "Provides: scsi" with versioned
- Update to version sg3_utils-1.45~803+31.564be3d:
  * New versioning scheme for upstream pre-release:
    1.45 - upstream release target, 803 - upstream svn id,
    +31: SUSE commits on top of svn, 564be3d - git hash
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008)
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212)
  * Add scsi-enable-target-scan.sh (bsc#954600)
- Update to svn r803:
  * sg_opcodes: expand MLU (18-102r0)
  * sg_format: add --dcrt used twice (FOV=1 DCRT=0)
  * rescan-scsi-bus: widen LUN 0 only scanning
  (bsc#1069384)
- Earlier SUSE fixes included in 1.45:
  * rescan-scsi-bus.sh: use LUN wildcard in idlist (bsc#1069384)
  [svn: r795]
  * sg_ses: fixup page decoding (bsc#1077787) [svn: r795]
  * sg_ses: allow to decode raw data instead of reading from a device
  (bsc#1050943) [svn: r795]
- Update to sg3_utils-1.44 [20180912] [svn: r791]
  * rescan-scsi-bus.sh: harden code
  - bump version to 20180615
  - add --ignore-rev to ignore revision change
  * introduce SG3_UTILS_DSENSE environment variable
  * sginfo: don't open /dev/snapshot
  * sg_timestamp: add '--no-timestamp' option
  - add --elapsed and --hex options
  * sg_wr_mode: add --rtd option for RTD bi
  * sg_unmap: add --all=ST,RN[,LA] option
  * sgm_dd, sg_dd: add --dry-run and --verbose options
  * sg_inq+sg_vpd: update Extended inquiry data vpd page
  * sg_ses: add 'hw_reset' and 'sw_reset' to enclosure services
    controller electronics element type (18-047r1)
  * sg_decode sense: add --cdb and --err=ES options
  * sg_format: add --dry-run option
  - extend --wait timeout for &gt; 4TB disks
  * sg_sanitize: add --dry-run option
- Earlier SUSE fixes included in 1.44:
  * sg_inq: decode standard INQUIRY for CD-ROMs correctly
  (bsc#1065448, bsc#1070431) [svn: r742]
  * sg_inq: export all NAA values (bsc#1050767) [svn: r715]
  * Add fc_wwpn_id to generate by-path links for fibrechannel
  (bsc#1005063) (svn@715)
  * sg_vpd: struct opts_t misaligment (bsc#1050943) [svn: r707]</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.47+13.75d23ac:
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option</changelog>
  <changelog author="mwilck@suse.com" date="1697803200">- Update to version 1.47+15.b6898b8:
  * rescan-scsi-bus.sh: remove /tmp/rescan-scsi-mpath-info.txt
  (gh#doug-gilbert/sg3_utils#44)
  * rescan_scsi_bus.sh: fix multipath issue when called with -s and
  without -u (bsc#1215720, bsc#1216355)</changelog>
  <changelog author="mwilck@suse.com" date="1698408000">- Make sure initrd is rebuilt when sg3_utils is updated
  (bsc#1215772)</changelog>
</package>
<package pkgid="57f5c90a9b1ad0ad40815788b8d5231b11fa629b4f190e22049f8841edbc31f0" name="sg3_utils" arch="x86_64">
  <version epoch="0" ver="1.47+15.b6898b8" rel="150400.3.11.1"/>
  <changelog author="hare@suse.de" date="1511956800">- Update to svn r730:
  * Move testing utilities to 'testing' directory
  * sg_opcode: check resid and trim response
  * sg_rep_zones: expand --help option
  * sg_mode: Add Out-of-band management control page
  * sg_ses: filer join output on dpage element presence
  * documentation cleanup
- rescan-scsi-bus.sh: Add '--ignore-rev' option
- Supplement SCSI modaliases (bsc#1065212)</changelog>
  <changelog author="hare@suse.de" date="1513598400">- sg_inq: decode standard INQUIRY for CD-ROMs correctly (bsc#1070431)
- rescan-scsi-bus.sh: new option for ignore rev change
- rescan-scsi-bus.sh: Remove white space
- Add 'coreutils' to Requires (bsc#1072744)
- Add 'posttrans' to rpm spec (bsc#1071972)</changelog>
  <changelog author="hare@suse.de" date="1513944000">- sg_inq: check VPD page 0x0 before reading serial number
  (bsc#1067839)
- sg_inq: add option '-o/--only' to skip reading VPD pages
  (bsc#1067839)
- Revert 'postun' rpm spec changes after review</changelog>
  <changelog author="hare@suse.de" date="1518004800">- Update to svn r744:
  * sg_write_x: new command for normal/atomic/orwrite etc
    SCSI WRITE variants
  * sg_ses: add NVMe support
  * sg_inq: decode NVMe controller / NSIDs
- rescan_scsi_bus.sh: Fix manpage for --forcerescan
- 55-scsi-sg3_id.rules: fixes for scsi_id compability (bsc#1079873)
- 55-scsi-sg3_id.rules: run sg_inq for SPC devices (bsc#1079873)</changelog>
  <changelog author="hare@suse.de" date="1518091200">- Merge local patch with git repository
  * Delete sgut-libversioning.diff</changelog>
  <changelog author="hare@suse.de" date="1518177600">- Update to svn r751:
  * NVMe bugfixes
  * sg_seek: new utility
  * sg_stream_ctl: new utility program
- 54-before-scsi-sg3_id.rules: compability rule for systemd
  (bsc#1079873)
- Add dracut.conf to install new rule with dracut</changelog>
  <changelog author="mwilck@suse.com" date="1518436800">- dracut.conf: add whitespace at end of line (bsc#1080562)</changelog>
  <changelog author="hare@suse.de" date="1523016000">- Update to svn r763:
  * More NVMe bugfixes
  * sg_vpd: add device constituents vpd
  * sg_raw: add --raw option
  * sg_turs: add --low option
  * sg_ses: decoding dpage fixes; add --quiet option
- rescan-scsi-bus.sh: Fixup syntax error (bsc#1087008)
- rescan-scsi-bus.sh: Fixes from shellcheck</changelog>
  <changelog author="mwilck@suse.com" date="1553601600">- Spec file:
  * add fc_wwpn_id (bsc#1005063)
  * add lun masking service (bsc#954600)
  * drop BuildRequires on udev
  * replace unversioned "Provides: scsi" with versioned
- Update to version sg3_utils-1.45~803+31.564be3d:
  * New versioning scheme for upstream pre-release:
    1.45 - upstream release target, 803 - upstream svn id,
    +31: SUSE commits on top of svn, 564be3d - git hash
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008)
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212)
  * Add scsi-enable-target-scan.sh (bsc#954600)
- Update to svn r803:
  * sg_opcodes: expand MLU (18-102r0)
  * sg_format: add --dcrt used twice (FOV=1 DCRT=0)
  * rescan-scsi-bus: widen LUN 0 only scanning
  (bsc#1069384)
- Earlier SUSE fixes included in 1.45:
  * rescan-scsi-bus.sh: use LUN wildcard in idlist (bsc#1069384)
  [svn: r795]
  * sg_ses: fixup page decoding (bsc#1077787) [svn: r795]
  * sg_ses: allow to decode raw data instead of reading from a device
  (bsc#1050943) [svn: r795]
- Update to sg3_utils-1.44 [20180912] [svn: r791]
  * rescan-scsi-bus.sh: harden code
  - bump version to 20180615
  - add --ignore-rev to ignore revision change
  * introduce SG3_UTILS_DSENSE environment variable
  * sginfo: don't open /dev/snapshot
  * sg_timestamp: add '--no-timestamp' option
  - add --elapsed and --hex options
  * sg_wr_mode: add --rtd option for RTD bi
  * sg_unmap: add --all=ST,RN[,LA] option
  * sgm_dd, sg_dd: add --dry-run and --verbose options
  * sg_inq+sg_vpd: update Extended inquiry data vpd page
  * sg_ses: add 'hw_reset' and 'sw_reset' to enclosure services
    controller electronics element type (18-047r1)
  * sg_decode sense: add --cdb and --err=ES options
  * sg_format: add --dry-run option
  - extend --wait timeout for &gt; 4TB disks
  * sg_sanitize: add --dry-run option
- Earlier SUSE fixes included in 1.44:
  * sg_inq: decode standard INQUIRY for CD-ROMs correctly
  (bsc#1065448, bsc#1070431) [svn: r742]
  * sg_inq: export all NAA values (bsc#1050767) [svn: r715]
  * Add fc_wwpn_id to generate by-path links for fibrechannel
  (bsc#1005063) (svn@715)
  * sg_vpd: struct opts_t misaligment (bsc#1050943) [svn: r707]</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.47+13.75d23ac:
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option</changelog>
  <changelog author="mwilck@suse.com" date="1697803200">- Update to version 1.47+15.b6898b8:
  * rescan-scsi-bus.sh: remove /tmp/rescan-scsi-mpath-info.txt
  (gh#doug-gilbert/sg3_utils#44)
  * rescan_scsi_bus.sh: fix multipath issue when called with -s and
  without -u (bsc#1215720, bsc#1216355)</changelog>
  <changelog author="mwilck@suse.com" date="1698408000">- Make sure initrd is rebuilt when sg3_utils is updated
  (bsc#1215772)</changelog>
</package>
<package pkgid="9fe3d8938e82efef26667e646df909c2528c62bcb90b53f53b2fe5a9a3a08236" name="snmp-mibs" arch="aarch64">
  <version epoch="0" ver="5.9.4" rel="150300.15.11.1"/>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (&gt;=
  4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being
  removed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Format with spec-cleaner
- Drop sle11 support as it fails to build anyway for ages
- Rename python packages to be python-%{name} with obsoletes
  * Use new singlespec macros
  * Add patch converting the py files to python3/2 compat mode
    net-snmp-python3.patch
- Run full autoreconf instead of partial
- Build with threads by building few targets first</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1529323200">- Create /var/agentx via systemd tmpfiles in case of rollback,
  snapshots and transactional updates [bsc#1098032]</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
  <changelog author="abergmann@suse.com" date="1562328000">- Add Lustre filesystem support (bsc#1140341, jsc#SLE-6120).
  Add net-snmp-5.7.3-add-lustre-fs-support.patch
- Add info about the original agent which triggered the trap.
  When the trap is forwarded there was no info about the original
  agent (bsc#1116807).
  Add net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
- Fix missing sysconfig files creation (bsc#1108471).</changelog>
  <changelog author="abergmann@suse.com" date="1639742400">- Make extended MIB read-only (bsc#1174961, CVE-2020-15862).
  Add net-snmp-5.7.3-make-extended-mib-read-only.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640001600">- Fix output for high memTotalReal RAM values (bsc#1152968).
  Add net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640174400">- Fix hrStorage autofs objects timeout problems (bsc#1179699, bsc#1145864).
  Add net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  Add net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
- Fix NSS mounted volumes in hrStorageDescr (bsc#1100146).
  Add net-snmp-5.7.3-recognize-nss-pools-and-nss-volumes-oes.patch
- Fix subagent crash at save_set_var() (bsc#1178021).
  Add net-snmp-5.7.3-subagent-set-response.patch
- Fix subagent data corruption (bsc#1178351, bsc#1179009).
  Add net-snmp-5.7.3-fix-subagent-data-corruption.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640260800">- Fix LFH violation during v3 user creation (bsc#1181591).
  Add net-snmp-5.7.3-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="abergmann@suse.com" date="1646827200">- Decouple snmp-mibs from net-snmp version to allow major version
  upgrade (bsc#1196955).</changelog>
  <changelog author="abergmann@suse.com" date="1665057600">- update to 5.9.3 (bsc#1201103, jsc#SLE-11203):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805 A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809 A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806 Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807 A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808 A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810 A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Change to use systemd service files directly from net-snmp package.
  add:
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
  remove:
  * snmpd.service
  * snmptrapd.service
  * harden_snmpd.service.patch
  * harden_snmptrapd.service.patch
- Refactor and remove obsolete patches to work with version number 5.9.3:
  add:
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  remove:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-add-lustre-fs-support.patch
  * net-snmp-5.7.3-Fix-Makefile.PL.patch
  * net-snmp-5.7.3-modern-rpm-api.patch
  * net-snmp-5.7.3-net-snmp-config-headercheck.patch
  * net-snmp-5.7.3-perl-tk-warning.patch
  * net-snmp-5.7.3-snmpstatus-suppress-output.patch
  * net-snmp-5.7.3-socket-path.patch
  * net-snmp-5.7.3-subagent-set-response.patch
  * net-snmp-5.7.3-testing-empty-arptable.patch
  * net-snmp-5.7.3-velocity-mib.patch
  * net-snmp-5.7.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-pie.patch
  * net-snmp-4.7.2-systemd.patch
  * net-snmp-5.7.3-build-with-openssl-1.1.patch
  * net-snmp-5.7.3-fix-agentx-freezing-on-timeout.patch
  * net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
  * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch
  * net-snmp-5.7.3-fix-subagent-data-corruption.patch
  * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
  * net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  * net-snmp-5.7.3-make-extended-mib-read-only.patch
  * net-snmp-5.7.3-netgroups.patch
  * net-snmp-5.7.3-Remove-U64-typedef.patch
  * net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
  * net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
  * net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch
  * net-snmp-python3.patch</changelog>
  <changelog author="abergmann@suse.com" date="1672920000">- Fixed NULL pointer exception issue when handling ipDefaultTTL or
  pv6IpForwarding (bsc#1205148, CVE-2022-44793, bsc#1205150, CVE-2022-44792).
  add:
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
- Enable AES-192 and AES-256 privacy protocol (bsc#1206828).</changelog>
  <changelog author="abergmann@suse.com" date="1673265600">- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add:
  * net-snmp-5.9.3-harden_snmpd.service.patch
  * net-snmp-5.9.3-harden_snmptrapd.service.patch
  delete:
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch</changelog>
  <changelog author="abergmann@suse.com" date="1697544000">- Update to net-snmp-5.9.4 (bsc#1214364).
  add (rename):
  * net-snmp-5.9.4-add-lustre-fs-support.patch
  * net-snmp-5.9.4-add-netgroups-functionality.patch
  * net-snmp-5.9.4-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.4-fixed-python2-bindings.patch
  * net-snmp-5.9.4-fix-Makefile.PL.patch
  * net-snmp-5.9.4-modern-rpm-api.patch
  * net-snmp-5.9.4-net-snmp-config-headercheck.patch
  * net-snmp-5.9.4-perl-tk-warning.patch
  * net-snmp-5.9.4-pie.patch
  * net-snmp-5.9.4-snmpstatus-suppress-output.patch
  * net-snmp-5.9.4-socket-path.patch
  * net-snmp-5.9.4-subagent-set-response.patch
  * net-snmp-5.9.4-suse-systemd-service-files.patch
  * net-snmp-5.9.4-testing-empty-arptable.patch
  delete (now part of v5.9.4):
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
  delete (rename):
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Removing legacy MIBs used by Velocity Software (jira#PED-6416).
- Re-add support for hostname netgroups that was removed accidentally and
  previously added with FATE#316305 (bsc#1207697).
  '@hostgroup' can be specified for multiple hosts
- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add (rename):
  * net-snmp-5.9.4-harden_snmpd.service.patch
  * net-snmp-5.9.4-harden_snmptrapd.service.patch
  delete (rename):
  * net-snmp-5.9.3-harden_snmpd.service.patch
  * net-snmp-5.9.3-harden_snmptrapd.service.patch</changelog>
</package>
<package pkgid="37c3d0d451f0bf5acacb672015668d31efb0a7e2e3c843f23c084ad0a0697b31" name="snmp-mibs" arch="s390x">
  <version epoch="0" ver="5.9.4" rel="150300.15.11.1"/>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (&gt;=
  4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being
  removed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Format with spec-cleaner
- Drop sle11 support as it fails to build anyway for ages
- Rename python packages to be python-%{name} with obsoletes
  * Use new singlespec macros
  * Add patch converting the py files to python3/2 compat mode
    net-snmp-python3.patch
- Run full autoreconf instead of partial
- Build with threads by building few targets first</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1529323200">- Create /var/agentx via systemd tmpfiles in case of rollback,
  snapshots and transactional updates [bsc#1098032]</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
  <changelog author="abergmann@suse.com" date="1562328000">- Add Lustre filesystem support (bsc#1140341, jsc#SLE-6120).
  Add net-snmp-5.7.3-add-lustre-fs-support.patch
- Add info about the original agent which triggered the trap.
  When the trap is forwarded there was no info about the original
  agent (bsc#1116807).
  Add net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
- Fix missing sysconfig files creation (bsc#1108471).</changelog>
  <changelog author="abergmann@suse.com" date="1639742400">- Make extended MIB read-only (bsc#1174961, CVE-2020-15862).
  Add net-snmp-5.7.3-make-extended-mib-read-only.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640001600">- Fix output for high memTotalReal RAM values (bsc#1152968).
  Add net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640174400">- Fix hrStorage autofs objects timeout problems (bsc#1179699, bsc#1145864).
  Add net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  Add net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
- Fix NSS mounted volumes in hrStorageDescr (bsc#1100146).
  Add net-snmp-5.7.3-recognize-nss-pools-and-nss-volumes-oes.patch
- Fix subagent crash at save_set_var() (bsc#1178021).
  Add net-snmp-5.7.3-subagent-set-response.patch
- Fix subagent data corruption (bsc#1178351, bsc#1179009).
  Add net-snmp-5.7.3-fix-subagent-data-corruption.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640260800">- Fix LFH violation during v3 user creation (bsc#1181591).
  Add net-snmp-5.7.3-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="abergmann@suse.com" date="1646827200">- Decouple snmp-mibs from net-snmp version to allow major version
  upgrade (bsc#1196955).</changelog>
  <changelog author="abergmann@suse.com" date="1665057600">- update to 5.9.3 (bsc#1201103, jsc#SLE-11203):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805 A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809 A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806 Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807 A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808 A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810 A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Change to use systemd service files directly from net-snmp package.
  add:
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
  remove:
  * snmpd.service
  * snmptrapd.service
  * harden_snmpd.service.patch
  * harden_snmptrapd.service.patch
- Refactor and remove obsolete patches to work with version number 5.9.3:
  add:
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  remove:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-add-lustre-fs-support.patch
  * net-snmp-5.7.3-Fix-Makefile.PL.patch
  * net-snmp-5.7.3-modern-rpm-api.patch
  * net-snmp-5.7.3-net-snmp-config-headercheck.patch
  * net-snmp-5.7.3-perl-tk-warning.patch
  * net-snmp-5.7.3-snmpstatus-suppress-output.patch
  * net-snmp-5.7.3-socket-path.patch
  * net-snmp-5.7.3-subagent-set-response.patch
  * net-snmp-5.7.3-testing-empty-arptable.patch
  * net-snmp-5.7.3-velocity-mib.patch
  * net-snmp-5.7.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-pie.patch
  * net-snmp-4.7.2-systemd.patch
  * net-snmp-5.7.3-build-with-openssl-1.1.patch
  * net-snmp-5.7.3-fix-agentx-freezing-on-timeout.patch
  * net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
  * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch
  * net-snmp-5.7.3-fix-subagent-data-corruption.patch
  * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
  * net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  * net-snmp-5.7.3-make-extended-mib-read-only.patch
  * net-snmp-5.7.3-netgroups.patch
  * net-snmp-5.7.3-Remove-U64-typedef.patch
  * net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
  * net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
  * net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch
  * net-snmp-python3.patch</changelog>
  <changelog author="abergmann@suse.com" date="1672920000">- Fixed NULL pointer exception issue when handling ipDefaultTTL or
  pv6IpForwarding (bsc#1205148, CVE-2022-44793, bsc#1205150, CVE-2022-44792).
  add:
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
- Enable AES-192 and AES-256 privacy protocol (bsc#1206828).</changelog>
  <changelog author="abergmann@suse.com" date="1673265600">- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add:
  * net-snmp-5.9.3-harden_snmpd.service.patch
  * net-snmp-5.9.3-harden_snmptrapd.service.patch
  delete:
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch</changelog>
  <changelog author="abergmann@suse.com" date="1697544000">- Update to net-snmp-5.9.4 (bsc#1214364).
  add (rename):
  * net-snmp-5.9.4-add-lustre-fs-support.patch
  * net-snmp-5.9.4-add-netgroups-functionality.patch
  * net-snmp-5.9.4-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.4-fixed-python2-bindings.patch
  * net-snmp-5.9.4-fix-Makefile.PL.patch
  * net-snmp-5.9.4-modern-rpm-api.patch
  * net-snmp-5.9.4-net-snmp-config-headercheck.patch
  * net-snmp-5.9.4-perl-tk-warning.patch
  * net-snmp-5.9.4-pie.patch
  * net-snmp-5.9.4-snmpstatus-suppress-output.patch
  * net-snmp-5.9.4-socket-path.patch
  * net-snmp-5.9.4-subagent-set-response.patch
  * net-snmp-5.9.4-suse-systemd-service-files.patch
  * net-snmp-5.9.4-testing-empty-arptable.patch
  delete (now part of v5.9.4):
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
  delete (rename):
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Removing legacy MIBs used by Velocity Software (jira#PED-6416).
- Re-add support for hostname netgroups that was removed accidentally and
  previously added with FATE#316305 (bsc#1207697).
  '@hostgroup' can be specified for multiple hosts
- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add (rename):
  * net-snmp-5.9.4-harden_snmpd.service.patch
  * net-snmp-5.9.4-harden_snmptrapd.service.patch
  delete (rename):
  * net-snmp-5.9.3-harden_snmpd.service.patch
  * net-snmp-5.9.3-harden_snmptrapd.service.patch</changelog>
</package>
<package pkgid="59211af6b8c2b3a2d62b1182a52aeecf657365e3807e8e78e6a72fb7ae298f2a" name="snmp-mibs" arch="x86_64">
  <version epoch="0" ver="5.9.4" rel="150300.15.11.1"/>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (&gt;=
  4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being
  removed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Format with spec-cleaner
- Drop sle11 support as it fails to build anyway for ages
- Rename python packages to be python-%{name} with obsoletes
  * Use new singlespec macros
  * Add patch converting the py files to python3/2 compat mode
    net-snmp-python3.patch
- Run full autoreconf instead of partial
- Build with threads by building few targets first</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1529323200">- Create /var/agentx via systemd tmpfiles in case of rollback,
  snapshots and transactional updates [bsc#1098032]</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
  <changelog author="abergmann@suse.com" date="1562328000">- Add Lustre filesystem support (bsc#1140341, jsc#SLE-6120).
  Add net-snmp-5.7.3-add-lustre-fs-support.patch
- Add info about the original agent which triggered the trap.
  When the trap is forwarded there was no info about the original
  agent (bsc#1116807).
  Add net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
- Fix missing sysconfig files creation (bsc#1108471).</changelog>
  <changelog author="abergmann@suse.com" date="1639742400">- Make extended MIB read-only (bsc#1174961, CVE-2020-15862).
  Add net-snmp-5.7.3-make-extended-mib-read-only.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640001600">- Fix output for high memTotalReal RAM values (bsc#1152968).
  Add net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640174400">- Fix hrStorage autofs objects timeout problems (bsc#1179699, bsc#1145864).
  Add net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  Add net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
- Fix NSS mounted volumes in hrStorageDescr (bsc#1100146).
  Add net-snmp-5.7.3-recognize-nss-pools-and-nss-volumes-oes.patch
- Fix subagent crash at save_set_var() (bsc#1178021).
  Add net-snmp-5.7.3-subagent-set-response.patch
- Fix subagent data corruption (bsc#1178351, bsc#1179009).
  Add net-snmp-5.7.3-fix-subagent-data-corruption.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640260800">- Fix LFH violation during v3 user creation (bsc#1181591).
  Add net-snmp-5.7.3-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="abergmann@suse.com" date="1646827200">- Decouple snmp-mibs from net-snmp version to allow major version
  upgrade (bsc#1196955).</changelog>
  <changelog author="abergmann@suse.com" date="1665057600">- update to 5.9.3 (bsc#1201103, jsc#SLE-11203):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805 A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809 A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806 Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807 A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808 A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810 A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Change to use systemd service files directly from net-snmp package.
  add:
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
  remove:
  * snmpd.service
  * snmptrapd.service
  * harden_snmpd.service.patch
  * harden_snmptrapd.service.patch
- Refactor and remove obsolete patches to work with version number 5.9.3:
  add:
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  remove:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-add-lustre-fs-support.patch
  * net-snmp-5.7.3-Fix-Makefile.PL.patch
  * net-snmp-5.7.3-modern-rpm-api.patch
  * net-snmp-5.7.3-net-snmp-config-headercheck.patch
  * net-snmp-5.7.3-perl-tk-warning.patch
  * net-snmp-5.7.3-snmpstatus-suppress-output.patch
  * net-snmp-5.7.3-socket-path.patch
  * net-snmp-5.7.3-subagent-set-response.patch
  * net-snmp-5.7.3-testing-empty-arptable.patch
  * net-snmp-5.7.3-velocity-mib.patch
  * net-snmp-5.7.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-pie.patch
  * net-snmp-4.7.2-systemd.patch
  * net-snmp-5.7.3-build-with-openssl-1.1.patch
  * net-snmp-5.7.3-fix-agentx-freezing-on-timeout.patch
  * net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
  * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch
  * net-snmp-5.7.3-fix-subagent-data-corruption.patch
  * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
  * net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  * net-snmp-5.7.3-make-extended-mib-read-only.patch
  * net-snmp-5.7.3-netgroups.patch
  * net-snmp-5.7.3-Remove-U64-typedef.patch
  * net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
  * net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
  * net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch
  * net-snmp-python3.patch</changelog>
  <changelog author="abergmann@suse.com" date="1672920000">- Fixed NULL pointer exception issue when handling ipDefaultTTL or
  pv6IpForwarding (bsc#1205148, CVE-2022-44793, bsc#1205150, CVE-2022-44792).
  add:
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
- Enable AES-192 and AES-256 privacy protocol (bsc#1206828).</changelog>
  <changelog author="abergmann@suse.com" date="1673265600">- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add:
  * net-snmp-5.9.3-harden_snmpd.service.patch
  * net-snmp-5.9.3-harden_snmptrapd.service.patch
  delete:
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch</changelog>
  <changelog author="abergmann@suse.com" date="1697544000">- Update to net-snmp-5.9.4 (bsc#1214364).
  add (rename):
  * net-snmp-5.9.4-add-lustre-fs-support.patch
  * net-snmp-5.9.4-add-netgroups-functionality.patch
  * net-snmp-5.9.4-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.4-fixed-python2-bindings.patch
  * net-snmp-5.9.4-fix-Makefile.PL.patch
  * net-snmp-5.9.4-modern-rpm-api.patch
  * net-snmp-5.9.4-net-snmp-config-headercheck.patch
  * net-snmp-5.9.4-perl-tk-warning.patch
  * net-snmp-5.9.4-pie.patch
  * net-snmp-5.9.4-snmpstatus-suppress-output.patch
  * net-snmp-5.9.4-socket-path.patch
  * net-snmp-5.9.4-subagent-set-response.patch
  * net-snmp-5.9.4-suse-systemd-service-files.patch
  * net-snmp-5.9.4-testing-empty-arptable.patch
  delete (now part of v5.9.4):
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
  delete (rename):
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Removing legacy MIBs used by Velocity Software (jira#PED-6416).
- Re-add support for hostname netgroups that was removed accidentally and
  previously added with FATE#316305 (bsc#1207697).
  '@hostgroup' can be specified for multiple hosts
- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add (rename):
  * net-snmp-5.9.4-harden_snmpd.service.patch
  * net-snmp-5.9.4-harden_snmptrapd.service.patch
  delete (rename):
  * net-snmp-5.9.3-harden_snmpd.service.patch
  * net-snmp-5.9.3-harden_snmptrapd.service.patch</changelog>
</package>
<package pkgid="ce73b402ff5337563ac57acce0e02e22595c01912f3a0c9c0bbbf25867aeba38" name="sqlite3" arch="src">
  <version epoch="0" ver="3.44.0" rel="150000.3.23.1"/>
  <changelog author="astieger@suse.com" date="1523448000">- update to 3.23.1:
  * Fix two problems in the new LEFT JOIN strength reduction
    optimization
  * Fix misbehavior of the FTS5 xBestIndex method
  * Fix a harmless reference to an uninitialized virtual machine
    register
  * Fix the eval.c extension so that it works with PRAGMA
    empty_result_callbacks=ON
  * Fix the generate_series virtual table so that it correctly
    returns no rows if any of its constraints are NULL
  * Performance enhancements in the parser</changelog>
  <changelog author="max@suse.com" date="1552996800">- CVE-2018-20346, bsc#1119687: Upgrade to the most recent version
  to fix a remote code execution vulnerability in FTS3 (Magellan).
- Drop sqlite-fts5-link.patch and do it in the spec file instead.
- Version 3.27.2:
  * Add the VACUUM INTO command
  * Issue an SQLITE_WARNING message on the error log if a
    double-quoted string literal is used
  * Add the remove_diacritics=2 option to FTS3 and FTS5.
  * Add  the SQLITE_PREPARE_NO_VTAB option to sqlite3_prepare_v3().
    Use that option to prevent circular references to shadow tables
    from causing resource leaks.
  * Enhancements to the sqlite3_deserialize() interface
  * Enhancements to the CLI, mostly to support testing and debugging
    of the SQLite library itself
  * Increased robustness against malicious SQL that is run against
    a maliciously corrupted database
- Version 3.26.0:
  * Optimization: When doing an UPDATE on a table with indexes on
    expressions, do not update the expression indexes if they do
    not refer to any of the columns of the table being updated.
  * Allow the xBestIndex() method of virtual table implementations
    to return SQLITE_CONSTRAINT to indicate that the proposed query
    plan is unusable and should not be given further consideration.
  * Added the SQLITE_DBCONFIG_DEFENSIVE option which disables the
    ability to create corrupt database files using ordinary SQL.
  * Added support for read-only shadow tables when the
    SQLITE_DBCONFIG_DEFENSIVE option is enabled.
  * Added the PRAGMA legacy_alter_table command, which if enabled
    causes the ALTER TABLE command to behave like older version of
    SQLite (prior to version 3.25.0) for compatibility.
  * Added PRAGMA table_xinfo that works just like PRAGMA table_info
    except that it also shows hidden columns in virtual tables.
  * Added the explain virtual table as a run-time loadable
    extension.
  * Add a limit counter to the query planner to prevent excessive
    sqlite3_prepare() times for certain pathological SQL inputs.
  * Added support for the sqlite3_normalized_sql() interface, when
    compiling with SQLITE_ENABLE_NORMALIZE.
  * Enhanced triggers so that they can use table-valued functions
    that exist in schemas other than the schema where the trigger
    is defined.
  * Improvements to the ".help" command in the CLI.
  * The SQLITE_HISTORY environment variable, if it exists,
    specifies the name of the command-line editing history file.
  * The --deserialize option associated with opening a new database
    in the CLI cause the database file to be read into memory and
    accessed using the sqlite3_deserialize() API. This simplifies
    running tests on a database without modifying the file on disk.
- Version 3.25.2:
  * Add the PRAGMA legacy_alter_table=ON command that causes the
    "ALTER TABLE RENAME" command to behave as in 3.24.0 and earlier
  * Fix issue with some expressions with windows functions in views
- Version 3.25.1:
  * Avoid false-positive error checks on ALTER TABLE
  * Further ORDER BY LIMIT optimization fixes for window functions
- Version 3.25.0:
  * Add support for window functions
  * Add support for renaming columns within a table
  * Query optimizer improvements
  * slightly better concurrency in multi-threaded environments
  * The ORDER BY LIMIT optimization might have caused an infinite
    loop in the byte code of the prepared statement under very
    obscure circumstances, due to a confluence of minor defects in
    the query optimizer
- Version 3.24.0:
  * Add support for PostgreSQL-style UPSERT
  * Add support for auxiliary columns in r-tree tables
  * Add C-language APIs for discovering SQL keywords used by SQLite
  * Add C-language APIs for dynamic strings based on sqlite3_str
  * Enhance ALTER TABLE so that it recognizes "true" and "false" as
    valid arguments to DEFAULT
  * Add the sorter-reference optimization as a compile-time option
  * Improve the format of the EXPLAIN QUERY PLAN raw output, so that
  it gives better information about the query plan and about the
    relationships between the various components of the plan
  * Added the SQLITE_DBCONFIG_RESET_DATABASE option to the
    sqlite3_db_config() API.
  * Automatically intercept the raw EXPLAIN QUERY PLAN output an
    reformat it into an ASCII-art graph.
  * Lines that begin with "#" and that are not in the middle of an
    SQL statement are interpreted as comments
  * Add the --append option to the ".backup" command
  * Add the ".dbconfig" command
  * various performance improvements
  * various bug fixes</changelog>
  <changelog author="max@suse.com" date="1555502400">- Upgrade to 3.28.0:
  * CVE-2019-9936, bsc#1130326: running fts5 prefix queries inside
    a transaction could trigger a heap-based buffer over-read.
  * CVE-2019-9937, bsc#1130325: interleaving reads and writes in a
    single transaction with an fts5 virtual table will lead to a
    NULL Pointer Dereference.
  * Enhanced window functions
  * Enhanced VACUUM INTO so that it works for read-only databases.
  * New query optimizations.
  * Added the sqlite3_value_frombind() API for determining if the
    argument to an SQL function is from a bound parameter.
  * Security and compatibilities enhancements to fts3_tokenizer().
  * Improved robustness against corrupt database files.</changelog>
  <changelog author="max@suse.com" date="1568116800">- bsc#1150137, CVE-2019-16168, sqlite3-CVE-2019-16168.patch:
  Improper validation of qlite_stat1 sz field leads to division by
  zero.</changelog>
  <changelog author="max@suse.com" date="1625054400">- Sync version 3.36.0 from Factory to implement jsc#SLE-16032.
- Obsoletes sqlite3-CVE-2019-16168.patch.
- The following CVEs have been fixed in upstream releases up to
  this point, but were not mentioned in the change log so far:
  * bsc#1173641, CVE-2020-15358: heap-based buffer overflow in
    multiSelectOrderBy due to mishandling of query-flattener
    optimization
  * bsc#1164719, CVE-2020-9327: NULL pointer dereference and
    segmentation fault because of generated column optimizations in
    isAuxiliaryVtabOperator
  * bsc#1160439, CVE-2019-20218: selectExpander in select.c proceeds
    with WITH stack unwinding even after a parsing error
  * bsc#1160438, CVE-2019-19959: memory-management error via
    ext/misc/zipfile.c involving embedded '\0' input
  * bsc#1160309, CVE-2019-19923: improper handling  of  certain uses
    of SELECT DISTINCT in flattenSubquery may lead to null pointer
    dereference
  * bsc#1159850, CVE-2019-19924: improper error handling in
    sqlite3WindowRewrite()
  * bsc#1159847, CVE-2019-19925: improper handling of NULL pathname
    during an update of a ZIP archive
  * bsc#1159715, CVE-2019-19926: improper handling  of certain
    errors during parsing  multiSelect in select.c
  * bsc#1159491, CVE-2019-19880: exprListAppendList in window.c
    allows attackers to trigger an invalid pointer dereference
  * bsc#1158960, CVE-2019-19603: during handling of CREATE TABLE
    and CREATE VIEW statements, does not consider confusion with
    a shadow table name
  * bsc#1158959, CVE-2019-19646: pragma.c mishandles NOT NULL in an
    integrity_check PRAGMA command in certain cases of generated
    columns
  * bsc#1158958, CVE-2019-19645: alter.c allows attackers to trigger
    infinite recursion via certain types of self-referential views
    in conjunction with ALTER TABLE statements
  * bsc#1158812, CVE-2019-19317: lookupName in resolve.c omits bits
    from the colUsed bitmask in the case of a generated column,
    which allows attackers to cause a denial of service
  * bsc#1157818, CVE-2019-19244: sqlite3,sqlite2,sqlite: The
    function sqlite3Select in select.c allows a crash if a
    sub-select uses both DISTINCT and window functions, and also
    has certain ORDER BY usage
  * bsc#928701, CVE-2015-3415: sqlite3VdbeExec comparison operator
    vulnerability
  * bsc#928700, CVE-2015-3414: sqlite3,sqlite2: dequoting of
    collation-sequence names
  * CVE-2020-13434 boo#1172115: integer overflow in
    sqlite3_str_vappendf
  * CVE-2020-13630 boo#1172234: use-after-free in fts3EvalNextRow
  * CVE-2020-13631 boo#1172236: virtual table allowed to be renamed
    to one of its shadow tables
  * CVE-2020-13632 boo#1172240: NULL pointer dereference via
    crafted matchinfo() query
  * CVE-2020-13435: Malicious SQL statements could have crashed the
    process that is running SQLite (boo#1172091)</changelog>
  <changelog author="max@suse.com" date="1638273600">- SQLite3 3.37.0:
  * STRICT tables provide a prescriptive style of data type
    management, for developers who prefer that kind of thing.
  * When adding columns that contain a CHECK constraint or a
    generated column containing a NOT NULL constraint, the
    ALTER TABLE ADD COLUMN now checks new constraints against
    preexisting rows in the database and will only proceed if no
    constraints are violated.
  * Added the PRAGMA table_list statement.
  * Add the .connection command, allowing the CLI to keep multiple
    database connections open at the same time.
  * Add the --safe command-line option that disables dot-commands
    and SQL statements that might cause side-effects that extend
    beyond the single database file named on the command-line.
  * CLI: Performance improvements when reading SQL statements that
    span many lines.
  * Added the sqlite3_autovacuum_pages() interface.
  * The sqlite3_deserialize() does not and has never worked
    for the TEMP database. That limitation is now noted in the
    documentation.
  * The query planner now omits ORDER BY clauses on subqueries and
    views if removing those clauses does not change the semantics
    of the query.
  * The generate_series table-valued function extension is modified
    so that the first parameter ("START") is now required. This is
    done as a way to demonstrate how to write table-valued
    functions with required parameters. The legacy behavior is
    available using the -DZERO_ARGUMENT_GENERATE_SERIES
    compile-time option.
  * Added new sqlite3_changes64() and sqlite3_total_changes64()
    interfaces.
  * Added the SQLITE_OPEN_EXRESCODE flag option to sqlite3_open_v2().
  * Use less memory to hold the database schema.
  * bsc#1189802, CVE-2021-36690: Fix an issue with the SQLite Expert
    extension when a column has no collating sequence.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641124800">- update to 3.37.1:
  * Fix a bug introduced by the UPSERT enhancements of version
    3.35.0 that can cause incorrect byte-code to be generated for
    some obscure but valid SQL, possibly resulting in a NULL-
    pointer dereference.
  * Fix an OOB read that can occur in FTS5 when reading corrupt
    database files.
  * Improved robustness of the --safe option in the CLI.
  * Other minor fixes to assert() statements and test cases.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641988800">- update to 3.37.2:
  * Fix a bug introduced in version 3.35.0 (2021-03-12) that can
    cause database corruption if a SAVEPOINT is rolled back while
    in PRAGMA temp_store=MEMORY mode, and other changes are made,
    and then the outer transaction commits
  * Fix a long-standing problem with ON DELETE CASCADE and ON
    UPDATE CASCADE in which a cache of the bytecode used to
    implement the cascading change was not being reset following a
    local DDL change</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1645876800">- update to 3.38.0
  * Add the -&gt; and -&gt;&gt; operators for easier processing of JSON
  * The JSON functions are now built-ins
  * Enhancements to date and time functions
  * Rename the printf() SQL function to format() for better
    compatibility, with alias for backwards compatibility.
  * Add the sqlite3_error_offset() interface for helping localize
    an SQL error to a specific character in the input SQL text
  * Enhance the interface to virtual tables
  * CLI columnar output modes are enhanced to correctly handle tabs
    and newlines embedded in text, and add options like "--wrap N",
    "--wordwrap on", and "--quote" to the columnar output modes.
  * Query planner enhancements using a Bloom filter to speed up
    large analytic queries, and a balanced merge tree to evaluate
    UNION or UNION ALL compound SELECT statements that have an
    ORDER BY clause.
  * The ALTER TABLE statement is changed to silently ignores
    entries in the sqlite_schema table that do not parse when
    PRAGMA writable_schema=ON</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1647172800">- update to 3.38.1:
  * Fix problems with the new Bloom filter optimization that might
    cause some obscure queries to get an incorrect answer.
  * Fix the localtime modifier of the date and time functions so
    that it preserves fractional seconds.
  * Fix the sqlite_offset SQL function so that it works correctly
    even in corner cases such as when the argument is a virtual
    column or the column of a view.
  * Fix row value IN operator constraints on virtual tables so that
    they work correctly even if the virtual table implementation
    relies on bytecode to filter rows that do not satisfy the
    constraint.
  * Other minor fixes to assert() statements, test cases, and
    documentation. See the source code timeline for details.
- add upstream patch to run atof1 tests only on x86_64
  sqlite-src-3380100-atof1.patch</changelog>
  <changelog author="max@suse.com" date="1647432000">- Remove obsolete configure flags
- Package the Tcl bindings here again so that we only ship one copy
  of SQLite (bsc#1195773).</changelog>
  <changelog author="max@suse.com" date="1648555200">- update to 3.38.2:
  * Fix a problem with the Bloom filter optimization that might
    cause an incorrect answer when doing a LEFT JOIN with a WHERE
    clause constraint that says that one of the columns on the
    right table of the LEFT JOIN is NULL.
  * Other minor patches.</changelog>
  <changelog author="info@paolostivanin.com" date="1651147200">- update to 3.38.3:
  * Fix a case of the query planner be overly aggressive with
    optimizing automatic-index and Bloom-filter construction,
    using inappropriate ON clause terms to restrict the size of the
    automatic-index or Bloom filter, and resulting in missing rows
    in the output.
  * Other minor patches. See the timeline for details.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1652011200">- update to 3.38.5:
  * Fix a blunder in the CLI of the 3.38.4 release
- includes changes from 3.38.4:
  * fix a byte-code problem in the Bloom filter pull-down
    optimization added by release 3.38.0 in which an error in the
    byte code causes the byte code engine to enter an infinite loop
    when the pull-down optimization encounters a NULL key</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1656676800">- update to 3.39.0:
  * Add (long overdue) support for RIGHT and FULL OUTER JOIN
  * Add new binary comparison operators IS NOT DISTINCT FROM and
    IS DISTINCT FROM that are equivalent to IS and IS NOT,
    respective, for compatibility with PostgreSQL and SQL standards
  * Add a new return code (value "3") from the sqlite3_vtab_distinct()
    interface that indicates a query that has both DISTINCT and
    ORDER BY clauses
  * Added the sqlite3_db_name() interface
  * The unix os interface resolves all symbolic links in database
    filenames to create a canonical name for the database before
    the file is opened
  * Defer materializing views until the materialization is actually
    needed, thus avoiding unnecessary work if the materialization
    turns out to never be used
  * The HAVING clause of a SELECT statement is now allowed on any
    aggregate query, even queries that do not have a GROUP BY
    clause
  * Many microoptimizations collectively reduce CPU cycles by about
    2.3%.
- drop sqlite-src-3380100-atof1.patch, included upstream
- add sqlite-src-3390000-func7-pg-181.patch to skip float precision
  related test failures on 32 bit</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1657886400">- update to 3.39.1:
  * Fix an incorrect result from a query that uses a view that
    contains a compound SELECT in which only one arm contains a
    RIGHT JOIN and where the view is not the first FROM clause term
    of the query that contains the view
  * Fix a long-standing problem with ALTER TABLE RENAME that can
    only arise if the sqlite3_limit(SQLITE_LIMIT_SQL_LENGTH) is set
    to a very small value.
  * Fix a long-standing problem in FTS3 that can only arise when
    compiled with the SQLITE_ENABLE_FTS3_PARENTHESIS compile-time
    option.
  * Fix the initial-prefix optimization for the REGEXP extension so
    that it works correctly even if the prefix contains characters
    that require a 3-byte UTF8 encoding.
  * Enhance the sqlite_stmt virtual table so that it buffers all of
    its output.</changelog>
  <changelog author="max@suse.com" date="1658404800">- update to 3.39.2:
  * Fix a performance regression in the query planner associated
    with rearranging the order of FROM clause terms in the
    presences of a LEFT JOIN.
  * Apply fixes for CVE-2022-35737, Chromium bugs 1343348 and
    1345947, forum post 3607259d3c, and other minor problems
    discovered by internal testing. [boo#1201783]</changelog>
  <changelog author="max@suse.com" date="1662379200">- update to 3.39.3:
  * Use a statement journal on DML statement affecting two or more
    database rows if the statement makes use of a SQL functions
    that might abort.
  * Use a mutex to protect the PRAGMA temp_store_directory and
    PRAGMA data_store_directory statements, even though they are
    decremented and documented as not being threadsafe.</changelog>
  <changelog author="max@suse.com" date="1670932800">- bsc#1206337, CVE-2022-46908, sqlite-CVE-2022-46908.patch:
  relying on --safe for execution of an untrusted CLI script</changelog>
  <changelog author="max@suse.com" date="1700481600">- Sync version 3.44.0 from Factory
  * Fixes bsc#1210660, CVE-2023-2137: Heap buffer overflow
  * sqlite3-rtree-i686.patch: temporary build fix for 32-bit x86.
  * Obsoletes sqlite-CVE-2022-46908.patch
  * Obsoletes sqlite-src-3390000-func7-pg-181.patch</changelog>
</package>
<package pkgid="6ce2c20eae4d240b08ed822a334dc81227008f195cbad8e32888c59d7e0ca612" name="sqlite3-tcl" arch="aarch64">
  <version epoch="0" ver="3.44.0" rel="150000.3.23.1"/>
  <changelog author="astieger@suse.com" date="1523448000">- update to 3.23.1:
  * Fix two problems in the new LEFT JOIN strength reduction
    optimization
  * Fix misbehavior of the FTS5 xBestIndex method
  * Fix a harmless reference to an uninitialized virtual machine
    register
  * Fix the eval.c extension so that it works with PRAGMA
    empty_result_callbacks=ON
  * Fix the generate_series virtual table so that it correctly
    returns no rows if any of its constraints are NULL
  * Performance enhancements in the parser</changelog>
  <changelog author="max@suse.com" date="1552996800">- CVE-2018-20346, bsc#1119687: Upgrade to the most recent version
  to fix a remote code execution vulnerability in FTS3 (Magellan).
- Drop sqlite-fts5-link.patch and do it in the spec file instead.
- Version 3.27.2:
  * Add the VACUUM INTO command
  * Issue an SQLITE_WARNING message on the error log if a
    double-quoted string literal is used
  * Add the remove_diacritics=2 option to FTS3 and FTS5.
  * Add  the SQLITE_PREPARE_NO_VTAB option to sqlite3_prepare_v3().
    Use that option to prevent circular references to shadow tables
    from causing resource leaks.
  * Enhancements to the sqlite3_deserialize() interface
  * Enhancements to the CLI, mostly to support testing and debugging
    of the SQLite library itself
  * Increased robustness against malicious SQL that is run against
    a maliciously corrupted database
- Version 3.26.0:
  * Optimization: When doing an UPDATE on a table with indexes on
    expressions, do not update the expression indexes if they do
    not refer to any of the columns of the table being updated.
  * Allow the xBestIndex() method of virtual table implementations
    to return SQLITE_CONSTRAINT to indicate that the proposed query
    plan is unusable and should not be given further consideration.
  * Added the SQLITE_DBCONFIG_DEFENSIVE option which disables the
    ability to create corrupt database files using ordinary SQL.
  * Added support for read-only shadow tables when the
    SQLITE_DBCONFIG_DEFENSIVE option is enabled.
  * Added the PRAGMA legacy_alter_table command, which if enabled
    causes the ALTER TABLE command to behave like older version of
    SQLite (prior to version 3.25.0) for compatibility.
  * Added PRAGMA table_xinfo that works just like PRAGMA table_info
    except that it also shows hidden columns in virtual tables.
  * Added the explain virtual table as a run-time loadable
    extension.
  * Add a limit counter to the query planner to prevent excessive
    sqlite3_prepare() times for certain pathological SQL inputs.
  * Added support for the sqlite3_normalized_sql() interface, when
    compiling with SQLITE_ENABLE_NORMALIZE.
  * Enhanced triggers so that they can use table-valued functions
    that exist in schemas other than the schema where the trigger
    is defined.
  * Improvements to the ".help" command in the CLI.
  * The SQLITE_HISTORY environment variable, if it exists,
    specifies the name of the command-line editing history file.
  * The --deserialize option associated with opening a new database
    in the CLI cause the database file to be read into memory and
    accessed using the sqlite3_deserialize() API. This simplifies
    running tests on a database without modifying the file on disk.
- Version 3.25.2:
  * Add the PRAGMA legacy_alter_table=ON command that causes the
    "ALTER TABLE RENAME" command to behave as in 3.24.0 and earlier
  * Fix issue with some expressions with windows functions in views
- Version 3.25.1:
  * Avoid false-positive error checks on ALTER TABLE
  * Further ORDER BY LIMIT optimization fixes for window functions
- Version 3.25.0:
  * Add support for window functions
  * Add support for renaming columns within a table
  * Query optimizer improvements
  * slightly better concurrency in multi-threaded environments
  * The ORDER BY LIMIT optimization might have caused an infinite
    loop in the byte code of the prepared statement under very
    obscure circumstances, due to a confluence of minor defects in
    the query optimizer
- Version 3.24.0:
  * Add support for PostgreSQL-style UPSERT
  * Add support for auxiliary columns in r-tree tables
  * Add C-language APIs for discovering SQL keywords used by SQLite
  * Add C-language APIs for dynamic strings based on sqlite3_str
  * Enhance ALTER TABLE so that it recognizes "true" and "false" as
    valid arguments to DEFAULT
  * Add the sorter-reference optimization as a compile-time option
  * Improve the format of the EXPLAIN QUERY PLAN raw output, so that
  it gives better information about the query plan and about the
    relationships between the various components of the plan
  * Added the SQLITE_DBCONFIG_RESET_DATABASE option to the
    sqlite3_db_config() API.
  * Automatically intercept the raw EXPLAIN QUERY PLAN output an
    reformat it into an ASCII-art graph.
  * Lines that begin with "#" and that are not in the middle of an
    SQL statement are interpreted as comments
  * Add the --append option to the ".backup" command
  * Add the ".dbconfig" command
  * various performance improvements
  * various bug fixes</changelog>
  <changelog author="max@suse.com" date="1555502400">- Upgrade to 3.28.0:
  * CVE-2019-9936, bsc#1130326: running fts5 prefix queries inside
    a transaction could trigger a heap-based buffer over-read.
  * CVE-2019-9937, bsc#1130325: interleaving reads and writes in a
    single transaction with an fts5 virtual table will lead to a
    NULL Pointer Dereference.
  * Enhanced window functions
  * Enhanced VACUUM INTO so that it works for read-only databases.
  * New query optimizations.
  * Added the sqlite3_value_frombind() API for determining if the
    argument to an SQL function is from a bound parameter.
  * Security and compatibilities enhancements to fts3_tokenizer().
  * Improved robustness against corrupt database files.</changelog>
  <changelog author="max@suse.com" date="1568116800">- bsc#1150137, CVE-2019-16168, sqlite3-CVE-2019-16168.patch:
  Improper validation of qlite_stat1 sz field leads to division by
  zero.</changelog>
  <changelog author="max@suse.com" date="1625054400">- Sync version 3.36.0 from Factory to implement jsc#SLE-16032.
- Obsoletes sqlite3-CVE-2019-16168.patch.
- The following CVEs have been fixed in upstream releases up to
  this point, but were not mentioned in the change log so far:
  * bsc#1173641, CVE-2020-15358: heap-based buffer overflow in
    multiSelectOrderBy due to mishandling of query-flattener
    optimization
  * bsc#1164719, CVE-2020-9327: NULL pointer dereference and
    segmentation fault because of generated column optimizations in
    isAuxiliaryVtabOperator
  * bsc#1160439, CVE-2019-20218: selectExpander in select.c proceeds
    with WITH stack unwinding even after a parsing error
  * bsc#1160438, CVE-2019-19959: memory-management error via
    ext/misc/zipfile.c involving embedded '\0' input
  * bsc#1160309, CVE-2019-19923: improper handling  of  certain uses
    of SELECT DISTINCT in flattenSubquery may lead to null pointer
    dereference
  * bsc#1159850, CVE-2019-19924: improper error handling in
    sqlite3WindowRewrite()
  * bsc#1159847, CVE-2019-19925: improper handling of NULL pathname
    during an update of a ZIP archive
  * bsc#1159715, CVE-2019-19926: improper handling  of certain
    errors during parsing  multiSelect in select.c
  * bsc#1159491, CVE-2019-19880: exprListAppendList in window.c
    allows attackers to trigger an invalid pointer dereference
  * bsc#1158960, CVE-2019-19603: during handling of CREATE TABLE
    and CREATE VIEW statements, does not consider confusion with
    a shadow table name
  * bsc#1158959, CVE-2019-19646: pragma.c mishandles NOT NULL in an
    integrity_check PRAGMA command in certain cases of generated
    columns
  * bsc#1158958, CVE-2019-19645: alter.c allows attackers to trigger
    infinite recursion via certain types of self-referential views
    in conjunction with ALTER TABLE statements
  * bsc#1158812, CVE-2019-19317: lookupName in resolve.c omits bits
    from the colUsed bitmask in the case of a generated column,
    which allows attackers to cause a denial of service
  * bsc#1157818, CVE-2019-19244: sqlite3,sqlite2,sqlite: The
    function sqlite3Select in select.c allows a crash if a
    sub-select uses both DISTINCT and window functions, and also
    has certain ORDER BY usage
  * bsc#928701, CVE-2015-3415: sqlite3VdbeExec comparison operator
    vulnerability
  * bsc#928700, CVE-2015-3414: sqlite3,sqlite2: dequoting of
    collation-sequence names
  * CVE-2020-13434 boo#1172115: integer overflow in
    sqlite3_str_vappendf
  * CVE-2020-13630 boo#1172234: use-after-free in fts3EvalNextRow
  * CVE-2020-13631 boo#1172236: virtual table allowed to be renamed
    to one of its shadow tables
  * CVE-2020-13632 boo#1172240: NULL pointer dereference via
    crafted matchinfo() query
  * CVE-2020-13435: Malicious SQL statements could have crashed the
    process that is running SQLite (boo#1172091)</changelog>
  <changelog author="max@suse.com" date="1638273600">- SQLite3 3.37.0:
  * STRICT tables provide a prescriptive style of data type
    management, for developers who prefer that kind of thing.
  * When adding columns that contain a CHECK constraint or a
    generated column containing a NOT NULL constraint, the
    ALTER TABLE ADD COLUMN now checks new constraints against
    preexisting rows in the database and will only proceed if no
    constraints are violated.
  * Added the PRAGMA table_list statement.
  * Add the .connection command, allowing the CLI to keep multiple
    database connections open at the same time.
  * Add the --safe command-line option that disables dot-commands
    and SQL statements that might cause side-effects that extend
    beyond the single database file named on the command-line.
  * CLI: Performance improvements when reading SQL statements that
    span many lines.
  * Added the sqlite3_autovacuum_pages() interface.
  * The sqlite3_deserialize() does not and has never worked
    for the TEMP database. That limitation is now noted in the
    documentation.
  * The query planner now omits ORDER BY clauses on subqueries and
    views if removing those clauses does not change the semantics
    of the query.
  * The generate_series table-valued function extension is modified
    so that the first parameter ("START") is now required. This is
    done as a way to demonstrate how to write table-valued
    functions with required parameters. The legacy behavior is
    available using the -DZERO_ARGUMENT_GENERATE_SERIES
    compile-time option.
  * Added new sqlite3_changes64() and sqlite3_total_changes64()
    interfaces.
  * Added the SQLITE_OPEN_EXRESCODE flag option to sqlite3_open_v2().
  * Use less memory to hold the database schema.
  * bsc#1189802, CVE-2021-36690: Fix an issue with the SQLite Expert
    extension when a column has no collating sequence.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641124800">- update to 3.37.1:
  * Fix a bug introduced by the UPSERT enhancements of version
    3.35.0 that can cause incorrect byte-code to be generated for
    some obscure but valid SQL, possibly resulting in a NULL-
    pointer dereference.
  * Fix an OOB read that can occur in FTS5 when reading corrupt
    database files.
  * Improved robustness of the --safe option in the CLI.
  * Other minor fixes to assert() statements and test cases.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641988800">- update to 3.37.2:
  * Fix a bug introduced in version 3.35.0 (2021-03-12) that can
    cause database corruption if a SAVEPOINT is rolled back while
    in PRAGMA temp_store=MEMORY mode, and other changes are made,
    and then the outer transaction commits
  * Fix a long-standing problem with ON DELETE CASCADE and ON
    UPDATE CASCADE in which a cache of the bytecode used to
    implement the cascading change was not being reset following a
    local DDL change</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1645876800">- update to 3.38.0
  * Add the -&gt; and -&gt;&gt; operators for easier processing of JSON
  * The JSON functions are now built-ins
  * Enhancements to date and time functions
  * Rename the printf() SQL function to format() for better
    compatibility, with alias for backwards compatibility.
  * Add the sqlite3_error_offset() interface for helping localize
    an SQL error to a specific character in the input SQL text
  * Enhance the interface to virtual tables
  * CLI columnar output modes are enhanced to correctly handle tabs
    and newlines embedded in text, and add options like "--wrap N",
    "--wordwrap on", and "--quote" to the columnar output modes.
  * Query planner enhancements using a Bloom filter to speed up
    large analytic queries, and a balanced merge tree to evaluate
    UNION or UNION ALL compound SELECT statements that have an
    ORDER BY clause.
  * The ALTER TABLE statement is changed to silently ignores
    entries in the sqlite_schema table that do not parse when
    PRAGMA writable_schema=ON</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1647172800">- update to 3.38.1:
  * Fix problems with the new Bloom filter optimization that might
    cause some obscure queries to get an incorrect answer.
  * Fix the localtime modifier of the date and time functions so
    that it preserves fractional seconds.
  * Fix the sqlite_offset SQL function so that it works correctly
    even in corner cases such as when the argument is a virtual
    column or the column of a view.
  * Fix row value IN operator constraints on virtual tables so that
    they work correctly even if the virtual table implementation
    relies on bytecode to filter rows that do not satisfy the
    constraint.
  * Other minor fixes to assert() statements, test cases, and
    documentation. See the source code timeline for details.
- add upstream patch to run atof1 tests only on x86_64
  sqlite-src-3380100-atof1.patch</changelog>
  <changelog author="max@suse.com" date="1647432000">- Remove obsolete configure flags
- Package the Tcl bindings here again so that we only ship one copy
  of SQLite (bsc#1195773).</changelog>
  <changelog author="max@suse.com" date="1648555200">- update to 3.38.2:
  * Fix a problem with the Bloom filter optimization that might
    cause an incorrect answer when doing a LEFT JOIN with a WHERE
    clause constraint that says that one of the columns on the
    right table of the LEFT JOIN is NULL.
  * Other minor patches.</changelog>
  <changelog author="info@paolostivanin.com" date="1651147200">- update to 3.38.3:
  * Fix a case of the query planner be overly aggressive with
    optimizing automatic-index and Bloom-filter construction,
    using inappropriate ON clause terms to restrict the size of the
    automatic-index or Bloom filter, and resulting in missing rows
    in the output.
  * Other minor patches. See the timeline for details.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1652011200">- update to 3.38.5:
  * Fix a blunder in the CLI of the 3.38.4 release
- includes changes from 3.38.4:
  * fix a byte-code problem in the Bloom filter pull-down
    optimization added by release 3.38.0 in which an error in the
    byte code causes the byte code engine to enter an infinite loop
    when the pull-down optimization encounters a NULL key</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1656676800">- update to 3.39.0:
  * Add (long overdue) support for RIGHT and FULL OUTER JOIN
  * Add new binary comparison operators IS NOT DISTINCT FROM and
    IS DISTINCT FROM that are equivalent to IS and IS NOT,
    respective, for compatibility with PostgreSQL and SQL standards
  * Add a new return code (value "3") from the sqlite3_vtab_distinct()
    interface that indicates a query that has both DISTINCT and
    ORDER BY clauses
  * Added the sqlite3_db_name() interface
  * The unix os interface resolves all symbolic links in database
    filenames to create a canonical name for the database before
    the file is opened
  * Defer materializing views until the materialization is actually
    needed, thus avoiding unnecessary work if the materialization
    turns out to never be used
  * The HAVING clause of a SELECT statement is now allowed on any
    aggregate query, even queries that do not have a GROUP BY
    clause
  * Many microoptimizations collectively reduce CPU cycles by about
    2.3%.
- drop sqlite-src-3380100-atof1.patch, included upstream
- add sqlite-src-3390000-func7-pg-181.patch to skip float precision
  related test failures on 32 bit</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1657886400">- update to 3.39.1:
  * Fix an incorrect result from a query that uses a view that
    contains a compound SELECT in which only one arm contains a
    RIGHT JOIN and where the view is not the first FROM clause term
    of the query that contains the view
  * Fix a long-standing problem with ALTER TABLE RENAME that can
    only arise if the sqlite3_limit(SQLITE_LIMIT_SQL_LENGTH) is set
    to a very small value.
  * Fix a long-standing problem in FTS3 that can only arise when
    compiled with the SQLITE_ENABLE_FTS3_PARENTHESIS compile-time
    option.
  * Fix the initial-prefix optimization for the REGEXP extension so
    that it works correctly even if the prefix contains characters
    that require a 3-byte UTF8 encoding.
  * Enhance the sqlite_stmt virtual table so that it buffers all of
    its output.</changelog>
  <changelog author="max@suse.com" date="1658404800">- update to 3.39.2:
  * Fix a performance regression in the query planner associated
    with rearranging the order of FROM clause terms in the
    presences of a LEFT JOIN.
  * Apply fixes for CVE-2022-35737, Chromium bugs 1343348 and
    1345947, forum post 3607259d3c, and other minor problems
    discovered by internal testing. [boo#1201783]</changelog>
  <changelog author="max@suse.com" date="1662379200">- update to 3.39.3:
  * Use a statement journal on DML statement affecting two or more
    database rows if the statement makes use of a SQL functions
    that might abort.
  * Use a mutex to protect the PRAGMA temp_store_directory and
    PRAGMA data_store_directory statements, even though they are
    decremented and documented as not being threadsafe.</changelog>
  <changelog author="max@suse.com" date="1670932800">- bsc#1206337, CVE-2022-46908, sqlite-CVE-2022-46908.patch:
  relying on --safe for execution of an untrusted CLI script</changelog>
  <changelog author="max@suse.com" date="1700481600">- Sync version 3.44.0 from Factory
  * Fixes bsc#1210660, CVE-2023-2137: Heap buffer overflow
  * sqlite3-rtree-i686.patch: temporary build fix for 32-bit x86.
  * Obsoletes sqlite-CVE-2022-46908.patch
  * Obsoletes sqlite-src-3390000-func7-pg-181.patch</changelog>
</package>
<package pkgid="fb89f8d15c84a6853d0e67b5115e283f502a3fe96b5beb398ecd2d6d8682a1c4" name="sqlite3-tcl" arch="s390x">
  <version epoch="0" ver="3.44.0" rel="150000.3.23.1"/>
  <changelog author="astieger@suse.com" date="1523448000">- update to 3.23.1:
  * Fix two problems in the new LEFT JOIN strength reduction
    optimization
  * Fix misbehavior of the FTS5 xBestIndex method
  * Fix a harmless reference to an uninitialized virtual machine
    register
  * Fix the eval.c extension so that it works with PRAGMA
    empty_result_callbacks=ON
  * Fix the generate_series virtual table so that it correctly
    returns no rows if any of its constraints are NULL
  * Performance enhancements in the parser</changelog>
  <changelog author="max@suse.com" date="1552996800">- CVE-2018-20346, bsc#1119687: Upgrade to the most recent version
  to fix a remote code execution vulnerability in FTS3 (Magellan).
- Drop sqlite-fts5-link.patch and do it in the spec file instead.
- Version 3.27.2:
  * Add the VACUUM INTO command
  * Issue an SQLITE_WARNING message on the error log if a
    double-quoted string literal is used
  * Add the remove_diacritics=2 option to FTS3 and FTS5.
  * Add  the SQLITE_PREPARE_NO_VTAB option to sqlite3_prepare_v3().
    Use that option to prevent circular references to shadow tables
    from causing resource leaks.
  * Enhancements to the sqlite3_deserialize() interface
  * Enhancements to the CLI, mostly to support testing and debugging
    of the SQLite library itself
  * Increased robustness against malicious SQL that is run against
    a maliciously corrupted database
- Version 3.26.0:
  * Optimization: When doing an UPDATE on a table with indexes on
    expressions, do not update the expression indexes if they do
    not refer to any of the columns of the table being updated.
  * Allow the xBestIndex() method of virtual table implementations
    to return SQLITE_CONSTRAINT to indicate that the proposed query
    plan is unusable and should not be given further consideration.
  * Added the SQLITE_DBCONFIG_DEFENSIVE option which disables the
    ability to create corrupt database files using ordinary SQL.
  * Added support for read-only shadow tables when the
    SQLITE_DBCONFIG_DEFENSIVE option is enabled.
  * Added the PRAGMA legacy_alter_table command, which if enabled
    causes the ALTER TABLE command to behave like older version of
    SQLite (prior to version 3.25.0) for compatibility.
  * Added PRAGMA table_xinfo that works just like PRAGMA table_info
    except that it also shows hidden columns in virtual tables.
  * Added the explain virtual table as a run-time loadable
    extension.
  * Add a limit counter to the query planner to prevent excessive
    sqlite3_prepare() times for certain pathological SQL inputs.
  * Added support for the sqlite3_normalized_sql() interface, when
    compiling with SQLITE_ENABLE_NORMALIZE.
  * Enhanced triggers so that they can use table-valued functions
    that exist in schemas other than the schema where the trigger
    is defined.
  * Improvements to the ".help" command in the CLI.
  * The SQLITE_HISTORY environment variable, if it exists,
    specifies the name of the command-line editing history file.
  * The --deserialize option associated with opening a new database
    in the CLI cause the database file to be read into memory and
    accessed using the sqlite3_deserialize() API. This simplifies
    running tests on a database without modifying the file on disk.
- Version 3.25.2:
  * Add the PRAGMA legacy_alter_table=ON command that causes the
    "ALTER TABLE RENAME" command to behave as in 3.24.0 and earlier
  * Fix issue with some expressions with windows functions in views
- Version 3.25.1:
  * Avoid false-positive error checks on ALTER TABLE
  * Further ORDER BY LIMIT optimization fixes for window functions
- Version 3.25.0:
  * Add support for window functions
  * Add support for renaming columns within a table
  * Query optimizer improvements
  * slightly better concurrency in multi-threaded environments
  * The ORDER BY LIMIT optimization might have caused an infinite
    loop in the byte code of the prepared statement under very
    obscure circumstances, due to a confluence of minor defects in
    the query optimizer
- Version 3.24.0:
  * Add support for PostgreSQL-style UPSERT
  * Add support for auxiliary columns in r-tree tables
  * Add C-language APIs for discovering SQL keywords used by SQLite
  * Add C-language APIs for dynamic strings based on sqlite3_str
  * Enhance ALTER TABLE so that it recognizes "true" and "false" as
    valid arguments to DEFAULT
  * Add the sorter-reference optimization as a compile-time option
  * Improve the format of the EXPLAIN QUERY PLAN raw output, so that
  it gives better information about the query plan and about the
    relationships between the various components of the plan
  * Added the SQLITE_DBCONFIG_RESET_DATABASE option to the
    sqlite3_db_config() API.
  * Automatically intercept the raw EXPLAIN QUERY PLAN output an
    reformat it into an ASCII-art graph.
  * Lines that begin with "#" and that are not in the middle of an
    SQL statement are interpreted as comments
  * Add the --append option to the ".backup" command
  * Add the ".dbconfig" command
  * various performance improvements
  * various bug fixes</changelog>
  <changelog author="max@suse.com" date="1555502400">- Upgrade to 3.28.0:
  * CVE-2019-9936, bsc#1130326: running fts5 prefix queries inside
    a transaction could trigger a heap-based buffer over-read.
  * CVE-2019-9937, bsc#1130325: interleaving reads and writes in a
    single transaction with an fts5 virtual table will lead to a
    NULL Pointer Dereference.
  * Enhanced window functions
  * Enhanced VACUUM INTO so that it works for read-only databases.
  * New query optimizations.
  * Added the sqlite3_value_frombind() API for determining if the
    argument to an SQL function is from a bound parameter.
  * Security and compatibilities enhancements to fts3_tokenizer().
  * Improved robustness against corrupt database files.</changelog>
  <changelog author="max@suse.com" date="1568116800">- bsc#1150137, CVE-2019-16168, sqlite3-CVE-2019-16168.patch:
  Improper validation of qlite_stat1 sz field leads to division by
  zero.</changelog>
  <changelog author="max@suse.com" date="1625054400">- Sync version 3.36.0 from Factory to implement jsc#SLE-16032.
- Obsoletes sqlite3-CVE-2019-16168.patch.
- The following CVEs have been fixed in upstream releases up to
  this point, but were not mentioned in the change log so far:
  * bsc#1173641, CVE-2020-15358: heap-based buffer overflow in
    multiSelectOrderBy due to mishandling of query-flattener
    optimization
  * bsc#1164719, CVE-2020-9327: NULL pointer dereference and
    segmentation fault because of generated column optimizations in
    isAuxiliaryVtabOperator
  * bsc#1160439, CVE-2019-20218: selectExpander in select.c proceeds
    with WITH stack unwinding even after a parsing error
  * bsc#1160438, CVE-2019-19959: memory-management error via
    ext/misc/zipfile.c involving embedded '\0' input
  * bsc#1160309, CVE-2019-19923: improper handling  of  certain uses
    of SELECT DISTINCT in flattenSubquery may lead to null pointer
    dereference
  * bsc#1159850, CVE-2019-19924: improper error handling in
    sqlite3WindowRewrite()
  * bsc#1159847, CVE-2019-19925: improper handling of NULL pathname
    during an update of a ZIP archive
  * bsc#1159715, CVE-2019-19926: improper handling  of certain
    errors during parsing  multiSelect in select.c
  * bsc#1159491, CVE-2019-19880: exprListAppendList in window.c
    allows attackers to trigger an invalid pointer dereference
  * bsc#1158960, CVE-2019-19603: during handling of CREATE TABLE
    and CREATE VIEW statements, does not consider confusion with
    a shadow table name
  * bsc#1158959, CVE-2019-19646: pragma.c mishandles NOT NULL in an
    integrity_check PRAGMA command in certain cases of generated
    columns
  * bsc#1158958, CVE-2019-19645: alter.c allows attackers to trigger
    infinite recursion via certain types of self-referential views
    in conjunction with ALTER TABLE statements
  * bsc#1158812, CVE-2019-19317: lookupName in resolve.c omits bits
    from the colUsed bitmask in the case of a generated column,
    which allows attackers to cause a denial of service
  * bsc#1157818, CVE-2019-19244: sqlite3,sqlite2,sqlite: The
    function sqlite3Select in select.c allows a crash if a
    sub-select uses both DISTINCT and window functions, and also
    has certain ORDER BY usage
  * bsc#928701, CVE-2015-3415: sqlite3VdbeExec comparison operator
    vulnerability
  * bsc#928700, CVE-2015-3414: sqlite3,sqlite2: dequoting of
    collation-sequence names
  * CVE-2020-13434 boo#1172115: integer overflow in
    sqlite3_str_vappendf
  * CVE-2020-13630 boo#1172234: use-after-free in fts3EvalNextRow
  * CVE-2020-13631 boo#1172236: virtual table allowed to be renamed
    to one of its shadow tables
  * CVE-2020-13632 boo#1172240: NULL pointer dereference via
    crafted matchinfo() query
  * CVE-2020-13435: Malicious SQL statements could have crashed the
    process that is running SQLite (boo#1172091)</changelog>
  <changelog author="max@suse.com" date="1638273600">- SQLite3 3.37.0:
  * STRICT tables provide a prescriptive style of data type
    management, for developers who prefer that kind of thing.
  * When adding columns that contain a CHECK constraint or a
    generated column containing a NOT NULL constraint, the
    ALTER TABLE ADD COLUMN now checks new constraints against
    preexisting rows in the database and will only proceed if no
    constraints are violated.
  * Added the PRAGMA table_list statement.
  * Add the .connection command, allowing the CLI to keep multiple
    database connections open at the same time.
  * Add the --safe command-line option that disables dot-commands
    and SQL statements that might cause side-effects that extend
    beyond the single database file named on the command-line.
  * CLI: Performance improvements when reading SQL statements that
    span many lines.
  * Added the sqlite3_autovacuum_pages() interface.
  * The sqlite3_deserialize() does not and has never worked
    for the TEMP database. That limitation is now noted in the
    documentation.
  * The query planner now omits ORDER BY clauses on subqueries and
    views if removing those clauses does not change the semantics
    of the query.
  * The generate_series table-valued function extension is modified
    so that the first parameter ("START") is now required. This is
    done as a way to demonstrate how to write table-valued
    functions with required parameters. The legacy behavior is
    available using the -DZERO_ARGUMENT_GENERATE_SERIES
    compile-time option.
  * Added new sqlite3_changes64() and sqlite3_total_changes64()
    interfaces.
  * Added the SQLITE_OPEN_EXRESCODE flag option to sqlite3_open_v2().
  * Use less memory to hold the database schema.
  * bsc#1189802, CVE-2021-36690: Fix an issue with the SQLite Expert
    extension when a column has no collating sequence.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641124800">- update to 3.37.1:
  * Fix a bug introduced by the UPSERT enhancements of version
    3.35.0 that can cause incorrect byte-code to be generated for
    some obscure but valid SQL, possibly resulting in a NULL-
    pointer dereference.
  * Fix an OOB read that can occur in FTS5 when reading corrupt
    database files.
  * Improved robustness of the --safe option in the CLI.
  * Other minor fixes to assert() statements and test cases.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641988800">- update to 3.37.2:
  * Fix a bug introduced in version 3.35.0 (2021-03-12) that can
    cause database corruption if a SAVEPOINT is rolled back while
    in PRAGMA temp_store=MEMORY mode, and other changes are made,
    and then the outer transaction commits
  * Fix a long-standing problem with ON DELETE CASCADE and ON
    UPDATE CASCADE in which a cache of the bytecode used to
    implement the cascading change was not being reset following a
    local DDL change</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1645876800">- update to 3.38.0
  * Add the -&gt; and -&gt;&gt; operators for easier processing of JSON
  * The JSON functions are now built-ins
  * Enhancements to date and time functions
  * Rename the printf() SQL function to format() for better
    compatibility, with alias for backwards compatibility.
  * Add the sqlite3_error_offset() interface for helping localize
    an SQL error to a specific character in the input SQL text
  * Enhance the interface to virtual tables
  * CLI columnar output modes are enhanced to correctly handle tabs
    and newlines embedded in text, and add options like "--wrap N",
    "--wordwrap on", and "--quote" to the columnar output modes.
  * Query planner enhancements using a Bloom filter to speed up
    large analytic queries, and a balanced merge tree to evaluate
    UNION or UNION ALL compound SELECT statements that have an
    ORDER BY clause.
  * The ALTER TABLE statement is changed to silently ignores
    entries in the sqlite_schema table that do not parse when
    PRAGMA writable_schema=ON</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1647172800">- update to 3.38.1:
  * Fix problems with the new Bloom filter optimization that might
    cause some obscure queries to get an incorrect answer.
  * Fix the localtime modifier of the date and time functions so
    that it preserves fractional seconds.
  * Fix the sqlite_offset SQL function so that it works correctly
    even in corner cases such as when the argument is a virtual
    column or the column of a view.
  * Fix row value IN operator constraints on virtual tables so that
    they work correctly even if the virtual table implementation
    relies on bytecode to filter rows that do not satisfy the
    constraint.
  * Other minor fixes to assert() statements, test cases, and
    documentation. See the source code timeline for details.
- add upstream patch to run atof1 tests only on x86_64
  sqlite-src-3380100-atof1.patch</changelog>
  <changelog author="max@suse.com" date="1647432000">- Remove obsolete configure flags
- Package the Tcl bindings here again so that we only ship one copy
  of SQLite (bsc#1195773).</changelog>
  <changelog author="max@suse.com" date="1648555200">- update to 3.38.2:
  * Fix a problem with the Bloom filter optimization that might
    cause an incorrect answer when doing a LEFT JOIN with a WHERE
    clause constraint that says that one of the columns on the
    right table of the LEFT JOIN is NULL.
  * Other minor patches.</changelog>
  <changelog author="info@paolostivanin.com" date="1651147200">- update to 3.38.3:
  * Fix a case of the query planner be overly aggressive with
    optimizing automatic-index and Bloom-filter construction,
    using inappropriate ON clause terms to restrict the size of the
    automatic-index or Bloom filter, and resulting in missing rows
    in the output.
  * Other minor patches. See the timeline for details.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1652011200">- update to 3.38.5:
  * Fix a blunder in the CLI of the 3.38.4 release
- includes changes from 3.38.4:
  * fix a byte-code problem in the Bloom filter pull-down
    optimization added by release 3.38.0 in which an error in the
    byte code causes the byte code engine to enter an infinite loop
    when the pull-down optimization encounters a NULL key</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1656676800">- update to 3.39.0:
  * Add (long overdue) support for RIGHT and FULL OUTER JOIN
  * Add new binary comparison operators IS NOT DISTINCT FROM and
    IS DISTINCT FROM that are equivalent to IS and IS NOT,
    respective, for compatibility with PostgreSQL and SQL standards
  * Add a new return code (value "3") from the sqlite3_vtab_distinct()
    interface that indicates a query that has both DISTINCT and
    ORDER BY clauses
  * Added the sqlite3_db_name() interface
  * The unix os interface resolves all symbolic links in database
    filenames to create a canonical name for the database before
    the file is opened
  * Defer materializing views until the materialization is actually
    needed, thus avoiding unnecessary work if the materialization
    turns out to never be used
  * The HAVING clause of a SELECT statement is now allowed on any
    aggregate query, even queries that do not have a GROUP BY
    clause
  * Many microoptimizations collectively reduce CPU cycles by about
    2.3%.
- drop sqlite-src-3380100-atof1.patch, included upstream
- add sqlite-src-3390000-func7-pg-181.patch to skip float precision
  related test failures on 32 bit</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1657886400">- update to 3.39.1:
  * Fix an incorrect result from a query that uses a view that
    contains a compound SELECT in which only one arm contains a
    RIGHT JOIN and where the view is not the first FROM clause term
    of the query that contains the view
  * Fix a long-standing problem with ALTER TABLE RENAME that can
    only arise if the sqlite3_limit(SQLITE_LIMIT_SQL_LENGTH) is set
    to a very small value.
  * Fix a long-standing problem in FTS3 that can only arise when
    compiled with the SQLITE_ENABLE_FTS3_PARENTHESIS compile-time
    option.
  * Fix the initial-prefix optimization for the REGEXP extension so
    that it works correctly even if the prefix contains characters
    that require a 3-byte UTF8 encoding.
  * Enhance the sqlite_stmt virtual table so that it buffers all of
    its output.</changelog>
  <changelog author="max@suse.com" date="1658404800">- update to 3.39.2:
  * Fix a performance regression in the query planner associated
    with rearranging the order of FROM clause terms in the
    presences of a LEFT JOIN.
  * Apply fixes for CVE-2022-35737, Chromium bugs 1343348 and
    1345947, forum post 3607259d3c, and other minor problems
    discovered by internal testing. [boo#1201783]</changelog>
  <changelog author="max@suse.com" date="1662379200">- update to 3.39.3:
  * Use a statement journal on DML statement affecting two or more
    database rows if the statement makes use of a SQL functions
    that might abort.
  * Use a mutex to protect the PRAGMA temp_store_directory and
    PRAGMA data_store_directory statements, even though they are
    decremented and documented as not being threadsafe.</changelog>
  <changelog author="max@suse.com" date="1670932800">- bsc#1206337, CVE-2022-46908, sqlite-CVE-2022-46908.patch:
  relying on --safe for execution of an untrusted CLI script</changelog>
  <changelog author="max@suse.com" date="1700481600">- Sync version 3.44.0 from Factory
  * Fixes bsc#1210660, CVE-2023-2137: Heap buffer overflow
  * sqlite3-rtree-i686.patch: temporary build fix for 32-bit x86.
  * Obsoletes sqlite-CVE-2022-46908.patch
  * Obsoletes sqlite-src-3390000-func7-pg-181.patch</changelog>
</package>
<package pkgid="d900380f24a11e5425c5b823cefc1dc43fa30c5f4459fed0782ef8f68a1c7a8a" name="sqlite3-tcl" arch="x86_64">
  <version epoch="0" ver="3.44.0" rel="150000.3.23.1"/>
  <changelog author="astieger@suse.com" date="1523448000">- update to 3.23.1:
  * Fix two problems in the new LEFT JOIN strength reduction
    optimization
  * Fix misbehavior of the FTS5 xBestIndex method
  * Fix a harmless reference to an uninitialized virtual machine
    register
  * Fix the eval.c extension so that it works with PRAGMA
    empty_result_callbacks=ON
  * Fix the generate_series virtual table so that it correctly
    returns no rows if any of its constraints are NULL
  * Performance enhancements in the parser</changelog>
  <changelog author="max@suse.com" date="1552996800">- CVE-2018-20346, bsc#1119687: Upgrade to the most recent version
  to fix a remote code execution vulnerability in FTS3 (Magellan).
- Drop sqlite-fts5-link.patch and do it in the spec file instead.
- Version 3.27.2:
  * Add the VACUUM INTO command
  * Issue an SQLITE_WARNING message on the error log if a
    double-quoted string literal is used
  * Add the remove_diacritics=2 option to FTS3 and FTS5.
  * Add  the SQLITE_PREPARE_NO_VTAB option to sqlite3_prepare_v3().
    Use that option to prevent circular references to shadow tables
    from causing resource leaks.
  * Enhancements to the sqlite3_deserialize() interface
  * Enhancements to the CLI, mostly to support testing and debugging
    of the SQLite library itself
  * Increased robustness against malicious SQL that is run against
    a maliciously corrupted database
- Version 3.26.0:
  * Optimization: When doing an UPDATE on a table with indexes on
    expressions, do not update the expression indexes if they do
    not refer to any of the columns of the table being updated.
  * Allow the xBestIndex() method of virtual table implementations
    to return SQLITE_CONSTRAINT to indicate that the proposed query
    plan is unusable and should not be given further consideration.
  * Added the SQLITE_DBCONFIG_DEFENSIVE option which disables the
    ability to create corrupt database files using ordinary SQL.
  * Added support for read-only shadow tables when the
    SQLITE_DBCONFIG_DEFENSIVE option is enabled.
  * Added the PRAGMA legacy_alter_table command, which if enabled
    causes the ALTER TABLE command to behave like older version of
    SQLite (prior to version 3.25.0) for compatibility.
  * Added PRAGMA table_xinfo that works just like PRAGMA table_info
    except that it also shows hidden columns in virtual tables.
  * Added the explain virtual table as a run-time loadable
    extension.
  * Add a limit counter to the query planner to prevent excessive
    sqlite3_prepare() times for certain pathological SQL inputs.
  * Added support for the sqlite3_normalized_sql() interface, when
    compiling with SQLITE_ENABLE_NORMALIZE.
  * Enhanced triggers so that they can use table-valued functions
    that exist in schemas other than the schema where the trigger
    is defined.
  * Improvements to the ".help" command in the CLI.
  * The SQLITE_HISTORY environment variable, if it exists,
    specifies the name of the command-line editing history file.
  * The --deserialize option associated with opening a new database
    in the CLI cause the database file to be read into memory and
    accessed using the sqlite3_deserialize() API. This simplifies
    running tests on a database without modifying the file on disk.
- Version 3.25.2:
  * Add the PRAGMA legacy_alter_table=ON command that causes the
    "ALTER TABLE RENAME" command to behave as in 3.24.0 and earlier
  * Fix issue with some expressions with windows functions in views
- Version 3.25.1:
  * Avoid false-positive error checks on ALTER TABLE
  * Further ORDER BY LIMIT optimization fixes for window functions
- Version 3.25.0:
  * Add support for window functions
  * Add support for renaming columns within a table
  * Query optimizer improvements
  * slightly better concurrency in multi-threaded environments
  * The ORDER BY LIMIT optimization might have caused an infinite
    loop in the byte code of the prepared statement under very
    obscure circumstances, due to a confluence of minor defects in
    the query optimizer
- Version 3.24.0:
  * Add support for PostgreSQL-style UPSERT
  * Add support for auxiliary columns in r-tree tables
  * Add C-language APIs for discovering SQL keywords used by SQLite
  * Add C-language APIs for dynamic strings based on sqlite3_str
  * Enhance ALTER TABLE so that it recognizes "true" and "false" as
    valid arguments to DEFAULT
  * Add the sorter-reference optimization as a compile-time option
  * Improve the format of the EXPLAIN QUERY PLAN raw output, so that
  it gives better information about the query plan and about the
    relationships between the various components of the plan
  * Added the SQLITE_DBCONFIG_RESET_DATABASE option to the
    sqlite3_db_config() API.
  * Automatically intercept the raw EXPLAIN QUERY PLAN output an
    reformat it into an ASCII-art graph.
  * Lines that begin with "#" and that are not in the middle of an
    SQL statement are interpreted as comments
  * Add the --append option to the ".backup" command
  * Add the ".dbconfig" command
  * various performance improvements
  * various bug fixes</changelog>
  <changelog author="max@suse.com" date="1555502400">- Upgrade to 3.28.0:
  * CVE-2019-9936, bsc#1130326: running fts5 prefix queries inside
    a transaction could trigger a heap-based buffer over-read.
  * CVE-2019-9937, bsc#1130325: interleaving reads and writes in a
    single transaction with an fts5 virtual table will lead to a
    NULL Pointer Dereference.
  * Enhanced window functions
  * Enhanced VACUUM INTO so that it works for read-only databases.
  * New query optimizations.
  * Added the sqlite3_value_frombind() API for determining if the
    argument to an SQL function is from a bound parameter.
  * Security and compatibilities enhancements to fts3_tokenizer().
  * Improved robustness against corrupt database files.</changelog>
  <changelog author="max@suse.com" date="1568116800">- bsc#1150137, CVE-2019-16168, sqlite3-CVE-2019-16168.patch:
  Improper validation of qlite_stat1 sz field leads to division by
  zero.</changelog>
  <changelog author="max@suse.com" date="1625054400">- Sync version 3.36.0 from Factory to implement jsc#SLE-16032.
- Obsoletes sqlite3-CVE-2019-16168.patch.
- The following CVEs have been fixed in upstream releases up to
  this point, but were not mentioned in the change log so far:
  * bsc#1173641, CVE-2020-15358: heap-based buffer overflow in
    multiSelectOrderBy due to mishandling of query-flattener
    optimization
  * bsc#1164719, CVE-2020-9327: NULL pointer dereference and
    segmentation fault because of generated column optimizations in
    isAuxiliaryVtabOperator
  * bsc#1160439, CVE-2019-20218: selectExpander in select.c proceeds
    with WITH stack unwinding even after a parsing error
  * bsc#1160438, CVE-2019-19959: memory-management error via
    ext/misc/zipfile.c involving embedded '\0' input
  * bsc#1160309, CVE-2019-19923: improper handling  of  certain uses
    of SELECT DISTINCT in flattenSubquery may lead to null pointer
    dereference
  * bsc#1159850, CVE-2019-19924: improper error handling in
    sqlite3WindowRewrite()
  * bsc#1159847, CVE-2019-19925: improper handling of NULL pathname
    during an update of a ZIP archive
  * bsc#1159715, CVE-2019-19926: improper handling  of certain
    errors during parsing  multiSelect in select.c
  * bsc#1159491, CVE-2019-19880: exprListAppendList in window.c
    allows attackers to trigger an invalid pointer dereference
  * bsc#1158960, CVE-2019-19603: during handling of CREATE TABLE
    and CREATE VIEW statements, does not consider confusion with
    a shadow table name
  * bsc#1158959, CVE-2019-19646: pragma.c mishandles NOT NULL in an
    integrity_check PRAGMA command in certain cases of generated
    columns
  * bsc#1158958, CVE-2019-19645: alter.c allows attackers to trigger
    infinite recursion via certain types of self-referential views
    in conjunction with ALTER TABLE statements
  * bsc#1158812, CVE-2019-19317: lookupName in resolve.c omits bits
    from the colUsed bitmask in the case of a generated column,
    which allows attackers to cause a denial of service
  * bsc#1157818, CVE-2019-19244: sqlite3,sqlite2,sqlite: The
    function sqlite3Select in select.c allows a crash if a
    sub-select uses both DISTINCT and window functions, and also
    has certain ORDER BY usage
  * bsc#928701, CVE-2015-3415: sqlite3VdbeExec comparison operator
    vulnerability
  * bsc#928700, CVE-2015-3414: sqlite3,sqlite2: dequoting of
    collation-sequence names
  * CVE-2020-13434 boo#1172115: integer overflow in
    sqlite3_str_vappendf
  * CVE-2020-13630 boo#1172234: use-after-free in fts3EvalNextRow
  * CVE-2020-13631 boo#1172236: virtual table allowed to be renamed
    to one of its shadow tables
  * CVE-2020-13632 boo#1172240: NULL pointer dereference via
    crafted matchinfo() query
  * CVE-2020-13435: Malicious SQL statements could have crashed the
    process that is running SQLite (boo#1172091)</changelog>
  <changelog author="max@suse.com" date="1638273600">- SQLite3 3.37.0:
  * STRICT tables provide a prescriptive style of data type
    management, for developers who prefer that kind of thing.
  * When adding columns that contain a CHECK constraint or a
    generated column containing a NOT NULL constraint, the
    ALTER TABLE ADD COLUMN now checks new constraints against
    preexisting rows in the database and will only proceed if no
    constraints are violated.
  * Added the PRAGMA table_list statement.
  * Add the .connection command, allowing the CLI to keep multiple
    database connections open at the same time.
  * Add the --safe command-line option that disables dot-commands
    and SQL statements that might cause side-effects that extend
    beyond the single database file named on the command-line.
  * CLI: Performance improvements when reading SQL statements that
    span many lines.
  * Added the sqlite3_autovacuum_pages() interface.
  * The sqlite3_deserialize() does not and has never worked
    for the TEMP database. That limitation is now noted in the
    documentation.
  * The query planner now omits ORDER BY clauses on subqueries and
    views if removing those clauses does not change the semantics
    of the query.
  * The generate_series table-valued function extension is modified
    so that the first parameter ("START") is now required. This is
    done as a way to demonstrate how to write table-valued
    functions with required parameters. The legacy behavior is
    available using the -DZERO_ARGUMENT_GENERATE_SERIES
    compile-time option.
  * Added new sqlite3_changes64() and sqlite3_total_changes64()
    interfaces.
  * Added the SQLITE_OPEN_EXRESCODE flag option to sqlite3_open_v2().
  * Use less memory to hold the database schema.
  * bsc#1189802, CVE-2021-36690: Fix an issue with the SQLite Expert
    extension when a column has no collating sequence.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641124800">- update to 3.37.1:
  * Fix a bug introduced by the UPSERT enhancements of version
    3.35.0 that can cause incorrect byte-code to be generated for
    some obscure but valid SQL, possibly resulting in a NULL-
    pointer dereference.
  * Fix an OOB read that can occur in FTS5 when reading corrupt
    database files.
  * Improved robustness of the --safe option in the CLI.
  * Other minor fixes to assert() statements and test cases.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641988800">- update to 3.37.2:
  * Fix a bug introduced in version 3.35.0 (2021-03-12) that can
    cause database corruption if a SAVEPOINT is rolled back while
    in PRAGMA temp_store=MEMORY mode, and other changes are made,
    and then the outer transaction commits
  * Fix a long-standing problem with ON DELETE CASCADE and ON
    UPDATE CASCADE in which a cache of the bytecode used to
    implement the cascading change was not being reset following a
    local DDL change</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1645876800">- update to 3.38.0
  * Add the -&gt; and -&gt;&gt; operators for easier processing of JSON
  * The JSON functions are now built-ins
  * Enhancements to date and time functions
  * Rename the printf() SQL function to format() for better
    compatibility, with alias for backwards compatibility.
  * Add the sqlite3_error_offset() interface for helping localize
    an SQL error to a specific character in the input SQL text
  * Enhance the interface to virtual tables
  * CLI columnar output modes are enhanced to correctly handle tabs
    and newlines embedded in text, and add options like "--wrap N",
    "--wordwrap on", and "--quote" to the columnar output modes.
  * Query planner enhancements using a Bloom filter to speed up
    large analytic queries, and a balanced merge tree to evaluate
    UNION or UNION ALL compound SELECT statements that have an
    ORDER BY clause.
  * The ALTER TABLE statement is changed to silently ignores
    entries in the sqlite_schema table that do not parse when
    PRAGMA writable_schema=ON</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1647172800">- update to 3.38.1:
  * Fix problems with the new Bloom filter optimization that might
    cause some obscure queries to get an incorrect answer.
  * Fix the localtime modifier of the date and time functions so
    that it preserves fractional seconds.
  * Fix the sqlite_offset SQL function so that it works correctly
    even in corner cases such as when the argument is a virtual
    column or the column of a view.
  * Fix row value IN operator constraints on virtual tables so that
    they work correctly even if the virtual table implementation
    relies on bytecode to filter rows that do not satisfy the
    constraint.
  * Other minor fixes to assert() statements, test cases, and
    documentation. See the source code timeline for details.
- add upstream patch to run atof1 tests only on x86_64
  sqlite-src-3380100-atof1.patch</changelog>
  <changelog author="max@suse.com" date="1647432000">- Remove obsolete configure flags
- Package the Tcl bindings here again so that we only ship one copy
  of SQLite (bsc#1195773).</changelog>
  <changelog author="max@suse.com" date="1648555200">- update to 3.38.2:
  * Fix a problem with the Bloom filter optimization that might
    cause an incorrect answer when doing a LEFT JOIN with a WHERE
    clause constraint that says that one of the columns on the
    right table of the LEFT JOIN is NULL.
  * Other minor patches.</changelog>
  <changelog author="info@paolostivanin.com" date="1651147200">- update to 3.38.3:
  * Fix a case of the query planner be overly aggressive with
    optimizing automatic-index and Bloom-filter construction,
    using inappropriate ON clause terms to restrict the size of the
    automatic-index or Bloom filter, and resulting in missing rows
    in the output.
  * Other minor patches. See the timeline for details.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1652011200">- update to 3.38.5:
  * Fix a blunder in the CLI of the 3.38.4 release
- includes changes from 3.38.4:
  * fix a byte-code problem in the Bloom filter pull-down
    optimization added by release 3.38.0 in which an error in the
    byte code causes the byte code engine to enter an infinite loop
    when the pull-down optimization encounters a NULL key</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1656676800">- update to 3.39.0:
  * Add (long overdue) support for RIGHT and FULL OUTER JOIN
  * Add new binary comparison operators IS NOT DISTINCT FROM and
    IS DISTINCT FROM that are equivalent to IS and IS NOT,
    respective, for compatibility with PostgreSQL and SQL standards
  * Add a new return code (value "3") from the sqlite3_vtab_distinct()
    interface that indicates a query that has both DISTINCT and
    ORDER BY clauses
  * Added the sqlite3_db_name() interface
  * The unix os interface resolves all symbolic links in database
    filenames to create a canonical name for the database before
    the file is opened
  * Defer materializing views until the materialization is actually
    needed, thus avoiding unnecessary work if the materialization
    turns out to never be used
  * The HAVING clause of a SELECT statement is now allowed on any
    aggregate query, even queries that do not have a GROUP BY
    clause
  * Many microoptimizations collectively reduce CPU cycles by about
    2.3%.
- drop sqlite-src-3380100-atof1.patch, included upstream
- add sqlite-src-3390000-func7-pg-181.patch to skip float precision
  related test failures on 32 bit</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1657886400">- update to 3.39.1:
  * Fix an incorrect result from a query that uses a view that
    contains a compound SELECT in which only one arm contains a
    RIGHT JOIN and where the view is not the first FROM clause term
    of the query that contains the view
  * Fix a long-standing problem with ALTER TABLE RENAME that can
    only arise if the sqlite3_limit(SQLITE_LIMIT_SQL_LENGTH) is set
    to a very small value.
  * Fix a long-standing problem in FTS3 that can only arise when
    compiled with the SQLITE_ENABLE_FTS3_PARENTHESIS compile-time
    option.
  * Fix the initial-prefix optimization for the REGEXP extension so
    that it works correctly even if the prefix contains characters
    that require a 3-byte UTF8 encoding.
  * Enhance the sqlite_stmt virtual table so that it buffers all of
    its output.</changelog>
  <changelog author="max@suse.com" date="1658404800">- update to 3.39.2:
  * Fix a performance regression in the query planner associated
    with rearranging the order of FROM clause terms in the
    presences of a LEFT JOIN.
  * Apply fixes for CVE-2022-35737, Chromium bugs 1343348 and
    1345947, forum post 3607259d3c, and other minor problems
    discovered by internal testing. [boo#1201783]</changelog>
  <changelog author="max@suse.com" date="1662379200">- update to 3.39.3:
  * Use a statement journal on DML statement affecting two or more
    database rows if the statement makes use of a SQL functions
    that might abort.
  * Use a mutex to protect the PRAGMA temp_store_directory and
    PRAGMA data_store_directory statements, even though they are
    decremented and documented as not being threadsafe.</changelog>
  <changelog author="max@suse.com" date="1670932800">- bsc#1206337, CVE-2022-46908, sqlite-CVE-2022-46908.patch:
  relying on --safe for execution of an untrusted CLI script</changelog>
  <changelog author="max@suse.com" date="1700481600">- Sync version 3.44.0 from Factory
  * Fixes bsc#1210660, CVE-2023-2137: Heap buffer overflow
  * sqlite3-rtree-i686.patch: temporary build fix for 32-bit x86.
  * Obsoletes sqlite-CVE-2022-46908.patch
  * Obsoletes sqlite-src-3390000-func7-pg-181.patch</changelog>
</package>
<package pkgid="bb05cc82c040b59b12e66e95c373586e67ab1eecc72af63a19b18e2a1d0afd01" name="squashfs" arch="aarch64">
  <version epoch="0" ver="4.6.1" rel="150300.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1425643200">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="9@cirno.systems" date="1441108800">- Enable LZ4 support</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1446724800">- add patches to fix eventual file corruption (boo#953723)
  0001-mksquashfs-fix-rare-race-in-fragment-waiting-in-file.patch
  0002-Fix-2GB-limit-of-the-is_fragment-.-function.patch</changelog>
  <changelog author="dmueller@suse.com" date="1453377600">- fix build for SLE12 and older</changelog>
  <changelog author="duwe@suse.com" date="1466078400">- Machines with 1024 processors or more reach the limit of maximum
  file descriptors (bsc#984136). Other limits apply that may be
  hit for no good reason. Simply limit the number of used threads
  to an arbitrary number, squashfs-thread-limit.</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for major/minor/makedev</changelog>
  <changelog author="dimstar@opensuse.org" date="1553083200">- Use / as sed command delimiter. Comma can actually show up in
  optflags (think -Wl,…), which then breaks the sed command line
  parsing.</changelog>
  <changelog author="dsterba@suse.cz" date="1553083201">- Use | instead of / that can be part of -L or -I options.</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133284).</changelog>
  <changelog author="p.seiler@linuxmail.org" date="1559736000">-  Add -offset function to skip n bytes at the beginning of the squashfs…
  https://github.com/plougher/squashfs-tools/commit/5a498ad24dcfeac9f3d747e894f22901f3ac10
  (0003-Add-offset-function-to-skip-n-bytes.patch)</changelog>
  <changelog author="p.seiler@linuxmail.org" date="1571659200">- Version 4.4 - 2019-08-29:
  * Reproducible builds, new compressors,
  CVE fixes, security hardening and new options
  for Mksquashfs/Unsquashfs.
- Overall improvements:
  * Mksquashfs now generates reproducible images by default.
  * Mkfs time and file timestamps can also be specified.
  * Support for the Zstandard (ZSTD) compression algorithm.
  * CVE-2015-4645 and CVE-2015-4646 have been fixed.
- Mksquashfs improvements and major bug fixes:
  * Pseudo files now support symbolic links.
  * New -mkfs-time option.
  * New -all-time option.
  * New -root-mode option.
  * New -quiet option.
  * New -noId option.
  * New -offset option.
  * Update lz4 wrapper to use new functions introduced
  in 1.7.0.
  * Bug fix, don't allow "/" pseudo filenames.
  * Bug fix, allow quoting of pseudo files, to
  better handle filenames with spaces.
  * Fix compilation with glibc 2.25+.
- Unsquashfs improvements and major bug fixes:
  * CVE-2015-4645 and CVE-2015-4646 have been fixed.
  * Unsquashfs has been further hardened against corrupted
  filestems.
  * Unsquashfs is now more strict about error handling.
  * New -ignore-errors option.
  * New -strict-errors option.
  * New -lln[umeric] option.
  * New -lc option.
  * New -llc option.
  * New -mkfs-time option.
  * New -UTC option.
  * New -offset option.
  * New -quiet option.
  * Update lz4 wrapper to use new functions introduced
  in 1.7.0.
  * Bug fix, fatal and non-fatal errors now set the exit
  code to 1.
  * Bug fix, fix time setting for symlinks.
  * Bug fix, try to set sticky-bit when running as a
  user process.
  * Fix compilation with glibc 2.25+.
- build changes:
  * re-created patches to fit squashfs 4.4
  * removed 0001-mksquashfs-fix-rare-race-in-fragment-waiting-in-file.patch
  (new version includes this change)
  * removed 0002-Fix-2GB-limit-of-the-is_fragment-.-function.patch
  (new version includes this change)
  * removed 0003-Add-offset-function-to-skip-n-bytes.patch
  (new version includes this change)
  * removed sysmacros.patch
  (new version includes this change)</changelog>
  <changelog author="mliska@suse.cz" date="1585656000">- Add -fcommon in order to fix boo#1160294.</changelog>
  <changelog author="bjoernv@arcor.de" date="1598961600">- enabled ZSTD compression support for openSUSE &gt;= 15.1</changelog>
  <changelog author="dmueller@suse.com" date="1639224000">- update to 4.5:
  * Mksquashfs now supports "Actions".
  * New sqfstar command which will create a Squashfs image from a tar archive.
  * Tar style handling of source pathnames in Mksquashfs.
  * Cpio style handling of source pathnames in Mksquashfs.
  * New option to throttle the amount of CPU and I/O.
  * Mksquashfs now allows no source directory to be specified.
  * New Pseudo file "R" definition which allows a Regular file
    o be created with data stored within the Pseudo file.
  * Symbolic links are now followed in extract files
  * Unsquashfs now supports "exclude" files.
  * Max depth traversal option added.
  * Unsquashfs can now output a "Pseudo file" representing the
    input Squashfs filesystem.
  * New -one-file-system option in Mksquashfs.
  * New -no-hardlinks option in Mksquashfs.
  * Exit code in Unsquashfs changed to distinguish between
    non-fatal errors (exit 2), and fatal errors (exit 1).
  * Xattr id count added in Unsquashfs "-stat" output.
  * Unsquashfs "write outside directory" exploit fixed.
  * Error handling in Unsquashfs writer thread fixed.
  * Fix failure to truncate destination if appending aborted.
  * Prevent Mksquashfs reading the destination file.</changelog>
  <changelog author="dmueller@suse.com" date="1647777600">- update to 4.5.1 (bsc#1190531, CVE-2021-41072):
  * This release adds Manpages for Mksquashfs(1), Unsquashfs(1),
    Sqfstar(1) and Sqfscat(1).
  * The -help text output from the utilities has been improved
    and extended as well (but the Manpages are now more
    comprehensive).
  * CVE-2021-41072 which is a writing outside of destination
    exploit, has been fixed.
  * The number of hard-links in the filesystem is now also
    displayed by Mksquashfs in the output summary.
  * The number of hard-links written by Unsquashfs is now
    also displayed in the output summary.
  * Unsquashfs will now write to a pre-existing destination
    directory, rather than aborting.
  * Unsquashfs now allows "." to used as the destination, to
    extract to the current directory.
  * The Unsquashfs progress bar now tracks empty files and
    hardlinks, in addition to data blocks.
  * -no-hardlinks option has been implemented for Sqfstar.
  * More sanity checking for "corrupted" filesystems, including
    checks for multiply linked directories and directory loops.
  * Options that may cause filesystems to be unmountable have
    been moved into a new "experts" category in the Mksquashfs
    help text (and Manpage).
  * Maximum cpiostyle filename limited to PATH_MAX.  This
    prevents attempts to overflow the stack, or cause system
    calls to fail with a too long pathname.
  * Don't always use "max open file limit" when calculating
    length of queues, as a very large file limit can cause
    Unsquashfs to abort.  Instead use the smaller of max open
    file limit and cache size.
  * Fix Mksquashfs silently ignoring Pseudo file definitions
    when appending.
  * Don't abort if no XATTR support has been built in, and
    there's XATTRs in the filesystem.  This is a regression
    introduced in 2019 in Version 4.4.
  * Fix duplicate check when the last file block is sparse.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1652011200">- set LZMA_XZ_SUPPORT=1 so you can (un)squash -comp lzma images</changelog>
  <changelog author="duwe@suse.com" date="1665748800">- Do not repeat openSUSE / SLE version tests
- Actually format and package the man pages</changelog>
  <changelog author="dmueller@suse.com" date="1681560000">- update to 4.6.1:
  * Race condition which can cause corruption of the "fragment
    table" fixed.  This is a regression introduced in August 2022,
    and it has been seen when tailend packing is used (-tailends option).
  * Fix build failure when the tools are being built without
    extended attribute (XATTRs) support.
  * Fix XATTR error message when an unrecognised prefix is
    found
  * Fix incorrect free of pointer when an unrecognised XATTR
    prefix is found.
  * Major improvements in extended attribute handling,
    pseudo file handling, and miscellaneous new options and
    improvements
  * Extended attribute handling improved in Mksquashfs and
    Sqfstar
  * New Pseudo file xattr definition to add extended
    attributes to files.
  * New xattrs-add Action to add extended attributes to files
  * Extended attribute handling improved in Unsquashfs
  * Other major improvements
  * Unsquashfs can now output Pseudo files to standard out.
  * Mksquashfs can now input Pseudo files from standard in.
  * Squashfs filesystems can now be converted (different
    block size compression etc) without unpacking to an
    intermediate filesystem or mounting, by piping the output of
    Unsquashfs to Mksquashfs.
  * Pseudo files are now supported by Sqfstar.
  * "Non-anchored" excludes are now supported by Unsquashfs.</changelog>
  <changelog author="duwe@suse.com" date="1688385600">- For reference: previous updates fixed
  * CVE-2021-40153 (bsc#1189936)
  * CVE-2015-4645, CVE-2015-4646 (bsc#935380)</changelog>
</package>
<package pkgid="8d863064c6b495f8345706212ad1b524734112828a54fa511143582bbd09d3ee" name="squashfs" arch="s390x">
  <version epoch="0" ver="4.6.1" rel="150300.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1425643200">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="9@cirno.systems" date="1441108800">- Enable LZ4 support</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1446724800">- add patches to fix eventual file corruption (boo#953723)
  0001-mksquashfs-fix-rare-race-in-fragment-waiting-in-file.patch
  0002-Fix-2GB-limit-of-the-is_fragment-.-function.patch</changelog>
  <changelog author="dmueller@suse.com" date="1453377600">- fix build for SLE12 and older</changelog>
  <changelog author="duwe@suse.com" date="1466078400">- Machines with 1024 processors or more reach the limit of maximum
  file descriptors (bsc#984136). Other limits apply that may be
  hit for no good reason. Simply limit the number of used threads
  to an arbitrary number, squashfs-thread-limit.</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for major/minor/makedev</changelog>
  <changelog author="dimstar@opensuse.org" date="1553083200">- Use / as sed command delimiter. Comma can actually show up in
  optflags (think -Wl,…), which then breaks the sed command line
  parsing.</changelog>
  <changelog author="dsterba@suse.cz" date="1553083201">- Use | instead of / that can be part of -L or -I options.</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133284).</changelog>
  <changelog author="p.seiler@linuxmail.org" date="1559736000">-  Add -offset function to skip n bytes at the beginning of the squashfs…
  https://github.com/plougher/squashfs-tools/commit/5a498ad24dcfeac9f3d747e894f22901f3ac10
  (0003-Add-offset-function-to-skip-n-bytes.patch)</changelog>
  <changelog author="p.seiler@linuxmail.org" date="1571659200">- Version 4.4 - 2019-08-29:
  * Reproducible builds, new compressors,
  CVE fixes, security hardening and new options
  for Mksquashfs/Unsquashfs.
- Overall improvements:
  * Mksquashfs now generates reproducible images by default.
  * Mkfs time and file timestamps can also be specified.
  * Support for the Zstandard (ZSTD) compression algorithm.
  * CVE-2015-4645 and CVE-2015-4646 have been fixed.
- Mksquashfs improvements and major bug fixes:
  * Pseudo files now support symbolic links.
  * New -mkfs-time option.
  * New -all-time option.
  * New -root-mode option.
  * New -quiet option.
  * New -noId option.
  * New -offset option.
  * Update lz4 wrapper to use new functions introduced
  in 1.7.0.
  * Bug fix, don't allow "/" pseudo filenames.
  * Bug fix, allow quoting of pseudo files, to
  better handle filenames with spaces.
  * Fix compilation with glibc 2.25+.
- Unsquashfs improvements and major bug fixes:
  * CVE-2015-4645 and CVE-2015-4646 have been fixed.
  * Unsquashfs has been further hardened against corrupted
  filestems.
  * Unsquashfs is now more strict about error handling.
  * New -ignore-errors option.
  * New -strict-errors option.
  * New -lln[umeric] option.
  * New -lc option.
  * New -llc option.
  * New -mkfs-time option.
  * New -UTC option.
  * New -offset option.
  * New -quiet option.
  * Update lz4 wrapper to use new functions introduced
  in 1.7.0.
  * Bug fix, fatal and non-fatal errors now set the exit
  code to 1.
  * Bug fix, fix time setting for symlinks.
  * Bug fix, try to set sticky-bit when running as a
  user process.
  * Fix compilation with glibc 2.25+.
- build changes:
  * re-created patches to fit squashfs 4.4
  * removed 0001-mksquashfs-fix-rare-race-in-fragment-waiting-in-file.patch
  (new version includes this change)
  * removed 0002-Fix-2GB-limit-of-the-is_fragment-.-function.patch
  (new version includes this change)
  * removed 0003-Add-offset-function-to-skip-n-bytes.patch
  (new version includes this change)
  * removed sysmacros.patch
  (new version includes this change)</changelog>
  <changelog author="mliska@suse.cz" date="1585656000">- Add -fcommon in order to fix boo#1160294.</changelog>
  <changelog author="bjoernv@arcor.de" date="1598961600">- enabled ZSTD compression support for openSUSE &gt;= 15.1</changelog>
  <changelog author="dmueller@suse.com" date="1639224000">- update to 4.5:
  * Mksquashfs now supports "Actions".
  * New sqfstar command which will create a Squashfs image from a tar archive.
  * Tar style handling of source pathnames in Mksquashfs.
  * Cpio style handling of source pathnames in Mksquashfs.
  * New option to throttle the amount of CPU and I/O.
  * Mksquashfs now allows no source directory to be specified.
  * New Pseudo file "R" definition which allows a Regular file
    o be created with data stored within the Pseudo file.
  * Symbolic links are now followed in extract files
  * Unsquashfs now supports "exclude" files.
  * Max depth traversal option added.
  * Unsquashfs can now output a "Pseudo file" representing the
    input Squashfs filesystem.
  * New -one-file-system option in Mksquashfs.
  * New -no-hardlinks option in Mksquashfs.
  * Exit code in Unsquashfs changed to distinguish between
    non-fatal errors (exit 2), and fatal errors (exit 1).
  * Xattr id count added in Unsquashfs "-stat" output.
  * Unsquashfs "write outside directory" exploit fixed.
  * Error handling in Unsquashfs writer thread fixed.
  * Fix failure to truncate destination if appending aborted.
  * Prevent Mksquashfs reading the destination file.</changelog>
  <changelog author="dmueller@suse.com" date="1647777600">- update to 4.5.1 (bsc#1190531, CVE-2021-41072):
  * This release adds Manpages for Mksquashfs(1), Unsquashfs(1),
    Sqfstar(1) and Sqfscat(1).
  * The -help text output from the utilities has been improved
    and extended as well (but the Manpages are now more
    comprehensive).
  * CVE-2021-41072 which is a writing outside of destination
    exploit, has been fixed.
  * The number of hard-links in the filesystem is now also
    displayed by Mksquashfs in the output summary.
  * The number of hard-links written by Unsquashfs is now
    also displayed in the output summary.
  * Unsquashfs will now write to a pre-existing destination
    directory, rather than aborting.
  * Unsquashfs now allows "." to used as the destination, to
    extract to the current directory.
  * The Unsquashfs progress bar now tracks empty files and
    hardlinks, in addition to data blocks.
  * -no-hardlinks option has been implemented for Sqfstar.
  * More sanity checking for "corrupted" filesystems, including
    checks for multiply linked directories and directory loops.
  * Options that may cause filesystems to be unmountable have
    been moved into a new "experts" category in the Mksquashfs
    help text (and Manpage).
  * Maximum cpiostyle filename limited to PATH_MAX.  This
    prevents attempts to overflow the stack, or cause system
    calls to fail with a too long pathname.
  * Don't always use "max open file limit" when calculating
    length of queues, as a very large file limit can cause
    Unsquashfs to abort.  Instead use the smaller of max open
    file limit and cache size.
  * Fix Mksquashfs silently ignoring Pseudo file definitions
    when appending.
  * Don't abort if no XATTR support has been built in, and
    there's XATTRs in the filesystem.  This is a regression
    introduced in 2019 in Version 4.4.
  * Fix duplicate check when the last file block is sparse.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1652011200">- set LZMA_XZ_SUPPORT=1 so you can (un)squash -comp lzma images</changelog>
  <changelog author="duwe@suse.com" date="1665748800">- Do not repeat openSUSE / SLE version tests
- Actually format and package the man pages</changelog>
  <changelog author="dmueller@suse.com" date="1681560000">- update to 4.6.1:
  * Race condition which can cause corruption of the "fragment
    table" fixed.  This is a regression introduced in August 2022,
    and it has been seen when tailend packing is used (-tailends option).
  * Fix build failure when the tools are being built without
    extended attribute (XATTRs) support.
  * Fix XATTR error message when an unrecognised prefix is
    found
  * Fix incorrect free of pointer when an unrecognised XATTR
    prefix is found.
  * Major improvements in extended attribute handling,
    pseudo file handling, and miscellaneous new options and
    improvements
  * Extended attribute handling improved in Mksquashfs and
    Sqfstar
  * New Pseudo file xattr definition to add extended
    attributes to files.
  * New xattrs-add Action to add extended attributes to files
  * Extended attribute handling improved in Unsquashfs
  * Other major improvements
  * Unsquashfs can now output Pseudo files to standard out.
  * Mksquashfs can now input Pseudo files from standard in.
  * Squashfs filesystems can now be converted (different
    block size compression etc) without unpacking to an
    intermediate filesystem or mounting, by piping the output of
    Unsquashfs to Mksquashfs.
  * Pseudo files are now supported by Sqfstar.
  * "Non-anchored" excludes are now supported by Unsquashfs.</changelog>
  <changelog author="duwe@suse.com" date="1688385600">- For reference: previous updates fixed
  * CVE-2021-40153 (bsc#1189936)
  * CVE-2015-4645, CVE-2015-4646 (bsc#935380)</changelog>
</package>
<package pkgid="cd1e308b8bd94a53c5225b6aa0e20f08917b947c8e8f47d091146d4ce0c877d2" name="squashfs" arch="src">
  <version epoch="0" ver="4.6.1" rel="150300.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1403524800">- Since version 4.3, squasfs does not require attr-devel
  but uses glibc instead.</changelog>
  <changelog author="mpluskal@suse.com" date="1425643200">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="9@cirno.systems" date="1441108800">- Enable LZ4 support</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1446724800">- add patches to fix eventual file corruption (boo#953723)
  0001-mksquashfs-fix-rare-race-in-fragment-waiting-in-file.patch
  0002-Fix-2GB-limit-of-the-is_fragment-.-function.patch</changelog>
  <changelog author="dmueller@suse.com" date="1453377600">- fix build for SLE12 and older</changelog>
  <changelog author="duwe@suse.com" date="1466078400">- Machines with 1024 processors or more reach the limit of maximum
  file descriptors (bsc#984136). Other limits apply that may be
  hit for no good reason. Simply limit the number of used threads
  to an arbitrary number, squashfs-thread-limit.</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for major/minor/makedev</changelog>
  <changelog author="dimstar@opensuse.org" date="1553083200">- Use / as sed command delimiter. Comma can actually show up in
  optflags (think -Wl,…), which then breaks the sed command line
  parsing.</changelog>
  <changelog author="dsterba@suse.cz" date="1553083201">- Use | instead of / that can be part of -L or -I options.</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133284).</changelog>
  <changelog author="p.seiler@linuxmail.org" date="1559736000">-  Add -offset function to skip n bytes at the beginning of the squashfs…
  https://github.com/plougher/squashfs-tools/commit/5a498ad24dcfeac9f3d747e894f22901f3ac10
  (0003-Add-offset-function-to-skip-n-bytes.patch)</changelog>
  <changelog author="p.seiler@linuxmail.org" date="1571659200">- Version 4.4 - 2019-08-29:
  * Reproducible builds, new compressors,
  CVE fixes, security hardening and new options
  for Mksquashfs/Unsquashfs.
- Overall improvements:
  * Mksquashfs now generates reproducible images by default.
  * Mkfs time and file timestamps can also be specified.
  * Support for the Zstandard (ZSTD) compression algorithm.
  * CVE-2015-4645 and CVE-2015-4646 have been fixed.
- Mksquashfs improvements and major bug fixes:
  * Pseudo files now support symbolic links.
  * New -mkfs-time option.
  * New -all-time option.
  * New -root-mode option.
  * New -quiet option.
  * New -noId option.
  * New -offset option.
  * Update lz4 wrapper to use new functions introduced
  in 1.7.0.
  * Bug fix, don't allow "/" pseudo filenames.
  * Bug fix, allow quoting of pseudo files, to
  better handle filenames with spaces.
  * Fix compilation with glibc 2.25+.
- Unsquashfs improvements and major bug fixes:
  * CVE-2015-4645 and CVE-2015-4646 have been fixed.
  * Unsquashfs has been further hardened against corrupted
  filestems.
  * Unsquashfs is now more strict about error handling.
  * New -ignore-errors option.
  * New -strict-errors option.
  * New -lln[umeric] option.
  * New -lc option.
  * New -llc option.
  * New -mkfs-time option.
  * New -UTC option.
  * New -offset option.
  * New -quiet option.
  * Update lz4 wrapper to use new functions introduced
  in 1.7.0.
  * Bug fix, fatal and non-fatal errors now set the exit
  code to 1.
  * Bug fix, fix time setting for symlinks.
  * Bug fix, try to set sticky-bit when running as a
  user process.
  * Fix compilation with glibc 2.25+.
- build changes:
  * re-created patches to fit squashfs 4.4
  * removed 0001-mksquashfs-fix-rare-race-in-fragment-waiting-in-file.patch
  (new version includes this change)
  * removed 0002-Fix-2GB-limit-of-the-is_fragment-.-function.patch
  (new version includes this change)
  * removed 0003-Add-offset-function-to-skip-n-bytes.patch
  (new version includes this change)
  * removed sysmacros.patch
  (new version includes this change)</changelog>
  <changelog author="mliska@suse.cz" date="1585656000">- Add -fcommon in order to fix boo#1160294.</changelog>
  <changelog author="bjoernv@arcor.de" date="1598961600">- enabled ZSTD compression support for openSUSE &gt;= 15.1</changelog>
  <changelog author="dmueller@suse.com" date="1639224000">- update to 4.5:
  * Mksquashfs now supports "Actions".
  * New sqfstar command which will create a Squashfs image from a tar archive.
  * Tar style handling of source pathnames in Mksquashfs.
  * Cpio style handling of source pathnames in Mksquashfs.
  * New option to throttle the amount of CPU and I/O.
  * Mksquashfs now allows no source directory to be specified.
  * New Pseudo file "R" definition which allows a Regular file
    o be created with data stored within the Pseudo file.
  * Symbolic links are now followed in extract files
  * Unsquashfs now supports "exclude" files.
  * Max depth traversal option added.
  * Unsquashfs can now output a "Pseudo file" representing the
    input Squashfs filesystem.
  * New -one-file-system option in Mksquashfs.
  * New -no-hardlinks option in Mksquashfs.
  * Exit code in Unsquashfs changed to distinguish between
    non-fatal errors (exit 2), and fatal errors (exit 1).
  * Xattr id count added in Unsquashfs "-stat" output.
  * Unsquashfs "write outside directory" exploit fixed.
  * Error handling in Unsquashfs writer thread fixed.
  * Fix failure to truncate destination if appending aborted.
  * Prevent Mksquashfs reading the destination file.</changelog>
  <changelog author="dmueller@suse.com" date="1647777600">- update to 4.5.1 (bsc#1190531, CVE-2021-41072):
  * This release adds Manpages for Mksquashfs(1), Unsquashfs(1),
    Sqfstar(1) and Sqfscat(1).
  * The -help text output from the utilities has been improved
    and extended as well (but the Manpages are now more
    comprehensive).
  * CVE-2021-41072 which is a writing outside of destination
    exploit, has been fixed.
  * The number of hard-links in the filesystem is now also
    displayed by Mksquashfs in the output summary.
  * The number of hard-links written by Unsquashfs is now
    also displayed in the output summary.
  * Unsquashfs will now write to a pre-existing destination
    directory, rather than aborting.
  * Unsquashfs now allows "." to used as the destination, to
    extract to the current directory.
  * The Unsquashfs progress bar now tracks empty files and
    hardlinks, in addition to data blocks.
  * -no-hardlinks option has been implemented for Sqfstar.
  * More sanity checking for "corrupted" filesystems, including
    checks for multiply linked directories and directory loops.
  * Options that may cause filesystems to be unmountable have
    been moved into a new "experts" category in the Mksquashfs
    help text (and Manpage).
  * Maximum cpiostyle filename limited to PATH_MAX.  This
    prevents attempts to overflow the stack, or cause system
    calls to fail with a too long pathname.
  * Don't always use "max open file limit" when calculating
    length of queues, as a very large file limit can cause
    Unsquashfs to abort.  Instead use the smaller of max open
    file limit and cache size.
  * Fix Mksquashfs silently ignoring Pseudo file definitions
    when appending.
  * Don't abort if no XATTR support has been built in, and
    there's XATTRs in the filesystem.  This is a regression
    introduced in 2019 in Version 4.4.
  * Fix duplicate check when the last file block is sparse.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1652011200">- set LZMA_XZ_SUPPORT=1 so you can (un)squash -comp lzma images</changelog>
  <changelog author="duwe@suse.com" date="1665748800">- Do not repeat openSUSE / SLE version tests
- Actually format and package the man pages</changelog>
  <changelog author="dmueller@suse.com" date="1681560000">- update to 4.6.1:
  * Race condition which can cause corruption of the "fragment
    table" fixed.  This is a regression introduced in August 2022,
    and it has been seen when tailend packing is used (-tailends option).
  * Fix build failure when the tools are being built without
    extended attribute (XATTRs) support.
  * Fix XATTR error message when an unrecognised prefix is
    found
  * Fix incorrect free of pointer when an unrecognised XATTR
    prefix is found.
  * Major improvements in extended attribute handling,
    pseudo file handling, and miscellaneous new options and
    improvements
  * Extended attribute handling improved in Mksquashfs and
    Sqfstar
  * New Pseudo file xattr definition to add extended
    attributes to files.
  * New xattrs-add Action to add extended attributes to files
  * Extended attribute handling improved in Unsquashfs
  * Other major improvements
  * Unsquashfs can now output Pseudo files to standard out.
  * Mksquashfs can now input Pseudo files from standard in.
  * Squashfs filesystems can now be converted (different
    block size compression etc) without unpacking to an
    intermediate filesystem or mounting, by piping the output of
    Unsquashfs to Mksquashfs.
  * Pseudo files are now supported by Sqfstar.
  * "Non-anchored" excludes are now supported by Unsquashfs.</changelog>
  <changelog author="duwe@suse.com" date="1688385600">- For reference: previous updates fixed
  * CVE-2021-40153 (bsc#1189936)
  * CVE-2015-4645, CVE-2015-4646 (bsc#935380)</changelog>
</package>
<package pkgid="d3d4a456ce1f649fbfce13d17f6d8fc78336395a60a319290cefcdc2705fbf58" name="squashfs" arch="x86_64">
  <version epoch="0" ver="4.6.1" rel="150300.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1425643200">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="9@cirno.systems" date="1441108800">- Enable LZ4 support</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1446724800">- add patches to fix eventual file corruption (boo#953723)
  0001-mksquashfs-fix-rare-race-in-fragment-waiting-in-file.patch
  0002-Fix-2GB-limit-of-the-is_fragment-.-function.patch</changelog>
  <changelog author="dmueller@suse.com" date="1453377600">- fix build for SLE12 and older</changelog>
  <changelog author="duwe@suse.com" date="1466078400">- Machines with 1024 processors or more reach the limit of maximum
  file descriptors (bsc#984136). Other limits apply that may be
  hit for no good reason. Simply limit the number of used threads
  to an arbitrary number, squashfs-thread-limit.</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for major/minor/makedev</changelog>
  <changelog author="dimstar@opensuse.org" date="1553083200">- Use / as sed command delimiter. Comma can actually show up in
  optflags (think -Wl,…), which then breaks the sed command line
  parsing.</changelog>
  <changelog author="dsterba@suse.cz" date="1553083201">- Use | instead of / that can be part of -L or -I options.</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133284).</changelog>
  <changelog author="p.seiler@linuxmail.org" date="1559736000">-  Add -offset function to skip n bytes at the beginning of the squashfs…
  https://github.com/plougher/squashfs-tools/commit/5a498ad24dcfeac9f3d747e894f22901f3ac10
  (0003-Add-offset-function-to-skip-n-bytes.patch)</changelog>
  <changelog author="p.seiler@linuxmail.org" date="1571659200">- Version 4.4 - 2019-08-29:
  * Reproducible builds, new compressors,
  CVE fixes, security hardening and new options
  for Mksquashfs/Unsquashfs.
- Overall improvements:
  * Mksquashfs now generates reproducible images by default.
  * Mkfs time and file timestamps can also be specified.
  * Support for the Zstandard (ZSTD) compression algorithm.
  * CVE-2015-4645 and CVE-2015-4646 have been fixed.
- Mksquashfs improvements and major bug fixes:
  * Pseudo files now support symbolic links.
  * New -mkfs-time option.
  * New -all-time option.
  * New -root-mode option.
  * New -quiet option.
  * New -noId option.
  * New -offset option.
  * Update lz4 wrapper to use new functions introduced
  in 1.7.0.
  * Bug fix, don't allow "/" pseudo filenames.
  * Bug fix, allow quoting of pseudo files, to
  better handle filenames with spaces.
  * Fix compilation with glibc 2.25+.
- Unsquashfs improvements and major bug fixes:
  * CVE-2015-4645 and CVE-2015-4646 have been fixed.
  * Unsquashfs has been further hardened against corrupted
  filestems.
  * Unsquashfs is now more strict about error handling.
  * New -ignore-errors option.
  * New -strict-errors option.
  * New -lln[umeric] option.
  * New -lc option.
  * New -llc option.
  * New -mkfs-time option.
  * New -UTC option.
  * New -offset option.
  * New -quiet option.
  * Update lz4 wrapper to use new functions introduced
  in 1.7.0.
  * Bug fix, fatal and non-fatal errors now set the exit
  code to 1.
  * Bug fix, fix time setting for symlinks.
  * Bug fix, try to set sticky-bit when running as a
  user process.
  * Fix compilation with glibc 2.25+.
- build changes:
  * re-created patches to fit squashfs 4.4
  * removed 0001-mksquashfs-fix-rare-race-in-fragment-waiting-in-file.patch
  (new version includes this change)
  * removed 0002-Fix-2GB-limit-of-the-is_fragment-.-function.patch
  (new version includes this change)
  * removed 0003-Add-offset-function-to-skip-n-bytes.patch
  (new version includes this change)
  * removed sysmacros.patch
  (new version includes this change)</changelog>
  <changelog author="mliska@suse.cz" date="1585656000">- Add -fcommon in order to fix boo#1160294.</changelog>
  <changelog author="bjoernv@arcor.de" date="1598961600">- enabled ZSTD compression support for openSUSE &gt;= 15.1</changelog>
  <changelog author="dmueller@suse.com" date="1639224000">- update to 4.5:
  * Mksquashfs now supports "Actions".
  * New sqfstar command which will create a Squashfs image from a tar archive.
  * Tar style handling of source pathnames in Mksquashfs.
  * Cpio style handling of source pathnames in Mksquashfs.
  * New option to throttle the amount of CPU and I/O.
  * Mksquashfs now allows no source directory to be specified.
  * New Pseudo file "R" definition which allows a Regular file
    o be created with data stored within the Pseudo file.
  * Symbolic links are now followed in extract files
  * Unsquashfs now supports "exclude" files.
  * Max depth traversal option added.
  * Unsquashfs can now output a "Pseudo file" representing the
    input Squashfs filesystem.
  * New -one-file-system option in Mksquashfs.
  * New -no-hardlinks option in Mksquashfs.
  * Exit code in Unsquashfs changed to distinguish between
    non-fatal errors (exit 2), and fatal errors (exit 1).
  * Xattr id count added in Unsquashfs "-stat" output.
  * Unsquashfs "write outside directory" exploit fixed.
  * Error handling in Unsquashfs writer thread fixed.
  * Fix failure to truncate destination if appending aborted.
  * Prevent Mksquashfs reading the destination file.</changelog>
  <changelog author="dmueller@suse.com" date="1647777600">- update to 4.5.1 (bsc#1190531, CVE-2021-41072):
  * This release adds Manpages for Mksquashfs(1), Unsquashfs(1),
    Sqfstar(1) and Sqfscat(1).
  * The -help text output from the utilities has been improved
    and extended as well (but the Manpages are now more
    comprehensive).
  * CVE-2021-41072 which is a writing outside of destination
    exploit, has been fixed.
  * The number of hard-links in the filesystem is now also
    displayed by Mksquashfs in the output summary.
  * The number of hard-links written by Unsquashfs is now
    also displayed in the output summary.
  * Unsquashfs will now write to a pre-existing destination
    directory, rather than aborting.
  * Unsquashfs now allows "." to used as the destination, to
    extract to the current directory.
  * The Unsquashfs progress bar now tracks empty files and
    hardlinks, in addition to data blocks.
  * -no-hardlinks option has been implemented for Sqfstar.
  * More sanity checking for "corrupted" filesystems, including
    checks for multiply linked directories and directory loops.
  * Options that may cause filesystems to be unmountable have
    been moved into a new "experts" category in the Mksquashfs
    help text (and Manpage).
  * Maximum cpiostyle filename limited to PATH_MAX.  This
    prevents attempts to overflow the stack, or cause system
    calls to fail with a too long pathname.
  * Don't always use "max open file limit" when calculating
    length of queues, as a very large file limit can cause
    Unsquashfs to abort.  Instead use the smaller of max open
    file limit and cache size.
  * Fix Mksquashfs silently ignoring Pseudo file definitions
    when appending.
  * Don't abort if no XATTR support has been built in, and
    there's XATTRs in the filesystem.  This is a regression
    introduced in 2019 in Version 4.4.
  * Fix duplicate check when the last file block is sparse.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1652011200">- set LZMA_XZ_SUPPORT=1 so you can (un)squash -comp lzma images</changelog>
  <changelog author="duwe@suse.com" date="1665748800">- Do not repeat openSUSE / SLE version tests
- Actually format and package the man pages</changelog>
  <changelog author="dmueller@suse.com" date="1681560000">- update to 4.6.1:
  * Race condition which can cause corruption of the "fragment
    table" fixed.  This is a regression introduced in August 2022,
    and it has been seen when tailend packing is used (-tailends option).
  * Fix build failure when the tools are being built without
    extended attribute (XATTRs) support.
  * Fix XATTR error message when an unrecognised prefix is
    found
  * Fix incorrect free of pointer when an unrecognised XATTR
    prefix is found.
  * Major improvements in extended attribute handling,
    pseudo file handling, and miscellaneous new options and
    improvements
  * Extended attribute handling improved in Mksquashfs and
    Sqfstar
  * New Pseudo file xattr definition to add extended
    attributes to files.
  * New xattrs-add Action to add extended attributes to files
  * Extended attribute handling improved in Unsquashfs
  * Other major improvements
  * Unsquashfs can now output Pseudo files to standard out.
  * Mksquashfs can now input Pseudo files from standard in.
  * Squashfs filesystems can now be converted (different
    block size compression etc) without unpacking to an
    intermediate filesystem or mounting, by piping the output of
    Unsquashfs to Mksquashfs.
  * Pseudo files are now supported by Sqfstar.
  * "Non-anchored" excludes are now supported by Unsquashfs.</changelog>
  <changelog author="duwe@suse.com" date="1688385600">- For reference: previous updates fixed
  * CVE-2021-40153 (bsc#1189936)
  * CVE-2015-4645, CVE-2015-4646 (bsc#935380)</changelog>
</package>
<package pkgid="4490ecef5208612f0c2d4f5c699298adbf9747b4e0da88074c5ed06eb0586bdb" name="sssd" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150500.10.11.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
</package>
<package pkgid="cd9a26fd60c8f25f243bfaf83e8e2d63bc19d48d2e5e6631e74815db06e35ddb" name="sssd" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150500.10.11.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
</package>
<package pkgid="d47547a5f40bdb31110b4e117a792c0f7eec6f3d75149993b04c5eacb00efa6e" name="sssd" arch="src">
  <version epoch="0" ver="2.5.2" rel="150500.10.11.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
</package>
<package pkgid="c99141d5ae9a6b9375f3132a4445a0b7954d3492bcc1742bec394bd69afd037b" name="sssd" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150500.10.11.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
</package>
<package pkgid="8fe74441e2a5980e2077dfa3cb6d782e069434851310561562e95286b8097087" name="sssd" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150500.10.14.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="c826f00f1d3bae06a80e4065c889b19df19053091f6059914cb8696551f6080f" name="sssd" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150500.10.14.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="b65a658ae5c5734a52c2e81ff30f586bee2ce82e1a56646fae7325544f81c078" name="sssd" arch="src">
  <version epoch="0" ver="2.5.2" rel="150500.10.14.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="600b9922464cf48f65ce978f61fff414e2dbbd6e94eef9863f554306e2442d63" name="sssd" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150500.10.14.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="2c0e84936cf8cd48a124a17394eb7cf8ccf579ed008da2e414dc18cb5388d7ab" name="sssd" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150500.10.6.1"/>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="427dc420738579185b669667178b4235f4e7d03cb90f1c7c33e45f8a948c3c38" name="sssd" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150500.10.6.1"/>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="2ddca0f8d7da6f0978a761c6d95000b9116ad0d39a43ac9b9d988ce5c7f4d725" name="sssd" arch="src">
  <version epoch="0" ver="2.5.2" rel="150500.10.6.1"/>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="9c60dd4eff9f0811aa04674010bc31f24a9f59ecd188cce7e45499e0db6c5752" name="sssd" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150500.10.6.1"/>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="12fcdb78e8c425239527efc8380114cada30550955cf4e8f74e5c4ed7aa77409" name="sssd-common" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150500.10.11.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
</package>
<package pkgid="746451581ae156da865b64f7a8b43c007f61d998530103dac08df7efa2ac28d3" name="sssd-common" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150500.10.11.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
</package>
<package pkgid="b5dfe69a7e21f6c989c685fc73eddcfe065b4642133d6345ef7b37d16782c8c8" name="sssd-common" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150500.10.11.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
</package>
<package pkgid="13f785240fc723b2b43f764490b641df6731b2200479a4d6790d9c10686d768f" name="sssd-common" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150500.10.14.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="0df923fb24c8893f0943703b249fabf4665ba479077e6db9d7b7974f70d12f3e" name="sssd-common" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150500.10.14.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="77808b8ef5c97994cd2de1194f1749bd9a251946dc1ec9a5df5406d2267b8b0d" name="sssd-common" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150500.10.14.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="99e6256e6a3653ef6ccb73eb6d2ed6ab676b1021eea6da5cc7ddc4e76ba18595" name="sssd-common" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150500.10.6.1"/>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="b9385ed65b002efcc3088d9b8c52cc71f4b4884b6d3eb3a31f4ada16ad4ed0b5" name="sssd-common" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150500.10.6.1"/>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="c26fe05d9adc4ceaa89297b135ef514053f666145fddad06b4ba92fe54d1a545" name="sssd-common" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150500.10.6.1"/>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="d7f6a143eed0fe78e21f2f9a56bff487cf15b4b822bb884f996548f6dadec472" name="sssd-krb5-common" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150500.10.11.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
</package>
<package pkgid="7d40d8ee4a622ab753815cb3ae2af84612aa5317a55989487e645fef02287dc5" name="sssd-krb5-common" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150500.10.11.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
</package>
<package pkgid="9073c16d4ab907050513a608d39ab8d184ca62407e969e76d490c7ef9a7581ba" name="sssd-krb5-common" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150500.10.11.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
</package>
<package pkgid="634e7753d0e5e15056fd392cebf86422b65e60c27d75bf6273351330e6129ac9" name="sssd-krb5-common" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150500.10.14.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="ba2810b3de9ce015b858bf4ad5aeb6bf3097c52ef2215aa113056f0a4b32a125" name="sssd-krb5-common" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150500.10.14.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="140d179d583f69415bd3f02fcbf8ef75b6c21d3d86342bdc64199aa2e988652d" name="sssd-krb5-common" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150500.10.14.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="1997e0f979575057935d08e192f7ff18d1f1c87769128520cafc9e2cf8f8c58a" name="sssd-krb5-common" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150500.10.6.1"/>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="3a9d7aab158b276534ecbdb5ec18bcdb622ff55fe879029921ef0ca28093d727" name="sssd-krb5-common" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150500.10.6.1"/>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="f0acadcd08696c977f2811671d0a0da534feb5e22e45b9452d57b051f5407c27" name="sssd-krb5-common" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150500.10.6.1"/>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="4eb8b425ca07e3382775307c071c919237e88991646535ddb7f72d9c497fc096" name="sssd-ldap" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150500.10.11.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
</package>
<package pkgid="288f5d549bf3d85b35aa255a832b1801cd5e21d669ab45d7c28ae8f58b5225fa" name="sssd-ldap" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150500.10.11.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
</package>
<package pkgid="4a93473aa4ccb5641242da887d43f540943e8e84bce99c5193f091001299facb" name="sssd-ldap" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150500.10.11.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
</package>
<package pkgid="8687914cac6622d2c1d6c893724807a17f1946efdd559ad83404ea7cc408aea2" name="sssd-ldap" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150500.10.14.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="12064d2544e100b1de18a138f88d2fd44c0e7323efeaaebd323134a489ce3fba" name="sssd-ldap" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150500.10.14.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="8902f740a35dadf7964dff1eed16d8de7b8a2ff2324b353c00b51b609e419b0d" name="sssd-ldap" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150500.10.14.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="6d0ac03638fd7e7f1a3063de3ae205ceb3d12c78754b000f2eb414c9ef488545" name="sssd-ldap" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150500.10.6.1"/>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="6497ce29e71e0f4f79b5e4b17dfd24f98b530ec643112320d2795fb0dd82d990" name="sssd-ldap" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150500.10.6.1"/>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="c3c01d98124075b8caa1800a7dfa6804bdc74d2879c6e3255dbdabe6d2aa6ed3" name="sssd-ldap" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150500.10.6.1"/>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="fa347d245fce780f2dd6e120479f406ef30241c32803fe273ebe3617e1cf4093" name="supportutils" arch="noarch">
  <version epoch="0" ver="3.1.26" rel="150300.7.35.21.1"/>
  <changelog author="jason.record@suse.com" date="1633348800">- Installing to /usr/sbin instead of /sbin (bsc#1191096)
- Added shared memory as a log directory for emergency use (bsc#1190943)</changelog>
  <changelog author="jason.record@suse.com" date="1634558400">- getappcore identifies compressed core files (bsc#1191794)</changelog>
  <changelog author="jason.record@suse.com" date="1637150400">- Merged Include udev rules in /lib/udev/rules.d/ #113
- Merged Move localmessage/warm logs out of messages.txt to new localwarn.txt #87</changelog>
  <changelog author="jason.record@suse.com" date="1639569600">- Changes to version 3.1.19
  + Removed chronyc DNS lookups with -n switch (bsc#1193732)</changelog>
  <changelog author="jason.record@suse.com" date="1641816000">- Changes to version 3.1.19
  + Made /proc directory and network names spaces configurable (bsc#1193868)</changelog>
  <changelog author="jason.record@suse.com" date="1646395200">- Changes to version 3.1.20
  + Added command blkid #114
  + Added s390x specific files and output #115
  + Fix for invalid argument during updates (bsc#1193204)
  + Optimized conf_files, conf_files_text and log_cmd functions #118
  + Fixed iscsi initiator name (bsc#1195797)
  + Added rpcinfo -p output #116
  + Included /etc/sssd/conf.d configuration files #100</changelog>
  <changelog author="jason.record@suse.com" date="1647345600">- Spec file adjusted for usr-merge</changelog>
  <changelog author="jason.record@suse.com" date="1654171200">- Added a listing to /dev/mapper/. #129</changelog>
  <changelog author="jason.record@suse.com" date="1666094400">- Changes to version 3.1.21
  + Added type output with df command in fs-diskio.txt (issue#141)
  + Gather all files in /etc/security/limits.d/ (issue#142)
  + Fixed KVM virtualization detection on bare metal (bsc#1184689)
  + Added logging using journalctl (bsc#1200330)
  + Passwords correctly removed from email.txt, updates.txt and fs-iscsi.txt (bsc#1203818)
  + Added system logging configuration and checking in messages_config.txt (issue#103)
  + If rsyslog not installed collect more from journalctl (issue#120)
  + Added systemd-status.txt for the status of all service units (issue#125)
  + autofs includes files in (+dir:&lt;path&gt;) (issue#111)
  + Get current sar data before collecting files (bsc#1192648)
  + Collects everything in /etc/multipath/ (bsc#1192252)
  + Collects power management information in hardware.txt (bsc#1197428)
  + Checks for suseconnect-ng or SUSEConnect packages (bsc#1202337)
  + Fixed conf_files and conf_text_files so y2log is gathered (issue#134, bsc#1202269)
  + Update to nvme_info and block_info #133 (bsc#1202417)
  + Added IO scheduler (issue#136)
  + Added includedir directories from /etc/sudoers (bsc#1188086)</changelog>
  <changelog author="jason.record@suse.com" date="1666094401">- Added lifecycle information (issue#140)</changelog>
  <changelog author="jason.record@suse.com" date="1668168000">- Changes to supportconfig version 3.1.11-46.3
  + Added missed sanitation check on crash.txt (bsc#1203818)
- Changes to supportconfig.rc version 3.1.11-30
  + Added check to _sanitize_file
  + Using variable for replement text in _sanitize_file</changelog>
  <changelog author="jason.record@suse.com" date="1668686400">- Changes to getappcore version 1.53.02
  + The location of chkbin was updated earlier. This documents that
    change (bsc#1205533, bsc#1204942)</changelog>
  <changelog author="jason.record@suse.com" date="1669982400">- Changes to supportconfig version 3.1.11-46.4
  + Added plymouth_info</changelog>
  <changelog author="jason.record@suse.com" date="1674734400">- Changes to supportconfig.rc version 3.1.11-35
  + Corrected _sanitize_file to include iscsi.conf and others (bsc#1206402)</changelog>
  <changelog author="hp.jansen@suse.com" date="1675339200">- Add dependency to `numactl` on ppc64le and `s390x`, this enforces
  that `numactl --hardware` data is provided in supportconfigs</changelog>
  <changelog author="jason.record@suse.com" date="1679313600">- Fixed missing status detail for apparmor (bsc#1196933)
- Corrected invalid argument list in docker.txt (bsc#1206608)
- Applies limit equally to sar data and text files (bsc#1207543)
- Collects hwinfo hardware logs (bsc#1208928)
- Collects lparnumascore logs (issue#148)</changelog>
  <changelog author="jason.record@suse.com" date="1685620800">- Changes for supportutils version 3.1.25
  + Removed iSCSI passwords CVE-2022-45154 (bsc#1207598)
  + powerpc: Collect lsslot,amsstat, and opal elogs (pr#149)
  + powerpc: collect invscout logs (pr#150)
  + powerpc: collect RMC status logs (pr#151)
  + Added missing nvme nbft commands (bsc#1211599)
  + Fixed invalid nvme commands (bsc#1211598)
  + Added missing podman information (PED-1703, bsc#1181477)
  + Removed dependency on sysfstools
  + Check for systool use (bsc#1210015)
  + Added selinux checking (bsc#1209979)
  + Updated SLES_VER matrix</changelog>
  <changelog author="jason.record@suse.com" date="1687780800">- ha_info sle15 uses /var/log/pacemaker/ (pq#153)</changelog>
  <changelog author="jason.record@suse.com" date="1690372800">- Added run time detection (bsc#1213127)</changelog>
  <changelog author="jason.record@suse.com" date="1693569600">- Changes in version 3.1.26
  + powerpc plugin to collect the slots and active memory (bsc#1210950)
  + A Cleartext Storage of Sensitive Information vulnerability CVE-2022-45154
  + supportconfig: collect BPF information (pr#154)
  + Added additional iscsi information (pr#155)</changelog>
</package>
<package pkgid="98526a7392af7f50212778dda9203c3a7d51dfbdd227c41f8c7751442dfa870d" name="supportutils" arch="src">
  <version epoch="0" ver="3.1.26" rel="150300.7.35.21.1"/>
  <changelog author="jason.record@suse.com" date="1633348800">- Installing to /usr/sbin instead of /sbin (bsc#1191096)
- Added shared memory as a log directory for emergency use (bsc#1190943)</changelog>
  <changelog author="jason.record@suse.com" date="1634558400">- getappcore identifies compressed core files (bsc#1191794)</changelog>
  <changelog author="jason.record@suse.com" date="1637150400">- Merged Include udev rules in /lib/udev/rules.d/ #113
- Merged Move localmessage/warm logs out of messages.txt to new localwarn.txt #87</changelog>
  <changelog author="jason.record@suse.com" date="1639569600">- Changes to version 3.1.19
  + Removed chronyc DNS lookups with -n switch (bsc#1193732)</changelog>
  <changelog author="jason.record@suse.com" date="1641816000">- Changes to version 3.1.19
  + Made /proc directory and network names spaces configurable (bsc#1193868)</changelog>
  <changelog author="jason.record@suse.com" date="1646395200">- Changes to version 3.1.20
  + Added command blkid #114
  + Added s390x specific files and output #115
  + Fix for invalid argument during updates (bsc#1193204)
  + Optimized conf_files, conf_files_text and log_cmd functions #118
  + Fixed iscsi initiator name (bsc#1195797)
  + Added rpcinfo -p output #116
  + Included /etc/sssd/conf.d configuration files #100</changelog>
  <changelog author="jason.record@suse.com" date="1647345600">- Spec file adjusted for usr-merge</changelog>
  <changelog author="jason.record@suse.com" date="1654171200">- Added a listing to /dev/mapper/. #129</changelog>
  <changelog author="jason.record@suse.com" date="1666094400">- Changes to version 3.1.21
  + Added type output with df command in fs-diskio.txt (issue#141)
  + Gather all files in /etc/security/limits.d/ (issue#142)
  + Fixed KVM virtualization detection on bare metal (bsc#1184689)
  + Added logging using journalctl (bsc#1200330)
  + Passwords correctly removed from email.txt, updates.txt and fs-iscsi.txt (bsc#1203818)
  + Added system logging configuration and checking in messages_config.txt (issue#103)
  + If rsyslog not installed collect more from journalctl (issue#120)
  + Added systemd-status.txt for the status of all service units (issue#125)
  + autofs includes files in (+dir:&lt;path&gt;) (issue#111)
  + Get current sar data before collecting files (bsc#1192648)
  + Collects everything in /etc/multipath/ (bsc#1192252)
  + Collects power management information in hardware.txt (bsc#1197428)
  + Checks for suseconnect-ng or SUSEConnect packages (bsc#1202337)
  + Fixed conf_files and conf_text_files so y2log is gathered (issue#134, bsc#1202269)
  + Update to nvme_info and block_info #133 (bsc#1202417)
  + Added IO scheduler (issue#136)
  + Added includedir directories from /etc/sudoers (bsc#1188086)</changelog>
  <changelog author="jason.record@suse.com" date="1666094401">- Added lifecycle information (issue#140)</changelog>
  <changelog author="jason.record@suse.com" date="1668168000">- Changes to supportconfig version 3.1.11-46.3
  + Added missed sanitation check on crash.txt (bsc#1203818)
- Changes to supportconfig.rc version 3.1.11-30
  + Added check to _sanitize_file
  + Using variable for replement text in _sanitize_file</changelog>
  <changelog author="jason.record@suse.com" date="1668686400">- Changes to getappcore version 1.53.02
  + The location of chkbin was updated earlier. This documents that
    change (bsc#1205533, bsc#1204942)</changelog>
  <changelog author="jason.record@suse.com" date="1669982400">- Changes to supportconfig version 3.1.11-46.4
  + Added plymouth_info</changelog>
  <changelog author="jason.record@suse.com" date="1674734400">- Changes to supportconfig.rc version 3.1.11-35
  + Corrected _sanitize_file to include iscsi.conf and others (bsc#1206402)</changelog>
  <changelog author="hp.jansen@suse.com" date="1675339200">- Add dependency to `numactl` on ppc64le and `s390x`, this enforces
  that `numactl --hardware` data is provided in supportconfigs</changelog>
  <changelog author="jason.record@suse.com" date="1679313600">- Fixed missing status detail for apparmor (bsc#1196933)
- Corrected invalid argument list in docker.txt (bsc#1206608)
- Applies limit equally to sar data and text files (bsc#1207543)
- Collects hwinfo hardware logs (bsc#1208928)
- Collects lparnumascore logs (issue#148)</changelog>
  <changelog author="jason.record@suse.com" date="1685620800">- Changes for supportutils version 3.1.25
  + Removed iSCSI passwords CVE-2022-45154 (bsc#1207598)
  + powerpc: Collect lsslot,amsstat, and opal elogs (pr#149)
  + powerpc: collect invscout logs (pr#150)
  + powerpc: collect RMC status logs (pr#151)
  + Added missing nvme nbft commands (bsc#1211599)
  + Fixed invalid nvme commands (bsc#1211598)
  + Added missing podman information (PED-1703, bsc#1181477)
  + Removed dependency on sysfstools
  + Check for systool use (bsc#1210015)
  + Added selinux checking (bsc#1209979)
  + Updated SLES_VER matrix</changelog>
  <changelog author="jason.record@suse.com" date="1687780800">- ha_info sle15 uses /var/log/pacemaker/ (pq#153)</changelog>
  <changelog author="jason.record@suse.com" date="1690372800">- Added run time detection (bsc#1213127)</changelog>
  <changelog author="jason.record@suse.com" date="1693569600">- Changes in version 3.1.26
  + powerpc plugin to collect the slots and active memory (bsc#1210950)
  + A Cleartext Storage of Sensitive Information vulnerability CVE-2022-45154
  + supportconfig: collect BPF information (pr#154)
  + Added additional iscsi information (pr#155)</changelog>
</package>
<package pkgid="89e108a2f989fc94c65c72531c76a28f7d1d895d92eab69039ff91c75b1d6471" name="supportutils" arch="noarch">
  <version epoch="0" ver="3.1.28" rel="150300.7.35.24.1"/>
  <changelog author="jason.record@suse.com" date="1639569600">- Changes to version 3.1.19
  + Removed chronyc DNS lookups with -n switch (bsc#1193732)</changelog>
  <changelog author="jason.record@suse.com" date="1641816000">- Changes to version 3.1.19
  + Made /proc directory and network names spaces configurable (bsc#1193868)</changelog>
  <changelog author="jason.record@suse.com" date="1646395200">- Changes to version 3.1.20
  + Added command blkid #114
  + Added s390x specific files and output #115
  + Fix for invalid argument during updates (bsc#1193204)
  + Optimized conf_files, conf_files_text and log_cmd functions #118
  + Fixed iscsi initiator name (bsc#1195797)
  + Added rpcinfo -p output #116
  + Included /etc/sssd/conf.d configuration files #100</changelog>
  <changelog author="jason.record@suse.com" date="1647345600">- Spec file adjusted for usr-merge</changelog>
  <changelog author="jason.record@suse.com" date="1654171200">- Added a listing to /dev/mapper/. #129</changelog>
  <changelog author="jason.record@suse.com" date="1666094400">- Changes to version 3.1.21
  + Added type output with df command in fs-diskio.txt (issue#141)
  + Gather all files in /etc/security/limits.d/ (issue#142)
  + Fixed KVM virtualization detection on bare metal (bsc#1184689)
  + Added logging using journalctl (bsc#1200330)
  + Passwords correctly removed from email.txt, updates.txt and fs-iscsi.txt (bsc#1203818)
  + Added system logging configuration and checking in messages_config.txt (issue#103)
  + If rsyslog not installed collect more from journalctl (issue#120)
  + Added systemd-status.txt for the status of all service units (issue#125)
  + autofs includes files in (+dir:&lt;path&gt;) (issue#111)
  + Get current sar data before collecting files (bsc#1192648)
  + Collects everything in /etc/multipath/ (bsc#1192252)
  + Collects power management information in hardware.txt (bsc#1197428)
  + Checks for suseconnect-ng or SUSEConnect packages (bsc#1202337)
  + Fixed conf_files and conf_text_files so y2log is gathered (issue#134, bsc#1202269)
  + Update to nvme_info and block_info #133 (bsc#1202417)
  + Added IO scheduler (issue#136)
  + Added includedir directories from /etc/sudoers (bsc#1188086)</changelog>
  <changelog author="jason.record@suse.com" date="1666094401">- Added lifecycle information (issue#140)</changelog>
  <changelog author="jason.record@suse.com" date="1668168000">- Changes to supportconfig version 3.1.11-46.3
  + Added missed sanitation check on crash.txt (bsc#1203818)
- Changes to supportconfig.rc version 3.1.11-30
  + Added check to _sanitize_file
  + Using variable for replement text in _sanitize_file</changelog>
  <changelog author="jason.record@suse.com" date="1668686400">- Changes to getappcore version 1.53.02
  + The location of chkbin was updated earlier. This documents that
    change (bsc#1205533, bsc#1204942)</changelog>
  <changelog author="jason.record@suse.com" date="1669982400">- Changes to supportconfig version 3.1.11-46.4
  + Added plymouth_info</changelog>
  <changelog author="jason.record@suse.com" date="1674734400">- Changes to supportconfig.rc version 3.1.11-35
  + Corrected _sanitize_file to include iscsi.conf and others (bsc#1206402)</changelog>
  <changelog author="hp.jansen@suse.com" date="1675339200">- Add dependency to `numactl` on ppc64le and `s390x`, this enforces
  that `numactl --hardware` data is provided in supportconfigs</changelog>
  <changelog author="jason.record@suse.com" date="1679313600">- Fixed missing status detail for apparmor (bsc#1196933)
- Corrected invalid argument list in docker.txt (bsc#1206608)
- Applies limit equally to sar data and text files (bsc#1207543)
- Collects hwinfo hardware logs (bsc#1208928)
- Collects lparnumascore logs (issue#148)</changelog>
  <changelog author="jason.record@suse.com" date="1685620800">- Changes for supportutils version 3.1.25
  + Removed iSCSI passwords CVE-2022-45154 (bsc#1207598)
  + powerpc: Collect lsslot,amsstat, and opal elogs (pr#149)
  + powerpc: collect invscout logs (pr#150)
  + powerpc: collect RMC status logs (pr#151)
  + Added missing nvme nbft commands (bsc#1211599)
  + Fixed invalid nvme commands (bsc#1211598)
  + Added missing podman information (PED-1703, bsc#1181477)
  + Removed dependency on sysfstools
  + Check for systool use (bsc#1210015)
  + Added selinux checking (bsc#1209979)
  + Updated SLES_VER matrix</changelog>
  <changelog author="jason.record@suse.com" date="1687780800">- ha_info sle15 uses /var/log/pacemaker/ (pq#153)</changelog>
  <changelog author="jason.record@suse.com" date="1690372800">- Added run time detection (bsc#1213127)</changelog>
  <changelog author="jason.record@suse.com" date="1693569600">- Changes in version 3.1.26
  + powerpc plugin to collect the slots and active memory (bsc#1210950)
  + A Cleartext Storage of Sensitive Information vulnerability CVE-2022-45154
  + supportconfig: collect BPF information (pr#154)
  + Added additional iscsi information (pr#155)</changelog>
  <changelog author="jason.record@suse.com" date="1700222400">- Changes in version 3.1.27
  + Fixed podman display issue (bsc#1217287)
  + Added nvme-stas configuration to nvme.txt (bsc#1216049)
  + Added timed command to fs-files.txt (bsc#1216827)
  + Collects zypp history file issue#166 (bsc#1216522)
  + Changed -x OPTION to really be exclude only (issue#146)
  + Collect HA related rpm package versions in ha.txt (pr#169)</changelog>
  <changelog author="jason.record@suse.com" date="1703073600">- Changes in version 3.1.28
  + Inhibit the conversion of port numbers to port names for network files (cherry picked from commit 55f5f716638fb15e3eb1315443949ed98723d250)
  + powerpc: collect rtas_errd.log and lp_diag.log files (pr#175)
  + Get list of pam.d file (cherry picked from commit eaf35c77fd4bc039fd7e3d779ec1c2c6521283e2)
  + Remove supportutils requires for util-linux-systemd and kmod (bsc#1193173)
  + Added missing klp information to kernel-livepatch.txt (bsc#1216390)
  + Fixed plugins creating empty files when using supportconfig.rc (bsc#1216388)
  + Provides long listing for /etc/sssd/sssd.conf (bsc#1211547)
  + Optimize lsof usage (bsc#1183663)
  + Added mokutil commands for secureboot (pr#179)
  + Collects chrony or ntp as needed (bsc#1196293)</changelog>
  <changelog author="jason.record@suse.com" date="1704974400">- Additional changes in version 3.1.28
  + ipset - List entries for all sets
  + ipvsadm - Inspect the virtual server table (pr#185)
  + Correctly detects Xen Dom0 (bsc#1218201)
  + Fixed smart disk error (bsc#1218282)</changelog>
</package>
<package pkgid="3fa518a69c6996ab89231ea6bb61db8aa203f9d51562af2e72a0e5c7effb6f82" name="supportutils" arch="src">
  <version epoch="0" ver="3.1.28" rel="150300.7.35.24.1"/>
  <changelog author="jason.record@suse.com" date="1639569600">- Changes to version 3.1.19
  + Removed chronyc DNS lookups with -n switch (bsc#1193732)</changelog>
  <changelog author="jason.record@suse.com" date="1641816000">- Changes to version 3.1.19
  + Made /proc directory and network names spaces configurable (bsc#1193868)</changelog>
  <changelog author="jason.record@suse.com" date="1646395200">- Changes to version 3.1.20
  + Added command blkid #114
  + Added s390x specific files and output #115
  + Fix for invalid argument during updates (bsc#1193204)
  + Optimized conf_files, conf_files_text and log_cmd functions #118
  + Fixed iscsi initiator name (bsc#1195797)
  + Added rpcinfo -p output #116
  + Included /etc/sssd/conf.d configuration files #100</changelog>
  <changelog author="jason.record@suse.com" date="1647345600">- Spec file adjusted for usr-merge</changelog>
  <changelog author="jason.record@suse.com" date="1654171200">- Added a listing to /dev/mapper/. #129</changelog>
  <changelog author="jason.record@suse.com" date="1666094400">- Changes to version 3.1.21
  + Added type output with df command in fs-diskio.txt (issue#141)
  + Gather all files in /etc/security/limits.d/ (issue#142)
  + Fixed KVM virtualization detection on bare metal (bsc#1184689)
  + Added logging using journalctl (bsc#1200330)
  + Passwords correctly removed from email.txt, updates.txt and fs-iscsi.txt (bsc#1203818)
  + Added system logging configuration and checking in messages_config.txt (issue#103)
  + If rsyslog not installed collect more from journalctl (issue#120)
  + Added systemd-status.txt for the status of all service units (issue#125)
  + autofs includes files in (+dir:&lt;path&gt;) (issue#111)
  + Get current sar data before collecting files (bsc#1192648)
  + Collects everything in /etc/multipath/ (bsc#1192252)
  + Collects power management information in hardware.txt (bsc#1197428)
  + Checks for suseconnect-ng or SUSEConnect packages (bsc#1202337)
  + Fixed conf_files and conf_text_files so y2log is gathered (issue#134, bsc#1202269)
  + Update to nvme_info and block_info #133 (bsc#1202417)
  + Added IO scheduler (issue#136)
  + Added includedir directories from /etc/sudoers (bsc#1188086)</changelog>
  <changelog author="jason.record@suse.com" date="1666094401">- Added lifecycle information (issue#140)</changelog>
  <changelog author="jason.record@suse.com" date="1668168000">- Changes to supportconfig version 3.1.11-46.3
  + Added missed sanitation check on crash.txt (bsc#1203818)
- Changes to supportconfig.rc version 3.1.11-30
  + Added check to _sanitize_file
  + Using variable for replement text in _sanitize_file</changelog>
  <changelog author="jason.record@suse.com" date="1668686400">- Changes to getappcore version 1.53.02
  + The location of chkbin was updated earlier. This documents that
    change (bsc#1205533, bsc#1204942)</changelog>
  <changelog author="jason.record@suse.com" date="1669982400">- Changes to supportconfig version 3.1.11-46.4
  + Added plymouth_info</changelog>
  <changelog author="jason.record@suse.com" date="1674734400">- Changes to supportconfig.rc version 3.1.11-35
  + Corrected _sanitize_file to include iscsi.conf and others (bsc#1206402)</changelog>
  <changelog author="hp.jansen@suse.com" date="1675339200">- Add dependency to `numactl` on ppc64le and `s390x`, this enforces
  that `numactl --hardware` data is provided in supportconfigs</changelog>
  <changelog author="jason.record@suse.com" date="1679313600">- Fixed missing status detail for apparmor (bsc#1196933)
- Corrected invalid argument list in docker.txt (bsc#1206608)
- Applies limit equally to sar data and text files (bsc#1207543)
- Collects hwinfo hardware logs (bsc#1208928)
- Collects lparnumascore logs (issue#148)</changelog>
  <changelog author="jason.record@suse.com" date="1685620800">- Changes for supportutils version 3.1.25
  + Removed iSCSI passwords CVE-2022-45154 (bsc#1207598)
  + powerpc: Collect lsslot,amsstat, and opal elogs (pr#149)
  + powerpc: collect invscout logs (pr#150)
  + powerpc: collect RMC status logs (pr#151)
  + Added missing nvme nbft commands (bsc#1211599)
  + Fixed invalid nvme commands (bsc#1211598)
  + Added missing podman information (PED-1703, bsc#1181477)
  + Removed dependency on sysfstools
  + Check for systool use (bsc#1210015)
  + Added selinux checking (bsc#1209979)
  + Updated SLES_VER matrix</changelog>
  <changelog author="jason.record@suse.com" date="1687780800">- ha_info sle15 uses /var/log/pacemaker/ (pq#153)</changelog>
  <changelog author="jason.record@suse.com" date="1690372800">- Added run time detection (bsc#1213127)</changelog>
  <changelog author="jason.record@suse.com" date="1693569600">- Changes in version 3.1.26
  + powerpc plugin to collect the slots and active memory (bsc#1210950)
  + A Cleartext Storage of Sensitive Information vulnerability CVE-2022-45154
  + supportconfig: collect BPF information (pr#154)
  + Added additional iscsi information (pr#155)</changelog>
  <changelog author="jason.record@suse.com" date="1700222400">- Changes in version 3.1.27
  + Fixed podman display issue (bsc#1217287)
  + Added nvme-stas configuration to nvme.txt (bsc#1216049)
  + Added timed command to fs-files.txt (bsc#1216827)
  + Collects zypp history file issue#166 (bsc#1216522)
  + Changed -x OPTION to really be exclude only (issue#146)
  + Collect HA related rpm package versions in ha.txt (pr#169)</changelog>
  <changelog author="jason.record@suse.com" date="1703073600">- Changes in version 3.1.28
  + Inhibit the conversion of port numbers to port names for network files (cherry picked from commit 55f5f716638fb15e3eb1315443949ed98723d250)
  + powerpc: collect rtas_errd.log and lp_diag.log files (pr#175)
  + Get list of pam.d file (cherry picked from commit eaf35c77fd4bc039fd7e3d779ec1c2c6521283e2)
  + Remove supportutils requires for util-linux-systemd and kmod (bsc#1193173)
  + Added missing klp information to kernel-livepatch.txt (bsc#1216390)
  + Fixed plugins creating empty files when using supportconfig.rc (bsc#1216388)
  + Provides long listing for /etc/sssd/sssd.conf (bsc#1211547)
  + Optimize lsof usage (bsc#1183663)
  + Added mokutil commands for secureboot (pr#179)
  + Collects chrony or ntp as needed (bsc#1196293)</changelog>
  <changelog author="jason.record@suse.com" date="1704974400">- Additional changes in version 3.1.28
  + ipset - List entries for all sets
  + ipvsadm - Inspect the virtual server table (pr#185)
  + Correctly detects Xen Dom0 (bsc#1218201)
  + Fixed smart disk error (bsc#1218282)</changelog>
</package>
<package pkgid="a0a11ce9e37e604c0e1fb05b43bed08756d14a1cd3f051f0807c515dcf9bef83" name="supportutils-plugin-suse-public-cloud" arch="noarch">
  <version epoch="0" ver="1.0.9" rel="150000.3.20.1"/>
  <changelog author="rjschwei@suse.com" date="1454587200">- Initial build
  + Version 1.0.0</changelog>
  <changelog author="rjschwei@suse.com" date="1454587201">- Include in SLE 12 (FATE#320442, bsc#963690)
- Include in SLE 11 (FATE#320441, bsc#963688)</changelog>
  <changelog author="rjschwei@suse.com" date="1470052800">- Update to verion 1.0.1 (bsc#990887, bsc#990888)
  + Include information about instance initialization generated by
    the initialization code in the log</changelog>
  <changelog author="rjschwei@suse.com" date="1503489600">- Update to version 1.0.2 (bsc#1053737, bsc#1053738)
  + Add additional package to the framework specific package queries</changelog>
  <changelog author="jgleissner@suse.com" date="1596196800">- Update to version 1.0.3 (bsc#1174618, bsc#1170475, bsc#1170476)
  + Drop rc file name extension from rpm lists
  + Sanatize data
  + Use updated azuremetadata
  + Add /etc/os-release data
  + Check update infrastructure is reachable</changelog>
  <changelog author="jgleissner@suse.com" date="1596283200">- Update to version 1.0.4
  + Fix output redirection in registration info query</changelog>
  <changelog author="rjschwei@suse.com" date="1597406400">- Update to version 1.0.5 (bsc#1175250, bsc#1175251)
  + Query for new GCE initialization code packages</changelog>
  <changelog author="rjschwei@suse.com" date="1643112000">- Update to version 1.0.6 (bsc#1195095, bsc#1195096)
  + Include cloud-init logs whenever they are present
  + Update the packages we track in AWS, Azure, and Google
  + Include the ecs logs for AWS ECS instances</changelog>
  <changelog author="rjschwei@suse.com" date="1681819200">- Update to version 1.0.7 (bsc#1209026)
  + Include information about the cached registration data
  + Collect the data that is sent to the update infrastructure during
    registration</changelog>
  <changelog author="jgleissner@suse.com" date="1691064000">- Update to version 1.0.8 (bsc#1213951)
  + Capture CSP billing adapter config and log (issue#13)
  + Accept upper case Amazon string in DMI table (issue#12)</changelog>
  <changelog author="rjschwei@suse.com" date="1705406400">- Update to version 1.0.9 (bsc#1218762, bsc#1218763)
  + Remove duplicate data collection for the plugin itself
  + Collect archive metering data when available
  + Query billing flavor status</changelog>
</package>
<package pkgid="61d45cf785a9b6b6ca17c239793ee561bb7c56df0c805e7b0be0afc8e79472c8" name="supportutils-plugin-suse-public-cloud" arch="src">
  <version epoch="0" ver="1.0.9" rel="150000.3.20.1"/>
  <changelog author="rjschwei@suse.com" date="1454587200">- Initial build
  + Version 1.0.0</changelog>
  <changelog author="rjschwei@suse.com" date="1454587201">- Include in SLE 12 (FATE#320442, bsc#963690)
- Include in SLE 11 (FATE#320441, bsc#963688)</changelog>
  <changelog author="rjschwei@suse.com" date="1470052800">- Update to verion 1.0.1 (bsc#990887, bsc#990888)
  + Include information about instance initialization generated by
    the initialization code in the log</changelog>
  <changelog author="rjschwei@suse.com" date="1503489600">- Update to version 1.0.2 (bsc#1053737, bsc#1053738)
  + Add additional package to the framework specific package queries</changelog>
  <changelog author="jgleissner@suse.com" date="1596196800">- Update to version 1.0.3 (bsc#1174618, bsc#1170475, bsc#1170476)
  + Drop rc file name extension from rpm lists
  + Sanatize data
  + Use updated azuremetadata
  + Add /etc/os-release data
  + Check update infrastructure is reachable</changelog>
  <changelog author="jgleissner@suse.com" date="1596283200">- Update to version 1.0.4
  + Fix output redirection in registration info query</changelog>
  <changelog author="rjschwei@suse.com" date="1597406400">- Update to version 1.0.5 (bsc#1175250, bsc#1175251)
  + Query for new GCE initialization code packages</changelog>
  <changelog author="rjschwei@suse.com" date="1643112000">- Update to version 1.0.6 (bsc#1195095, bsc#1195096)
  + Include cloud-init logs whenever they are present
  + Update the packages we track in AWS, Azure, and Google
  + Include the ecs logs for AWS ECS instances</changelog>
  <changelog author="rjschwei@suse.com" date="1681819200">- Update to version 1.0.7 (bsc#1209026)
  + Include information about the cached registration data
  + Collect the data that is sent to the update infrastructure during
    registration</changelog>
  <changelog author="jgleissner@suse.com" date="1691064000">- Update to version 1.0.8 (bsc#1213951)
  + Capture CSP billing adapter config and log (issue#13)
  + Accept upper case Amazon string in DMI table (issue#12)</changelog>
  <changelog author="rjschwei@suse.com" date="1705406400">- Update to version 1.0.9 (bsc#1218762, bsc#1218763)
  + Remove duplicate data collection for the plugin itself
  + Collect archive metering data when available
  + Query billing flavor status</changelog>
</package>
<package pkgid="027dc8cdc236ced2117f9b9cec2b1d8aa147db1b5de33d617b24c2ff1ca7c5a7" name="suse-build-key" arch="noarch">
  <version epoch="0" ver="12.0" rel="150000.8.34.1"/>
  <changelog author="ro@suse.de" date="1480420800">- use dumpsigs script from openSUSE to merge code</changelog>
  <changelog author="meissner@suse.com" date="1481112000">- extend the build@suse.de product key. (bsc#1014151)
  pub  2048R/39DB7C82 2013-01-31 [expires: 2020-12-06]
  uid                            SuSE Package Signing Key &lt;build@suse.de&gt;</changelog>
  <changelog author="meissner@suse.com" date="1522238400">- created a new security@suse.de communication key. (bsc#1082022)
- extended the PTF key and the SLE10 build@suse.de key. (bsc#1085512)</changelog>
  <changelog author="meissner@suse.com" date="1542110400">- include ptf key in the key directory to avoid it being
  stripped via %doc stripping. (bsc#1044232)</changelog>
  <changelog author="meissner@suse.com" date="1583928000">- created a new security@suse.de communication key (bsc#1166334)</changelog>
  <changelog author="meissner@suse.com" date="1587643200">- add a /usr/share/container-keys/ directory for GPG based Container
  verification.
- Add the SUSE build key as "suse-container-key.asc". (PM-1845 bsc#1170347)</changelog>
  <changelog author="meissner@suse.com" date="1597320000">- actually the container key is different from the build signing
  key. (PM-1845 bsc#1170347)</changelog>
  <changelog author="meissner@suse.com" date="1600689600">- suse build key extended (bsc#1176759)
  gpg-pubkey-39db7c82-5847eb1f.asc -&gt; gpg-pubkey-39db7c82-5f68629b.asc</changelog>
  <changelog author="meissner@suse.com" date="1645099200">- extended expiry of SUSE PTF key, move it to suse_ptf_key_old.asc
- added new SUSE PTF key with RSA2048 bit as suse_ptf_key.asc (bsc#1196494)
- extended expiry of SUSE SLES11 key (bsc#1194845)
- added SUSE Contaner signing key in PEM format for use e.g. by cosign.
- SUSE security key replaced with 2022 edition (E-Mail usage only). (bsc#1196495)</changelog>
  <changelog author="meissner@suse.com" date="1648123200">- No longer install 1024bit keys by default. (bsc#1197293)
  - SLE11 key moved to documentation
  - old PTF (pre March 2022) moved to documentation only</changelog>
  <changelog author="meissner@suse.com" date="1650542400">- still ship the old ptf key (was not added to documentation by mistake).
  (bsc#1198504)</changelog>
  <changelog author="meissner@suse.com" date="1666699200">- added /usr/share/pki/containers directory for container pem keys
  (cosign/sigstore style), put our PEM key there too (bsc#1204706)</changelog>
  <changelog author="meissner@suse.com" date="1675771200">- Establish multiple new 4096 RSA keys that we will switch
  to mid of 2023. (jsc#PED-2777)
  - gpg-pubkey-3fa1d6ce-63c9481c.asc: new 4096 RSA signing key for SLE (RPM+repos).
  - gpg-pubkey-d588dc46-63c939db.asc: new 4096 RSA reserver key for SLE (RPM+repos).
  - suse_ptf_key_4096.asc: new 4096 RSA signing key for PTF RPMs.
  - build-container-8fd6c337-63c94b45.asc/build-container-8fd6c337-63c94b45.pem:
    new RSA 4096 key for the SUSE registry registry.suse.com, installed as
    suse-container-key-2023.pem and suse-container-key-2023.asc
  - suse_ptf_containerkey_2023.asc suse_ptf_containerkey_2023.pem:
    New PTF container signing key for registry.suse.com/ptf/ space.</changelog>
  <changelog author="meissner@suse.com" date="1694174400">- add and run a import-suse-build-key scripts, this will be ran
  after installation with libzypp based installers. (jsc#PED-2777)</changelog>
</package>
<package pkgid="3a4908c7aabd1dbcb6bf9f54f1275a0395cb00fee42a97f78a26b547e1ab99b1" name="suse-build-key" arch="src">
  <version epoch="0" ver="12.0" rel="150000.8.34.1"/>
  <changelog author="ro@suse.de" date="1359633600">- added future signing key for SLES (fate#314767) (bnc#801055)
  using 2048 bit rsa key</changelog>
  <changelog author="meissner@suse.com" date="1389268800">- Merged over logic from openSUSE-build-key.
- Got rid of default importing into roots keyring.
- Removed some old keys.
- Clarify that security@suse.de is a email only key
- PTF key is supplied also as %doc, to not be default
  imported.
- Keys currently inside:
  - pub  2048R/39DB7C82 SuSE Package Signing Key &lt;build@suse.de&gt;
  - pub  2048R/50A3DD1C SuSE Package Signing Key (reserve key) &lt;build@suse.de&gt;
  - pub  1024D/B37B98A9 SUSE PTF Signing Key &lt;support@suse.com&gt;
  - pub  2048R/3D25D3D9 SuSE Security Team &lt;security@suse.de&gt;</changelog>
  <changelog author="meissner@suse.com" date="1389614400">- reverted to contain the fullkeyring build SLE12 Alpha.
- also list the old sle11 build@suse.de key temporary</changelog>
  <changelog author="meissner@suse.com" date="1392033600">- create suse-build-key.gpg during build.
- Remove old keys from keyring. (fate#314767)
  Keys currently inside the RPM trusted keyring:
  - pub  2048R/39DB7C82 SuSE Package Signing Key &lt;build@suse.de&gt;
  - pub  2048R/50A3DD1C SuSE Package Signing Key (reserve key) &lt;build@suse.de&gt;
- Various keys are moved to the documentation area
  (/usr/share/doc/packages/suse-build-key)
  - build-at-suse-sle11.asc: the old SUSE Linux Enterprise 11 key.
    if SUSE Linux Enterprise 11 packages need to be verified on
    a SUSE Linux Enterprise 12 system.
  - suse_ptf_key.asc: The suse ptf key. For verification of provided PTFs.
  - security_at_suse_de.asc: Use only for email encryption and
    verification purposes when contacting our security contact address
    security@suse.de</changelog>
  <changelog author="meissner@suse.com" date="1409313600">- Went to new method again.
  - suse-build-key.gpg blob dropped
  - ship seperate files</changelog>
  <changelog author="meissner@suse.com" date="1412251200">- renamed security_at_suse_de.asc to security_at_suse_de_old.asc
- security_at_suse_de.asc: new 4096 bit RSA key.
  pub  4096R/317CD502 2014-10-02 SUSE Security Team &lt;security@suse.de&gt;
  bnc#899509</changelog>
  <changelog author="ro@suse.de" date="1480420800">- use dumpsigs script from openSUSE to merge code</changelog>
  <changelog author="meissner@suse.com" date="1481112000">- extend the build@suse.de product key. (bsc#1014151)
  pub  2048R/39DB7C82 2013-01-31 [expires: 2020-12-06]
  uid                            SuSE Package Signing Key &lt;build@suse.de&gt;</changelog>
  <changelog author="meissner@suse.com" date="1522238400">- created a new security@suse.de communication key. (bsc#1082022)
- extended the PTF key and the SLE10 build@suse.de key. (bsc#1085512)</changelog>
  <changelog author="meissner@suse.com" date="1542110400">- include ptf key in the key directory to avoid it being
  stripped via %doc stripping. (bsc#1044232)</changelog>
  <changelog author="meissner@suse.com" date="1583928000">- created a new security@suse.de communication key (bsc#1166334)</changelog>
  <changelog author="meissner@suse.com" date="1587643200">- add a /usr/share/container-keys/ directory for GPG based Container
  verification.
- Add the SUSE build key as "suse-container-key.asc". (PM-1845 bsc#1170347)</changelog>
  <changelog author="meissner@suse.com" date="1597320000">- actually the container key is different from the build signing
  key. (PM-1845 bsc#1170347)</changelog>
  <changelog author="meissner@suse.com" date="1600689600">- suse build key extended (bsc#1176759)
  gpg-pubkey-39db7c82-5847eb1f.asc -&gt; gpg-pubkey-39db7c82-5f68629b.asc</changelog>
  <changelog author="meissner@suse.com" date="1645099200">- extended expiry of SUSE PTF key, move it to suse_ptf_key_old.asc
- added new SUSE PTF key with RSA2048 bit as suse_ptf_key.asc (bsc#1196494)
- extended expiry of SUSE SLES11 key (bsc#1194845)
- added SUSE Contaner signing key in PEM format for use e.g. by cosign.
- SUSE security key replaced with 2022 edition (E-Mail usage only). (bsc#1196495)</changelog>
  <changelog author="meissner@suse.com" date="1648123200">- No longer install 1024bit keys by default. (bsc#1197293)
  - SLE11 key moved to documentation
  - old PTF (pre March 2022) moved to documentation only</changelog>
  <changelog author="meissner@suse.com" date="1650542400">- still ship the old ptf key (was not added to documentation by mistake).
  (bsc#1198504)</changelog>
  <changelog author="meissner@suse.com" date="1666699200">- added /usr/share/pki/containers directory for container pem keys
  (cosign/sigstore style), put our PEM key there too (bsc#1204706)</changelog>
  <changelog author="meissner@suse.com" date="1675771200">- Establish multiple new 4096 RSA keys that we will switch
  to mid of 2023. (jsc#PED-2777)
  - gpg-pubkey-3fa1d6ce-63c9481c.asc: new 4096 RSA signing key for SLE (RPM+repos).
  - gpg-pubkey-d588dc46-63c939db.asc: new 4096 RSA reserver key for SLE (RPM+repos).
  - suse_ptf_key_4096.asc: new 4096 RSA signing key for PTF RPMs.
  - build-container-8fd6c337-63c94b45.asc/build-container-8fd6c337-63c94b45.pem:
    new RSA 4096 key for the SUSE registry registry.suse.com, installed as
    suse-container-key-2023.pem and suse-container-key-2023.asc
  - suse_ptf_containerkey_2023.asc suse_ptf_containerkey_2023.pem:
    New PTF container signing key for registry.suse.com/ptf/ space.</changelog>
  <changelog author="meissner@suse.com" date="1694174400">- add and run a import-suse-build-key scripts, this will be ran
  after installation with libzypp based installers. (jsc#PED-2777)</changelog>
</package>
<package pkgid="3fc8f4da32ba44bf6d185db3676c45f995fb13fadff2edf50507d250038171f1" name="suse-build-key" arch="noarch">
  <version epoch="0" ver="12.0" rel="150000.8.37.1"/>
  <changelog author="ro@suse.de" date="1480420800">- use dumpsigs script from openSUSE to merge code</changelog>
  <changelog author="meissner@suse.com" date="1481112000">- extend the build@suse.de product key. (bsc#1014151)
  pub  2048R/39DB7C82 2013-01-31 [expires: 2020-12-06]
  uid                            SuSE Package Signing Key &lt;build@suse.de&gt;</changelog>
  <changelog author="meissner@suse.com" date="1522238400">- created a new security@suse.de communication key. (bsc#1082022)
- extended the PTF key and the SLE10 build@suse.de key. (bsc#1085512)</changelog>
  <changelog author="meissner@suse.com" date="1542110400">- include ptf key in the key directory to avoid it being
  stripped via %doc stripping. (bsc#1044232)</changelog>
  <changelog author="meissner@suse.com" date="1583928000">- created a new security@suse.de communication key (bsc#1166334)</changelog>
  <changelog author="meissner@suse.com" date="1587643200">- add a /usr/share/container-keys/ directory for GPG based Container
  verification.
- Add the SUSE build key as "suse-container-key.asc". (PM-1845 bsc#1170347)</changelog>
  <changelog author="meissner@suse.com" date="1597320000">- actually the container key is different from the build signing
  key. (PM-1845 bsc#1170347)</changelog>
  <changelog author="meissner@suse.com" date="1600689600">- suse build key extended (bsc#1176759)
  gpg-pubkey-39db7c82-5847eb1f.asc -&gt; gpg-pubkey-39db7c82-5f68629b.asc</changelog>
  <changelog author="meissner@suse.com" date="1645099200">- extended expiry of SUSE PTF key, move it to suse_ptf_key_old.asc
- added new SUSE PTF key with RSA2048 bit as suse_ptf_key.asc (bsc#1196494)
- extended expiry of SUSE SLES11 key (bsc#1194845)
- added SUSE Contaner signing key in PEM format for use e.g. by cosign.
- SUSE security key replaced with 2022 edition (E-Mail usage only). (bsc#1196495)</changelog>
  <changelog author="meissner@suse.com" date="1648123200">- No longer install 1024bit keys by default. (bsc#1197293)
  - SLE11 key moved to documentation
  - old PTF (pre March 2022) moved to documentation only</changelog>
  <changelog author="meissner@suse.com" date="1650542400">- still ship the old ptf key (was not added to documentation by mistake).
  (bsc#1198504)</changelog>
  <changelog author="meissner@suse.com" date="1666699200">- added /usr/share/pki/containers directory for container pem keys
  (cosign/sigstore style), put our PEM key there too (bsc#1204706)</changelog>
  <changelog author="meissner@suse.com" date="1675771200">- Establish multiple new 4096 RSA keys that we will switch
  to mid of 2023. (jsc#PED-2777)
  - gpg-pubkey-3fa1d6ce-63c9481c.asc: new 4096 RSA signing key for SLE (RPM+repos).
  - gpg-pubkey-d588dc46-63c939db.asc: new 4096 RSA reserver key for SLE (RPM+repos).
  - suse_ptf_key_4096.asc: new 4096 RSA signing key for PTF RPMs.
  - build-container-8fd6c337-63c94b45.asc/build-container-8fd6c337-63c94b45.pem:
    new RSA 4096 key for the SUSE registry registry.suse.com, installed as
    suse-container-key-2023.pem and suse-container-key-2023.asc
  - suse_ptf_containerkey_2023.asc suse_ptf_containerkey_2023.pem:
    New PTF container signing key for registry.suse.com/ptf/ space.</changelog>
  <changelog author="meissner@suse.com" date="1694174400">- add and run a import-suse-build-key scripts, this will be ran
  after installation with libzypp based installers. (jsc#PED-2777)</changelog>
  <changelog author="meissner@suse.com" date="1700136000">- replace libzypp-post-script based installation with a systemd timer
  and service.
  - suse-build-key-import.service
  - suse-build-key-import.timer</changelog>
</package>
<package pkgid="55b70b74486d714ecf874fb6f8a3868be4a09057295a585290762115a1aba07b" name="suse-build-key" arch="src">
  <version epoch="0" ver="12.0" rel="150000.8.37.1"/>
  <changelog author="meissner@suse.com" date="1389268800">- Merged over logic from openSUSE-build-key.
- Got rid of default importing into roots keyring.
- Removed some old keys.
- Clarify that security@suse.de is a email only key
- PTF key is supplied also as %doc, to not be default
  imported.
- Keys currently inside:
  - pub  2048R/39DB7C82 SuSE Package Signing Key &lt;build@suse.de&gt;
  - pub  2048R/50A3DD1C SuSE Package Signing Key (reserve key) &lt;build@suse.de&gt;
  - pub  1024D/B37B98A9 SUSE PTF Signing Key &lt;support@suse.com&gt;
  - pub  2048R/3D25D3D9 SuSE Security Team &lt;security@suse.de&gt;</changelog>
  <changelog author="meissner@suse.com" date="1389614400">- reverted to contain the fullkeyring build SLE12 Alpha.
- also list the old sle11 build@suse.de key temporary</changelog>
  <changelog author="meissner@suse.com" date="1392033600">- create suse-build-key.gpg during build.
- Remove old keys from keyring. (fate#314767)
  Keys currently inside the RPM trusted keyring:
  - pub  2048R/39DB7C82 SuSE Package Signing Key &lt;build@suse.de&gt;
  - pub  2048R/50A3DD1C SuSE Package Signing Key (reserve key) &lt;build@suse.de&gt;
- Various keys are moved to the documentation area
  (/usr/share/doc/packages/suse-build-key)
  - build-at-suse-sle11.asc: the old SUSE Linux Enterprise 11 key.
    if SUSE Linux Enterprise 11 packages need to be verified on
    a SUSE Linux Enterprise 12 system.
  - suse_ptf_key.asc: The suse ptf key. For verification of provided PTFs.
  - security_at_suse_de.asc: Use only for email encryption and
    verification purposes when contacting our security contact address
    security@suse.de</changelog>
  <changelog author="meissner@suse.com" date="1409313600">- Went to new method again.
  - suse-build-key.gpg blob dropped
  - ship seperate files</changelog>
  <changelog author="meissner@suse.com" date="1412251200">- renamed security_at_suse_de.asc to security_at_suse_de_old.asc
- security_at_suse_de.asc: new 4096 bit RSA key.
  pub  4096R/317CD502 2014-10-02 SUSE Security Team &lt;security@suse.de&gt;
  bnc#899509</changelog>
  <changelog author="ro@suse.de" date="1480420800">- use dumpsigs script from openSUSE to merge code</changelog>
  <changelog author="meissner@suse.com" date="1481112000">- extend the build@suse.de product key. (bsc#1014151)
  pub  2048R/39DB7C82 2013-01-31 [expires: 2020-12-06]
  uid                            SuSE Package Signing Key &lt;build@suse.de&gt;</changelog>
  <changelog author="meissner@suse.com" date="1522238400">- created a new security@suse.de communication key. (bsc#1082022)
- extended the PTF key and the SLE10 build@suse.de key. (bsc#1085512)</changelog>
  <changelog author="meissner@suse.com" date="1542110400">- include ptf key in the key directory to avoid it being
  stripped via %doc stripping. (bsc#1044232)</changelog>
  <changelog author="meissner@suse.com" date="1583928000">- created a new security@suse.de communication key (bsc#1166334)</changelog>
  <changelog author="meissner@suse.com" date="1587643200">- add a /usr/share/container-keys/ directory for GPG based Container
  verification.
- Add the SUSE build key as "suse-container-key.asc". (PM-1845 bsc#1170347)</changelog>
  <changelog author="meissner@suse.com" date="1597320000">- actually the container key is different from the build signing
  key. (PM-1845 bsc#1170347)</changelog>
  <changelog author="meissner@suse.com" date="1600689600">- suse build key extended (bsc#1176759)
  gpg-pubkey-39db7c82-5847eb1f.asc -&gt; gpg-pubkey-39db7c82-5f68629b.asc</changelog>
  <changelog author="meissner@suse.com" date="1645099200">- extended expiry of SUSE PTF key, move it to suse_ptf_key_old.asc
- added new SUSE PTF key with RSA2048 bit as suse_ptf_key.asc (bsc#1196494)
- extended expiry of SUSE SLES11 key (bsc#1194845)
- added SUSE Contaner signing key in PEM format for use e.g. by cosign.
- SUSE security key replaced with 2022 edition (E-Mail usage only). (bsc#1196495)</changelog>
  <changelog author="meissner@suse.com" date="1648123200">- No longer install 1024bit keys by default. (bsc#1197293)
  - SLE11 key moved to documentation
  - old PTF (pre March 2022) moved to documentation only</changelog>
  <changelog author="meissner@suse.com" date="1650542400">- still ship the old ptf key (was not added to documentation by mistake).
  (bsc#1198504)</changelog>
  <changelog author="meissner@suse.com" date="1666699200">- added /usr/share/pki/containers directory for container pem keys
  (cosign/sigstore style), put our PEM key there too (bsc#1204706)</changelog>
  <changelog author="meissner@suse.com" date="1675771200">- Establish multiple new 4096 RSA keys that we will switch
  to mid of 2023. (jsc#PED-2777)
  - gpg-pubkey-3fa1d6ce-63c9481c.asc: new 4096 RSA signing key for SLE (RPM+repos).
  - gpg-pubkey-d588dc46-63c939db.asc: new 4096 RSA reserver key for SLE (RPM+repos).
  - suse_ptf_key_4096.asc: new 4096 RSA signing key for PTF RPMs.
  - build-container-8fd6c337-63c94b45.asc/build-container-8fd6c337-63c94b45.pem:
    new RSA 4096 key for the SUSE registry registry.suse.com, installed as
    suse-container-key-2023.pem and suse-container-key-2023.asc
  - suse_ptf_containerkey_2023.asc suse_ptf_containerkey_2023.pem:
    New PTF container signing key for registry.suse.com/ptf/ space.</changelog>
  <changelog author="meissner@suse.com" date="1694174400">- add and run a import-suse-build-key scripts, this will be ran
  after installation with libzypp based installers. (jsc#PED-2777)</changelog>
  <changelog author="meissner@suse.com" date="1700136000">- replace libzypp-post-script based installation with a systemd timer
  and service.
  - suse-build-key-import.service
  - suse-build-key-import.timer</changelog>
</package>
<package pkgid="0e5896464f91ee164b303fc026b78b99ef96100c5ed96c4189e6657b4886120f" name="suse-build-key" arch="noarch">
  <version epoch="0" ver="12.0" rel="150000.8.40.1"/>
  <changelog author="ro@suse.de" date="1480420800">- use dumpsigs script from openSUSE to merge code</changelog>
  <changelog author="meissner@suse.com" date="1481112000">- extend the build@suse.de product key. (bsc#1014151)
  pub  2048R/39DB7C82 2013-01-31 [expires: 2020-12-06]
  uid                            SuSE Package Signing Key &lt;build@suse.de&gt;</changelog>
  <changelog author="meissner@suse.com" date="1522238400">- created a new security@suse.de communication key. (bsc#1082022)
- extended the PTF key and the SLE10 build@suse.de key. (bsc#1085512)</changelog>
  <changelog author="meissner@suse.com" date="1542110400">- include ptf key in the key directory to avoid it being
  stripped via %doc stripping. (bsc#1044232)</changelog>
  <changelog author="meissner@suse.com" date="1583928000">- created a new security@suse.de communication key (bsc#1166334)</changelog>
  <changelog author="meissner@suse.com" date="1587643200">- add a /usr/share/container-keys/ directory for GPG based Container
  verification.
- Add the SUSE build key as "suse-container-key.asc". (PM-1845 bsc#1170347)</changelog>
  <changelog author="meissner@suse.com" date="1597320000">- actually the container key is different from the build signing
  key. (PM-1845 bsc#1170347)</changelog>
  <changelog author="meissner@suse.com" date="1600689600">- suse build key extended (bsc#1176759)
  gpg-pubkey-39db7c82-5847eb1f.asc -&gt; gpg-pubkey-39db7c82-5f68629b.asc</changelog>
  <changelog author="meissner@suse.com" date="1645099200">- extended expiry of SUSE PTF key, move it to suse_ptf_key_old.asc
- added new SUSE PTF key with RSA2048 bit as suse_ptf_key.asc (bsc#1196494)
- extended expiry of SUSE SLES11 key (bsc#1194845)
- added SUSE Contaner signing key in PEM format for use e.g. by cosign.
- SUSE security key replaced with 2022 edition (E-Mail usage only). (bsc#1196495)</changelog>
  <changelog author="meissner@suse.com" date="1648123200">- No longer install 1024bit keys by default. (bsc#1197293)
  - SLE11 key moved to documentation
  - old PTF (pre March 2022) moved to documentation only</changelog>
  <changelog author="meissner@suse.com" date="1650542400">- still ship the old ptf key (was not added to documentation by mistake).
  (bsc#1198504)</changelog>
  <changelog author="meissner@suse.com" date="1666699200">- added /usr/share/pki/containers directory for container pem keys
  (cosign/sigstore style), put our PEM key there too (bsc#1204706)</changelog>
  <changelog author="meissner@suse.com" date="1675771200">- Establish multiple new 4096 RSA keys that we will switch
  to mid of 2023. (jsc#PED-2777)
  - gpg-pubkey-3fa1d6ce-63c9481c.asc: new 4096 RSA signing key for SLE (RPM+repos).
  - gpg-pubkey-d588dc46-63c939db.asc: new 4096 RSA reserver key for SLE (RPM+repos).
  - suse_ptf_key_4096.asc: new 4096 RSA signing key for PTF RPMs.
  - build-container-8fd6c337-63c94b45.asc/build-container-8fd6c337-63c94b45.pem:
    new RSA 4096 key for the SUSE registry registry.suse.com, installed as
    suse-container-key-2023.pem and suse-container-key-2023.asc
  - suse_ptf_containerkey_2023.asc suse_ptf_containerkey_2023.pem:
    New PTF container signing key for registry.suse.com/ptf/ space.</changelog>
  <changelog author="meissner@suse.com" date="1694174400">- add and run a import-suse-build-key scripts, this will be ran
  after installation with libzypp based installers. (jsc#PED-2777)</changelog>
  <changelog author="meissner@suse.com" date="1700136000">- replace libzypp-post-script based installation with a systemd timer
  and service.
  - suse-build-key-import.service
  - suse-build-key-import.timer</changelog>
  <changelog author="meissner@suse.com" date="1706443200">- run rpm commands in import script only when libzypp is not
  active. bsc#1219189 bsc#1219123</changelog>
</package>
<package pkgid="1185700aa8af85cb0cef71b4dee09dd532f4316af9ad6edf76e8bfdcc4b43f56" name="suse-build-key" arch="src">
  <version epoch="0" ver="12.0" rel="150000.8.40.1"/>
  <changelog author="meissner@suse.com" date="1389614400">- reverted to contain the fullkeyring build SLE12 Alpha.
- also list the old sle11 build@suse.de key temporary</changelog>
  <changelog author="meissner@suse.com" date="1392033600">- create suse-build-key.gpg during build.
- Remove old keys from keyring. (fate#314767)
  Keys currently inside the RPM trusted keyring:
  - pub  2048R/39DB7C82 SuSE Package Signing Key &lt;build@suse.de&gt;
  - pub  2048R/50A3DD1C SuSE Package Signing Key (reserve key) &lt;build@suse.de&gt;
- Various keys are moved to the documentation area
  (/usr/share/doc/packages/suse-build-key)
  - build-at-suse-sle11.asc: the old SUSE Linux Enterprise 11 key.
    if SUSE Linux Enterprise 11 packages need to be verified on
    a SUSE Linux Enterprise 12 system.
  - suse_ptf_key.asc: The suse ptf key. For verification of provided PTFs.
  - security_at_suse_de.asc: Use only for email encryption and
    verification purposes when contacting our security contact address
    security@suse.de</changelog>
  <changelog author="meissner@suse.com" date="1409313600">- Went to new method again.
  - suse-build-key.gpg blob dropped
  - ship seperate files</changelog>
  <changelog author="meissner@suse.com" date="1412251200">- renamed security_at_suse_de.asc to security_at_suse_de_old.asc
- security_at_suse_de.asc: new 4096 bit RSA key.
  pub  4096R/317CD502 2014-10-02 SUSE Security Team &lt;security@suse.de&gt;
  bnc#899509</changelog>
  <changelog author="ro@suse.de" date="1480420800">- use dumpsigs script from openSUSE to merge code</changelog>
  <changelog author="meissner@suse.com" date="1481112000">- extend the build@suse.de product key. (bsc#1014151)
  pub  2048R/39DB7C82 2013-01-31 [expires: 2020-12-06]
  uid                            SuSE Package Signing Key &lt;build@suse.de&gt;</changelog>
  <changelog author="meissner@suse.com" date="1522238400">- created a new security@suse.de communication key. (bsc#1082022)
- extended the PTF key and the SLE10 build@suse.de key. (bsc#1085512)</changelog>
  <changelog author="meissner@suse.com" date="1542110400">- include ptf key in the key directory to avoid it being
  stripped via %doc stripping. (bsc#1044232)</changelog>
  <changelog author="meissner@suse.com" date="1583928000">- created a new security@suse.de communication key (bsc#1166334)</changelog>
  <changelog author="meissner@suse.com" date="1587643200">- add a /usr/share/container-keys/ directory for GPG based Container
  verification.
- Add the SUSE build key as "suse-container-key.asc". (PM-1845 bsc#1170347)</changelog>
  <changelog author="meissner@suse.com" date="1597320000">- actually the container key is different from the build signing
  key. (PM-1845 bsc#1170347)</changelog>
  <changelog author="meissner@suse.com" date="1600689600">- suse build key extended (bsc#1176759)
  gpg-pubkey-39db7c82-5847eb1f.asc -&gt; gpg-pubkey-39db7c82-5f68629b.asc</changelog>
  <changelog author="meissner@suse.com" date="1645099200">- extended expiry of SUSE PTF key, move it to suse_ptf_key_old.asc
- added new SUSE PTF key with RSA2048 bit as suse_ptf_key.asc (bsc#1196494)
- extended expiry of SUSE SLES11 key (bsc#1194845)
- added SUSE Contaner signing key in PEM format for use e.g. by cosign.
- SUSE security key replaced with 2022 edition (E-Mail usage only). (bsc#1196495)</changelog>
  <changelog author="meissner@suse.com" date="1648123200">- No longer install 1024bit keys by default. (bsc#1197293)
  - SLE11 key moved to documentation
  - old PTF (pre March 2022) moved to documentation only</changelog>
  <changelog author="meissner@suse.com" date="1650542400">- still ship the old ptf key (was not added to documentation by mistake).
  (bsc#1198504)</changelog>
  <changelog author="meissner@suse.com" date="1666699200">- added /usr/share/pki/containers directory for container pem keys
  (cosign/sigstore style), put our PEM key there too (bsc#1204706)</changelog>
  <changelog author="meissner@suse.com" date="1675771200">- Establish multiple new 4096 RSA keys that we will switch
  to mid of 2023. (jsc#PED-2777)
  - gpg-pubkey-3fa1d6ce-63c9481c.asc: new 4096 RSA signing key for SLE (RPM+repos).
  - gpg-pubkey-d588dc46-63c939db.asc: new 4096 RSA reserver key for SLE (RPM+repos).
  - suse_ptf_key_4096.asc: new 4096 RSA signing key for PTF RPMs.
  - build-container-8fd6c337-63c94b45.asc/build-container-8fd6c337-63c94b45.pem:
    new RSA 4096 key for the SUSE registry registry.suse.com, installed as
    suse-container-key-2023.pem and suse-container-key-2023.asc
  - suse_ptf_containerkey_2023.asc suse_ptf_containerkey_2023.pem:
    New PTF container signing key for registry.suse.com/ptf/ space.</changelog>
  <changelog author="meissner@suse.com" date="1694174400">- add and run a import-suse-build-key scripts, this will be ran
  after installation with libzypp based installers. (jsc#PED-2777)</changelog>
  <changelog author="meissner@suse.com" date="1700136000">- replace libzypp-post-script based installation with a systemd timer
  and service.
  - suse-build-key-import.service
  - suse-build-key-import.timer</changelog>
  <changelog author="meissner@suse.com" date="1706443200">- run rpm commands in import script only when libzypp is not
  active. bsc#1219189 bsc#1219123</changelog>
</package>
<package pkgid="f5659ac7a096163413376b997eb1931afa77901b55bf00c04c3a24bbbc7d5cbf" name="suse-module-tools" arch="aarch64">
  <version epoch="0" ver="15.5.3" rel="150500.3.6.1"/>
  <changelog author="mwilck@suse.com" date="1623931200">- Update to version 15.3.7:
  * Fix treatment of compressed modules (bsc#1187093)</changelog>
  <changelog author="mwilck@suse.com" date="1625572800">- Update to version 15.3.8:
  * modprobe.d: Remove dma=none setting for parport_pc
    (bsc#1177695)</changelog>
  <changelog author="mwilck@suse.com" date="1628856000">- Update to version 15.4.2
- Move config files to /lib/modprobe.d and /lib/depmod.d
  (jsc#SLE-20639)
  * "modprobe $FS" for a blacklisted file system now offers to
    unblacklist the module permanently
  * disabled automatic un-blacklisting of filesystem modules loaded
    at installation time
- Replace mkinitrd with dracut everywhere (jsc#SLE-20348)
- Add faster substitute for lsinitrd to speed up weak-modules2
  (jsc#SLE-9078)
- Enable f2fs
- Add a "Supplements" dependency on dkms to the "legacy" submodule
  (dkms needs "weak-modules")
- modprobe.d cleanups and fixes:
  * Unify ppc64 and ppc64le
  * Delete files for obsolete architectures
  * Remove obsolete SUSE_INITRD statements (bsc#1161343)
  * Remove dma=none setting for parport_pc (bsc#1177695)
- Add README.md</changelog>
  <changelog author="mwilck@suse.com" date="1629374400">- Update to version 15.4.3:
  * fix problem that initrd may not be rebuilt after installing
    kernel-$flavor-extra (bsc#1189441)</changelog>
  <changelog author="mwilck@suse.com" date="1633089600">- Update to version 15.4.4:
  * Import kernel scriptlets from kernel-source
    (bsc#1189841, bsc#1190598)
  * Provide "suse-kernel-rpm-scriptlets"</changelog>
  <changelog author="mwilck@suse.com" date="1633348800">- Update to version 15.4.5:
  * inkmp-script(postun): don't pass  existing files to weak-modules2
    (boo#1191200)
  * kernel-scriptlets: skip cert scriptlet on non-UEFI systems
    (boo#1191260)</changelog>
  <changelog author="mwilck@suse.com" date="1634904000">- Update to version 15.4.6:
  * rpm-script: fix bad exit status in OpenQA (bsc#1191922)
  * cert-script: Deal with existing $cert.delete file (bsc#1191804).
  * cert-script: Ignore kernel keyring for kernel certificates (bsc#1191480).
  * cert-script: Only print mokutil output in verbose mode.</changelog>
  <changelog author="mwilck@suse.com" date="1634904001">- Update to version 15.4.7:
  * fixup "rpm-script: fix bad exit status in OpenQA (bsc#1191922)"</changelog>
  <changelog author="mwilck@suse.com" date="1636459200">- Update to version 15.4.8:
  * Same as Factory version 16.0.14
  * add udev rules from udev-extra-rules (formerly system-tuning-common-SUSE).
    Both packages are now both obsoleted by suse-module-tools.
    (jsc#SLE-21032)
  * 60-io-scheduler.rules: don't use BFQ for real multiqueue devices
    (jsc#SLE-21032, bsc#1192161)
  * 60-io-scheduler.rules: use "none" for multipath components
    (bsc#1192161)</changelog>
  <changelog author="mwilck@suse.com" date="1639396800">- Update to version 15.4.9:
  * same as Factory version 16.0.16
  * modprobe.d: split conf files (jsc#SLE-21626, boo#1193059)
  - Rather than shipping two large files with modprobe.d options
    (00-system.conf and 50-blacklist.conf), ship multiple small
    per-module files. This makes it easier for users to override
    distribution defaults.
  * blacklist isst_if_mbox_msr (bsc#1187196)
  * boot-sysctl: make sure file exists (fix for containers)
  * remove blacklist entry for snd_bt87x (bsc#1192974, bsc#51718)</changelog>
  <changelog author="mwilck@suse.com" date="1640001600">- Update to version 15.4.10:
  * same as Factory version 16.0.17
  * 60-io-scheduler.rules: add rules for virtual devices
    (boo#1193759)
  * 60-io-scheduler.rules: enforce "none" for loop devices
    (boo#1193759)
  * install some modprobe.d files only for relevant architectures
    (apm_bios, sonypi, toshiba, legacy rtc) (bsc#1192974)</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 15.4.11:
  * cdrom: Disable autoclose by default (boo#1165047).
  * Make regenerate-initrd-posttrans compatible with Dracut's
    UEFI mode (unified kernel image)</changelog>
  <changelog author="mwilck@suse.com" date="1643371200">- Update to version 15.4.12:
  * Add /etc/modprobe.d/README on SLE/Leap (bsc#1195051)
  * rpm-script: force-copy kernel to /boot (boo#1194501)</changelog>
  <changelog author="mwilck@suse.com" date="1667563200">- Update to version 15.4.13:
  * 80-hotplug-cpu-mem.rules: restrict cpu rule to x86_64 (bsc#1204423)</changelog>
  <changelog author="mwilck@suse.com" date="1669032000">- Update to version 15.4.14:
  * 80-hotplug-cpu-mem.rules: use CONST{arch} (bsc#1204423)</changelog>
  <changelog author="mwilck@suse.com" date="1669032001">- Update to version 15.4.15: Backport bug fixes from factory
  * driver-check.sh, unblacklist: convert egrep to grep -E (bsc#1203092)
  * kernel-scriptlets: don't pass flags to weak-modules2 (bsc#1195391)
  * driver-check.sh: avoid false positive error messages (boo#1200107)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 15.5.0:
  * version adapted, code is identical to 15.4.15</changelog>
  <changelog author="mwilck@suse.com" date="1675339200">- Update to version 15.5.1:
  * modprobe.conf: s390x: remove softdep on fbcon (boo#1207853)</changelog>
  <changelog author="mwilck@suse.com" date="1693569600">- Update to version 15.5.2:
  * rpm-script: update bootloader after creating initramfs
    (boo#1213822)
  * rpm-script: check for regenerate-initrd-posttrans in %posttrans
    (boo#1212957)
  * cert-script: skip cert handling if efivarfs is not writable
    (bsc#1213428, bsc#1201066)</changelog>
  <changelog author="mwilck@suse.com" date="1697198400">- Update to version 15.5.3:
  * blacklist RNDIS modules (bsc#1205767, jsc#PED-5731, CVE-2023-23559)
  * modprobe.d: Blacklist cls_tcindex module (bsc#1210335, CVE-2023-1829)
    (note: this is not a full fix for that CVE)</changelog>
</package>
<package pkgid="5b87e32a070655091ac0a2c147f66bdadac33cbc0fc56d7602b9277197570de5" name="suse-module-tools" arch="s390x">
  <version epoch="0" ver="15.5.3" rel="150500.3.6.1"/>
  <changelog author="mwilck@suse.com" date="1623931200">- Update to version 15.3.7:
  * Fix treatment of compressed modules (bsc#1187093)</changelog>
  <changelog author="mwilck@suse.com" date="1625572800">- Update to version 15.3.8:
  * modprobe.d: Remove dma=none setting for parport_pc
    (bsc#1177695)</changelog>
  <changelog author="mwilck@suse.com" date="1628856000">- Update to version 15.4.2
- Move config files to /lib/modprobe.d and /lib/depmod.d
  (jsc#SLE-20639)
  * "modprobe $FS" for a blacklisted file system now offers to
    unblacklist the module permanently
  * disabled automatic un-blacklisting of filesystem modules loaded
    at installation time
- Replace mkinitrd with dracut everywhere (jsc#SLE-20348)
- Add faster substitute for lsinitrd to speed up weak-modules2
  (jsc#SLE-9078)
- Enable f2fs
- Add a "Supplements" dependency on dkms to the "legacy" submodule
  (dkms needs "weak-modules")
- modprobe.d cleanups and fixes:
  * Unify ppc64 and ppc64le
  * Delete files for obsolete architectures
  * Remove obsolete SUSE_INITRD statements (bsc#1161343)
  * Remove dma=none setting for parport_pc (bsc#1177695)
- Add README.md</changelog>
  <changelog author="mwilck@suse.com" date="1629374400">- Update to version 15.4.3:
  * fix problem that initrd may not be rebuilt after installing
    kernel-$flavor-extra (bsc#1189441)</changelog>
  <changelog author="mwilck@suse.com" date="1633089600">- Update to version 15.4.4:
  * Import kernel scriptlets from kernel-source
    (bsc#1189841, bsc#1190598)
  * Provide "suse-kernel-rpm-scriptlets"</changelog>
  <changelog author="mwilck@suse.com" date="1633348800">- Update to version 15.4.5:
  * inkmp-script(postun): don't pass  existing files to weak-modules2
    (boo#1191200)
  * kernel-scriptlets: skip cert scriptlet on non-UEFI systems
    (boo#1191260)</changelog>
  <changelog author="mwilck@suse.com" date="1634904000">- Update to version 15.4.6:
  * rpm-script: fix bad exit status in OpenQA (bsc#1191922)
  * cert-script: Deal with existing $cert.delete file (bsc#1191804).
  * cert-script: Ignore kernel keyring for kernel certificates (bsc#1191480).
  * cert-script: Only print mokutil output in verbose mode.</changelog>
  <changelog author="mwilck@suse.com" date="1634904001">- Update to version 15.4.7:
  * fixup "rpm-script: fix bad exit status in OpenQA (bsc#1191922)"</changelog>
  <changelog author="mwilck@suse.com" date="1636459200">- Update to version 15.4.8:
  * Same as Factory version 16.0.14
  * add udev rules from udev-extra-rules (formerly system-tuning-common-SUSE).
    Both packages are now both obsoleted by suse-module-tools.
    (jsc#SLE-21032)
  * 60-io-scheduler.rules: don't use BFQ for real multiqueue devices
    (jsc#SLE-21032, bsc#1192161)
  * 60-io-scheduler.rules: use "none" for multipath components
    (bsc#1192161)</changelog>
  <changelog author="mwilck@suse.com" date="1639396800">- Update to version 15.4.9:
  * same as Factory version 16.0.16
  * modprobe.d: split conf files (jsc#SLE-21626, boo#1193059)
  - Rather than shipping two large files with modprobe.d options
    (00-system.conf and 50-blacklist.conf), ship multiple small
    per-module files. This makes it easier for users to override
    distribution defaults.
  * blacklist isst_if_mbox_msr (bsc#1187196)
  * boot-sysctl: make sure file exists (fix for containers)
  * remove blacklist entry for snd_bt87x (bsc#1192974, bsc#51718)</changelog>
  <changelog author="mwilck@suse.com" date="1640001600">- Update to version 15.4.10:
  * same as Factory version 16.0.17
  * 60-io-scheduler.rules: add rules for virtual devices
    (boo#1193759)
  * 60-io-scheduler.rules: enforce "none" for loop devices
    (boo#1193759)
  * install some modprobe.d files only for relevant architectures
    (apm_bios, sonypi, toshiba, legacy rtc) (bsc#1192974)</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 15.4.11:
  * cdrom: Disable autoclose by default (boo#1165047).
  * Make regenerate-initrd-posttrans compatible with Dracut's
    UEFI mode (unified kernel image)</changelog>
  <changelog author="mwilck@suse.com" date="1643371200">- Update to version 15.4.12:
  * Add /etc/modprobe.d/README on SLE/Leap (bsc#1195051)
  * rpm-script: force-copy kernel to /boot (boo#1194501)</changelog>
  <changelog author="mwilck@suse.com" date="1667563200">- Update to version 15.4.13:
  * 80-hotplug-cpu-mem.rules: restrict cpu rule to x86_64 (bsc#1204423)</changelog>
  <changelog author="mwilck@suse.com" date="1669032000">- Update to version 15.4.14:
  * 80-hotplug-cpu-mem.rules: use CONST{arch} (bsc#1204423)</changelog>
  <changelog author="mwilck@suse.com" date="1669032001">- Update to version 15.4.15: Backport bug fixes from factory
  * driver-check.sh, unblacklist: convert egrep to grep -E (bsc#1203092)
  * kernel-scriptlets: don't pass flags to weak-modules2 (bsc#1195391)
  * driver-check.sh: avoid false positive error messages (boo#1200107)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 15.5.0:
  * version adapted, code is identical to 15.4.15</changelog>
  <changelog author="mwilck@suse.com" date="1675339200">- Update to version 15.5.1:
  * modprobe.conf: s390x: remove softdep on fbcon (boo#1207853)</changelog>
  <changelog author="mwilck@suse.com" date="1693569600">- Update to version 15.5.2:
  * rpm-script: update bootloader after creating initramfs
    (boo#1213822)
  * rpm-script: check for regenerate-initrd-posttrans in %posttrans
    (boo#1212957)
  * cert-script: skip cert handling if efivarfs is not writable
    (bsc#1213428, bsc#1201066)</changelog>
  <changelog author="mwilck@suse.com" date="1697198400">- Update to version 15.5.3:
  * blacklist RNDIS modules (bsc#1205767, jsc#PED-5731, CVE-2023-23559)
  * modprobe.d: Blacklist cls_tcindex module (bsc#1210335, CVE-2023-1829)
    (note: this is not a full fix for that CVE)</changelog>
</package>
<package pkgid="6fa309befb38a8be2f097c649169ec3e6469428b670620eeee5bce79d8d43b17" name="suse-module-tools" arch="src">
  <version epoch="0" ver="15.5.3" rel="150500.3.6.1"/>
  <changelog author="mwilck@suse.com" date="1623931200">- Update to version 15.3.7:
  * Fix treatment of compressed modules (bsc#1187093)</changelog>
  <changelog author="mwilck@suse.com" date="1625572800">- Update to version 15.3.8:
  * modprobe.d: Remove dma=none setting for parport_pc
    (bsc#1177695)</changelog>
  <changelog author="mwilck@suse.com" date="1628856000">- Update to version 15.4.2
- Move config files to /lib/modprobe.d and /lib/depmod.d
  (jsc#SLE-20639)
  * "modprobe $FS" for a blacklisted file system now offers to
    unblacklist the module permanently
  * disabled automatic un-blacklisting of filesystem modules loaded
    at installation time
- Replace mkinitrd with dracut everywhere (jsc#SLE-20348)
- Add faster substitute for lsinitrd to speed up weak-modules2
  (jsc#SLE-9078)
- Enable f2fs
- Add a "Supplements" dependency on dkms to the "legacy" submodule
  (dkms needs "weak-modules")
- modprobe.d cleanups and fixes:
  * Unify ppc64 and ppc64le
  * Delete files for obsolete architectures
  * Remove obsolete SUSE_INITRD statements (bsc#1161343)
  * Remove dma=none setting for parport_pc (bsc#1177695)
- Add README.md</changelog>
  <changelog author="mwilck@suse.com" date="1629374400">- Update to version 15.4.3:
  * fix problem that initrd may not be rebuilt after installing
    kernel-$flavor-extra (bsc#1189441)</changelog>
  <changelog author="mwilck@suse.com" date="1633089600">- Update to version 15.4.4:
  * Import kernel scriptlets from kernel-source
    (bsc#1189841, bsc#1190598)
  * Provide "suse-kernel-rpm-scriptlets"</changelog>
  <changelog author="mwilck@suse.com" date="1633348800">- Update to version 15.4.5:
  * inkmp-script(postun): don't pass  existing files to weak-modules2
    (boo#1191200)
  * kernel-scriptlets: skip cert scriptlet on non-UEFI systems
    (boo#1191260)</changelog>
  <changelog author="mwilck@suse.com" date="1634904000">- Update to version 15.4.6:
  * rpm-script: fix bad exit status in OpenQA (bsc#1191922)
  * cert-script: Deal with existing $cert.delete file (bsc#1191804).
  * cert-script: Ignore kernel keyring for kernel certificates (bsc#1191480).
  * cert-script: Only print mokutil output in verbose mode.</changelog>
  <changelog author="mwilck@suse.com" date="1634904001">- Update to version 15.4.7:
  * fixup "rpm-script: fix bad exit status in OpenQA (bsc#1191922)"</changelog>
  <changelog author="mwilck@suse.com" date="1636459200">- Update to version 15.4.8:
  * Same as Factory version 16.0.14
  * add udev rules from udev-extra-rules (formerly system-tuning-common-SUSE).
    Both packages are now both obsoleted by suse-module-tools.
    (jsc#SLE-21032)
  * 60-io-scheduler.rules: don't use BFQ for real multiqueue devices
    (jsc#SLE-21032, bsc#1192161)
  * 60-io-scheduler.rules: use "none" for multipath components
    (bsc#1192161)</changelog>
  <changelog author="mwilck@suse.com" date="1639396800">- Update to version 15.4.9:
  * same as Factory version 16.0.16
  * modprobe.d: split conf files (jsc#SLE-21626, boo#1193059)
  - Rather than shipping two large files with modprobe.d options
    (00-system.conf and 50-blacklist.conf), ship multiple small
    per-module files. This makes it easier for users to override
    distribution defaults.
  * blacklist isst_if_mbox_msr (bsc#1187196)
  * boot-sysctl: make sure file exists (fix for containers)
  * remove blacklist entry for snd_bt87x (bsc#1192974, bsc#51718)</changelog>
  <changelog author="mwilck@suse.com" date="1640001600">- Update to version 15.4.10:
  * same as Factory version 16.0.17
  * 60-io-scheduler.rules: add rules for virtual devices
    (boo#1193759)
  * 60-io-scheduler.rules: enforce "none" for loop devices
    (boo#1193759)
  * install some modprobe.d files only for relevant architectures
    (apm_bios, sonypi, toshiba, legacy rtc) (bsc#1192974)</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 15.4.11:
  * cdrom: Disable autoclose by default (boo#1165047).
  * Make regenerate-initrd-posttrans compatible with Dracut's
    UEFI mode (unified kernel image)</changelog>
  <changelog author="mwilck@suse.com" date="1643371200">- Update to version 15.4.12:
  * Add /etc/modprobe.d/README on SLE/Leap (bsc#1195051)
  * rpm-script: force-copy kernel to /boot (boo#1194501)</changelog>
  <changelog author="mwilck@suse.com" date="1667563200">- Update to version 15.4.13:
  * 80-hotplug-cpu-mem.rules: restrict cpu rule to x86_64 (bsc#1204423)</changelog>
  <changelog author="mwilck@suse.com" date="1669032000">- Update to version 15.4.14:
  * 80-hotplug-cpu-mem.rules: use CONST{arch} (bsc#1204423)</changelog>
  <changelog author="mwilck@suse.com" date="1669032001">- Update to version 15.4.15: Backport bug fixes from factory
  * driver-check.sh, unblacklist: convert egrep to grep -E (bsc#1203092)
  * kernel-scriptlets: don't pass flags to weak-modules2 (bsc#1195391)
  * driver-check.sh: avoid false positive error messages (boo#1200107)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 15.5.0:
  * version adapted, code is identical to 15.4.15</changelog>
  <changelog author="mwilck@suse.com" date="1675339200">- Update to version 15.5.1:
  * modprobe.conf: s390x: remove softdep on fbcon (boo#1207853)</changelog>
  <changelog author="mwilck@suse.com" date="1693569600">- Update to version 15.5.2:
  * rpm-script: update bootloader after creating initramfs
    (boo#1213822)
  * rpm-script: check for regenerate-initrd-posttrans in %posttrans
    (boo#1212957)
  * cert-script: skip cert handling if efivarfs is not writable
    (bsc#1213428, bsc#1201066)</changelog>
  <changelog author="mwilck@suse.com" date="1697198400">- Update to version 15.5.3:
  * blacklist RNDIS modules (bsc#1205767, jsc#PED-5731, CVE-2023-23559)
  * modprobe.d: Blacklist cls_tcindex module (bsc#1210335, CVE-2023-1829)
    (note: this is not a full fix for that CVE)</changelog>
</package>
<package pkgid="a7e691ae30877a7242b83b040ff2baed813994f5bcc7e21025769d8e7756b665" name="suse-module-tools" arch="x86_64">
  <version epoch="0" ver="15.5.3" rel="150500.3.6.1"/>
  <changelog author="mwilck@suse.com" date="1623931200">- Update to version 15.3.7:
  * Fix treatment of compressed modules (bsc#1187093)</changelog>
  <changelog author="mwilck@suse.com" date="1625572800">- Update to version 15.3.8:
  * modprobe.d: Remove dma=none setting for parport_pc
    (bsc#1177695)</changelog>
  <changelog author="mwilck@suse.com" date="1628856000">- Update to version 15.4.2
- Move config files to /lib/modprobe.d and /lib/depmod.d
  (jsc#SLE-20639)
  * "modprobe $FS" for a blacklisted file system now offers to
    unblacklist the module permanently
  * disabled automatic un-blacklisting of filesystem modules loaded
    at installation time
- Replace mkinitrd with dracut everywhere (jsc#SLE-20348)
- Add faster substitute for lsinitrd to speed up weak-modules2
  (jsc#SLE-9078)
- Enable f2fs
- Add a "Supplements" dependency on dkms to the "legacy" submodule
  (dkms needs "weak-modules")
- modprobe.d cleanups and fixes:
  * Unify ppc64 and ppc64le
  * Delete files for obsolete architectures
  * Remove obsolete SUSE_INITRD statements (bsc#1161343)
  * Remove dma=none setting for parport_pc (bsc#1177695)
- Add README.md</changelog>
  <changelog author="mwilck@suse.com" date="1629374400">- Update to version 15.4.3:
  * fix problem that initrd may not be rebuilt after installing
    kernel-$flavor-extra (bsc#1189441)</changelog>
  <changelog author="mwilck@suse.com" date="1633089600">- Update to version 15.4.4:
  * Import kernel scriptlets from kernel-source
    (bsc#1189841, bsc#1190598)
  * Provide "suse-kernel-rpm-scriptlets"</changelog>
  <changelog author="mwilck@suse.com" date="1633348800">- Update to version 15.4.5:
  * inkmp-script(postun): don't pass  existing files to weak-modules2
    (boo#1191200)
  * kernel-scriptlets: skip cert scriptlet on non-UEFI systems
    (boo#1191260)</changelog>
  <changelog author="mwilck@suse.com" date="1634904000">- Update to version 15.4.6:
  * rpm-script: fix bad exit status in OpenQA (bsc#1191922)
  * cert-script: Deal with existing $cert.delete file (bsc#1191804).
  * cert-script: Ignore kernel keyring for kernel certificates (bsc#1191480).
  * cert-script: Only print mokutil output in verbose mode.</changelog>
  <changelog author="mwilck@suse.com" date="1634904001">- Update to version 15.4.7:
  * fixup "rpm-script: fix bad exit status in OpenQA (bsc#1191922)"</changelog>
  <changelog author="mwilck@suse.com" date="1636459200">- Update to version 15.4.8:
  * Same as Factory version 16.0.14
  * add udev rules from udev-extra-rules (formerly system-tuning-common-SUSE).
    Both packages are now both obsoleted by suse-module-tools.
    (jsc#SLE-21032)
  * 60-io-scheduler.rules: don't use BFQ for real multiqueue devices
    (jsc#SLE-21032, bsc#1192161)
  * 60-io-scheduler.rules: use "none" for multipath components
    (bsc#1192161)</changelog>
  <changelog author="mwilck@suse.com" date="1639396800">- Update to version 15.4.9:
  * same as Factory version 16.0.16
  * modprobe.d: split conf files (jsc#SLE-21626, boo#1193059)
  - Rather than shipping two large files with modprobe.d options
    (00-system.conf and 50-blacklist.conf), ship multiple small
    per-module files. This makes it easier for users to override
    distribution defaults.
  * blacklist isst_if_mbox_msr (bsc#1187196)
  * boot-sysctl: make sure file exists (fix for containers)
  * remove blacklist entry for snd_bt87x (bsc#1192974, bsc#51718)</changelog>
  <changelog author="mwilck@suse.com" date="1640001600">- Update to version 15.4.10:
  * same as Factory version 16.0.17
  * 60-io-scheduler.rules: add rules for virtual devices
    (boo#1193759)
  * 60-io-scheduler.rules: enforce "none" for loop devices
    (boo#1193759)
  * install some modprobe.d files only for relevant architectures
    (apm_bios, sonypi, toshiba, legacy rtc) (bsc#1192974)</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 15.4.11:
  * cdrom: Disable autoclose by default (boo#1165047).
  * Make regenerate-initrd-posttrans compatible with Dracut's
    UEFI mode (unified kernel image)</changelog>
  <changelog author="mwilck@suse.com" date="1643371200">- Update to version 15.4.12:
  * Add /etc/modprobe.d/README on SLE/Leap (bsc#1195051)
  * rpm-script: force-copy kernel to /boot (boo#1194501)</changelog>
  <changelog author="mwilck@suse.com" date="1667563200">- Update to version 15.4.13:
  * 80-hotplug-cpu-mem.rules: restrict cpu rule to x86_64 (bsc#1204423)</changelog>
  <changelog author="mwilck@suse.com" date="1669032000">- Update to version 15.4.14:
  * 80-hotplug-cpu-mem.rules: use CONST{arch} (bsc#1204423)</changelog>
  <changelog author="mwilck@suse.com" date="1669032001">- Update to version 15.4.15: Backport bug fixes from factory
  * driver-check.sh, unblacklist: convert egrep to grep -E (bsc#1203092)
  * kernel-scriptlets: don't pass flags to weak-modules2 (bsc#1195391)
  * driver-check.sh: avoid false positive error messages (boo#1200107)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 15.5.0:
  * version adapted, code is identical to 15.4.15</changelog>
  <changelog author="mwilck@suse.com" date="1675339200">- Update to version 15.5.1:
  * modprobe.conf: s390x: remove softdep on fbcon (boo#1207853)</changelog>
  <changelog author="mwilck@suse.com" date="1693569600">- Update to version 15.5.2:
  * rpm-script: update bootloader after creating initramfs
    (boo#1213822)
  * rpm-script: check for regenerate-initrd-posttrans in %posttrans
    (boo#1212957)
  * cert-script: skip cert handling if efivarfs is not writable
    (bsc#1213428, bsc#1201066)</changelog>
  <changelog author="mwilck@suse.com" date="1697198400">- Update to version 15.5.3:
  * blacklist RNDIS modules (bsc#1205767, jsc#PED-5731, CVE-2023-23559)
  * modprobe.d: Blacklist cls_tcindex module (bsc#1210335, CVE-2023-1829)
    (note: this is not a full fix for that CVE)</changelog>
</package>
<package pkgid="27e210dd4bc5ca289c4e2fe1ba0d51ca117c312813f04fe98f8a4a92387794b4" name="suse-module-tools" arch="aarch64">
  <version epoch="0" ver="15.5.4" rel="150500.3.9.1"/>
  <changelog author="mwilck@suse.com" date="1625572800">- Update to version 15.3.8:
  * modprobe.d: Remove dma=none setting for parport_pc
    (bsc#1177695)</changelog>
  <changelog author="mwilck@suse.com" date="1628856000">- Update to version 15.4.2
- Move config files to /lib/modprobe.d and /lib/depmod.d
  (jsc#SLE-20639)
  * "modprobe $FS" for a blacklisted file system now offers to
    unblacklist the module permanently
  * disabled automatic un-blacklisting of filesystem modules loaded
    at installation time
- Replace mkinitrd with dracut everywhere (jsc#SLE-20348)
- Add faster substitute for lsinitrd to speed up weak-modules2
  (jsc#SLE-9078)
- Enable f2fs
- Add a "Supplements" dependency on dkms to the "legacy" submodule
  (dkms needs "weak-modules")
- modprobe.d cleanups and fixes:
  * Unify ppc64 and ppc64le
  * Delete files for obsolete architectures
  * Remove obsolete SUSE_INITRD statements (bsc#1161343)
  * Remove dma=none setting for parport_pc (bsc#1177695)
- Add README.md</changelog>
  <changelog author="mwilck@suse.com" date="1629374400">- Update to version 15.4.3:
  * fix problem that initrd may not be rebuilt after installing
    kernel-$flavor-extra (bsc#1189441)</changelog>
  <changelog author="mwilck@suse.com" date="1633089600">- Update to version 15.4.4:
  * Import kernel scriptlets from kernel-source
    (bsc#1189841, bsc#1190598)
  * Provide "suse-kernel-rpm-scriptlets"</changelog>
  <changelog author="mwilck@suse.com" date="1633348800">- Update to version 15.4.5:
  * inkmp-script(postun): don't pass  existing files to weak-modules2
    (boo#1191200)
  * kernel-scriptlets: skip cert scriptlet on non-UEFI systems
    (boo#1191260)</changelog>
  <changelog author="mwilck@suse.com" date="1634904000">- Update to version 15.4.6:
  * rpm-script: fix bad exit status in OpenQA (bsc#1191922)
  * cert-script: Deal with existing $cert.delete file (bsc#1191804).
  * cert-script: Ignore kernel keyring for kernel certificates (bsc#1191480).
  * cert-script: Only print mokutil output in verbose mode.</changelog>
  <changelog author="mwilck@suse.com" date="1634904001">- Update to version 15.4.7:
  * fixup "rpm-script: fix bad exit status in OpenQA (bsc#1191922)"</changelog>
  <changelog author="mwilck@suse.com" date="1636459200">- Update to version 15.4.8:
  * Same as Factory version 16.0.14
  * add udev rules from udev-extra-rules (formerly system-tuning-common-SUSE).
    Both packages are now both obsoleted by suse-module-tools.
    (jsc#SLE-21032)
  * 60-io-scheduler.rules: don't use BFQ for real multiqueue devices
    (jsc#SLE-21032, bsc#1192161)
  * 60-io-scheduler.rules: use "none" for multipath components
    (bsc#1192161)</changelog>
  <changelog author="mwilck@suse.com" date="1639396800">- Update to version 15.4.9:
  * same as Factory version 16.0.16
  * modprobe.d: split conf files (jsc#SLE-21626, boo#1193059)
  - Rather than shipping two large files with modprobe.d options
    (00-system.conf and 50-blacklist.conf), ship multiple small
    per-module files. This makes it easier for users to override
    distribution defaults.
  * blacklist isst_if_mbox_msr (bsc#1187196)
  * boot-sysctl: make sure file exists (fix for containers)
  * remove blacklist entry for snd_bt87x (bsc#1192974, bsc#51718)</changelog>
  <changelog author="mwilck@suse.com" date="1640001600">- Update to version 15.4.10:
  * same as Factory version 16.0.17
  * 60-io-scheduler.rules: add rules for virtual devices
    (boo#1193759)
  * 60-io-scheduler.rules: enforce "none" for loop devices
    (boo#1193759)
  * install some modprobe.d files only for relevant architectures
    (apm_bios, sonypi, toshiba, legacy rtc) (bsc#1192974)</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 15.4.11:
  * cdrom: Disable autoclose by default (boo#1165047).
  * Make regenerate-initrd-posttrans compatible with Dracut's
    UEFI mode (unified kernel image)</changelog>
  <changelog author="mwilck@suse.com" date="1643371200">- Update to version 15.4.12:
  * Add /etc/modprobe.d/README on SLE/Leap (bsc#1195051)
  * rpm-script: force-copy kernel to /boot (boo#1194501)</changelog>
  <changelog author="mwilck@suse.com" date="1667563200">- Update to version 15.4.13:
  * 80-hotplug-cpu-mem.rules: restrict cpu rule to x86_64 (bsc#1204423)</changelog>
  <changelog author="mwilck@suse.com" date="1669032000">- Update to version 15.4.14:
  * 80-hotplug-cpu-mem.rules: use CONST{arch} (bsc#1204423)</changelog>
  <changelog author="mwilck@suse.com" date="1669032001">- Update to version 15.4.15: Backport bug fixes from factory
  * driver-check.sh, unblacklist: convert egrep to grep -E (bsc#1203092)
  * kernel-scriptlets: don't pass flags to weak-modules2 (bsc#1195391)
  * driver-check.sh: avoid false positive error messages (boo#1200107)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 15.5.0:
  * version adapted, code is identical to 15.4.15</changelog>
  <changelog author="mwilck@suse.com" date="1675339200">- Update to version 15.5.1:
  * modprobe.conf: s390x: remove softdep on fbcon (boo#1207853)</changelog>
  <changelog author="mwilck@suse.com" date="1693569600">- Update to version 15.5.2:
  * rpm-script: update bootloader after creating initramfs
    (boo#1213822)
  * rpm-script: check for regenerate-initrd-posttrans in %posttrans
    (boo#1212957)
  * cert-script: skip cert handling if efivarfs is not writable
    (bsc#1213428, bsc#1201066)</changelog>
  <changelog author="mwilck@suse.com" date="1697198400">- Update to version 15.5.3:
  * blacklist RNDIS modules (bsc#1205767, jsc#PED-5731, CVE-2023-23559)
  * modprobe.d: Blacklist cls_tcindex module (bsc#1210335, CVE-2023-1829)
    (note: this is not a full fix for that CVE)</changelog>
  <changelog author="mwilck@suse.com" date="1704974400">- Update to version 15.5.4:
  * rpm-script: add symlink /boot/.vmlinuz.hmac (bsc#1217775)</changelog>
</package>
<package pkgid="04604a6d8568ce3d6eb728279868d595298d51bfa87e53ea9da5ef48a38b59d7" name="suse-module-tools" arch="s390x">
  <version epoch="0" ver="15.5.4" rel="150500.3.9.1"/>
  <changelog author="mwilck@suse.com" date="1625572800">- Update to version 15.3.8:
  * modprobe.d: Remove dma=none setting for parport_pc
    (bsc#1177695)</changelog>
  <changelog author="mwilck@suse.com" date="1628856000">- Update to version 15.4.2
- Move config files to /lib/modprobe.d and /lib/depmod.d
  (jsc#SLE-20639)
  * "modprobe $FS" for a blacklisted file system now offers to
    unblacklist the module permanently
  * disabled automatic un-blacklisting of filesystem modules loaded
    at installation time
- Replace mkinitrd with dracut everywhere (jsc#SLE-20348)
- Add faster substitute for lsinitrd to speed up weak-modules2
  (jsc#SLE-9078)
- Enable f2fs
- Add a "Supplements" dependency on dkms to the "legacy" submodule
  (dkms needs "weak-modules")
- modprobe.d cleanups and fixes:
  * Unify ppc64 and ppc64le
  * Delete files for obsolete architectures
  * Remove obsolete SUSE_INITRD statements (bsc#1161343)
  * Remove dma=none setting for parport_pc (bsc#1177695)
- Add README.md</changelog>
  <changelog author="mwilck@suse.com" date="1629374400">- Update to version 15.4.3:
  * fix problem that initrd may not be rebuilt after installing
    kernel-$flavor-extra (bsc#1189441)</changelog>
  <changelog author="mwilck@suse.com" date="1633089600">- Update to version 15.4.4:
  * Import kernel scriptlets from kernel-source
    (bsc#1189841, bsc#1190598)
  * Provide "suse-kernel-rpm-scriptlets"</changelog>
  <changelog author="mwilck@suse.com" date="1633348800">- Update to version 15.4.5:
  * inkmp-script(postun): don't pass  existing files to weak-modules2
    (boo#1191200)
  * kernel-scriptlets: skip cert scriptlet on non-UEFI systems
    (boo#1191260)</changelog>
  <changelog author="mwilck@suse.com" date="1634904000">- Update to version 15.4.6:
  * rpm-script: fix bad exit status in OpenQA (bsc#1191922)
  * cert-script: Deal with existing $cert.delete file (bsc#1191804).
  * cert-script: Ignore kernel keyring for kernel certificates (bsc#1191480).
  * cert-script: Only print mokutil output in verbose mode.</changelog>
  <changelog author="mwilck@suse.com" date="1634904001">- Update to version 15.4.7:
  * fixup "rpm-script: fix bad exit status in OpenQA (bsc#1191922)"</changelog>
  <changelog author="mwilck@suse.com" date="1636459200">- Update to version 15.4.8:
  * Same as Factory version 16.0.14
  * add udev rules from udev-extra-rules (formerly system-tuning-common-SUSE).
    Both packages are now both obsoleted by suse-module-tools.
    (jsc#SLE-21032)
  * 60-io-scheduler.rules: don't use BFQ for real multiqueue devices
    (jsc#SLE-21032, bsc#1192161)
  * 60-io-scheduler.rules: use "none" for multipath components
    (bsc#1192161)</changelog>
  <changelog author="mwilck@suse.com" date="1639396800">- Update to version 15.4.9:
  * same as Factory version 16.0.16
  * modprobe.d: split conf files (jsc#SLE-21626, boo#1193059)
  - Rather than shipping two large files with modprobe.d options
    (00-system.conf and 50-blacklist.conf), ship multiple small
    per-module files. This makes it easier for users to override
    distribution defaults.
  * blacklist isst_if_mbox_msr (bsc#1187196)
  * boot-sysctl: make sure file exists (fix for containers)
  * remove blacklist entry for snd_bt87x (bsc#1192974, bsc#51718)</changelog>
  <changelog author="mwilck@suse.com" date="1640001600">- Update to version 15.4.10:
  * same as Factory version 16.0.17
  * 60-io-scheduler.rules: add rules for virtual devices
    (boo#1193759)
  * 60-io-scheduler.rules: enforce "none" for loop devices
    (boo#1193759)
  * install some modprobe.d files only for relevant architectures
    (apm_bios, sonypi, toshiba, legacy rtc) (bsc#1192974)</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 15.4.11:
  * cdrom: Disable autoclose by default (boo#1165047).
  * Make regenerate-initrd-posttrans compatible with Dracut's
    UEFI mode (unified kernel image)</changelog>
  <changelog author="mwilck@suse.com" date="1643371200">- Update to version 15.4.12:
  * Add /etc/modprobe.d/README on SLE/Leap (bsc#1195051)
  * rpm-script: force-copy kernel to /boot (boo#1194501)</changelog>
  <changelog author="mwilck@suse.com" date="1667563200">- Update to version 15.4.13:
  * 80-hotplug-cpu-mem.rules: restrict cpu rule to x86_64 (bsc#1204423)</changelog>
  <changelog author="mwilck@suse.com" date="1669032000">- Update to version 15.4.14:
  * 80-hotplug-cpu-mem.rules: use CONST{arch} (bsc#1204423)</changelog>
  <changelog author="mwilck@suse.com" date="1669032001">- Update to version 15.4.15: Backport bug fixes from factory
  * driver-check.sh, unblacklist: convert egrep to grep -E (bsc#1203092)
  * kernel-scriptlets: don't pass flags to weak-modules2 (bsc#1195391)
  * driver-check.sh: avoid false positive error messages (boo#1200107)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 15.5.0:
  * version adapted, code is identical to 15.4.15</changelog>
  <changelog author="mwilck@suse.com" date="1675339200">- Update to version 15.5.1:
  * modprobe.conf: s390x: remove softdep on fbcon (boo#1207853)</changelog>
  <changelog author="mwilck@suse.com" date="1693569600">- Update to version 15.5.2:
  * rpm-script: update bootloader after creating initramfs
    (boo#1213822)
  * rpm-script: check for regenerate-initrd-posttrans in %posttrans
    (boo#1212957)
  * cert-script: skip cert handling if efivarfs is not writable
    (bsc#1213428, bsc#1201066)</changelog>
  <changelog author="mwilck@suse.com" date="1697198400">- Update to version 15.5.3:
  * blacklist RNDIS modules (bsc#1205767, jsc#PED-5731, CVE-2023-23559)
  * modprobe.d: Blacklist cls_tcindex module (bsc#1210335, CVE-2023-1829)
    (note: this is not a full fix for that CVE)</changelog>
  <changelog author="mwilck@suse.com" date="1704974400">- Update to version 15.5.4:
  * rpm-script: add symlink /boot/.vmlinuz.hmac (bsc#1217775)</changelog>
</package>
<package pkgid="75ada033eac581dc7592e7696c358dcd4717661fe5db40a9d9b6f6fe9dec322d" name="suse-module-tools" arch="src">
  <version epoch="0" ver="15.5.4" rel="150500.3.9.1"/>
  <changelog author="mwilck@suse.com" date="1625572800">- Update to version 15.3.8:
  * modprobe.d: Remove dma=none setting for parport_pc
    (bsc#1177695)</changelog>
  <changelog author="mwilck@suse.com" date="1628856000">- Update to version 15.4.2
- Move config files to /lib/modprobe.d and /lib/depmod.d
  (jsc#SLE-20639)
  * "modprobe $FS" for a blacklisted file system now offers to
    unblacklist the module permanently
  * disabled automatic un-blacklisting of filesystem modules loaded
    at installation time
- Replace mkinitrd with dracut everywhere (jsc#SLE-20348)
- Add faster substitute for lsinitrd to speed up weak-modules2
  (jsc#SLE-9078)
- Enable f2fs
- Add a "Supplements" dependency on dkms to the "legacy" submodule
  (dkms needs "weak-modules")
- modprobe.d cleanups and fixes:
  * Unify ppc64 and ppc64le
  * Delete files for obsolete architectures
  * Remove obsolete SUSE_INITRD statements (bsc#1161343)
  * Remove dma=none setting for parport_pc (bsc#1177695)
- Add README.md</changelog>
  <changelog author="mwilck@suse.com" date="1629374400">- Update to version 15.4.3:
  * fix problem that initrd may not be rebuilt after installing
    kernel-$flavor-extra (bsc#1189441)</changelog>
  <changelog author="mwilck@suse.com" date="1633089600">- Update to version 15.4.4:
  * Import kernel scriptlets from kernel-source
    (bsc#1189841, bsc#1190598)
  * Provide "suse-kernel-rpm-scriptlets"</changelog>
  <changelog author="mwilck@suse.com" date="1633348800">- Update to version 15.4.5:
  * inkmp-script(postun): don't pass  existing files to weak-modules2
    (boo#1191200)
  * kernel-scriptlets: skip cert scriptlet on non-UEFI systems
    (boo#1191260)</changelog>
  <changelog author="mwilck@suse.com" date="1634904000">- Update to version 15.4.6:
  * rpm-script: fix bad exit status in OpenQA (bsc#1191922)
  * cert-script: Deal with existing $cert.delete file (bsc#1191804).
  * cert-script: Ignore kernel keyring for kernel certificates (bsc#1191480).
  * cert-script: Only print mokutil output in verbose mode.</changelog>
  <changelog author="mwilck@suse.com" date="1634904001">- Update to version 15.4.7:
  * fixup "rpm-script: fix bad exit status in OpenQA (bsc#1191922)"</changelog>
  <changelog author="mwilck@suse.com" date="1636459200">- Update to version 15.4.8:
  * Same as Factory version 16.0.14
  * add udev rules from udev-extra-rules (formerly system-tuning-common-SUSE).
    Both packages are now both obsoleted by suse-module-tools.
    (jsc#SLE-21032)
  * 60-io-scheduler.rules: don't use BFQ for real multiqueue devices
    (jsc#SLE-21032, bsc#1192161)
  * 60-io-scheduler.rules: use "none" for multipath components
    (bsc#1192161)</changelog>
  <changelog author="mwilck@suse.com" date="1639396800">- Update to version 15.4.9:
  * same as Factory version 16.0.16
  * modprobe.d: split conf files (jsc#SLE-21626, boo#1193059)
  - Rather than shipping two large files with modprobe.d options
    (00-system.conf and 50-blacklist.conf), ship multiple small
    per-module files. This makes it easier for users to override
    distribution defaults.
  * blacklist isst_if_mbox_msr (bsc#1187196)
  * boot-sysctl: make sure file exists (fix for containers)
  * remove blacklist entry for snd_bt87x (bsc#1192974, bsc#51718)</changelog>
  <changelog author="mwilck@suse.com" date="1640001600">- Update to version 15.4.10:
  * same as Factory version 16.0.17
  * 60-io-scheduler.rules: add rules for virtual devices
    (boo#1193759)
  * 60-io-scheduler.rules: enforce "none" for loop devices
    (boo#1193759)
  * install some modprobe.d files only for relevant architectures
    (apm_bios, sonypi, toshiba, legacy rtc) (bsc#1192974)</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 15.4.11:
  * cdrom: Disable autoclose by default (boo#1165047).
  * Make regenerate-initrd-posttrans compatible with Dracut's
    UEFI mode (unified kernel image)</changelog>
  <changelog author="mwilck@suse.com" date="1643371200">- Update to version 15.4.12:
  * Add /etc/modprobe.d/README on SLE/Leap (bsc#1195051)
  * rpm-script: force-copy kernel to /boot (boo#1194501)</changelog>
  <changelog author="mwilck@suse.com" date="1667563200">- Update to version 15.4.13:
  * 80-hotplug-cpu-mem.rules: restrict cpu rule to x86_64 (bsc#1204423)</changelog>
  <changelog author="mwilck@suse.com" date="1669032000">- Update to version 15.4.14:
  * 80-hotplug-cpu-mem.rules: use CONST{arch} (bsc#1204423)</changelog>
  <changelog author="mwilck@suse.com" date="1669032001">- Update to version 15.4.15: Backport bug fixes from factory
  * driver-check.sh, unblacklist: convert egrep to grep -E (bsc#1203092)
  * kernel-scriptlets: don't pass flags to weak-modules2 (bsc#1195391)
  * driver-check.sh: avoid false positive error messages (boo#1200107)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 15.5.0:
  * version adapted, code is identical to 15.4.15</changelog>
  <changelog author="mwilck@suse.com" date="1675339200">- Update to version 15.5.1:
  * modprobe.conf: s390x: remove softdep on fbcon (boo#1207853)</changelog>
  <changelog author="mwilck@suse.com" date="1693569600">- Update to version 15.5.2:
  * rpm-script: update bootloader after creating initramfs
    (boo#1213822)
  * rpm-script: check for regenerate-initrd-posttrans in %posttrans
    (boo#1212957)
  * cert-script: skip cert handling if efivarfs is not writable
    (bsc#1213428, bsc#1201066)</changelog>
  <changelog author="mwilck@suse.com" date="1697198400">- Update to version 15.5.3:
  * blacklist RNDIS modules (bsc#1205767, jsc#PED-5731, CVE-2023-23559)
  * modprobe.d: Blacklist cls_tcindex module (bsc#1210335, CVE-2023-1829)
    (note: this is not a full fix for that CVE)</changelog>
  <changelog author="mwilck@suse.com" date="1704974400">- Update to version 15.5.4:
  * rpm-script: add symlink /boot/.vmlinuz.hmac (bsc#1217775)</changelog>
</package>
<package pkgid="5f64e728d8c2b75f297eea00862632697f312242f99749a7693abf21658d42f7" name="suse-module-tools" arch="x86_64">
  <version epoch="0" ver="15.5.4" rel="150500.3.9.1"/>
  <changelog author="mwilck@suse.com" date="1625572800">- Update to version 15.3.8:
  * modprobe.d: Remove dma=none setting for parport_pc
    (bsc#1177695)</changelog>
  <changelog author="mwilck@suse.com" date="1628856000">- Update to version 15.4.2
- Move config files to /lib/modprobe.d and /lib/depmod.d
  (jsc#SLE-20639)
  * "modprobe $FS" for a blacklisted file system now offers to
    unblacklist the module permanently
  * disabled automatic un-blacklisting of filesystem modules loaded
    at installation time
- Replace mkinitrd with dracut everywhere (jsc#SLE-20348)
- Add faster substitute for lsinitrd to speed up weak-modules2
  (jsc#SLE-9078)
- Enable f2fs
- Add a "Supplements" dependency on dkms to the "legacy" submodule
  (dkms needs "weak-modules")
- modprobe.d cleanups and fixes:
  * Unify ppc64 and ppc64le
  * Delete files for obsolete architectures
  * Remove obsolete SUSE_INITRD statements (bsc#1161343)
  * Remove dma=none setting for parport_pc (bsc#1177695)
- Add README.md</changelog>
  <changelog author="mwilck@suse.com" date="1629374400">- Update to version 15.4.3:
  * fix problem that initrd may not be rebuilt after installing
    kernel-$flavor-extra (bsc#1189441)</changelog>
  <changelog author="mwilck@suse.com" date="1633089600">- Update to version 15.4.4:
  * Import kernel scriptlets from kernel-source
    (bsc#1189841, bsc#1190598)
  * Provide "suse-kernel-rpm-scriptlets"</changelog>
  <changelog author="mwilck@suse.com" date="1633348800">- Update to version 15.4.5:
  * inkmp-script(postun): don't pass  existing files to weak-modules2
    (boo#1191200)
  * kernel-scriptlets: skip cert scriptlet on non-UEFI systems
    (boo#1191260)</changelog>
  <changelog author="mwilck@suse.com" date="1634904000">- Update to version 15.4.6:
  * rpm-script: fix bad exit status in OpenQA (bsc#1191922)
  * cert-script: Deal with existing $cert.delete file (bsc#1191804).
  * cert-script: Ignore kernel keyring for kernel certificates (bsc#1191480).
  * cert-script: Only print mokutil output in verbose mode.</changelog>
  <changelog author="mwilck@suse.com" date="1634904001">- Update to version 15.4.7:
  * fixup "rpm-script: fix bad exit status in OpenQA (bsc#1191922)"</changelog>
  <changelog author="mwilck@suse.com" date="1636459200">- Update to version 15.4.8:
  * Same as Factory version 16.0.14
  * add udev rules from udev-extra-rules (formerly system-tuning-common-SUSE).
    Both packages are now both obsoleted by suse-module-tools.
    (jsc#SLE-21032)
  * 60-io-scheduler.rules: don't use BFQ for real multiqueue devices
    (jsc#SLE-21032, bsc#1192161)
  * 60-io-scheduler.rules: use "none" for multipath components
    (bsc#1192161)</changelog>
  <changelog author="mwilck@suse.com" date="1639396800">- Update to version 15.4.9:
  * same as Factory version 16.0.16
  * modprobe.d: split conf files (jsc#SLE-21626, boo#1193059)
  - Rather than shipping two large files with modprobe.d options
    (00-system.conf and 50-blacklist.conf), ship multiple small
    per-module files. This makes it easier for users to override
    distribution defaults.
  * blacklist isst_if_mbox_msr (bsc#1187196)
  * boot-sysctl: make sure file exists (fix for containers)
  * remove blacklist entry for snd_bt87x (bsc#1192974, bsc#51718)</changelog>
  <changelog author="mwilck@suse.com" date="1640001600">- Update to version 15.4.10:
  * same as Factory version 16.0.17
  * 60-io-scheduler.rules: add rules for virtual devices
    (boo#1193759)
  * 60-io-scheduler.rules: enforce "none" for loop devices
    (boo#1193759)
  * install some modprobe.d files only for relevant architectures
    (apm_bios, sonypi, toshiba, legacy rtc) (bsc#1192974)</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 15.4.11:
  * cdrom: Disable autoclose by default (boo#1165047).
  * Make regenerate-initrd-posttrans compatible with Dracut's
    UEFI mode (unified kernel image)</changelog>
  <changelog author="mwilck@suse.com" date="1643371200">- Update to version 15.4.12:
  * Add /etc/modprobe.d/README on SLE/Leap (bsc#1195051)
  * rpm-script: force-copy kernel to /boot (boo#1194501)</changelog>
  <changelog author="mwilck@suse.com" date="1667563200">- Update to version 15.4.13:
  * 80-hotplug-cpu-mem.rules: restrict cpu rule to x86_64 (bsc#1204423)</changelog>
  <changelog author="mwilck@suse.com" date="1669032000">- Update to version 15.4.14:
  * 80-hotplug-cpu-mem.rules: use CONST{arch} (bsc#1204423)</changelog>
  <changelog author="mwilck@suse.com" date="1669032001">- Update to version 15.4.15: Backport bug fixes from factory
  * driver-check.sh, unblacklist: convert egrep to grep -E (bsc#1203092)
  * kernel-scriptlets: don't pass flags to weak-modules2 (bsc#1195391)
  * driver-check.sh: avoid false positive error messages (boo#1200107)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 15.5.0:
  * version adapted, code is identical to 15.4.15</changelog>
  <changelog author="mwilck@suse.com" date="1675339200">- Update to version 15.5.1:
  * modprobe.conf: s390x: remove softdep on fbcon (boo#1207853)</changelog>
  <changelog author="mwilck@suse.com" date="1693569600">- Update to version 15.5.2:
  * rpm-script: update bootloader after creating initramfs
    (boo#1213822)
  * rpm-script: check for regenerate-initrd-posttrans in %posttrans
    (boo#1212957)
  * cert-script: skip cert handling if efivarfs is not writable
    (bsc#1213428, bsc#1201066)</changelog>
  <changelog author="mwilck@suse.com" date="1697198400">- Update to version 15.5.3:
  * blacklist RNDIS modules (bsc#1205767, jsc#PED-5731, CVE-2023-23559)
  * modprobe.d: Blacklist cls_tcindex module (bsc#1210335, CVE-2023-1829)
    (note: this is not a full fix for that CVE)</changelog>
  <changelog author="mwilck@suse.com" date="1704974400">- Update to version 15.5.4:
  * rpm-script: add symlink /boot/.vmlinuz.hmac (bsc#1217775)</changelog>
</package>
<package pkgid="f05550d6a75d9f842d9e75425e3caa8d085b149597b88cb9295e6be82e9af854" name="suseconnect-ng" arch="aarch64">
  <version epoch="0" ver="1.4.0~git0.b0f7c25bfdfa" rel="150500.3.6.1"/>
  <changelog author="jan.suse@zerebecki.de" date="1646136000">- Update to version 0.0.6~git9.33e5847:
  * Delegate free() calls back to Go (bsc#1195729)
  * Pass "insecure" to zypper addservice
  * Workaround system cert reloading after import (bsc#1195220)
  * Extract setupHTTPClient for easier reuse
  * Exit with code 64 on connection refused like Ruby</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1648123200">- Update to version 0.0.7~git0.3ef988e:
  * Fix product tree traversal (bsc#1197398)
  * Revert "Remove self from LD_PRELOAD (bsc#1196326)"
  * Remove self from LD_PRELOAD (bsc#1196326)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1649851200">- Update to version 0.0.8~git0.16545bf:
  * Allow reloading CA certs pool (bsc#1195220)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1650456000">- Update to version 0.0.8~git2.368ea44:
  * go1.18 compatibility: BuildRequires:git</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1659700800">- Update to version 0.0.9~git5.75890b6:
  * Don't run keepalive on reboot
  * Use system-wide proxy settings (bsc#1200994)
  * Add customer information about keepalive calls
  * Add timer for SUSEConnect --keepalive (bsc#1196076)
  * Add --keepalive to manpage
  * Added support for the System-Token header
  * Add Keepalive command line option
  * Print nested zypper errors (bsc#1200803)
  * Fix migration json error with SMT (bsc#1198625)
  * Add option to run local scc tests
  * Switch to jenkins-hosted credentials
  * Fix "VCS stamping" problem
  * Add missing import
  * Remove redundant code + add comment</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1661947200">- Update to version 0.0.9~git8.f9adb71:
  * Use standard buildconditionals
  * Strip the binaries (saves ~ 30%)</changelog>
  <changelog author="msabate@suse.com" date="1662984000">- Update to version 0.0.9~git10.de887da7231f:
  * Respect the PROXY_ENABLED environment variable</changelog>
  <changelog author="jtomasiak@suse.com" date="1663243200">- Update to version 0.0.10~git0.5f84106:
  * Fix System-Token support in ruby binding (bsc#1203341)
  * Added the PACKAGE.md file</changelog>
  <changelog author="jtomasiak@suse.com" date="1665144000">- Update to version 0.0.10~git2.ee561b8:
  * Drop .git from tar</changelog>
  <changelog author="msabate@suse.com" date="1666958400">- Update to version 1.0.0~git0.60e48564a714 (bsc#1204821):
  * packaging: obsolete suseconnect &lt; 1.0.0
  * packaging: don't end the summary with a dot</changelog>
  <changelog author="msabate@suse.com" date="1667908800">- Update to version v1.0~git0.32cac3fb5047:
  * packaging: 1.0.0 -&gt; 1.0</changelog>
  <changelog author="msabate@suse.com" date="1667908801">- Update to version 1.0.0~git0.faee7c196dc1:
  * Revert "packaging: 1.0.0 -&gt; 1.0"</changelog>
  <changelog author="tschmidt@suse.com" date="1670932800">- Update to version 1.0.0~git14.17a7901:
  * Don't write system_token to service credentials files
  * Allow non-root users to use --version
  * Add: ExcludeArch: %ix86 s390 ppc64 to the .spec file, so we skip builds for unsupported architectures.
  * Update Dockerfile.yast
  * Use openssl go for SLE and Leap 15.5+ builds
  * Fix keepalive feature notice during installation
  * Fix requires for all rhel clone distributions like alma, rocky...</changelog>
  <changelog author="tschmidt@suse.com" date="1678276800">- Update to version 1.0.0~git19.b225bc3:
  * Make keepalive on SUMA systems exit without error (bsc#1207876)
  * Update README.md
  * Add deactivate API to ruby bindings (bsc#1202705)</changelog>
  <changelog author="msabate@suse.com" date="1678795200">- Update to version 1.0.0~git23.406b219ccc9e:
  * Added MemTotal detection for HwInfo
  * move 'ExcludeArch' out of the if block</changelog>
  <changelog author="msabate@suse.com" date="1679054400">- Update to version 1.1.0~git0.e3c41e60892e:
  * Bump to v1.1.0</changelog>
  <changelog author="msabate@suse.com" date="1686139200">- Update to version 1.1.0~git2.f42b4b2a060e:
  * Keep keepalive timer states when replacing SUSEConnect (bsc#1211588)</changelog>
  <changelog author="tschmidt@suse.com" date="1688990400">- Update to version 1.2.0~git0.abd0fec:
  * enhance docs for package testing
  * Fixed `provides` to work with yast2-registration on SLE15 &lt; SP4 (bsc#1212799)
  * Improve error message if product set more than once</changelog>
  <changelog author="tschmidt@suse.com" date="1691064000">- Update to version 1.3.0
  * Track .changes file in git</changelog>
  <changelog author="msabate@suse.com" date="1695729600">- Update to version 1.4.0~git0.b0f7c25bfdfa
  * Added EULA display for addons (bsc#1170267)
  * Fix zypper argument for auto-agreeing licenses (bsc#1214781)
  * Enable building on SLE12 SP5 (jsc#PED-3179)</changelog>
</package>
<package pkgid="2d9eb4d9795e8a44c2fc73efaa67c0ce944fd43ffc6fe561e0401f0b059997d0" name="suseconnect-ng" arch="s390x">
  <version epoch="0" ver="1.4.0~git0.b0f7c25bfdfa" rel="150500.3.6.1"/>
  <changelog author="jan.suse@zerebecki.de" date="1646136000">- Update to version 0.0.6~git9.33e5847:
  * Delegate free() calls back to Go (bsc#1195729)
  * Pass "insecure" to zypper addservice
  * Workaround system cert reloading after import (bsc#1195220)
  * Extract setupHTTPClient for easier reuse
  * Exit with code 64 on connection refused like Ruby</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1648123200">- Update to version 0.0.7~git0.3ef988e:
  * Fix product tree traversal (bsc#1197398)
  * Revert "Remove self from LD_PRELOAD (bsc#1196326)"
  * Remove self from LD_PRELOAD (bsc#1196326)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1649851200">- Update to version 0.0.8~git0.16545bf:
  * Allow reloading CA certs pool (bsc#1195220)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1650456000">- Update to version 0.0.8~git2.368ea44:
  * go1.18 compatibility: BuildRequires:git</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1659700800">- Update to version 0.0.9~git5.75890b6:
  * Don't run keepalive on reboot
  * Use system-wide proxy settings (bsc#1200994)
  * Add customer information about keepalive calls
  * Add timer for SUSEConnect --keepalive (bsc#1196076)
  * Add --keepalive to manpage
  * Added support for the System-Token header
  * Add Keepalive command line option
  * Print nested zypper errors (bsc#1200803)
  * Fix migration json error with SMT (bsc#1198625)
  * Add option to run local scc tests
  * Switch to jenkins-hosted credentials
  * Fix "VCS stamping" problem
  * Add missing import
  * Remove redundant code + add comment</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1661947200">- Update to version 0.0.9~git8.f9adb71:
  * Use standard buildconditionals
  * Strip the binaries (saves ~ 30%)</changelog>
  <changelog author="msabate@suse.com" date="1662984000">- Update to version 0.0.9~git10.de887da7231f:
  * Respect the PROXY_ENABLED environment variable</changelog>
  <changelog author="jtomasiak@suse.com" date="1663243200">- Update to version 0.0.10~git0.5f84106:
  * Fix System-Token support in ruby binding (bsc#1203341)
  * Added the PACKAGE.md file</changelog>
  <changelog author="jtomasiak@suse.com" date="1665144000">- Update to version 0.0.10~git2.ee561b8:
  * Drop .git from tar</changelog>
  <changelog author="msabate@suse.com" date="1666958400">- Update to version 1.0.0~git0.60e48564a714 (bsc#1204821):
  * packaging: obsolete suseconnect &lt; 1.0.0
  * packaging: don't end the summary with a dot</changelog>
  <changelog author="msabate@suse.com" date="1667908800">- Update to version v1.0~git0.32cac3fb5047:
  * packaging: 1.0.0 -&gt; 1.0</changelog>
  <changelog author="msabate@suse.com" date="1667908801">- Update to version 1.0.0~git0.faee7c196dc1:
  * Revert "packaging: 1.0.0 -&gt; 1.0"</changelog>
  <changelog author="tschmidt@suse.com" date="1670932800">- Update to version 1.0.0~git14.17a7901:
  * Don't write system_token to service credentials files
  * Allow non-root users to use --version
  * Add: ExcludeArch: %ix86 s390 ppc64 to the .spec file, so we skip builds for unsupported architectures.
  * Update Dockerfile.yast
  * Use openssl go for SLE and Leap 15.5+ builds
  * Fix keepalive feature notice during installation
  * Fix requires for all rhel clone distributions like alma, rocky...</changelog>
  <changelog author="tschmidt@suse.com" date="1678276800">- Update to version 1.0.0~git19.b225bc3:
  * Make keepalive on SUMA systems exit without error (bsc#1207876)
  * Update README.md
  * Add deactivate API to ruby bindings (bsc#1202705)</changelog>
  <changelog author="msabate@suse.com" date="1678795200">- Update to version 1.0.0~git23.406b219ccc9e:
  * Added MemTotal detection for HwInfo
  * move 'ExcludeArch' out of the if block</changelog>
  <changelog author="msabate@suse.com" date="1679054400">- Update to version 1.1.0~git0.e3c41e60892e:
  * Bump to v1.1.0</changelog>
  <changelog author="msabate@suse.com" date="1686139200">- Update to version 1.1.0~git2.f42b4b2a060e:
  * Keep keepalive timer states when replacing SUSEConnect (bsc#1211588)</changelog>
  <changelog author="tschmidt@suse.com" date="1688990400">- Update to version 1.2.0~git0.abd0fec:
  * enhance docs for package testing
  * Fixed `provides` to work with yast2-registration on SLE15 &lt; SP4 (bsc#1212799)
  * Improve error message if product set more than once</changelog>
  <changelog author="tschmidt@suse.com" date="1691064000">- Update to version 1.3.0
  * Track .changes file in git</changelog>
  <changelog author="msabate@suse.com" date="1695729600">- Update to version 1.4.0~git0.b0f7c25bfdfa
  * Added EULA display for addons (bsc#1170267)
  * Fix zypper argument for auto-agreeing licenses (bsc#1214781)
  * Enable building on SLE12 SP5 (jsc#PED-3179)</changelog>
</package>
<package pkgid="eb2aa4cfadc7178674c27e4f7f4778b9305240fb92fd220a9a3490f27ee33b32" name="suseconnect-ng" arch="src">
  <version epoch="0" ver="1.4.0~git0.b0f7c25bfdfa" rel="150500.3.6.1"/>
  <changelog author="jan.suse@zerebecki.de" date="1646136000">- Update to version 0.0.6~git9.33e5847:
  * Delegate free() calls back to Go (bsc#1195729)
  * Pass "insecure" to zypper addservice
  * Workaround system cert reloading after import (bsc#1195220)
  * Extract setupHTTPClient for easier reuse
  * Exit with code 64 on connection refused like Ruby</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1648123200">- Update to version 0.0.7~git0.3ef988e:
  * Fix product tree traversal (bsc#1197398)
  * Revert "Remove self from LD_PRELOAD (bsc#1196326)"
  * Remove self from LD_PRELOAD (bsc#1196326)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1649851200">- Update to version 0.0.8~git0.16545bf:
  * Allow reloading CA certs pool (bsc#1195220)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1650456000">- Update to version 0.0.8~git2.368ea44:
  * go1.18 compatibility: BuildRequires:git</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1659700800">- Update to version 0.0.9~git5.75890b6:
  * Don't run keepalive on reboot
  * Use system-wide proxy settings (bsc#1200994)
  * Add customer information about keepalive calls
  * Add timer for SUSEConnect --keepalive (bsc#1196076)
  * Add --keepalive to manpage
  * Added support for the System-Token header
  * Add Keepalive command line option
  * Print nested zypper errors (bsc#1200803)
  * Fix migration json error with SMT (bsc#1198625)
  * Add option to run local scc tests
  * Switch to jenkins-hosted credentials
  * Fix "VCS stamping" problem
  * Add missing import
  * Remove redundant code + add comment</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1661947200">- Update to version 0.0.9~git8.f9adb71:
  * Use standard buildconditionals
  * Strip the binaries (saves ~ 30%)</changelog>
  <changelog author="msabate@suse.com" date="1662984000">- Update to version 0.0.9~git10.de887da7231f:
  * Respect the PROXY_ENABLED environment variable</changelog>
  <changelog author="jtomasiak@suse.com" date="1663243200">- Update to version 0.0.10~git0.5f84106:
  * Fix System-Token support in ruby binding (bsc#1203341)
  * Added the PACKAGE.md file</changelog>
  <changelog author="jtomasiak@suse.com" date="1665144000">- Update to version 0.0.10~git2.ee561b8:
  * Drop .git from tar</changelog>
  <changelog author="msabate@suse.com" date="1666958400">- Update to version 1.0.0~git0.60e48564a714 (bsc#1204821):
  * packaging: obsolete suseconnect &lt; 1.0.0
  * packaging: don't end the summary with a dot</changelog>
  <changelog author="msabate@suse.com" date="1667908800">- Update to version v1.0~git0.32cac3fb5047:
  * packaging: 1.0.0 -&gt; 1.0</changelog>
  <changelog author="msabate@suse.com" date="1667908801">- Update to version 1.0.0~git0.faee7c196dc1:
  * Revert "packaging: 1.0.0 -&gt; 1.0"</changelog>
  <changelog author="tschmidt@suse.com" date="1670932800">- Update to version 1.0.0~git14.17a7901:
  * Don't write system_token to service credentials files
  * Allow non-root users to use --version
  * Add: ExcludeArch: %ix86 s390 ppc64 to the .spec file, so we skip builds for unsupported architectures.
  * Update Dockerfile.yast
  * Use openssl go for SLE and Leap 15.5+ builds
  * Fix keepalive feature notice during installation
  * Fix requires for all rhel clone distributions like alma, rocky...</changelog>
  <changelog author="tschmidt@suse.com" date="1678276800">- Update to version 1.0.0~git19.b225bc3:
  * Make keepalive on SUMA systems exit without error (bsc#1207876)
  * Update README.md
  * Add deactivate API to ruby bindings (bsc#1202705)</changelog>
  <changelog author="msabate@suse.com" date="1678795200">- Update to version 1.0.0~git23.406b219ccc9e:
  * Added MemTotal detection for HwInfo
  * move 'ExcludeArch' out of the if block</changelog>
  <changelog author="msabate@suse.com" date="1679054400">- Update to version 1.1.0~git0.e3c41e60892e:
  * Bump to v1.1.0</changelog>
  <changelog author="msabate@suse.com" date="1686139200">- Update to version 1.1.0~git2.f42b4b2a060e:
  * Keep keepalive timer states when replacing SUSEConnect (bsc#1211588)</changelog>
  <changelog author="tschmidt@suse.com" date="1688990400">- Update to version 1.2.0~git0.abd0fec:
  * enhance docs for package testing
  * Fixed `provides` to work with yast2-registration on SLE15 &lt; SP4 (bsc#1212799)
  * Improve error message if product set more than once</changelog>
  <changelog author="tschmidt@suse.com" date="1691064000">- Update to version 1.3.0
  * Track .changes file in git</changelog>
  <changelog author="msabate@suse.com" date="1695729600">- Update to version 1.4.0~git0.b0f7c25bfdfa
  * Added EULA display for addons (bsc#1170267)
  * Fix zypper argument for auto-agreeing licenses (bsc#1214781)
  * Enable building on SLE12 SP5 (jsc#PED-3179)</changelog>
</package>
<package pkgid="36e54cfcfff988e8bdf1117bbd95b5800397cdff3062bd0730a020564d53cacd" name="suseconnect-ng" arch="x86_64">
  <version epoch="0" ver="1.4.0~git0.b0f7c25bfdfa" rel="150500.3.6.1"/>
  <changelog author="jan.suse@zerebecki.de" date="1646136000">- Update to version 0.0.6~git9.33e5847:
  * Delegate free() calls back to Go (bsc#1195729)
  * Pass "insecure" to zypper addservice
  * Workaround system cert reloading after import (bsc#1195220)
  * Extract setupHTTPClient for easier reuse
  * Exit with code 64 on connection refused like Ruby</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1648123200">- Update to version 0.0.7~git0.3ef988e:
  * Fix product tree traversal (bsc#1197398)
  * Revert "Remove self from LD_PRELOAD (bsc#1196326)"
  * Remove self from LD_PRELOAD (bsc#1196326)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1649851200">- Update to version 0.0.8~git0.16545bf:
  * Allow reloading CA certs pool (bsc#1195220)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1650456000">- Update to version 0.0.8~git2.368ea44:
  * go1.18 compatibility: BuildRequires:git</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1659700800">- Update to version 0.0.9~git5.75890b6:
  * Don't run keepalive on reboot
  * Use system-wide proxy settings (bsc#1200994)
  * Add customer information about keepalive calls
  * Add timer for SUSEConnect --keepalive (bsc#1196076)
  * Add --keepalive to manpage
  * Added support for the System-Token header
  * Add Keepalive command line option
  * Print nested zypper errors (bsc#1200803)
  * Fix migration json error with SMT (bsc#1198625)
  * Add option to run local scc tests
  * Switch to jenkins-hosted credentials
  * Fix "VCS stamping" problem
  * Add missing import
  * Remove redundant code + add comment</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1661947200">- Update to version 0.0.9~git8.f9adb71:
  * Use standard buildconditionals
  * Strip the binaries (saves ~ 30%)</changelog>
  <changelog author="msabate@suse.com" date="1662984000">- Update to version 0.0.9~git10.de887da7231f:
  * Respect the PROXY_ENABLED environment variable</changelog>
  <changelog author="jtomasiak@suse.com" date="1663243200">- Update to version 0.0.10~git0.5f84106:
  * Fix System-Token support in ruby binding (bsc#1203341)
  * Added the PACKAGE.md file</changelog>
  <changelog author="jtomasiak@suse.com" date="1665144000">- Update to version 0.0.10~git2.ee561b8:
  * Drop .git from tar</changelog>
  <changelog author="msabate@suse.com" date="1666958400">- Update to version 1.0.0~git0.60e48564a714 (bsc#1204821):
  * packaging: obsolete suseconnect &lt; 1.0.0
  * packaging: don't end the summary with a dot</changelog>
  <changelog author="msabate@suse.com" date="1667908800">- Update to version v1.0~git0.32cac3fb5047:
  * packaging: 1.0.0 -&gt; 1.0</changelog>
  <changelog author="msabate@suse.com" date="1667908801">- Update to version 1.0.0~git0.faee7c196dc1:
  * Revert "packaging: 1.0.0 -&gt; 1.0"</changelog>
  <changelog author="tschmidt@suse.com" date="1670932800">- Update to version 1.0.0~git14.17a7901:
  * Don't write system_token to service credentials files
  * Allow non-root users to use --version
  * Add: ExcludeArch: %ix86 s390 ppc64 to the .spec file, so we skip builds for unsupported architectures.
  * Update Dockerfile.yast
  * Use openssl go for SLE and Leap 15.5+ builds
  * Fix keepalive feature notice during installation
  * Fix requires for all rhel clone distributions like alma, rocky...</changelog>
  <changelog author="tschmidt@suse.com" date="1678276800">- Update to version 1.0.0~git19.b225bc3:
  * Make keepalive on SUMA systems exit without error (bsc#1207876)
  * Update README.md
  * Add deactivate API to ruby bindings (bsc#1202705)</changelog>
  <changelog author="msabate@suse.com" date="1678795200">- Update to version 1.0.0~git23.406b219ccc9e:
  * Added MemTotal detection for HwInfo
  * move 'ExcludeArch' out of the if block</changelog>
  <changelog author="msabate@suse.com" date="1679054400">- Update to version 1.1.0~git0.e3c41e60892e:
  * Bump to v1.1.0</changelog>
  <changelog author="msabate@suse.com" date="1686139200">- Update to version 1.1.0~git2.f42b4b2a060e:
  * Keep keepalive timer states when replacing SUSEConnect (bsc#1211588)</changelog>
  <changelog author="tschmidt@suse.com" date="1688990400">- Update to version 1.2.0~git0.abd0fec:
  * enhance docs for package testing
  * Fixed `provides` to work with yast2-registration on SLE15 &lt; SP4 (bsc#1212799)
  * Improve error message if product set more than once</changelog>
  <changelog author="tschmidt@suse.com" date="1691064000">- Update to version 1.3.0
  * Track .changes file in git</changelog>
  <changelog author="msabate@suse.com" date="1695729600">- Update to version 1.4.0~git0.b0f7c25bfdfa
  * Added EULA display for addons (bsc#1170267)
  * Fix zypper argument for auto-agreeing licenses (bsc#1214781)
  * Enable building on SLE12 SP5 (jsc#PED-3179)</changelog>
</package>
<package pkgid="a71bf15fc1caa594b137e0ecd7b686847f3c5a3159e99d1fd7f8e4d4dbabee85" name="suseconnect-ng" arch="aarch64">
  <version epoch="0" ver="1.5.0~git0.d27a8e2" rel="150500.3.9.1"/>
  <changelog author="jan.suse@zerebecki.de" date="1648123200">- Update to version 0.0.7~git0.3ef988e:
  * Fix product tree traversal (bsc#1197398)
  * Revert "Remove self from LD_PRELOAD (bsc#1196326)"
  * Remove self from LD_PRELOAD (bsc#1196326)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1649851200">- Update to version 0.0.8~git0.16545bf:
  * Allow reloading CA certs pool (bsc#1195220)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1650456000">- Update to version 0.0.8~git2.368ea44:
  * go1.18 compatibility: BuildRequires:git</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1659700800">- Update to version 0.0.9~git5.75890b6:
  * Don't run keepalive on reboot
  * Use system-wide proxy settings (bsc#1200994)
  * Add customer information about keepalive calls
  * Add timer for SUSEConnect --keepalive (bsc#1196076)
  * Add --keepalive to manpage
  * Added support for the System-Token header
  * Add Keepalive command line option
  * Print nested zypper errors (bsc#1200803)
  * Fix migration json error with SMT (bsc#1198625)
  * Add option to run local scc tests
  * Switch to jenkins-hosted credentials
  * Fix "VCS stamping" problem
  * Add missing import
  * Remove redundant code + add comment</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1661947200">- Update to version 0.0.9~git8.f9adb71:
  * Use standard buildconditionals
  * Strip the binaries (saves ~ 30%)</changelog>
  <changelog author="msabate@suse.com" date="1662984000">- Update to version 0.0.9~git10.de887da7231f:
  * Respect the PROXY_ENABLED environment variable</changelog>
  <changelog author="jtomasiak@suse.com" date="1663243200">- Update to version 0.0.10~git0.5f84106:
  * Fix System-Token support in ruby binding (bsc#1203341)
  * Added the PACKAGE.md file</changelog>
  <changelog author="jtomasiak@suse.com" date="1665144000">- Update to version 0.0.10~git2.ee561b8:
  * Drop .git from tar</changelog>
  <changelog author="msabate@suse.com" date="1666958400">- Update to version 1.0.0~git0.60e48564a714 (bsc#1204821):
  * packaging: obsolete suseconnect &lt; 1.0.0
  * packaging: don't end the summary with a dot</changelog>
  <changelog author="msabate@suse.com" date="1667908800">- Update to version v1.0~git0.32cac3fb5047:
  * packaging: 1.0.0 -&gt; 1.0</changelog>
  <changelog author="msabate@suse.com" date="1667908801">- Update to version 1.0.0~git0.faee7c196dc1:
  * Revert "packaging: 1.0.0 -&gt; 1.0"</changelog>
  <changelog author="tschmidt@suse.com" date="1670932800">- Update to version 1.0.0~git14.17a7901:
  * Don't write system_token to service credentials files
  * Allow non-root users to use --version
  * Add: ExcludeArch: %ix86 s390 ppc64 to the .spec file, so we skip builds for unsupported architectures.
  * Update Dockerfile.yast
  * Use openssl go for SLE and Leap 15.5+ builds
  * Fix keepalive feature notice during installation
  * Fix requires for all rhel clone distributions like alma, rocky...</changelog>
  <changelog author="tschmidt@suse.com" date="1678276800">- Update to version 1.0.0~git19.b225bc3:
  * Make keepalive on SUMA systems exit without error (bsc#1207876)
  * Update README.md
  * Add deactivate API to ruby bindings (bsc#1202705)</changelog>
  <changelog author="msabate@suse.com" date="1678795200">- Update to version 1.0.0~git23.406b219ccc9e:
  * Added MemTotal detection for HwInfo
  * move 'ExcludeArch' out of the if block</changelog>
  <changelog author="msabate@suse.com" date="1679054400">- Update to version 1.1.0~git0.e3c41e60892e:
  * Bump to v1.1.0</changelog>
  <changelog author="msabate@suse.com" date="1686139200">- Update to version 1.1.0~git2.f42b4b2a060e:
  * Keep keepalive timer states when replacing SUSEConnect (bsc#1211588)</changelog>
  <changelog author="tschmidt@suse.com" date="1688990400">- Update to version 1.2.0~git0.abd0fec:
  * enhance docs for package testing
  * Fixed `provides` to work with yast2-registration on SLE15 &lt; SP4 (bsc#1212799)
  * Improve error message if product set more than once</changelog>
  <changelog author="tschmidt@suse.com" date="1691064000">- Update to version 1.3.0
  * Track .changes file in git</changelog>
  <changelog author="msabate@suse.com" date="1695729600">- Update to version 1.4.0
  * Added EULA display for addons (bsc#1170267)
  * Fix zypper argument for auto-agreeing licenses (bsc#1214781)
  * Enable building on SLE12 SP5 (jsc#PED-3179)</changelog>
  <changelog author="msabate@suse.com" date="1703246400">- Update to version 1.5.0
  * Configure docker credentials for registry authentication
  * Feature: Support usage from Agama + Cockpit for ALP Micro system registration (bsc#1218364)
  * Add --json output option</changelog>
</package>
<package pkgid="cb3cb809b21b1767047f771cf2965b120c52ea1eeceddcc1aad5b3e37e68d42b" name="suseconnect-ng" arch="s390x">
  <version epoch="0" ver="1.5.0~git0.d27a8e2" rel="150500.3.9.1"/>
  <changelog author="jan.suse@zerebecki.de" date="1648123200">- Update to version 0.0.7~git0.3ef988e:
  * Fix product tree traversal (bsc#1197398)
  * Revert "Remove self from LD_PRELOAD (bsc#1196326)"
  * Remove self from LD_PRELOAD (bsc#1196326)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1649851200">- Update to version 0.0.8~git0.16545bf:
  * Allow reloading CA certs pool (bsc#1195220)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1650456000">- Update to version 0.0.8~git2.368ea44:
  * go1.18 compatibility: BuildRequires:git</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1659700800">- Update to version 0.0.9~git5.75890b6:
  * Don't run keepalive on reboot
  * Use system-wide proxy settings (bsc#1200994)
  * Add customer information about keepalive calls
  * Add timer for SUSEConnect --keepalive (bsc#1196076)
  * Add --keepalive to manpage
  * Added support for the System-Token header
  * Add Keepalive command line option
  * Print nested zypper errors (bsc#1200803)
  * Fix migration json error with SMT (bsc#1198625)
  * Add option to run local scc tests
  * Switch to jenkins-hosted credentials
  * Fix "VCS stamping" problem
  * Add missing import
  * Remove redundant code + add comment</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1661947200">- Update to version 0.0.9~git8.f9adb71:
  * Use standard buildconditionals
  * Strip the binaries (saves ~ 30%)</changelog>
  <changelog author="msabate@suse.com" date="1662984000">- Update to version 0.0.9~git10.de887da7231f:
  * Respect the PROXY_ENABLED environment variable</changelog>
  <changelog author="jtomasiak@suse.com" date="1663243200">- Update to version 0.0.10~git0.5f84106:
  * Fix System-Token support in ruby binding (bsc#1203341)
  * Added the PACKAGE.md file</changelog>
  <changelog author="jtomasiak@suse.com" date="1665144000">- Update to version 0.0.10~git2.ee561b8:
  * Drop .git from tar</changelog>
  <changelog author="msabate@suse.com" date="1666958400">- Update to version 1.0.0~git0.60e48564a714 (bsc#1204821):
  * packaging: obsolete suseconnect &lt; 1.0.0
  * packaging: don't end the summary with a dot</changelog>
  <changelog author="msabate@suse.com" date="1667908800">- Update to version v1.0~git0.32cac3fb5047:
  * packaging: 1.0.0 -&gt; 1.0</changelog>
  <changelog author="msabate@suse.com" date="1667908801">- Update to version 1.0.0~git0.faee7c196dc1:
  * Revert "packaging: 1.0.0 -&gt; 1.0"</changelog>
  <changelog author="tschmidt@suse.com" date="1670932800">- Update to version 1.0.0~git14.17a7901:
  * Don't write system_token to service credentials files
  * Allow non-root users to use --version
  * Add: ExcludeArch: %ix86 s390 ppc64 to the .spec file, so we skip builds for unsupported architectures.
  * Update Dockerfile.yast
  * Use openssl go for SLE and Leap 15.5+ builds
  * Fix keepalive feature notice during installation
  * Fix requires for all rhel clone distributions like alma, rocky...</changelog>
  <changelog author="tschmidt@suse.com" date="1678276800">- Update to version 1.0.0~git19.b225bc3:
  * Make keepalive on SUMA systems exit without error (bsc#1207876)
  * Update README.md
  * Add deactivate API to ruby bindings (bsc#1202705)</changelog>
  <changelog author="msabate@suse.com" date="1678795200">- Update to version 1.0.0~git23.406b219ccc9e:
  * Added MemTotal detection for HwInfo
  * move 'ExcludeArch' out of the if block</changelog>
  <changelog author="msabate@suse.com" date="1679054400">- Update to version 1.1.0~git0.e3c41e60892e:
  * Bump to v1.1.0</changelog>
  <changelog author="msabate@suse.com" date="1686139200">- Update to version 1.1.0~git2.f42b4b2a060e:
  * Keep keepalive timer states when replacing SUSEConnect (bsc#1211588)</changelog>
  <changelog author="tschmidt@suse.com" date="1688990400">- Update to version 1.2.0~git0.abd0fec:
  * enhance docs for package testing
  * Fixed `provides` to work with yast2-registration on SLE15 &lt; SP4 (bsc#1212799)
  * Improve error message if product set more than once</changelog>
  <changelog author="tschmidt@suse.com" date="1691064000">- Update to version 1.3.0
  * Track .changes file in git</changelog>
  <changelog author="msabate@suse.com" date="1695729600">- Update to version 1.4.0
  * Added EULA display for addons (bsc#1170267)
  * Fix zypper argument for auto-agreeing licenses (bsc#1214781)
  * Enable building on SLE12 SP5 (jsc#PED-3179)</changelog>
  <changelog author="msabate@suse.com" date="1703246400">- Update to version 1.5.0
  * Configure docker credentials for registry authentication
  * Feature: Support usage from Agama + Cockpit for ALP Micro system registration (bsc#1218364)
  * Add --json output option</changelog>
</package>
<package pkgid="f46bc7eae1b3089c81545c4d0692ba47976e3e8a0f8728861eb733d219cad555" name="suseconnect-ng" arch="src">
  <version epoch="0" ver="1.5.0~git0.d27a8e2" rel="150500.3.9.1"/>
  <changelog author="jan.suse@zerebecki.de" date="1648123200">- Update to version 0.0.7~git0.3ef988e:
  * Fix product tree traversal (bsc#1197398)
  * Revert "Remove self from LD_PRELOAD (bsc#1196326)"
  * Remove self from LD_PRELOAD (bsc#1196326)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1649851200">- Update to version 0.0.8~git0.16545bf:
  * Allow reloading CA certs pool (bsc#1195220)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1650456000">- Update to version 0.0.8~git2.368ea44:
  * go1.18 compatibility: BuildRequires:git</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1659700800">- Update to version 0.0.9~git5.75890b6:
  * Don't run keepalive on reboot
  * Use system-wide proxy settings (bsc#1200994)
  * Add customer information about keepalive calls
  * Add timer for SUSEConnect --keepalive (bsc#1196076)
  * Add --keepalive to manpage
  * Added support for the System-Token header
  * Add Keepalive command line option
  * Print nested zypper errors (bsc#1200803)
  * Fix migration json error with SMT (bsc#1198625)
  * Add option to run local scc tests
  * Switch to jenkins-hosted credentials
  * Fix "VCS stamping" problem
  * Add missing import
  * Remove redundant code + add comment</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1661947200">- Update to version 0.0.9~git8.f9adb71:
  * Use standard buildconditionals
  * Strip the binaries (saves ~ 30%)</changelog>
  <changelog author="msabate@suse.com" date="1662984000">- Update to version 0.0.9~git10.de887da7231f:
  * Respect the PROXY_ENABLED environment variable</changelog>
  <changelog author="jtomasiak@suse.com" date="1663243200">- Update to version 0.0.10~git0.5f84106:
  * Fix System-Token support in ruby binding (bsc#1203341)
  * Added the PACKAGE.md file</changelog>
  <changelog author="jtomasiak@suse.com" date="1665144000">- Update to version 0.0.10~git2.ee561b8:
  * Drop .git from tar</changelog>
  <changelog author="msabate@suse.com" date="1666958400">- Update to version 1.0.0~git0.60e48564a714 (bsc#1204821):
  * packaging: obsolete suseconnect &lt; 1.0.0
  * packaging: don't end the summary with a dot</changelog>
  <changelog author="msabate@suse.com" date="1667908800">- Update to version v1.0~git0.32cac3fb5047:
  * packaging: 1.0.0 -&gt; 1.0</changelog>
  <changelog author="msabate@suse.com" date="1667908801">- Update to version 1.0.0~git0.faee7c196dc1:
  * Revert "packaging: 1.0.0 -&gt; 1.0"</changelog>
  <changelog author="tschmidt@suse.com" date="1670932800">- Update to version 1.0.0~git14.17a7901:
  * Don't write system_token to service credentials files
  * Allow non-root users to use --version
  * Add: ExcludeArch: %ix86 s390 ppc64 to the .spec file, so we skip builds for unsupported architectures.
  * Update Dockerfile.yast
  * Use openssl go for SLE and Leap 15.5+ builds
  * Fix keepalive feature notice during installation
  * Fix requires for all rhel clone distributions like alma, rocky...</changelog>
  <changelog author="tschmidt@suse.com" date="1678276800">- Update to version 1.0.0~git19.b225bc3:
  * Make keepalive on SUMA systems exit without error (bsc#1207876)
  * Update README.md
  * Add deactivate API to ruby bindings (bsc#1202705)</changelog>
  <changelog author="msabate@suse.com" date="1678795200">- Update to version 1.0.0~git23.406b219ccc9e:
  * Added MemTotal detection for HwInfo
  * move 'ExcludeArch' out of the if block</changelog>
  <changelog author="msabate@suse.com" date="1679054400">- Update to version 1.1.0~git0.e3c41e60892e:
  * Bump to v1.1.0</changelog>
  <changelog author="msabate@suse.com" date="1686139200">- Update to version 1.1.0~git2.f42b4b2a060e:
  * Keep keepalive timer states when replacing SUSEConnect (bsc#1211588)</changelog>
  <changelog author="tschmidt@suse.com" date="1688990400">- Update to version 1.2.0~git0.abd0fec:
  * enhance docs for package testing
  * Fixed `provides` to work with yast2-registration on SLE15 &lt; SP4 (bsc#1212799)
  * Improve error message if product set more than once</changelog>
  <changelog author="tschmidt@suse.com" date="1691064000">- Update to version 1.3.0
  * Track .changes file in git</changelog>
  <changelog author="msabate@suse.com" date="1695729600">- Update to version 1.4.0
  * Added EULA display for addons (bsc#1170267)
  * Fix zypper argument for auto-agreeing licenses (bsc#1214781)
  * Enable building on SLE12 SP5 (jsc#PED-3179)</changelog>
  <changelog author="msabate@suse.com" date="1703246400">- Update to version 1.5.0
  * Configure docker credentials for registry authentication
  * Feature: Support usage from Agama + Cockpit for ALP Micro system registration (bsc#1218364)
  * Add --json output option</changelog>
</package>
<package pkgid="f01f462fbfcee90ff4637cfa9fa1093e5d7988a8e8d819d3b662c5c2c6d2eefb" name="suseconnect-ng" arch="x86_64">
  <version epoch="0" ver="1.5.0~git0.d27a8e2" rel="150500.3.9.1"/>
  <changelog author="jan.suse@zerebecki.de" date="1648123200">- Update to version 0.0.7~git0.3ef988e:
  * Fix product tree traversal (bsc#1197398)
  * Revert "Remove self from LD_PRELOAD (bsc#1196326)"
  * Remove self from LD_PRELOAD (bsc#1196326)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1649851200">- Update to version 0.0.8~git0.16545bf:
  * Allow reloading CA certs pool (bsc#1195220)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1650456000">- Update to version 0.0.8~git2.368ea44:
  * go1.18 compatibility: BuildRequires:git</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1659700800">- Update to version 0.0.9~git5.75890b6:
  * Don't run keepalive on reboot
  * Use system-wide proxy settings (bsc#1200994)
  * Add customer information about keepalive calls
  * Add timer for SUSEConnect --keepalive (bsc#1196076)
  * Add --keepalive to manpage
  * Added support for the System-Token header
  * Add Keepalive command line option
  * Print nested zypper errors (bsc#1200803)
  * Fix migration json error with SMT (bsc#1198625)
  * Add option to run local scc tests
  * Switch to jenkins-hosted credentials
  * Fix "VCS stamping" problem
  * Add missing import
  * Remove redundant code + add comment</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1661947200">- Update to version 0.0.9~git8.f9adb71:
  * Use standard buildconditionals
  * Strip the binaries (saves ~ 30%)</changelog>
  <changelog author="msabate@suse.com" date="1662984000">- Update to version 0.0.9~git10.de887da7231f:
  * Respect the PROXY_ENABLED environment variable</changelog>
  <changelog author="jtomasiak@suse.com" date="1663243200">- Update to version 0.0.10~git0.5f84106:
  * Fix System-Token support in ruby binding (bsc#1203341)
  * Added the PACKAGE.md file</changelog>
  <changelog author="jtomasiak@suse.com" date="1665144000">- Update to version 0.0.10~git2.ee561b8:
  * Drop .git from tar</changelog>
  <changelog author="msabate@suse.com" date="1666958400">- Update to version 1.0.0~git0.60e48564a714 (bsc#1204821):
  * packaging: obsolete suseconnect &lt; 1.0.0
  * packaging: don't end the summary with a dot</changelog>
  <changelog author="msabate@suse.com" date="1667908800">- Update to version v1.0~git0.32cac3fb5047:
  * packaging: 1.0.0 -&gt; 1.0</changelog>
  <changelog author="msabate@suse.com" date="1667908801">- Update to version 1.0.0~git0.faee7c196dc1:
  * Revert "packaging: 1.0.0 -&gt; 1.0"</changelog>
  <changelog author="tschmidt@suse.com" date="1670932800">- Update to version 1.0.0~git14.17a7901:
  * Don't write system_token to service credentials files
  * Allow non-root users to use --version
  * Add: ExcludeArch: %ix86 s390 ppc64 to the .spec file, so we skip builds for unsupported architectures.
  * Update Dockerfile.yast
  * Use openssl go for SLE and Leap 15.5+ builds
  * Fix keepalive feature notice during installation
  * Fix requires for all rhel clone distributions like alma, rocky...</changelog>
  <changelog author="tschmidt@suse.com" date="1678276800">- Update to version 1.0.0~git19.b225bc3:
  * Make keepalive on SUMA systems exit without error (bsc#1207876)
  * Update README.md
  * Add deactivate API to ruby bindings (bsc#1202705)</changelog>
  <changelog author="msabate@suse.com" date="1678795200">- Update to version 1.0.0~git23.406b219ccc9e:
  * Added MemTotal detection for HwInfo
  * move 'ExcludeArch' out of the if block</changelog>
  <changelog author="msabate@suse.com" date="1679054400">- Update to version 1.1.0~git0.e3c41e60892e:
  * Bump to v1.1.0</changelog>
  <changelog author="msabate@suse.com" date="1686139200">- Update to version 1.1.0~git2.f42b4b2a060e:
  * Keep keepalive timer states when replacing SUSEConnect (bsc#1211588)</changelog>
  <changelog author="tschmidt@suse.com" date="1688990400">- Update to version 1.2.0~git0.abd0fec:
  * enhance docs for package testing
  * Fixed `provides` to work with yast2-registration on SLE15 &lt; SP4 (bsc#1212799)
  * Improve error message if product set more than once</changelog>
  <changelog author="tschmidt@suse.com" date="1691064000">- Update to version 1.3.0
  * Track .changes file in git</changelog>
  <changelog author="msabate@suse.com" date="1695729600">- Update to version 1.4.0
  * Added EULA display for addons (bsc#1170267)
  * Fix zypper argument for auto-agreeing licenses (bsc#1214781)
  * Enable building on SLE12 SP5 (jsc#PED-3179)</changelog>
  <changelog author="msabate@suse.com" date="1703246400">- Update to version 1.5.0
  * Configure docker credentials for registry authentication
  * Feature: Support usage from Agama + Cockpit for ALP Micro system registration (bsc#1218364)
  * Add --json output option</changelog>
</package>
<package pkgid="94011aa15d05c7414c9a769a5ddc47a29951a2393443ed6f8ced7dafff1b71b8" name="suseconnect-ng" arch="aarch64">
  <version epoch="0" ver="1.6.0~git0.31371c8" rel="150500.3.12.1"/>
  <changelog author="jan.suse@zerebecki.de" date="1649851200">- Update to version 0.0.8~git0.16545bf:
  * Allow reloading CA certs pool (bsc#1195220)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1650456000">- Update to version 0.0.8~git2.368ea44:
  * go1.18 compatibility: BuildRequires:git</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1659700800">- Update to version 0.0.9~git5.75890b6:
  * Don't run keepalive on reboot
  * Use system-wide proxy settings (bsc#1200994)
  * Add customer information about keepalive calls
  * Add timer for SUSEConnect --keepalive (bsc#1196076)
  * Add --keepalive to manpage
  * Added support for the System-Token header
  * Add Keepalive command line option
  * Print nested zypper errors (bsc#1200803)
  * Fix migration json error with SMT (bsc#1198625)
  * Add option to run local scc tests
  * Switch to jenkins-hosted credentials
  * Fix "VCS stamping" problem
  * Add missing import
  * Remove redundant code + add comment</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1661947200">- Update to version 0.0.9~git8.f9adb71:
  * Use standard buildconditionals
  * Strip the binaries (saves ~ 30%)</changelog>
  <changelog author="msabate@suse.com" date="1662984000">- Update to version 0.0.9~git10.de887da7231f:
  * Respect the PROXY_ENABLED environment variable</changelog>
  <changelog author="jtomasiak@suse.com" date="1663243200">- Update to version 0.0.10~git0.5f84106:
  * Fix System-Token support in ruby binding (bsc#1203341)
  * Added the PACKAGE.md file</changelog>
  <changelog author="jtomasiak@suse.com" date="1665144000">- Update to version 0.0.10~git2.ee561b8:
  * Drop .git from tar</changelog>
  <changelog author="msabate@suse.com" date="1666958400">- Update to version 1.0.0~git0.60e48564a714 (bsc#1204821):
  * packaging: obsolete suseconnect &lt; 1.0.0
  * packaging: don't end the summary with a dot</changelog>
  <changelog author="msabate@suse.com" date="1667908800">- Update to version v1.0~git0.32cac3fb5047:
  * packaging: 1.0.0 -&gt; 1.0</changelog>
  <changelog author="msabate@suse.com" date="1667908801">- Update to version 1.0.0~git0.faee7c196dc1:
  * Revert "packaging: 1.0.0 -&gt; 1.0"</changelog>
  <changelog author="tschmidt@suse.com" date="1670932800">- Update to version 1.0.0~git14.17a7901:
  * Don't write system_token to service credentials files
  * Allow non-root users to use --version
  * Add: ExcludeArch: %ix86 s390 ppc64 to the .spec file, so we skip builds for unsupported architectures.
  * Update Dockerfile.yast
  * Use openssl go for SLE and Leap 15.5+ builds
  * Fix keepalive feature notice during installation
  * Fix requires for all rhel clone distributions like alma, rocky...</changelog>
  <changelog author="tschmidt@suse.com" date="1678276800">- Update to version 1.0.0~git19.b225bc3:
  * Make keepalive on SUMA systems exit without error (bsc#1207876)
  * Update README.md
  * Add deactivate API to ruby bindings (bsc#1202705)</changelog>
  <changelog author="msabate@suse.com" date="1678795200">- Update to version 1.0.0~git23.406b219ccc9e:
  * Added MemTotal detection for HwInfo
  * move 'ExcludeArch' out of the if block</changelog>
  <changelog author="msabate@suse.com" date="1679054400">- Update to version 1.1.0~git0.e3c41e60892e:
  * Bump to v1.1.0</changelog>
  <changelog author="msabate@suse.com" date="1686139200">- Update to version 1.1.0~git2.f42b4b2a060e:
  * Keep keepalive timer states when replacing SUSEConnect (bsc#1211588)</changelog>
  <changelog author="tschmidt@suse.com" date="1688990400">- Update to version 1.2.0~git0.abd0fec:
  * enhance docs for package testing
  * Fixed `provides` to work with yast2-registration on SLE15 &lt; SP4 (bsc#1212799)
  * Improve error message if product set more than once</changelog>
  <changelog author="tschmidt@suse.com" date="1691064000">- Update to version 1.3.0
  * Track .changes file in git</changelog>
  <changelog author="msabate@suse.com" date="1695729600">- Update to version 1.4.0
  * Added EULA display for addons (bsc#1170267)
  * Fix zypper argument for auto-agreeing licenses (bsc#1214781)
  * Enable building on SLE12 SP5 (jsc#PED-3179)</changelog>
  <changelog author="msabate@suse.com" date="1703246400">- Update to version 1.5.0
  * Configure docker credentials for registry authentication
  * Feature: Support usage from Agama + Cockpit for ALP Micro system registration (bsc#1218364)
  * Add --json output option</changelog>
  <changelog author="tschmidt@suse.com" date="1705579200">- Update to version 1.6.0
  * Disable EULA display for addons (bsc#1218649 and bsc#1217961)</changelog>
</package>
<package pkgid="4cc7d389d98395abed77c2a36fc7591b6c9b8178991a0d41f48c144ec3bedf97" name="suseconnect-ng" arch="s390x">
  <version epoch="0" ver="1.6.0~git0.31371c8" rel="150500.3.12.1"/>
  <changelog author="jan.suse@zerebecki.de" date="1649851200">- Update to version 0.0.8~git0.16545bf:
  * Allow reloading CA certs pool (bsc#1195220)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1650456000">- Update to version 0.0.8~git2.368ea44:
  * go1.18 compatibility: BuildRequires:git</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1659700800">- Update to version 0.0.9~git5.75890b6:
  * Don't run keepalive on reboot
  * Use system-wide proxy settings (bsc#1200994)
  * Add customer information about keepalive calls
  * Add timer for SUSEConnect --keepalive (bsc#1196076)
  * Add --keepalive to manpage
  * Added support for the System-Token header
  * Add Keepalive command line option
  * Print nested zypper errors (bsc#1200803)
  * Fix migration json error with SMT (bsc#1198625)
  * Add option to run local scc tests
  * Switch to jenkins-hosted credentials
  * Fix "VCS stamping" problem
  * Add missing import
  * Remove redundant code + add comment</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1661947200">- Update to version 0.0.9~git8.f9adb71:
  * Use standard buildconditionals
  * Strip the binaries (saves ~ 30%)</changelog>
  <changelog author="msabate@suse.com" date="1662984000">- Update to version 0.0.9~git10.de887da7231f:
  * Respect the PROXY_ENABLED environment variable</changelog>
  <changelog author="jtomasiak@suse.com" date="1663243200">- Update to version 0.0.10~git0.5f84106:
  * Fix System-Token support in ruby binding (bsc#1203341)
  * Added the PACKAGE.md file</changelog>
  <changelog author="jtomasiak@suse.com" date="1665144000">- Update to version 0.0.10~git2.ee561b8:
  * Drop .git from tar</changelog>
  <changelog author="msabate@suse.com" date="1666958400">- Update to version 1.0.0~git0.60e48564a714 (bsc#1204821):
  * packaging: obsolete suseconnect &lt; 1.0.0
  * packaging: don't end the summary with a dot</changelog>
  <changelog author="msabate@suse.com" date="1667908800">- Update to version v1.0~git0.32cac3fb5047:
  * packaging: 1.0.0 -&gt; 1.0</changelog>
  <changelog author="msabate@suse.com" date="1667908801">- Update to version 1.0.0~git0.faee7c196dc1:
  * Revert "packaging: 1.0.0 -&gt; 1.0"</changelog>
  <changelog author="tschmidt@suse.com" date="1670932800">- Update to version 1.0.0~git14.17a7901:
  * Don't write system_token to service credentials files
  * Allow non-root users to use --version
  * Add: ExcludeArch: %ix86 s390 ppc64 to the .spec file, so we skip builds for unsupported architectures.
  * Update Dockerfile.yast
  * Use openssl go for SLE and Leap 15.5+ builds
  * Fix keepalive feature notice during installation
  * Fix requires for all rhel clone distributions like alma, rocky...</changelog>
  <changelog author="tschmidt@suse.com" date="1678276800">- Update to version 1.0.0~git19.b225bc3:
  * Make keepalive on SUMA systems exit without error (bsc#1207876)
  * Update README.md
  * Add deactivate API to ruby bindings (bsc#1202705)</changelog>
  <changelog author="msabate@suse.com" date="1678795200">- Update to version 1.0.0~git23.406b219ccc9e:
  * Added MemTotal detection for HwInfo
  * move 'ExcludeArch' out of the if block</changelog>
  <changelog author="msabate@suse.com" date="1679054400">- Update to version 1.1.0~git0.e3c41e60892e:
  * Bump to v1.1.0</changelog>
  <changelog author="msabate@suse.com" date="1686139200">- Update to version 1.1.0~git2.f42b4b2a060e:
  * Keep keepalive timer states when replacing SUSEConnect (bsc#1211588)</changelog>
  <changelog author="tschmidt@suse.com" date="1688990400">- Update to version 1.2.0~git0.abd0fec:
  * enhance docs for package testing
  * Fixed `provides` to work with yast2-registration on SLE15 &lt; SP4 (bsc#1212799)
  * Improve error message if product set more than once</changelog>
  <changelog author="tschmidt@suse.com" date="1691064000">- Update to version 1.3.0
  * Track .changes file in git</changelog>
  <changelog author="msabate@suse.com" date="1695729600">- Update to version 1.4.0
  * Added EULA display for addons (bsc#1170267)
  * Fix zypper argument for auto-agreeing licenses (bsc#1214781)
  * Enable building on SLE12 SP5 (jsc#PED-3179)</changelog>
  <changelog author="msabate@suse.com" date="1703246400">- Update to version 1.5.0
  * Configure docker credentials for registry authentication
  * Feature: Support usage from Agama + Cockpit for ALP Micro system registration (bsc#1218364)
  * Add --json output option</changelog>
  <changelog author="tschmidt@suse.com" date="1705579200">- Update to version 1.6.0
  * Disable EULA display for addons (bsc#1218649 and bsc#1217961)</changelog>
</package>
<package pkgid="9b37e081ecb89101fd814e4f00c4bc2b4e695741b9addfc8ff4b067062899c4d" name="suseconnect-ng" arch="src">
  <version epoch="0" ver="1.6.0~git0.31371c8" rel="150500.3.12.1"/>
  <changelog author="jan.suse@zerebecki.de" date="1649851200">- Update to version 0.0.8~git0.16545bf:
  * Allow reloading CA certs pool (bsc#1195220)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1650456000">- Update to version 0.0.8~git2.368ea44:
  * go1.18 compatibility: BuildRequires:git</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1659700800">- Update to version 0.0.9~git5.75890b6:
  * Don't run keepalive on reboot
  * Use system-wide proxy settings (bsc#1200994)
  * Add customer information about keepalive calls
  * Add timer for SUSEConnect --keepalive (bsc#1196076)
  * Add --keepalive to manpage
  * Added support for the System-Token header
  * Add Keepalive command line option
  * Print nested zypper errors (bsc#1200803)
  * Fix migration json error with SMT (bsc#1198625)
  * Add option to run local scc tests
  * Switch to jenkins-hosted credentials
  * Fix "VCS stamping" problem
  * Add missing import
  * Remove redundant code + add comment</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1661947200">- Update to version 0.0.9~git8.f9adb71:
  * Use standard buildconditionals
  * Strip the binaries (saves ~ 30%)</changelog>
  <changelog author="msabate@suse.com" date="1662984000">- Update to version 0.0.9~git10.de887da7231f:
  * Respect the PROXY_ENABLED environment variable</changelog>
  <changelog author="jtomasiak@suse.com" date="1663243200">- Update to version 0.0.10~git0.5f84106:
  * Fix System-Token support in ruby binding (bsc#1203341)
  * Added the PACKAGE.md file</changelog>
  <changelog author="jtomasiak@suse.com" date="1665144000">- Update to version 0.0.10~git2.ee561b8:
  * Drop .git from tar</changelog>
  <changelog author="msabate@suse.com" date="1666958400">- Update to version 1.0.0~git0.60e48564a714 (bsc#1204821):
  * packaging: obsolete suseconnect &lt; 1.0.0
  * packaging: don't end the summary with a dot</changelog>
  <changelog author="msabate@suse.com" date="1667908800">- Update to version v1.0~git0.32cac3fb5047:
  * packaging: 1.0.0 -&gt; 1.0</changelog>
  <changelog author="msabate@suse.com" date="1667908801">- Update to version 1.0.0~git0.faee7c196dc1:
  * Revert "packaging: 1.0.0 -&gt; 1.0"</changelog>
  <changelog author="tschmidt@suse.com" date="1670932800">- Update to version 1.0.0~git14.17a7901:
  * Don't write system_token to service credentials files
  * Allow non-root users to use --version
  * Add: ExcludeArch: %ix86 s390 ppc64 to the .spec file, so we skip builds for unsupported architectures.
  * Update Dockerfile.yast
  * Use openssl go for SLE and Leap 15.5+ builds
  * Fix keepalive feature notice during installation
  * Fix requires for all rhel clone distributions like alma, rocky...</changelog>
  <changelog author="tschmidt@suse.com" date="1678276800">- Update to version 1.0.0~git19.b225bc3:
  * Make keepalive on SUMA systems exit without error (bsc#1207876)
  * Update README.md
  * Add deactivate API to ruby bindings (bsc#1202705)</changelog>
  <changelog author="msabate@suse.com" date="1678795200">- Update to version 1.0.0~git23.406b219ccc9e:
  * Added MemTotal detection for HwInfo
  * move 'ExcludeArch' out of the if block</changelog>
  <changelog author="msabate@suse.com" date="1679054400">- Update to version 1.1.0~git0.e3c41e60892e:
  * Bump to v1.1.0</changelog>
  <changelog author="msabate@suse.com" date="1686139200">- Update to version 1.1.0~git2.f42b4b2a060e:
  * Keep keepalive timer states when replacing SUSEConnect (bsc#1211588)</changelog>
  <changelog author="tschmidt@suse.com" date="1688990400">- Update to version 1.2.0~git0.abd0fec:
  * enhance docs for package testing
  * Fixed `provides` to work with yast2-registration on SLE15 &lt; SP4 (bsc#1212799)
  * Improve error message if product set more than once</changelog>
  <changelog author="tschmidt@suse.com" date="1691064000">- Update to version 1.3.0
  * Track .changes file in git</changelog>
  <changelog author="msabate@suse.com" date="1695729600">- Update to version 1.4.0
  * Added EULA display for addons (bsc#1170267)
  * Fix zypper argument for auto-agreeing licenses (bsc#1214781)
  * Enable building on SLE12 SP5 (jsc#PED-3179)</changelog>
  <changelog author="msabate@suse.com" date="1703246400">- Update to version 1.5.0
  * Configure docker credentials for registry authentication
  * Feature: Support usage from Agama + Cockpit for ALP Micro system registration (bsc#1218364)
  * Add --json output option</changelog>
  <changelog author="tschmidt@suse.com" date="1705579200">- Update to version 1.6.0
  * Disable EULA display for addons (bsc#1218649 and bsc#1217961)</changelog>
</package>
<package pkgid="aef86c59a50b5aac0b37efe1712adfefc2ee2aa9192b949d5bc68f8a52969e8e" name="suseconnect-ng" arch="x86_64">
  <version epoch="0" ver="1.6.0~git0.31371c8" rel="150500.3.12.1"/>
  <changelog author="jan.suse@zerebecki.de" date="1649851200">- Update to version 0.0.8~git0.16545bf:
  * Allow reloading CA certs pool (bsc#1195220)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1650456000">- Update to version 0.0.8~git2.368ea44:
  * go1.18 compatibility: BuildRequires:git</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1659700800">- Update to version 0.0.9~git5.75890b6:
  * Don't run keepalive on reboot
  * Use system-wide proxy settings (bsc#1200994)
  * Add customer information about keepalive calls
  * Add timer for SUSEConnect --keepalive (bsc#1196076)
  * Add --keepalive to manpage
  * Added support for the System-Token header
  * Add Keepalive command line option
  * Print nested zypper errors (bsc#1200803)
  * Fix migration json error with SMT (bsc#1198625)
  * Add option to run local scc tests
  * Switch to jenkins-hosted credentials
  * Fix "VCS stamping" problem
  * Add missing import
  * Remove redundant code + add comment</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1661947200">- Update to version 0.0.9~git8.f9adb71:
  * Use standard buildconditionals
  * Strip the binaries (saves ~ 30%)</changelog>
  <changelog author="msabate@suse.com" date="1662984000">- Update to version 0.0.9~git10.de887da7231f:
  * Respect the PROXY_ENABLED environment variable</changelog>
  <changelog author="jtomasiak@suse.com" date="1663243200">- Update to version 0.0.10~git0.5f84106:
  * Fix System-Token support in ruby binding (bsc#1203341)
  * Added the PACKAGE.md file</changelog>
  <changelog author="jtomasiak@suse.com" date="1665144000">- Update to version 0.0.10~git2.ee561b8:
  * Drop .git from tar</changelog>
  <changelog author="msabate@suse.com" date="1666958400">- Update to version 1.0.0~git0.60e48564a714 (bsc#1204821):
  * packaging: obsolete suseconnect &lt; 1.0.0
  * packaging: don't end the summary with a dot</changelog>
  <changelog author="msabate@suse.com" date="1667908800">- Update to version v1.0~git0.32cac3fb5047:
  * packaging: 1.0.0 -&gt; 1.0</changelog>
  <changelog author="msabate@suse.com" date="1667908801">- Update to version 1.0.0~git0.faee7c196dc1:
  * Revert "packaging: 1.0.0 -&gt; 1.0"</changelog>
  <changelog author="tschmidt@suse.com" date="1670932800">- Update to version 1.0.0~git14.17a7901:
  * Don't write system_token to service credentials files
  * Allow non-root users to use --version
  * Add: ExcludeArch: %ix86 s390 ppc64 to the .spec file, so we skip builds for unsupported architectures.
  * Update Dockerfile.yast
  * Use openssl go for SLE and Leap 15.5+ builds
  * Fix keepalive feature notice during installation
  * Fix requires for all rhel clone distributions like alma, rocky...</changelog>
  <changelog author="tschmidt@suse.com" date="1678276800">- Update to version 1.0.0~git19.b225bc3:
  * Make keepalive on SUMA systems exit without error (bsc#1207876)
  * Update README.md
  * Add deactivate API to ruby bindings (bsc#1202705)</changelog>
  <changelog author="msabate@suse.com" date="1678795200">- Update to version 1.0.0~git23.406b219ccc9e:
  * Added MemTotal detection for HwInfo
  * move 'ExcludeArch' out of the if block</changelog>
  <changelog author="msabate@suse.com" date="1679054400">- Update to version 1.1.0~git0.e3c41e60892e:
  * Bump to v1.1.0</changelog>
  <changelog author="msabate@suse.com" date="1686139200">- Update to version 1.1.0~git2.f42b4b2a060e:
  * Keep keepalive timer states when replacing SUSEConnect (bsc#1211588)</changelog>
  <changelog author="tschmidt@suse.com" date="1688990400">- Update to version 1.2.0~git0.abd0fec:
  * enhance docs for package testing
  * Fixed `provides` to work with yast2-registration on SLE15 &lt; SP4 (bsc#1212799)
  * Improve error message if product set more than once</changelog>
  <changelog author="tschmidt@suse.com" date="1691064000">- Update to version 1.3.0
  * Track .changes file in git</changelog>
  <changelog author="msabate@suse.com" date="1695729600">- Update to version 1.4.0
  * Added EULA display for addons (bsc#1170267)
  * Fix zypper argument for auto-agreeing licenses (bsc#1214781)
  * Enable building on SLE12 SP5 (jsc#PED-3179)</changelog>
  <changelog author="msabate@suse.com" date="1703246400">- Update to version 1.5.0
  * Configure docker credentials for registry authentication
  * Feature: Support usage from Agama + Cockpit for ALP Micro system registration (bsc#1218364)
  * Add --json output option</changelog>
  <changelog author="tschmidt@suse.com" date="1705579200">- Update to version 1.6.0
  * Disable EULA display for addons (bsc#1218649 and bsc#1217961)</changelog>
</package>
<package pkgid="2a2e513e76b4b2f9e3700c00cd73c20ee8ce5c3185e07f318fc0a33e198e1cb2" name="suseconnect-ng" arch="aarch64">
  <version epoch="0" ver="1.7.0~git0.5338270" rel="150500.3.15.1"/>
  <changelog author="jan.suse@zerebecki.de" date="1650456000">- Update to version 0.0.8~git2.368ea44:
  * go1.18 compatibility: BuildRequires:git</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1659700800">- Update to version 0.0.9~git5.75890b6:
  * Don't run keepalive on reboot
  * Use system-wide proxy settings (bsc#1200994)
  * Add customer information about keepalive calls
  * Add timer for SUSEConnect --keepalive (bsc#1196076)
  * Add --keepalive to manpage
  * Added support for the System-Token header
  * Add Keepalive command line option
  * Print nested zypper errors (bsc#1200803)
  * Fix migration json error with SMT (bsc#1198625)
  * Add option to run local scc tests
  * Switch to jenkins-hosted credentials
  * Fix "VCS stamping" problem
  * Add missing import
  * Remove redundant code + add comment</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1661947200">- Update to version 0.0.9~git8.f9adb71:
  * Use standard buildconditionals
  * Strip the binaries (saves ~ 30%)</changelog>
  <changelog author="msabate@suse.com" date="1662984000">- Update to version 0.0.9~git10.de887da7231f:
  * Respect the PROXY_ENABLED environment variable</changelog>
  <changelog author="jtomasiak@suse.com" date="1663243200">- Update to version 0.0.10~git0.5f84106:
  * Fix System-Token support in ruby binding (bsc#1203341)
  * Added the PACKAGE.md file</changelog>
  <changelog author="jtomasiak@suse.com" date="1665144000">- Update to version 0.0.10~git2.ee561b8:
  * Drop .git from tar</changelog>
  <changelog author="msabate@suse.com" date="1666958400">- Update to version 1.0.0~git0.60e48564a714 (bsc#1204821):
  * packaging: obsolete suseconnect &lt; 1.0.0
  * packaging: don't end the summary with a dot</changelog>
  <changelog author="msabate@suse.com" date="1667908800">- Update to version v1.0~git0.32cac3fb5047:
  * packaging: 1.0.0 -&gt; 1.0</changelog>
  <changelog author="msabate@suse.com" date="1667908801">- Update to version 1.0.0~git0.faee7c196dc1:
  * Revert "packaging: 1.0.0 -&gt; 1.0"</changelog>
  <changelog author="tschmidt@suse.com" date="1670932800">- Update to version 1.0.0~git14.17a7901:
  * Don't write system_token to service credentials files
  * Allow non-root users to use --version
  * Add: ExcludeArch: %ix86 s390 ppc64 to the .spec file, so we skip builds for unsupported architectures.
  * Update Dockerfile.yast
  * Use openssl go for SLE and Leap 15.5+ builds
  * Fix keepalive feature notice during installation
  * Fix requires for all rhel clone distributions like alma, rocky...</changelog>
  <changelog author="tschmidt@suse.com" date="1678276800">- Update to version 1.0.0~git19.b225bc3:
  * Make keepalive on SUMA systems exit without error (bsc#1207876)
  * Update README.md
  * Add deactivate API to ruby bindings (bsc#1202705)</changelog>
  <changelog author="msabate@suse.com" date="1678795200">- Update to version 1.0.0~git23.406b219ccc9e:
  * Added MemTotal detection for HwInfo
  * move 'ExcludeArch' out of the if block</changelog>
  <changelog author="msabate@suse.com" date="1679054400">- Update to version 1.1.0~git0.e3c41e60892e:
  * Bump to v1.1.0</changelog>
  <changelog author="msabate@suse.com" date="1686139200">- Update to version 1.1.0~git2.f42b4b2a060e:
  * Keep keepalive timer states when replacing SUSEConnect (bsc#1211588)</changelog>
  <changelog author="tschmidt@suse.com" date="1688990400">- Update to version 1.2.0~git0.abd0fec:
  * enhance docs for package testing
  * Fixed `provides` to work with yast2-registration on SLE15 &lt; SP4 (bsc#1212799)
  * Improve error message if product set more than once</changelog>
  <changelog author="tschmidt@suse.com" date="1691064000">- Update to version 1.3.0
  * Track .changes file in git</changelog>
  <changelog author="msabate@suse.com" date="1695729600">- Update to version 1.4.0
  * Added EULA display for addons (bsc#1170267)
  * Fix zypper argument for auto-agreeing licenses (bsc#1214781)
  * Enable building on SLE12 SP5 (jsc#PED-3179)</changelog>
  <changelog author="msabate@suse.com" date="1703246400">- Update to version 1.5.0
  * Configure docker credentials for registry authentication
  * Feature: Support usage from Agama + Cockpit for ALP Micro system registration (bsc#1218364)
  * Add --json output option</changelog>
  <changelog author="tschmidt@suse.com" date="1705579200">- Update to version 1.6.0
  * Disable EULA display for addons (bsc#1218649 and bsc#1217961)</changelog>
  <changelog author="fschnizlein@suse.com" date="1707912000">- Update to version 1.7.0~git0.5338270
  * Allow SUSEConnect on read write transactional systems (bsc#1219425)</changelog>
</package>
<package pkgid="950a63f4fc9e0d17ada046f19b07b5d67ac8e414431dbf3edeb474668c32dff5" name="suseconnect-ng" arch="s390x">
  <version epoch="0" ver="1.7.0~git0.5338270" rel="150500.3.15.1"/>
  <changelog author="jan.suse@zerebecki.de" date="1650456000">- Update to version 0.0.8~git2.368ea44:
  * go1.18 compatibility: BuildRequires:git</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1659700800">- Update to version 0.0.9~git5.75890b6:
  * Don't run keepalive on reboot
  * Use system-wide proxy settings (bsc#1200994)
  * Add customer information about keepalive calls
  * Add timer for SUSEConnect --keepalive (bsc#1196076)
  * Add --keepalive to manpage
  * Added support for the System-Token header
  * Add Keepalive command line option
  * Print nested zypper errors (bsc#1200803)
  * Fix migration json error with SMT (bsc#1198625)
  * Add option to run local scc tests
  * Switch to jenkins-hosted credentials
  * Fix "VCS stamping" problem
  * Add missing import
  * Remove redundant code + add comment</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1661947200">- Update to version 0.0.9~git8.f9adb71:
  * Use standard buildconditionals
  * Strip the binaries (saves ~ 30%)</changelog>
  <changelog author="msabate@suse.com" date="1662984000">- Update to version 0.0.9~git10.de887da7231f:
  * Respect the PROXY_ENABLED environment variable</changelog>
  <changelog author="jtomasiak@suse.com" date="1663243200">- Update to version 0.0.10~git0.5f84106:
  * Fix System-Token support in ruby binding (bsc#1203341)
  * Added the PACKAGE.md file</changelog>
  <changelog author="jtomasiak@suse.com" date="1665144000">- Update to version 0.0.10~git2.ee561b8:
  * Drop .git from tar</changelog>
  <changelog author="msabate@suse.com" date="1666958400">- Update to version 1.0.0~git0.60e48564a714 (bsc#1204821):
  * packaging: obsolete suseconnect &lt; 1.0.0
  * packaging: don't end the summary with a dot</changelog>
  <changelog author="msabate@suse.com" date="1667908800">- Update to version v1.0~git0.32cac3fb5047:
  * packaging: 1.0.0 -&gt; 1.0</changelog>
  <changelog author="msabate@suse.com" date="1667908801">- Update to version 1.0.0~git0.faee7c196dc1:
  * Revert "packaging: 1.0.0 -&gt; 1.0"</changelog>
  <changelog author="tschmidt@suse.com" date="1670932800">- Update to version 1.0.0~git14.17a7901:
  * Don't write system_token to service credentials files
  * Allow non-root users to use --version
  * Add: ExcludeArch: %ix86 s390 ppc64 to the .spec file, so we skip builds for unsupported architectures.
  * Update Dockerfile.yast
  * Use openssl go for SLE and Leap 15.5+ builds
  * Fix keepalive feature notice during installation
  * Fix requires for all rhel clone distributions like alma, rocky...</changelog>
  <changelog author="tschmidt@suse.com" date="1678276800">- Update to version 1.0.0~git19.b225bc3:
  * Make keepalive on SUMA systems exit without error (bsc#1207876)
  * Update README.md
  * Add deactivate API to ruby bindings (bsc#1202705)</changelog>
  <changelog author="msabate@suse.com" date="1678795200">- Update to version 1.0.0~git23.406b219ccc9e:
  * Added MemTotal detection for HwInfo
  * move 'ExcludeArch' out of the if block</changelog>
  <changelog author="msabate@suse.com" date="1679054400">- Update to version 1.1.0~git0.e3c41e60892e:
  * Bump to v1.1.0</changelog>
  <changelog author="msabate@suse.com" date="1686139200">- Update to version 1.1.0~git2.f42b4b2a060e:
  * Keep keepalive timer states when replacing SUSEConnect (bsc#1211588)</changelog>
  <changelog author="tschmidt@suse.com" date="1688990400">- Update to version 1.2.0~git0.abd0fec:
  * enhance docs for package testing
  * Fixed `provides` to work with yast2-registration on SLE15 &lt; SP4 (bsc#1212799)
  * Improve error message if product set more than once</changelog>
  <changelog author="tschmidt@suse.com" date="1691064000">- Update to version 1.3.0
  * Track .changes file in git</changelog>
  <changelog author="msabate@suse.com" date="1695729600">- Update to version 1.4.0
  * Added EULA display for addons (bsc#1170267)
  * Fix zypper argument for auto-agreeing licenses (bsc#1214781)
  * Enable building on SLE12 SP5 (jsc#PED-3179)</changelog>
  <changelog author="msabate@suse.com" date="1703246400">- Update to version 1.5.0
  * Configure docker credentials for registry authentication
  * Feature: Support usage from Agama + Cockpit for ALP Micro system registration (bsc#1218364)
  * Add --json output option</changelog>
  <changelog author="tschmidt@suse.com" date="1705579200">- Update to version 1.6.0
  * Disable EULA display for addons (bsc#1218649 and bsc#1217961)</changelog>
  <changelog author="fschnizlein@suse.com" date="1707912000">- Update to version 1.7.0~git0.5338270
  * Allow SUSEConnect on read write transactional systems (bsc#1219425)</changelog>
</package>
<package pkgid="b4097eb4816e2578b04492731c1d26d2bc38caab4d286bddf8002eab5bb531f3" name="suseconnect-ng" arch="src">
  <version epoch="0" ver="1.7.0~git0.5338270" rel="150500.3.15.1"/>
  <changelog author="jan.suse@zerebecki.de" date="1650456000">- Update to version 0.0.8~git2.368ea44:
  * go1.18 compatibility: BuildRequires:git</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1659700800">- Update to version 0.0.9~git5.75890b6:
  * Don't run keepalive on reboot
  * Use system-wide proxy settings (bsc#1200994)
  * Add customer information about keepalive calls
  * Add timer for SUSEConnect --keepalive (bsc#1196076)
  * Add --keepalive to manpage
  * Added support for the System-Token header
  * Add Keepalive command line option
  * Print nested zypper errors (bsc#1200803)
  * Fix migration json error with SMT (bsc#1198625)
  * Add option to run local scc tests
  * Switch to jenkins-hosted credentials
  * Fix "VCS stamping" problem
  * Add missing import
  * Remove redundant code + add comment</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1661947200">- Update to version 0.0.9~git8.f9adb71:
  * Use standard buildconditionals
  * Strip the binaries (saves ~ 30%)</changelog>
  <changelog author="msabate@suse.com" date="1662984000">- Update to version 0.0.9~git10.de887da7231f:
  * Respect the PROXY_ENABLED environment variable</changelog>
  <changelog author="jtomasiak@suse.com" date="1663243200">- Update to version 0.0.10~git0.5f84106:
  * Fix System-Token support in ruby binding (bsc#1203341)
  * Added the PACKAGE.md file</changelog>
  <changelog author="jtomasiak@suse.com" date="1665144000">- Update to version 0.0.10~git2.ee561b8:
  * Drop .git from tar</changelog>
  <changelog author="msabate@suse.com" date="1666958400">- Update to version 1.0.0~git0.60e48564a714 (bsc#1204821):
  * packaging: obsolete suseconnect &lt; 1.0.0
  * packaging: don't end the summary with a dot</changelog>
  <changelog author="msabate@suse.com" date="1667908800">- Update to version v1.0~git0.32cac3fb5047:
  * packaging: 1.0.0 -&gt; 1.0</changelog>
  <changelog author="msabate@suse.com" date="1667908801">- Update to version 1.0.0~git0.faee7c196dc1:
  * Revert "packaging: 1.0.0 -&gt; 1.0"</changelog>
  <changelog author="tschmidt@suse.com" date="1670932800">- Update to version 1.0.0~git14.17a7901:
  * Don't write system_token to service credentials files
  * Allow non-root users to use --version
  * Add: ExcludeArch: %ix86 s390 ppc64 to the .spec file, so we skip builds for unsupported architectures.
  * Update Dockerfile.yast
  * Use openssl go for SLE and Leap 15.5+ builds
  * Fix keepalive feature notice during installation
  * Fix requires for all rhel clone distributions like alma, rocky...</changelog>
  <changelog author="tschmidt@suse.com" date="1678276800">- Update to version 1.0.0~git19.b225bc3:
  * Make keepalive on SUMA systems exit without error (bsc#1207876)
  * Update README.md
  * Add deactivate API to ruby bindings (bsc#1202705)</changelog>
  <changelog author="msabate@suse.com" date="1678795200">- Update to version 1.0.0~git23.406b219ccc9e:
  * Added MemTotal detection for HwInfo
  * move 'ExcludeArch' out of the if block</changelog>
  <changelog author="msabate@suse.com" date="1679054400">- Update to version 1.1.0~git0.e3c41e60892e:
  * Bump to v1.1.0</changelog>
  <changelog author="msabate@suse.com" date="1686139200">- Update to version 1.1.0~git2.f42b4b2a060e:
  * Keep keepalive timer states when replacing SUSEConnect (bsc#1211588)</changelog>
  <changelog author="tschmidt@suse.com" date="1688990400">- Update to version 1.2.0~git0.abd0fec:
  * enhance docs for package testing
  * Fixed `provides` to work with yast2-registration on SLE15 &lt; SP4 (bsc#1212799)
  * Improve error message if product set more than once</changelog>
  <changelog author="tschmidt@suse.com" date="1691064000">- Update to version 1.3.0
  * Track .changes file in git</changelog>
  <changelog author="msabate@suse.com" date="1695729600">- Update to version 1.4.0
  * Added EULA display for addons (bsc#1170267)
  * Fix zypper argument for auto-agreeing licenses (bsc#1214781)
  * Enable building on SLE12 SP5 (jsc#PED-3179)</changelog>
  <changelog author="msabate@suse.com" date="1703246400">- Update to version 1.5.0
  * Configure docker credentials for registry authentication
  * Feature: Support usage from Agama + Cockpit for ALP Micro system registration (bsc#1218364)
  * Add --json output option</changelog>
  <changelog author="tschmidt@suse.com" date="1705579200">- Update to version 1.6.0
  * Disable EULA display for addons (bsc#1218649 and bsc#1217961)</changelog>
  <changelog author="fschnizlein@suse.com" date="1707912000">- Update to version 1.7.0~git0.5338270
  * Allow SUSEConnect on read write transactional systems (bsc#1219425)</changelog>
</package>
<package pkgid="b3cd4fbfa0e3482cda314f4f8a342f080d338257ce60ac2135fb77be98245f54" name="suseconnect-ng" arch="x86_64">
  <version epoch="0" ver="1.7.0~git0.5338270" rel="150500.3.15.1"/>
  <changelog author="jan.suse@zerebecki.de" date="1650456000">- Update to version 0.0.8~git2.368ea44:
  * go1.18 compatibility: BuildRequires:git</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1659700800">- Update to version 0.0.9~git5.75890b6:
  * Don't run keepalive on reboot
  * Use system-wide proxy settings (bsc#1200994)
  * Add customer information about keepalive calls
  * Add timer for SUSEConnect --keepalive (bsc#1196076)
  * Add --keepalive to manpage
  * Added support for the System-Token header
  * Add Keepalive command line option
  * Print nested zypper errors (bsc#1200803)
  * Fix migration json error with SMT (bsc#1198625)
  * Add option to run local scc tests
  * Switch to jenkins-hosted credentials
  * Fix "VCS stamping" problem
  * Add missing import
  * Remove redundant code + add comment</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1661947200">- Update to version 0.0.9~git8.f9adb71:
  * Use standard buildconditionals
  * Strip the binaries (saves ~ 30%)</changelog>
  <changelog author="msabate@suse.com" date="1662984000">- Update to version 0.0.9~git10.de887da7231f:
  * Respect the PROXY_ENABLED environment variable</changelog>
  <changelog author="jtomasiak@suse.com" date="1663243200">- Update to version 0.0.10~git0.5f84106:
  * Fix System-Token support in ruby binding (bsc#1203341)
  * Added the PACKAGE.md file</changelog>
  <changelog author="jtomasiak@suse.com" date="1665144000">- Update to version 0.0.10~git2.ee561b8:
  * Drop .git from tar</changelog>
  <changelog author="msabate@suse.com" date="1666958400">- Update to version 1.0.0~git0.60e48564a714 (bsc#1204821):
  * packaging: obsolete suseconnect &lt; 1.0.0
  * packaging: don't end the summary with a dot</changelog>
  <changelog author="msabate@suse.com" date="1667908800">- Update to version v1.0~git0.32cac3fb5047:
  * packaging: 1.0.0 -&gt; 1.0</changelog>
  <changelog author="msabate@suse.com" date="1667908801">- Update to version 1.0.0~git0.faee7c196dc1:
  * Revert "packaging: 1.0.0 -&gt; 1.0"</changelog>
  <changelog author="tschmidt@suse.com" date="1670932800">- Update to version 1.0.0~git14.17a7901:
  * Don't write system_token to service credentials files
  * Allow non-root users to use --version
  * Add: ExcludeArch: %ix86 s390 ppc64 to the .spec file, so we skip builds for unsupported architectures.
  * Update Dockerfile.yast
  * Use openssl go for SLE and Leap 15.5+ builds
  * Fix keepalive feature notice during installation
  * Fix requires for all rhel clone distributions like alma, rocky...</changelog>
  <changelog author="tschmidt@suse.com" date="1678276800">- Update to version 1.0.0~git19.b225bc3:
  * Make keepalive on SUMA systems exit without error (bsc#1207876)
  * Update README.md
  * Add deactivate API to ruby bindings (bsc#1202705)</changelog>
  <changelog author="msabate@suse.com" date="1678795200">- Update to version 1.0.0~git23.406b219ccc9e:
  * Added MemTotal detection for HwInfo
  * move 'ExcludeArch' out of the if block</changelog>
  <changelog author="msabate@suse.com" date="1679054400">- Update to version 1.1.0~git0.e3c41e60892e:
  * Bump to v1.1.0</changelog>
  <changelog author="msabate@suse.com" date="1686139200">- Update to version 1.1.0~git2.f42b4b2a060e:
  * Keep keepalive timer states when replacing SUSEConnect (bsc#1211588)</changelog>
  <changelog author="tschmidt@suse.com" date="1688990400">- Update to version 1.2.0~git0.abd0fec:
  * enhance docs for package testing
  * Fixed `provides` to work with yast2-registration on SLE15 &lt; SP4 (bsc#1212799)
  * Improve error message if product set more than once</changelog>
  <changelog author="tschmidt@suse.com" date="1691064000">- Update to version 1.3.0
  * Track .changes file in git</changelog>
  <changelog author="msabate@suse.com" date="1695729600">- Update to version 1.4.0
  * Added EULA display for addons (bsc#1170267)
  * Fix zypper argument for auto-agreeing licenses (bsc#1214781)
  * Enable building on SLE12 SP5 (jsc#PED-3179)</changelog>
  <changelog author="msabate@suse.com" date="1703246400">- Update to version 1.5.0
  * Configure docker credentials for registry authentication
  * Feature: Support usage from Agama + Cockpit for ALP Micro system registration (bsc#1218364)
  * Add --json output option</changelog>
  <changelog author="tschmidt@suse.com" date="1705579200">- Update to version 1.6.0
  * Disable EULA display for addons (bsc#1218649 and bsc#1217961)</changelog>
  <changelog author="fschnizlein@suse.com" date="1707912000">- Update to version 1.7.0~git0.5338270
  * Allow SUSEConnect on read write transactional systems (bsc#1219425)</changelog>
</package>
<package pkgid="923299a0d4389c31e2ccd54a595084fa65f1375e5b4230724a7248e12cdcfb3a" name="syslinux" arch="src">
  <version epoch="0" ver="4.04" rel="150300.17.2.1"/>
  <changelog author="snwint@suse.de" date="1362398400">- localboot.diff: -2 boots next disk (bnc #807157)</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="rhafer@suse.com" date="1385640000">- geometry.diff: Fix segfault caused by a bug in geometry handling
  (bnc#852856)</changelog>
  <changelog author="snwint@suse.de" date="1394020800">- nostrip.diff: don't strip binaries</changelog>
  <changelog author="snwint@suse.de" date="1395403200">- timeout.diff: fix timeout counter to work more accurate (bnc #691211)</changelog>
  <changelog author="snwint@suse.de" date="1407758400">- syslinux-4.04-cache_fix.diff: fix memory corruption due to wrong fs cache
  initialisation (bnc #884181)</changelog>
  <changelog author="snwint@suse.de" date="1423051200">- syslinux-4.04-mtime.diff: don't use timestamps to create a unique id (bnc #915950)</changelog>
  <changelog author="meissner@suse.com" date="1424606400">- Do not use gcc-PIE here, lots of assembler (cpuid etc.) that
  would be hard to make ready for PIC.</changelog>
  <changelog author="snwint@suse.de" date="1441368000">- drop hard dependency on mtools (bsc#943571)</changelog>
  <changelog author="rguenther@suse.com" date="1455192000">- syslinux-4.04-miniacc.diff: fixup broken conformance tests</changelog>
  <changelog author="snwint@suse.de" date="1455624000">- create also s390x package (bsc#964471)</changelog>
  <changelog author="snwint@suse.de" date="1458129600">- syslinux-4.04-align.diff: fix section alignment (bsc#948445)</changelog>
  <changelog author="snwint@suse.de" date="1464955200">- added aarch64, ppc64le to baselibs.conf (bsc#982948)</changelog>
  <changelog author="bwiedemann@suse.com" date="1500552000">- Add syslinux-4.04-reproducible.patch to sort file lists
  to fix build-compare (boo#1041090)</changelog>
  <changelog author="snwint@suse.de" date="1516276800">- syslinux-4.04-python3.diff: switch to python3 (bsc#1075769)</changelog>
  <changelog author="schwab@suse.de" date="1533556800">- sysmacros.patch: include &lt;sys/sysmacros.h&gt; for major/minor</changelog>
  <changelog author="mliska@suse.cz" date="1543406400">- Add remove-note-gnu-section.patch: strip a newly added section
  in order to fulfil ELF size limits expected.</changelog>
  <changelog author="snwint@suse.com" date="1550491200">- syslinux-4.04-lzo.diff: fix lzo memory aliasing issue (bsc#1125616)</changelog>
  <changelog author="snwint@suse.com" date="1584619200">- syslinux-4.04-gcc10.diff: fix gcc10 related issues (bsc#1166605)
  * -fno-common is now the default
  * provide missing strlen() implementation</changelog>
  <changelog author="bwiedemann@suse.com" date="1612353600">- Add syslinux-4.04-reproducible-isohybrid.patch to allow for
  deterministic iso image creation (boo#1062303)</changelog>
</package>
<package pkgid="ef222d7ba2a40b3f036b09e7f10c0e96017c73340742839aea94cad24cf75a94" name="syslinux" arch="x86_64">
  <version epoch="0" ver="4.04" rel="150300.17.2.1"/>
  <changelog author="snwint@suse.de" date="1423051200">- syslinux-4.04-mtime.diff: don't use timestamps to create a unique id (bnc #915950)</changelog>
  <changelog author="meissner@suse.com" date="1424606400">- Do not use gcc-PIE here, lots of assembler (cpuid etc.) that
  would be hard to make ready for PIC.</changelog>
  <changelog author="snwint@suse.de" date="1441368000">- drop hard dependency on mtools (bsc#943571)</changelog>
  <changelog author="rguenther@suse.com" date="1455192000">- syslinux-4.04-miniacc.diff: fixup broken conformance tests</changelog>
  <changelog author="snwint@suse.de" date="1455624000">- create also s390x package (bsc#964471)</changelog>
  <changelog author="snwint@suse.de" date="1458129600">- syslinux-4.04-align.diff: fix section alignment (bsc#948445)</changelog>
  <changelog author="snwint@suse.de" date="1464955200">- added aarch64, ppc64le to baselibs.conf (bsc#982948)</changelog>
  <changelog author="bwiedemann@suse.com" date="1500552000">- Add syslinux-4.04-reproducible.patch to sort file lists
  to fix build-compare (boo#1041090)</changelog>
  <changelog author="snwint@suse.de" date="1516276800">- syslinux-4.04-python3.diff: switch to python3 (bsc#1075769)</changelog>
  <changelog author="schwab@suse.de" date="1533556800">- sysmacros.patch: include &lt;sys/sysmacros.h&gt; for major/minor</changelog>
  <changelog author="mliska@suse.cz" date="1543406400">- Add remove-note-gnu-section.patch: strip a newly added section
  in order to fulfil ELF size limits expected.</changelog>
  <changelog author="snwint@suse.com" date="1550491200">- syslinux-4.04-lzo.diff: fix lzo memory aliasing issue (bsc#1125616)</changelog>
  <changelog author="snwint@suse.com" date="1584619200">- syslinux-4.04-gcc10.diff: fix gcc10 related issues (bsc#1166605)
  * -fno-common is now the default
  * provide missing strlen() implementation</changelog>
  <changelog author="bwiedemann@suse.com" date="1612353600">- Add syslinux-4.04-reproducible-isohybrid.patch to allow for
  deterministic iso image creation (boo#1062303)</changelog>
</package>
<package pkgid="8f73ddfc8a43c58f7eb673035d2f477ac8a894157da102f54291bdfe23b6fc5d" name="system-group-hardware" arch="noarch">
  <version epoch="0" ver="20170617" rel="150400.24.2.1"/>
  <changelog author="kukuk@suse.de" date="1503316800">- user nobody: move usermod to %post, else it will be executed
  before the user is created.</changelog>
  <changelog author="sbrabec@suse.com" date="1505217600">- Add system-user-uuidd.conf (boo#1057937#c3).</changelog>
  <changelog author="kukuk@suse.de" date="1505390400">- udev needs groups kvm and lp: [bsc#1058703]
  - Add group kvm to system-group-hardware
  - Move group lp from system-user-lp to system-group-hardware</changelog>
  <changelog author="kukuk@suse.de" date="1505390401">- uuidd does not need group daemon, Copy&amp;Paste error.</changelog>
  <changelog author="kukuk@suse.de" date="1511956800">- Change home directory of user man to /var/lib/empty. Home
  directories below /var/cache are by definition insecure and a
  bad idea.</changelog>
  <changelog author="fbui@suse.com" date="1521633600">- Add "render" group in system-group-hardware (bsc#1085847)
  "uaccess" tag has been dropped from /dev/dri/renderD* and these devices
  now have 0666 permsions by default is owned by the render group.</changelog>
  <changelog author="msuchanek@suse.de" date="1548936000">- Add cpacfstats, ts-shell, and zkeyadm groups for s390-tools (bsc#1123730)</changelog>
  <changelog author="max@suse.com" date="1564574400">- Add system-user-tftp subpackage with tftp user and group and
  /srv/tftpboot as home directory [bsc#1143454].</changelog>
  <changelog author="msuchanek@suse.com" date="1565697600">- Remove s390 groups again. The s390-tools maintainer wants to add groups in
  s390-tools manually.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Add tss user for TPM tools (boo#1162360).</changelog>
  <changelog author="msuchanek@suse.com" date="1582027200">- Align /var/lib/tss permissions with trousers (boo#1162360).</changelog>
  <changelog author="kukuk@suse.com" date="1584705600">- Call usermod only if installed</changelog>
  <changelog author="kukuk@suse.com" date="1585137600">- Use test -x instead of -f</changelog>
  <changelog author="kukuk@suse.com" date="1598011200">- Don't add group nogroup to user nobody, as many daemons misuse
  'nogroup' as own group</changelog>
  <changelog author="jfehlig@suse.com" date="1605182400">- Add system account and groups for kvm, qemu, and libvirt
  (jsc#SLE-11629)
  New files: system-group-kvm.conf, system-group-libvirt.conf,
  system-user-qemu.conf</changelog>
  <changelog author="jfehlig@suse.com" date="1605268800">- Add qemu user to kvm group</changelog>
  <changelog author="fcrozat@suse.com" date="1607083200">- Remove kvm group from hardware subpackage, since kvm is in its
  own subpackage (jsc#SLE-11629).</changelog>
  <changelog author="fbui@suse.com" date="1623153600">- Add default hardware group for 'sgx' enclave access
  Since udev v248, a default rule for /dev/sgx_enclave is provided to
  give rw access to the new group hopefully making 'sgx' the standard
  group name for such devices. [bsc#1190572]</changelog>
  <changelog author="msuchanek@suse.com" date="1631534400">- system-user-tss.conf: Remove group entry, not needed and did
  contain syntax errors (bsc#1190401).</changelog>
  <changelog author="dcermak@suse.com" date="1642161600">- Buildrequire the updated sysuser-tools which supports busybox-adduser as well</changelog>
</package>
<package pkgid="7994d0f574671e03e1d58276b7823e10b4102e8ffe5f3b90176bbf6c33685d0c" name="system-group-kvm" arch="noarch">
  <version epoch="0" ver="20170617" rel="150400.24.2.1"/>
  <changelog author="kukuk@suse.de" date="1503316800">- user nobody: move usermod to %post, else it will be executed
  before the user is created.</changelog>
  <changelog author="sbrabec@suse.com" date="1505217600">- Add system-user-uuidd.conf (boo#1057937#c3).</changelog>
  <changelog author="kukuk@suse.de" date="1505390400">- udev needs groups kvm and lp: [bsc#1058703]
  - Add group kvm to system-group-hardware
  - Move group lp from system-user-lp to system-group-hardware</changelog>
  <changelog author="kukuk@suse.de" date="1505390401">- uuidd does not need group daemon, Copy&amp;Paste error.</changelog>
  <changelog author="kukuk@suse.de" date="1511956800">- Change home directory of user man to /var/lib/empty. Home
  directories below /var/cache are by definition insecure and a
  bad idea.</changelog>
  <changelog author="fbui@suse.com" date="1521633600">- Add "render" group in system-group-hardware (bsc#1085847)
  "uaccess" tag has been dropped from /dev/dri/renderD* and these devices
  now have 0666 permsions by default is owned by the render group.</changelog>
  <changelog author="msuchanek@suse.de" date="1548936000">- Add cpacfstats, ts-shell, and zkeyadm groups for s390-tools (bsc#1123730)</changelog>
  <changelog author="max@suse.com" date="1564574400">- Add system-user-tftp subpackage with tftp user and group and
  /srv/tftpboot as home directory [bsc#1143454].</changelog>
  <changelog author="msuchanek@suse.com" date="1565697600">- Remove s390 groups again. The s390-tools maintainer wants to add groups in
  s390-tools manually.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Add tss user for TPM tools (boo#1162360).</changelog>
  <changelog author="msuchanek@suse.com" date="1582027200">- Align /var/lib/tss permissions with trousers (boo#1162360).</changelog>
  <changelog author="kukuk@suse.com" date="1584705600">- Call usermod only if installed</changelog>
  <changelog author="kukuk@suse.com" date="1585137600">- Use test -x instead of -f</changelog>
  <changelog author="kukuk@suse.com" date="1598011200">- Don't add group nogroup to user nobody, as many daemons misuse
  'nogroup' as own group</changelog>
  <changelog author="jfehlig@suse.com" date="1605182400">- Add system account and groups for kvm, qemu, and libvirt
  (jsc#SLE-11629)
  New files: system-group-kvm.conf, system-group-libvirt.conf,
  system-user-qemu.conf</changelog>
  <changelog author="jfehlig@suse.com" date="1605268800">- Add qemu user to kvm group</changelog>
  <changelog author="fcrozat@suse.com" date="1607083200">- Remove kvm group from hardware subpackage, since kvm is in its
  own subpackage (jsc#SLE-11629).</changelog>
  <changelog author="fbui@suse.com" date="1623153600">- Add default hardware group for 'sgx' enclave access
  Since udev v248, a default rule for /dev/sgx_enclave is provided to
  give rw access to the new group hopefully making 'sgx' the standard
  group name for such devices. [bsc#1190572]</changelog>
  <changelog author="msuchanek@suse.com" date="1631534400">- system-user-tss.conf: Remove group entry, not needed and did
  contain syntax errors (bsc#1190401).</changelog>
  <changelog author="dcermak@suse.com" date="1642161600">- Buildrequire the updated sysuser-tools which supports busybox-adduser as well</changelog>
</package>
<package pkgid="1f558500622b06d1aefc9353207b3614f3a7142acd4427a67b3e6f75b1966a2d" name="system-group-libvirt" arch="noarch">
  <version epoch="0" ver="20170617" rel="150400.24.2.1"/>
  <changelog author="kukuk@suse.de" date="1503316800">- user nobody: move usermod to %post, else it will be executed
  before the user is created.</changelog>
  <changelog author="sbrabec@suse.com" date="1505217600">- Add system-user-uuidd.conf (boo#1057937#c3).</changelog>
  <changelog author="kukuk@suse.de" date="1505390400">- udev needs groups kvm and lp: [bsc#1058703]
  - Add group kvm to system-group-hardware
  - Move group lp from system-user-lp to system-group-hardware</changelog>
  <changelog author="kukuk@suse.de" date="1505390401">- uuidd does not need group daemon, Copy&amp;Paste error.</changelog>
  <changelog author="kukuk@suse.de" date="1511956800">- Change home directory of user man to /var/lib/empty. Home
  directories below /var/cache are by definition insecure and a
  bad idea.</changelog>
  <changelog author="fbui@suse.com" date="1521633600">- Add "render" group in system-group-hardware (bsc#1085847)
  "uaccess" tag has been dropped from /dev/dri/renderD* and these devices
  now have 0666 permsions by default is owned by the render group.</changelog>
  <changelog author="msuchanek@suse.de" date="1548936000">- Add cpacfstats, ts-shell, and zkeyadm groups for s390-tools (bsc#1123730)</changelog>
  <changelog author="max@suse.com" date="1564574400">- Add system-user-tftp subpackage with tftp user and group and
  /srv/tftpboot as home directory [bsc#1143454].</changelog>
  <changelog author="msuchanek@suse.com" date="1565697600">- Remove s390 groups again. The s390-tools maintainer wants to add groups in
  s390-tools manually.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Add tss user for TPM tools (boo#1162360).</changelog>
  <changelog author="msuchanek@suse.com" date="1582027200">- Align /var/lib/tss permissions with trousers (boo#1162360).</changelog>
  <changelog author="kukuk@suse.com" date="1584705600">- Call usermod only if installed</changelog>
  <changelog author="kukuk@suse.com" date="1585137600">- Use test -x instead of -f</changelog>
  <changelog author="kukuk@suse.com" date="1598011200">- Don't add group nogroup to user nobody, as many daemons misuse
  'nogroup' as own group</changelog>
  <changelog author="jfehlig@suse.com" date="1605182400">- Add system account and groups for kvm, qemu, and libvirt
  (jsc#SLE-11629)
  New files: system-group-kvm.conf, system-group-libvirt.conf,
  system-user-qemu.conf</changelog>
  <changelog author="jfehlig@suse.com" date="1605268800">- Add qemu user to kvm group</changelog>
  <changelog author="fcrozat@suse.com" date="1607083200">- Remove kvm group from hardware subpackage, since kvm is in its
  own subpackage (jsc#SLE-11629).</changelog>
  <changelog author="fbui@suse.com" date="1623153600">- Add default hardware group for 'sgx' enclave access
  Since udev v248, a default rule for /dev/sgx_enclave is provided to
  give rw access to the new group hopefully making 'sgx' the standard
  group name for such devices. [bsc#1190572]</changelog>
  <changelog author="msuchanek@suse.com" date="1631534400">- system-user-tss.conf: Remove group entry, not needed and did
  contain syntax errors (bsc#1190401).</changelog>
  <changelog author="dcermak@suse.com" date="1642161600">- Buildrequire the updated sysuser-tools which supports busybox-adduser as well</changelog>
</package>
<package pkgid="54e30aa961e1734655cf80905810728ef0e6d85371594c9fa72949a1e02feea6" name="system-group-wheel" arch="noarch">
  <version epoch="0" ver="20170617" rel="150400.24.2.1"/>
  <changelog author="kukuk@suse.de" date="1503316800">- user nobody: move usermod to %post, else it will be executed
  before the user is created.</changelog>
  <changelog author="sbrabec@suse.com" date="1505217600">- Add system-user-uuidd.conf (boo#1057937#c3).</changelog>
  <changelog author="kukuk@suse.de" date="1505390400">- udev needs groups kvm and lp: [bsc#1058703]
  - Add group kvm to system-group-hardware
  - Move group lp from system-user-lp to system-group-hardware</changelog>
  <changelog author="kukuk@suse.de" date="1505390401">- uuidd does not need group daemon, Copy&amp;Paste error.</changelog>
  <changelog author="kukuk@suse.de" date="1511956800">- Change home directory of user man to /var/lib/empty. Home
  directories below /var/cache are by definition insecure and a
  bad idea.</changelog>
  <changelog author="fbui@suse.com" date="1521633600">- Add "render" group in system-group-hardware (bsc#1085847)
  "uaccess" tag has been dropped from /dev/dri/renderD* and these devices
  now have 0666 permsions by default is owned by the render group.</changelog>
  <changelog author="msuchanek@suse.de" date="1548936000">- Add cpacfstats, ts-shell, and zkeyadm groups for s390-tools (bsc#1123730)</changelog>
  <changelog author="max@suse.com" date="1564574400">- Add system-user-tftp subpackage with tftp user and group and
  /srv/tftpboot as home directory [bsc#1143454].</changelog>
  <changelog author="msuchanek@suse.com" date="1565697600">- Remove s390 groups again. The s390-tools maintainer wants to add groups in
  s390-tools manually.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Add tss user for TPM tools (boo#1162360).</changelog>
  <changelog author="msuchanek@suse.com" date="1582027200">- Align /var/lib/tss permissions with trousers (boo#1162360).</changelog>
  <changelog author="kukuk@suse.com" date="1584705600">- Call usermod only if installed</changelog>
  <changelog author="kukuk@suse.com" date="1585137600">- Use test -x instead of -f</changelog>
  <changelog author="kukuk@suse.com" date="1598011200">- Don't add group nogroup to user nobody, as many daemons misuse
  'nogroup' as own group</changelog>
  <changelog author="jfehlig@suse.com" date="1605182400">- Add system account and groups for kvm, qemu, and libvirt
  (jsc#SLE-11629)
  New files: system-group-kvm.conf, system-group-libvirt.conf,
  system-user-qemu.conf</changelog>
  <changelog author="jfehlig@suse.com" date="1605268800">- Add qemu user to kvm group</changelog>
  <changelog author="fcrozat@suse.com" date="1607083200">- Remove kvm group from hardware subpackage, since kvm is in its
  own subpackage (jsc#SLE-11629).</changelog>
  <changelog author="fbui@suse.com" date="1623153600">- Add default hardware group for 'sgx' enclave access
  Since udev v248, a default rule for /dev/sgx_enclave is provided to
  give rw access to the new group hopefully making 'sgx' the standard
  group name for such devices. [bsc#1190572]</changelog>
  <changelog author="msuchanek@suse.com" date="1631534400">- system-user-tss.conf: Remove group entry, not needed and did
  contain syntax errors (bsc#1190401).</changelog>
  <changelog author="dcermak@suse.com" date="1642161600">- Buildrequire the updated sysuser-tools which supports busybox-adduser as well</changelog>
</package>
<package pkgid="46db3c45b2cd361b207a65a028174be11351da12dfb0c43d0e2cafad4af2851b" name="system-user-lp" arch="noarch">
  <version epoch="0" ver="20170617" rel="150400.24.2.1"/>
  <changelog author="kukuk@suse.de" date="1503316800">- user nobody: move usermod to %post, else it will be executed
  before the user is created.</changelog>
  <changelog author="sbrabec@suse.com" date="1505217600">- Add system-user-uuidd.conf (boo#1057937#c3).</changelog>
  <changelog author="kukuk@suse.de" date="1505390400">- udev needs groups kvm and lp: [bsc#1058703]
  - Add group kvm to system-group-hardware
  - Move group lp from system-user-lp to system-group-hardware</changelog>
  <changelog author="kukuk@suse.de" date="1505390401">- uuidd does not need group daemon, Copy&amp;Paste error.</changelog>
  <changelog author="kukuk@suse.de" date="1511956800">- Change home directory of user man to /var/lib/empty. Home
  directories below /var/cache are by definition insecure and a
  bad idea.</changelog>
  <changelog author="fbui@suse.com" date="1521633600">- Add "render" group in system-group-hardware (bsc#1085847)
  "uaccess" tag has been dropped from /dev/dri/renderD* and these devices
  now have 0666 permsions by default is owned by the render group.</changelog>
  <changelog author="msuchanek@suse.de" date="1548936000">- Add cpacfstats, ts-shell, and zkeyadm groups for s390-tools (bsc#1123730)</changelog>
  <changelog author="max@suse.com" date="1564574400">- Add system-user-tftp subpackage with tftp user and group and
  /srv/tftpboot as home directory [bsc#1143454].</changelog>
  <changelog author="msuchanek@suse.com" date="1565697600">- Remove s390 groups again. The s390-tools maintainer wants to add groups in
  s390-tools manually.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Add tss user for TPM tools (boo#1162360).</changelog>
  <changelog author="msuchanek@suse.com" date="1582027200">- Align /var/lib/tss permissions with trousers (boo#1162360).</changelog>
  <changelog author="kukuk@suse.com" date="1584705600">- Call usermod only if installed</changelog>
  <changelog author="kukuk@suse.com" date="1585137600">- Use test -x instead of -f</changelog>
  <changelog author="kukuk@suse.com" date="1598011200">- Don't add group nogroup to user nobody, as many daemons misuse
  'nogroup' as own group</changelog>
  <changelog author="jfehlig@suse.com" date="1605182400">- Add system account and groups for kvm, qemu, and libvirt
  (jsc#SLE-11629)
  New files: system-group-kvm.conf, system-group-libvirt.conf,
  system-user-qemu.conf</changelog>
  <changelog author="jfehlig@suse.com" date="1605268800">- Add qemu user to kvm group</changelog>
  <changelog author="fcrozat@suse.com" date="1607083200">- Remove kvm group from hardware subpackage, since kvm is in its
  own subpackage (jsc#SLE-11629).</changelog>
  <changelog author="fbui@suse.com" date="1623153600">- Add default hardware group for 'sgx' enclave access
  Since udev v248, a default rule for /dev/sgx_enclave is provided to
  give rw access to the new group hopefully making 'sgx' the standard
  group name for such devices. [bsc#1190572]</changelog>
  <changelog author="msuchanek@suse.com" date="1631534400">- system-user-tss.conf: Remove group entry, not needed and did
  contain syntax errors (bsc#1190401).</changelog>
  <changelog author="dcermak@suse.com" date="1642161600">- Buildrequire the updated sysuser-tools which supports busybox-adduser as well</changelog>
</package>
<package pkgid="c83eb9a673e2ee911b47bd941d722a9818c26993ae0742348ce2193eaf52981b" name="system-user-nobody" arch="noarch">
  <version epoch="0" ver="20170617" rel="150400.24.2.1"/>
  <changelog author="kukuk@suse.de" date="1503316800">- user nobody: move usermod to %post, else it will be executed
  before the user is created.</changelog>
  <changelog author="sbrabec@suse.com" date="1505217600">- Add system-user-uuidd.conf (boo#1057937#c3).</changelog>
  <changelog author="kukuk@suse.de" date="1505390400">- udev needs groups kvm and lp: [bsc#1058703]
  - Add group kvm to system-group-hardware
  - Move group lp from system-user-lp to system-group-hardware</changelog>
  <changelog author="kukuk@suse.de" date="1505390401">- uuidd does not need group daemon, Copy&amp;Paste error.</changelog>
  <changelog author="kukuk@suse.de" date="1511956800">- Change home directory of user man to /var/lib/empty. Home
  directories below /var/cache are by definition insecure and a
  bad idea.</changelog>
  <changelog author="fbui@suse.com" date="1521633600">- Add "render" group in system-group-hardware (bsc#1085847)
  "uaccess" tag has been dropped from /dev/dri/renderD* and these devices
  now have 0666 permsions by default is owned by the render group.</changelog>
  <changelog author="msuchanek@suse.de" date="1548936000">- Add cpacfstats, ts-shell, and zkeyadm groups for s390-tools (bsc#1123730)</changelog>
  <changelog author="max@suse.com" date="1564574400">- Add system-user-tftp subpackage with tftp user and group and
  /srv/tftpboot as home directory [bsc#1143454].</changelog>
  <changelog author="msuchanek@suse.com" date="1565697600">- Remove s390 groups again. The s390-tools maintainer wants to add groups in
  s390-tools manually.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Add tss user for TPM tools (boo#1162360).</changelog>
  <changelog author="msuchanek@suse.com" date="1582027200">- Align /var/lib/tss permissions with trousers (boo#1162360).</changelog>
  <changelog author="kukuk@suse.com" date="1584705600">- Call usermod only if installed</changelog>
  <changelog author="kukuk@suse.com" date="1585137600">- Use test -x instead of -f</changelog>
  <changelog author="kukuk@suse.com" date="1598011200">- Don't add group nogroup to user nobody, as many daemons misuse
  'nogroup' as own group</changelog>
  <changelog author="jfehlig@suse.com" date="1605182400">- Add system account and groups for kvm, qemu, and libvirt
  (jsc#SLE-11629)
  New files: system-group-kvm.conf, system-group-libvirt.conf,
  system-user-qemu.conf</changelog>
  <changelog author="jfehlig@suse.com" date="1605268800">- Add qemu user to kvm group</changelog>
  <changelog author="fcrozat@suse.com" date="1607083200">- Remove kvm group from hardware subpackage, since kvm is in its
  own subpackage (jsc#SLE-11629).</changelog>
  <changelog author="fbui@suse.com" date="1623153600">- Add default hardware group for 'sgx' enclave access
  Since udev v248, a default rule for /dev/sgx_enclave is provided to
  give rw access to the new group hopefully making 'sgx' the standard
  group name for such devices. [bsc#1190572]</changelog>
  <changelog author="msuchanek@suse.com" date="1631534400">- system-user-tss.conf: Remove group entry, not needed and did
  contain syntax errors (bsc#1190401).</changelog>
  <changelog author="dcermak@suse.com" date="1642161600">- Buildrequire the updated sysuser-tools which supports busybox-adduser as well</changelog>
</package>
<package pkgid="ec436e2043e6f94535b0fbc3bca7d1e5353f6007bc1d01c835e95ad2554fc600" name="system-user-qemu" arch="noarch">
  <version epoch="0" ver="20170617" rel="150400.24.2.1"/>
  <changelog author="kukuk@suse.de" date="1503316800">- user nobody: move usermod to %post, else it will be executed
  before the user is created.</changelog>
  <changelog author="sbrabec@suse.com" date="1505217600">- Add system-user-uuidd.conf (boo#1057937#c3).</changelog>
  <changelog author="kukuk@suse.de" date="1505390400">- udev needs groups kvm and lp: [bsc#1058703]
  - Add group kvm to system-group-hardware
  - Move group lp from system-user-lp to system-group-hardware</changelog>
  <changelog author="kukuk@suse.de" date="1505390401">- uuidd does not need group daemon, Copy&amp;Paste error.</changelog>
  <changelog author="kukuk@suse.de" date="1511956800">- Change home directory of user man to /var/lib/empty. Home
  directories below /var/cache are by definition insecure and a
  bad idea.</changelog>
  <changelog author="fbui@suse.com" date="1521633600">- Add "render" group in system-group-hardware (bsc#1085847)
  "uaccess" tag has been dropped from /dev/dri/renderD* and these devices
  now have 0666 permsions by default is owned by the render group.</changelog>
  <changelog author="msuchanek@suse.de" date="1548936000">- Add cpacfstats, ts-shell, and zkeyadm groups for s390-tools (bsc#1123730)</changelog>
  <changelog author="max@suse.com" date="1564574400">- Add system-user-tftp subpackage with tftp user and group and
  /srv/tftpboot as home directory [bsc#1143454].</changelog>
  <changelog author="msuchanek@suse.com" date="1565697600">- Remove s390 groups again. The s390-tools maintainer wants to add groups in
  s390-tools manually.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Add tss user for TPM tools (boo#1162360).</changelog>
  <changelog author="msuchanek@suse.com" date="1582027200">- Align /var/lib/tss permissions with trousers (boo#1162360).</changelog>
  <changelog author="kukuk@suse.com" date="1584705600">- Call usermod only if installed</changelog>
  <changelog author="kukuk@suse.com" date="1585137600">- Use test -x instead of -f</changelog>
  <changelog author="kukuk@suse.com" date="1598011200">- Don't add group nogroup to user nobody, as many daemons misuse
  'nogroup' as own group</changelog>
  <changelog author="jfehlig@suse.com" date="1605182400">- Add system account and groups for kvm, qemu, and libvirt
  (jsc#SLE-11629)
  New files: system-group-kvm.conf, system-group-libvirt.conf,
  system-user-qemu.conf</changelog>
  <changelog author="jfehlig@suse.com" date="1605268800">- Add qemu user to kvm group</changelog>
  <changelog author="fcrozat@suse.com" date="1607083200">- Remove kvm group from hardware subpackage, since kvm is in its
  own subpackage (jsc#SLE-11629).</changelog>
  <changelog author="fbui@suse.com" date="1623153600">- Add default hardware group for 'sgx' enclave access
  Since udev v248, a default rule for /dev/sgx_enclave is provided to
  give rw access to the new group hopefully making 'sgx' the standard
  group name for such devices. [bsc#1190572]</changelog>
  <changelog author="msuchanek@suse.com" date="1631534400">- system-user-tss.conf: Remove group entry, not needed and did
  contain syntax errors (bsc#1190401).</changelog>
  <changelog author="dcermak@suse.com" date="1642161600">- Buildrequire the updated sysuser-tools which supports busybox-adduser as well</changelog>
</package>
<package pkgid="9f1bd93eb21a508ec91b72d295206e1240127e8ffe0ab1f10dd075835110b34d" name="system-user-tftp" arch="noarch">
  <version epoch="0" ver="20170617" rel="150400.24.2.1"/>
  <changelog author="kukuk@suse.de" date="1503316800">- user nobody: move usermod to %post, else it will be executed
  before the user is created.</changelog>
  <changelog author="sbrabec@suse.com" date="1505217600">- Add system-user-uuidd.conf (boo#1057937#c3).</changelog>
  <changelog author="kukuk@suse.de" date="1505390400">- udev needs groups kvm and lp: [bsc#1058703]
  - Add group kvm to system-group-hardware
  - Move group lp from system-user-lp to system-group-hardware</changelog>
  <changelog author="kukuk@suse.de" date="1505390401">- uuidd does not need group daemon, Copy&amp;Paste error.</changelog>
  <changelog author="kukuk@suse.de" date="1511956800">- Change home directory of user man to /var/lib/empty. Home
  directories below /var/cache are by definition insecure and a
  bad idea.</changelog>
  <changelog author="fbui@suse.com" date="1521633600">- Add "render" group in system-group-hardware (bsc#1085847)
  "uaccess" tag has been dropped from /dev/dri/renderD* and these devices
  now have 0666 permsions by default is owned by the render group.</changelog>
  <changelog author="msuchanek@suse.de" date="1548936000">- Add cpacfstats, ts-shell, and zkeyadm groups for s390-tools (bsc#1123730)</changelog>
  <changelog author="max@suse.com" date="1564574400">- Add system-user-tftp subpackage with tftp user and group and
  /srv/tftpboot as home directory [bsc#1143454].</changelog>
  <changelog author="msuchanek@suse.com" date="1565697600">- Remove s390 groups again. The s390-tools maintainer wants to add groups in
  s390-tools manually.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Add tss user for TPM tools (boo#1162360).</changelog>
  <changelog author="msuchanek@suse.com" date="1582027200">- Align /var/lib/tss permissions with trousers (boo#1162360).</changelog>
  <changelog author="kukuk@suse.com" date="1584705600">- Call usermod only if installed</changelog>
  <changelog author="kukuk@suse.com" date="1585137600">- Use test -x instead of -f</changelog>
  <changelog author="kukuk@suse.com" date="1598011200">- Don't add group nogroup to user nobody, as many daemons misuse
  'nogroup' as own group</changelog>
  <changelog author="jfehlig@suse.com" date="1605182400">- Add system account and groups for kvm, qemu, and libvirt
  (jsc#SLE-11629)
  New files: system-group-kvm.conf, system-group-libvirt.conf,
  system-user-qemu.conf</changelog>
  <changelog author="jfehlig@suse.com" date="1605268800">- Add qemu user to kvm group</changelog>
  <changelog author="fcrozat@suse.com" date="1607083200">- Remove kvm group from hardware subpackage, since kvm is in its
  own subpackage (jsc#SLE-11629).</changelog>
  <changelog author="fbui@suse.com" date="1623153600">- Add default hardware group for 'sgx' enclave access
  Since udev v248, a default rule for /dev/sgx_enclave is provided to
  give rw access to the new group hopefully making 'sgx' the standard
  group name for such devices. [bsc#1190572]</changelog>
  <changelog author="msuchanek@suse.com" date="1631534400">- system-user-tss.conf: Remove group entry, not needed and did
  contain syntax errors (bsc#1190401).</changelog>
  <changelog author="dcermak@suse.com" date="1642161600">- Buildrequire the updated sysuser-tools which supports busybox-adduser as well</changelog>
</package>
<package pkgid="d54a88650278cd2ebb77c2f36c5e86061168f50e42c749da7335b87fb20d5ff1" name="system-user-tss" arch="noarch">
  <version epoch="0" ver="20170617" rel="150400.24.2.1"/>
  <changelog author="kukuk@suse.de" date="1503316800">- user nobody: move usermod to %post, else it will be executed
  before the user is created.</changelog>
  <changelog author="sbrabec@suse.com" date="1505217600">- Add system-user-uuidd.conf (boo#1057937#c3).</changelog>
  <changelog author="kukuk@suse.de" date="1505390400">- udev needs groups kvm and lp: [bsc#1058703]
  - Add group kvm to system-group-hardware
  - Move group lp from system-user-lp to system-group-hardware</changelog>
  <changelog author="kukuk@suse.de" date="1505390401">- uuidd does not need group daemon, Copy&amp;Paste error.</changelog>
  <changelog author="kukuk@suse.de" date="1511956800">- Change home directory of user man to /var/lib/empty. Home
  directories below /var/cache are by definition insecure and a
  bad idea.</changelog>
  <changelog author="fbui@suse.com" date="1521633600">- Add "render" group in system-group-hardware (bsc#1085847)
  "uaccess" tag has been dropped from /dev/dri/renderD* and these devices
  now have 0666 permsions by default is owned by the render group.</changelog>
  <changelog author="msuchanek@suse.de" date="1548936000">- Add cpacfstats, ts-shell, and zkeyadm groups for s390-tools (bsc#1123730)</changelog>
  <changelog author="max@suse.com" date="1564574400">- Add system-user-tftp subpackage with tftp user and group and
  /srv/tftpboot as home directory [bsc#1143454].</changelog>
  <changelog author="msuchanek@suse.com" date="1565697600">- Remove s390 groups again. The s390-tools maintainer wants to add groups in
  s390-tools manually.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Add tss user for TPM tools (boo#1162360).</changelog>
  <changelog author="msuchanek@suse.com" date="1582027200">- Align /var/lib/tss permissions with trousers (boo#1162360).</changelog>
  <changelog author="kukuk@suse.com" date="1584705600">- Call usermod only if installed</changelog>
  <changelog author="kukuk@suse.com" date="1585137600">- Use test -x instead of -f</changelog>
  <changelog author="kukuk@suse.com" date="1598011200">- Don't add group nogroup to user nobody, as many daemons misuse
  'nogroup' as own group</changelog>
  <changelog author="jfehlig@suse.com" date="1605182400">- Add system account and groups for kvm, qemu, and libvirt
  (jsc#SLE-11629)
  New files: system-group-kvm.conf, system-group-libvirt.conf,
  system-user-qemu.conf</changelog>
  <changelog author="jfehlig@suse.com" date="1605268800">- Add qemu user to kvm group</changelog>
  <changelog author="fcrozat@suse.com" date="1607083200">- Remove kvm group from hardware subpackage, since kvm is in its
  own subpackage (jsc#SLE-11629).</changelog>
  <changelog author="fbui@suse.com" date="1623153600">- Add default hardware group for 'sgx' enclave access
  Since udev v248, a default rule for /dev/sgx_enclave is provided to
  give rw access to the new group hopefully making 'sgx' the standard
  group name for such devices. [bsc#1190572]</changelog>
  <changelog author="msuchanek@suse.com" date="1631534400">- system-user-tss.conf: Remove group entry, not needed and did
  contain syntax errors (bsc#1190401).</changelog>
  <changelog author="dcermak@suse.com" date="1642161600">- Buildrequire the updated sysuser-tools which supports busybox-adduser as well</changelog>
</package>
<package pkgid="20eac6f56e75547e48483e65f431909fd61a41e1f86cfece6a9032d9b7ae0d21" name="system-users" arch="src">
  <version epoch="0" ver="20170617" rel="150400.24.2.1"/>
  <changelog author="kukuk@suse.de" date="1503316800">- user nobody: move usermod to %post, else it will be executed
  before the user is created.</changelog>
  <changelog author="sbrabec@suse.com" date="1505217600">- Add system-user-uuidd.conf (boo#1057937#c3).</changelog>
  <changelog author="kukuk@suse.de" date="1505390400">- udev needs groups kvm and lp: [bsc#1058703]
  - Add group kvm to system-group-hardware
  - Move group lp from system-user-lp to system-group-hardware</changelog>
  <changelog author="kukuk@suse.de" date="1505390401">- uuidd does not need group daemon, Copy&amp;Paste error.</changelog>
  <changelog author="kukuk@suse.de" date="1511956800">- Change home directory of user man to /var/lib/empty. Home
  directories below /var/cache are by definition insecure and a
  bad idea.</changelog>
  <changelog author="fbui@suse.com" date="1521633600">- Add "render" group in system-group-hardware (bsc#1085847)
  "uaccess" tag has been dropped from /dev/dri/renderD* and these devices
  now have 0666 permsions by default is owned by the render group.</changelog>
  <changelog author="msuchanek@suse.de" date="1548936000">- Add cpacfstats, ts-shell, and zkeyadm groups for s390-tools (bsc#1123730)</changelog>
  <changelog author="max@suse.com" date="1564574400">- Add system-user-tftp subpackage with tftp user and group and
  /srv/tftpboot as home directory [bsc#1143454].</changelog>
  <changelog author="msuchanek@suse.com" date="1565697600">- Remove s390 groups again. The s390-tools maintainer wants to add groups in
  s390-tools manually.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Add tss user for TPM tools (boo#1162360).</changelog>
  <changelog author="msuchanek@suse.com" date="1582027200">- Align /var/lib/tss permissions with trousers (boo#1162360).</changelog>
  <changelog author="kukuk@suse.com" date="1584705600">- Call usermod only if installed</changelog>
  <changelog author="kukuk@suse.com" date="1585137600">- Use test -x instead of -f</changelog>
  <changelog author="kukuk@suse.com" date="1598011200">- Don't add group nogroup to user nobody, as many daemons misuse
  'nogroup' as own group</changelog>
  <changelog author="jfehlig@suse.com" date="1605182400">- Add system account and groups for kvm, qemu, and libvirt
  (jsc#SLE-11629)
  New files: system-group-kvm.conf, system-group-libvirt.conf,
  system-user-qemu.conf</changelog>
  <changelog author="jfehlig@suse.com" date="1605268800">- Add qemu user to kvm group</changelog>
  <changelog author="fcrozat@suse.com" date="1607083200">- Remove kvm group from hardware subpackage, since kvm is in its
  own subpackage (jsc#SLE-11629).</changelog>
  <changelog author="fbui@suse.com" date="1623153600">- Add default hardware group for 'sgx' enclave access
  Since udev v248, a default rule for /dev/sgx_enclave is provided to
  give rw access to the new group hopefully making 'sgx' the standard
  group name for such devices. [bsc#1190572]</changelog>
  <changelog author="msuchanek@suse.com" date="1631534400">- system-user-tss.conf: Remove group entry, not needed and did
  contain syntax errors (bsc#1190401).</changelog>
  <changelog author="dcermak@suse.com" date="1642161600">- Buildrequire the updated sysuser-tools which supports busybox-adduser as well</changelog>
</package>
<package pkgid="136acb22080435e3f66f71c2ff1469ca7e5894e15ccea505407641bd97170c52" name="systemd" arch="aarch64">
  <version epoch="0" ver="249.16" rel="150400.8.35.5"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="260b4f5eb800d15a00e2c1355043cfe933bcf77b51f9e72ca096586ac765871e" name="systemd" arch="s390x">
  <version epoch="0" ver="249.16" rel="150400.8.35.5"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="ec7fb0719011cb2b2da827a0f4cc250c6026d3c8f42d9813a38a0e27dc7f94ad" name="systemd" arch="src">
  <version epoch="0" ver="249.16" rel="150400.8.35.5"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="80c5f10ad44463b9483c6baec12503809be4ce375c49094560dce7d144a727b7" name="systemd" arch="x86_64">
  <version epoch="0" ver="249.16" rel="150400.8.35.5"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="080015ea75e01d55bf5936076e47c8e539e476ea6cf0dc079b32d3e1e7ac7712" name="systemd" arch="aarch64">
  <version epoch="0" ver="249.17" rel="150400.8.40.1"/>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction</changelog>
</package>
<package pkgid="7357342188e4907b07435219f9b2b41debbbfe1016be1dae499cb314ad013642" name="systemd" arch="s390x">
  <version epoch="0" ver="249.17" rel="150400.8.40.1"/>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction</changelog>
</package>
<package pkgid="13d9e8ebae841a8efd47f97d519dd57f0b7a52ffa953fe3088c35da26767d9ab" name="systemd" arch="src">
  <version epoch="0" ver="249.17" rel="150400.8.40.1"/>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction</changelog>
</package>
<package pkgid="4f73398ca6b0c553e4ae797b47936b25362e95ceae5e4b3f2dc8b6d4afeab6f8" name="systemd" arch="x86_64">
  <version epoch="0" ver="249.17" rel="150400.8.40.1"/>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction</changelog>
</package>
<package pkgid="8f79b83306db115eec028f97d5fd6331c7d8753377acfe8aaff8af3965f2ded4" name="systemd-container" arch="aarch64">
  <version epoch="0" ver="249.16" rel="150400.8.35.5"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="e56d6443b91acef0b1f7ad76b93655e296b74e30fd853ca964a563f5306ad70c" name="systemd-container" arch="s390x">
  <version epoch="0" ver="249.16" rel="150400.8.35.5"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="26521b53c081a17d54d9f912672db1710cfa33b290ada613d291e7ce6f563642" name="systemd-container" arch="x86_64">
  <version epoch="0" ver="249.16" rel="150400.8.35.5"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="b3da5944e4c7189a1ba0d56beaa264603fd2087b530777d2f6c3a8625500a887" name="systemd-container" arch="aarch64">
  <version epoch="0" ver="249.17" rel="150400.8.40.1"/>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction</changelog>
</package>
<package pkgid="b944c3af8bd24114b25320463ba802a4b5309c875a6fe60c4cac495e62c83a63" name="systemd-container" arch="s390x">
  <version epoch="0" ver="249.17" rel="150400.8.40.1"/>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction</changelog>
</package>
<package pkgid="9642ec872046a982ae2d7016a94fc6610f29234045dcb714df3cca9a80594305" name="systemd-container" arch="x86_64">
  <version epoch="0" ver="249.17" rel="150400.8.40.1"/>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction</changelog>
</package>
<package pkgid="c2e07724a3df9e9e5bb094252ffd44fe80b20190098dbcde9762493e090f39c2" name="systemd-journal-remote" arch="aarch64">
  <version epoch="0" ver="249.16" rel="150400.8.35.5"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="c9e54c513053635de495a56b6713d4dbddd435dbc573a318cacc9a0d22eb9d3b" name="systemd-journal-remote" arch="s390x">
  <version epoch="0" ver="249.16" rel="150400.8.35.5"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="5c3d03e1f108d58083609007d1977cb09385037521c9dd202ddc67910e916af7" name="systemd-journal-remote" arch="x86_64">
  <version epoch="0" ver="249.16" rel="150400.8.35.5"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="99f64d6920174f47f026da317ce7abf2e69fbefd683d6b9d1e098a1a25c88e57" name="systemd-journal-remote" arch="aarch64">
  <version epoch="0" ver="249.17" rel="150400.8.40.1"/>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction</changelog>
</package>
<package pkgid="bf3612ba98aabdc955a7aac356e716779dd302795213126e084d91587ccefacc" name="systemd-journal-remote" arch="s390x">
  <version epoch="0" ver="249.17" rel="150400.8.40.1"/>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction</changelog>
</package>
<package pkgid="3c7e74f074e3bc462be8ef3bdc78b1f56e465997595daafccd62ce65e88f8b5f" name="systemd-journal-remote" arch="x86_64">
  <version epoch="0" ver="249.17" rel="150400.8.40.1"/>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction</changelog>
</package>
<package pkgid="2fa549363af56f6651d883cf4c83dcbcb71161bbdb8cfdb0e6affab310a18730" name="systemd-rpm-macros" arch="noarch">
  <version epoch="0" ver="14" rel="150000.7.36.1"/>
  <changelog author="alarrosa@suse.com" date="1614945600">- Add a %systemd_user_pre macro (boo#1183051, boo#1183012)
  It creates a /run/systemd/rpm/needs-user-preset/$service file for
  each new service being installed so %systemd_user_post can call
  `systemctl --global preset $service` properly for newly installed
  user services (even when it's introduced via a package update).</changelog>
  <changelog author="fbui@suse.com" date="1614945601">- Don't pass -f to rm to make sure that rm failures will be logged
  But also make sure to not abort the scriptlet prematurely if rm
  fails.</changelog>
  <changelog author="fbui@suse.com" date="1614945602">- Remove confusing --user before --global in %systemd_user_preun
  It's actually a backport of upstream commit
  28d36da64a7a23a55e8d0a139f2620384fd058b3
- Update a few comments</changelog>
  <changelog author="fbui@suse.com" date="1614945603">- Bump to version 7</changelog>
  <changelog author="fbui@suse.com" date="1621944000">- %sysusers_create_inline: use here-docs instead of echo (bsc#1186282)
  Upstream commit dd2490ae12ad1e1795ecbf8f8944b950da9c8d06.</changelog>
  <changelog author="fbui@suse.com" date="1626436800">- Introduce %sysusers_create_package
  %sysusers_create and %sysusers_create_inline are now deprecated and
  the new macro should be used instead.
  Upstream commit 07a7d4a0040d221ff09e527e91c112b4ffab1dba.</changelog>
  <changelog author="fbui@suse.com" date="1626436801">- Make use of "Suggests:" in %systemd_ordering
  Until libzypp supports "OrderWithRequires:", we need to specify a
  similar ordering constraint that can be understood by the dep solver
  as well. Hence the use of "Suggests:" in %systemd_ordering
  (workaround for bsc#1187332).</changelog>
  <changelog author="fbui@suse.com" date="1626436802">- Bump to version 8</changelog>
  <changelog author="fbui@suse.com" date="1637150400">- Introduce %_systemd_util_dir
  It's a backport of upstream commit 3bc66bfa0136e370a8f7b06c3b69a52f5636ef82.</changelog>
  <changelog author="fbui@suse.com" date="1637150401">- Bump version to 9</changelog>
  <changelog author="fbui@suse.com" date="1642593600">- %sysusers_create_inline was wrongly marked as deprecated
- %sysusers_create can be useful in certain cases and won't go away until we'll
  move to file triggers. So don't mark it as deprecated too</changelog>
  <changelog author="fbui@suse.com" date="1642593601">- Bump version to 10</changelog>
  <changelog author="fbui@suse.com" date="1646308800">- Make %_modprobedir point to /lib/modprobe.d (bsc#1196275 bsc#1196406)
  Until SLE15-SP3:QU2, /usr/lib/modprobe.d path was not supported by kmod and
  since SLE15-SP4 /etc/modprobe.d/README has references to /lib/modprobe.d...</changelog>
  <changelog author="fbui@suse.com" date="1646308801">- Bump version to 11</changelog>
  <changelog author="fbui@suse.com" date="1676548800">- Don't emit a warning when the flag file in /var/lib/systemd/migrated/ is not
  present as it's expected (bsc#1208079).</changelog>
  <changelog author="fbui@suse.com" date="1676548801">- Bump version to 12</changelog>
  <changelog author="fbui@suse.com" date="1683720000">- Fix %sysctl_apply() and %binfmt_apply() so they are disabled when called from
  a chroot (bsc#1211272)</changelog>
  <changelog author="fbui@suse.com" date="1683720001">- Bump version to 13</changelog>
  <changelog author="fbui@suse.com" date="1695988800">- Switch to `systemd-hwdb` tool when updating the HW database. It's been
  introduced in systemd v219 and replaces the deprecated command `udevadm hwdb`.</changelog>
  <changelog author="fbui@suse.com" date="1695988801">- Bump version to 14</changelog>
</package>
<package pkgid="17f9353c0df32c86581e2196d20955974dea5e1d5cdb7beb1e385ee2abbc926a" name="systemd-rpm-macros" arch="src">
  <version epoch="0" ver="14" rel="150000.7.36.1"/>
  <changelog author="alarrosa@suse.com" date="1614945600">- Add a %systemd_user_pre macro (boo#1183051, boo#1183012)
  It creates a /run/systemd/rpm/needs-user-preset/$service file for
  each new service being installed so %systemd_user_post can call
  `systemctl --global preset $service` properly for newly installed
  user services (even when it's introduced via a package update).</changelog>
  <changelog author="fbui@suse.com" date="1614945601">- Don't pass -f to rm to make sure that rm failures will be logged
  But also make sure to not abort the scriptlet prematurely if rm
  fails.</changelog>
  <changelog author="fbui@suse.com" date="1614945602">- Remove confusing --user before --global in %systemd_user_preun
  It's actually a backport of upstream commit
  28d36da64a7a23a55e8d0a139f2620384fd058b3
- Update a few comments</changelog>
  <changelog author="fbui@suse.com" date="1614945603">- Bump to version 7</changelog>
  <changelog author="fbui@suse.com" date="1621944000">- %sysusers_create_inline: use here-docs instead of echo (bsc#1186282)
  Upstream commit dd2490ae12ad1e1795ecbf8f8944b950da9c8d06.</changelog>
  <changelog author="fbui@suse.com" date="1626436800">- Introduce %sysusers_create_package
  %sysusers_create and %sysusers_create_inline are now deprecated and
  the new macro should be used instead.
  Upstream commit 07a7d4a0040d221ff09e527e91c112b4ffab1dba.</changelog>
  <changelog author="fbui@suse.com" date="1626436801">- Make use of "Suggests:" in %systemd_ordering
  Until libzypp supports "OrderWithRequires:", we need to specify a
  similar ordering constraint that can be understood by the dep solver
  as well. Hence the use of "Suggests:" in %systemd_ordering
  (workaround for bsc#1187332).</changelog>
  <changelog author="fbui@suse.com" date="1626436802">- Bump to version 8</changelog>
  <changelog author="fbui@suse.com" date="1637150400">- Introduce %_systemd_util_dir
  It's a backport of upstream commit 3bc66bfa0136e370a8f7b06c3b69a52f5636ef82.</changelog>
  <changelog author="fbui@suse.com" date="1637150401">- Bump version to 9</changelog>
  <changelog author="fbui@suse.com" date="1642593600">- %sysusers_create_inline was wrongly marked as deprecated
- %sysusers_create can be useful in certain cases and won't go away until we'll
  move to file triggers. So don't mark it as deprecated too</changelog>
  <changelog author="fbui@suse.com" date="1642593601">- Bump version to 10</changelog>
  <changelog author="fbui@suse.com" date="1646308800">- Make %_modprobedir point to /lib/modprobe.d (bsc#1196275 bsc#1196406)
  Until SLE15-SP3:QU2, /usr/lib/modprobe.d path was not supported by kmod and
  since SLE15-SP4 /etc/modprobe.d/README has references to /lib/modprobe.d...</changelog>
  <changelog author="fbui@suse.com" date="1646308801">- Bump version to 11</changelog>
  <changelog author="fbui@suse.com" date="1676548800">- Don't emit a warning when the flag file in /var/lib/systemd/migrated/ is not
  present as it's expected (bsc#1208079).</changelog>
  <changelog author="fbui@suse.com" date="1676548801">- Bump version to 12</changelog>
  <changelog author="fbui@suse.com" date="1683720000">- Fix %sysctl_apply() and %binfmt_apply() so they are disabled when called from
  a chroot (bsc#1211272)</changelog>
  <changelog author="fbui@suse.com" date="1683720001">- Bump version to 13</changelog>
  <changelog author="fbui@suse.com" date="1695988800">- Switch to `systemd-hwdb` tool when updating the HW database. It's been
  introduced in systemd v219 and replaces the deprecated command `udevadm hwdb`.</changelog>
  <changelog author="fbui@suse.com" date="1695988801">- Bump version to 14</changelog>
</package>
<package pkgid="02fa858628d596c9c1f2ff1145367a3090460f24cf9fc992d824aa19a2392d2f" name="systemd-sysvinit" arch="aarch64">
  <version epoch="0" ver="249.16" rel="150400.8.35.5"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="10ad3de75b55d509cfa7186470dd867c14278a20a6085e86ea43994fc51577ca" name="systemd-sysvinit" arch="s390x">
  <version epoch="0" ver="249.16" rel="150400.8.35.5"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="f723506ecd6cf622bfd8dad31cca3c45945f828470e2549663ffd1d79609e15a" name="systemd-sysvinit" arch="x86_64">
  <version epoch="0" ver="249.16" rel="150400.8.35.5"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="7253fda4952d7e0572563f4d73b04a69fa1ac65f3d724680d807fbfb7fbe6f1b" name="systemd-sysvinit" arch="aarch64">
  <version epoch="0" ver="249.17" rel="150400.8.40.1"/>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction</changelog>
</package>
<package pkgid="46a55ed4c39c08e4ae17b65ba30c4d81bbe424de694b9c8c6a21b9e39ea16755" name="systemd-sysvinit" arch="s390x">
  <version epoch="0" ver="249.17" rel="150400.8.40.1"/>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction</changelog>
</package>
<package pkgid="a33fc9dbbbfcfbe38a0afa2c0af809478dc38eb905fdc45361ad18eb3af47463" name="systemd-sysvinit" arch="x86_64">
  <version epoch="0" ver="249.17" rel="150400.8.40.1"/>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction</changelog>
</package>
<package pkgid="386096ce0865fd6b71aef053d7e8a7eeb69649cf6c6e450b3d18d9efeecdf67a" name="tar" arch="aarch64">
  <version epoch="0" ver="1.34" rel="150000.3.34.1"/>
  <changelog author="kstreitova@suse.com" date="1515067200">- add tar-1.30-tests-difflink.patch to fix difflink.at test
  (https://www.mail-archive.com/bug-tar@gnu.org/msg05440.html)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1526040000">- add tar-1.30-tests_dirrem_race.patch to fix race in dirrem01 and
  dirrem02 tests that were passing/failing randomly because of that
- run spec-cleaner
- renumber patches</changelog>
  <changelog author="kstreitova@suse.com" date="1550145600">- update to version 1.31
  * Fix heap-buffer-overrun with --one-top-level, bug introduced
    with the addition of that option in 1.28
  * Support for zstd compression
  * New option '--zstd' instructs tar to use zstd as compression
    program. When listing, extractng and comparing, zstd compressed
    archives are recognized automatically. When '-a' option is in
    effect, zstd compression is selected if the destination archive
    name ends in '.zst' or '.tzst'.
  * The -K option interacts properly with member names given in the
    command line. Names of members to extract can be specified along
    with the "-K NAME" option. In this case, tar will extract NAME
    and those of named members that appear in the archive after it,
    which is consistent with the semantics of the option. Previous
    versions of tar extracted NAME, those of named members that
    appeared before it, and everything after it.
  * Fix CVE-2018-20482 - When creating archives with the --sparse
    option, previous versions of tar would loop endlessly if a
    sparse file had been truncated while being archived.
- remove the following patches (upstreamed)
  * tar-1.30-tests-difflink.patch
  * tar-1.30-tests_dirrem_race.patch
- refresh add_readme-tests.patch
- add tar-1.31-tests_dirrem.patch to fix expected output in dirrem
  tests
- add tar-1.31-racy_compress_tests.patch to fix compression tests</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1552651200">- Remove libattr-devel from buildrequires, tar no longer uses
  it but finds xattr functions in libc.</changelog>
  <changelog author="kstreitova@suse.com" date="1553515200">- update to version 1.32
  * Fix the use of --checkpoint without explicit --checkpoint-action
  * Fix extraction with the -U option
  * Fix iconv usage on BSD-based systems
  * Fix possible NULL dereference (savannah bug #55369)
    [bsc#1130496] [CVE-2019-9923]
  * Improve the testsuite
- remove tar-1.31-tests_dirrem.patch and
  tar-1.31-racy_compress_tests.patch that are no longer needed
  (applied usptream)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585915200">- Drop Requires(pre) info in the preamble: the main package does
  not contain any info files, and has not even a pre script. The
  - doc subpackage already has the correct deps.</changelog>
  <changelog author="lnussel@suse.de" date="1603108800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1610193600">- GNU tar 1.33:
  * POSIX extended format headers do not include PID by default
  * --delay-directory-restore works for archives with reversed
    member ordering
  * Fix extraction of a symbolic link hardlinked to another
    symbolic link
  * Wildcards in exclude-vcs-ignore mode don't match slash
  * Fix the --no-overwrite-dir option
  * Fix handling of chained renames in incremental backups
  * Link counting works for file names supplied with -T
  * Accept only position-sensitive (file-selection) options in file
    list files
- remove deprecated texinfo packaging macros</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1613304000">- GNU tar 1.34:
  * Fix extraction over pipe
  * Fix memory leak in read_header
  * Fix extraction when . and .. are unreadable
  * Gracefully handle duplicate symlinks when extracting
  * Re-initialize supplementary groups when switching to user
    privileges</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1623240000">- Link /var/lib/tests/tar/bin/genfile as Position-Independent Executable
  (bsc#1184124).
  + tar-PIE.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633694400">- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  * bsc#1181131, CVE-2021-20193
  * bsc#1120610</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1634212800">- tests-skip-time01-on-32bit-time_t.patch: Add patch to skip test
  'tests/time01.at' on platforms with 32-bit time_t for now.
- tar.spec: Reference it.
  (%check): Output the testsuite.log in case the testsuite failed.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1655726400">- Fix race condition while creating intermediate subdirectories,
  bsc#1200657
  * bsc1200657.patch</changelog>
  <changelog author="sflees@suse.de" date="1660737600">- bsc1200657.patch was previously incomplete leading to deadlocks
  * bsc#1202436
  * bsc1200657.patch updated</changelog>
  <changelog author="danilo.spinella@suse.com" date="1667217600">- Fix unexpected inconsistency when making directory, bsc#1203600
  * tar-avoid-overflow-in-symlinks-tests.patch
  * tar-fix-extract-unlink.patch
- Update race condition fix, bsc#1200657
  * tar-fix-race-condition.patch
- Refresh bsc1200657.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1671710400">- Fix hang when unpacking test tarball, bsc#1202436
  * bsc1202436.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676376000">- Fix CVE-2022-48303, tar has a one-byte out-of-bounds read that
  results in use of uninitialized memory for a conditional jump
  (CVE-2022-48303, bsc#1207753)
  * fix-CVE-2022-48303.patch
- Fix hang when unpacking test tarball, bsc#1202436
  * remove bsc1202436.patch
  * bsc1202436-1.patch
  * bsc1202436-1.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1702468800">- Fix CVE-2023-39804, Incorrectly handled extension attributes in
  PAX archives can lead to a crash, bsc#1217969
  * fix-CVE-2023-39804.patch</changelog>
</package>
<package pkgid="a5728adc56d2ae821087c96cad3219f9da1a3312103a2d7c2f515722887ad0d8" name="tar" arch="s390x">
  <version epoch="0" ver="1.34" rel="150000.3.34.1"/>
  <changelog author="kstreitova@suse.com" date="1515067200">- add tar-1.30-tests-difflink.patch to fix difflink.at test
  (https://www.mail-archive.com/bug-tar@gnu.org/msg05440.html)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1526040000">- add tar-1.30-tests_dirrem_race.patch to fix race in dirrem01 and
  dirrem02 tests that were passing/failing randomly because of that
- run spec-cleaner
- renumber patches</changelog>
  <changelog author="kstreitova@suse.com" date="1550145600">- update to version 1.31
  * Fix heap-buffer-overrun with --one-top-level, bug introduced
    with the addition of that option in 1.28
  * Support for zstd compression
  * New option '--zstd' instructs tar to use zstd as compression
    program. When listing, extractng and comparing, zstd compressed
    archives are recognized automatically. When '-a' option is in
    effect, zstd compression is selected if the destination archive
    name ends in '.zst' or '.tzst'.
  * The -K option interacts properly with member names given in the
    command line. Names of members to extract can be specified along
    with the "-K NAME" option. In this case, tar will extract NAME
    and those of named members that appear in the archive after it,
    which is consistent with the semantics of the option. Previous
    versions of tar extracted NAME, those of named members that
    appeared before it, and everything after it.
  * Fix CVE-2018-20482 - When creating archives with the --sparse
    option, previous versions of tar would loop endlessly if a
    sparse file had been truncated while being archived.
- remove the following patches (upstreamed)
  * tar-1.30-tests-difflink.patch
  * tar-1.30-tests_dirrem_race.patch
- refresh add_readme-tests.patch
- add tar-1.31-tests_dirrem.patch to fix expected output in dirrem
  tests
- add tar-1.31-racy_compress_tests.patch to fix compression tests</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1552651200">- Remove libattr-devel from buildrequires, tar no longer uses
  it but finds xattr functions in libc.</changelog>
  <changelog author="kstreitova@suse.com" date="1553515200">- update to version 1.32
  * Fix the use of --checkpoint without explicit --checkpoint-action
  * Fix extraction with the -U option
  * Fix iconv usage on BSD-based systems
  * Fix possible NULL dereference (savannah bug #55369)
    [bsc#1130496] [CVE-2019-9923]
  * Improve the testsuite
- remove tar-1.31-tests_dirrem.patch and
  tar-1.31-racy_compress_tests.patch that are no longer needed
  (applied usptream)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585915200">- Drop Requires(pre) info in the preamble: the main package does
  not contain any info files, and has not even a pre script. The
  - doc subpackage already has the correct deps.</changelog>
  <changelog author="lnussel@suse.de" date="1603108800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1610193600">- GNU tar 1.33:
  * POSIX extended format headers do not include PID by default
  * --delay-directory-restore works for archives with reversed
    member ordering
  * Fix extraction of a symbolic link hardlinked to another
    symbolic link
  * Wildcards in exclude-vcs-ignore mode don't match slash
  * Fix the --no-overwrite-dir option
  * Fix handling of chained renames in incremental backups
  * Link counting works for file names supplied with -T
  * Accept only position-sensitive (file-selection) options in file
    list files
- remove deprecated texinfo packaging macros</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1613304000">- GNU tar 1.34:
  * Fix extraction over pipe
  * Fix memory leak in read_header
  * Fix extraction when . and .. are unreadable
  * Gracefully handle duplicate symlinks when extracting
  * Re-initialize supplementary groups when switching to user
    privileges</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1623240000">- Link /var/lib/tests/tar/bin/genfile as Position-Independent Executable
  (bsc#1184124).
  + tar-PIE.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633694400">- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  * bsc#1181131, CVE-2021-20193
  * bsc#1120610</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1634212800">- tests-skip-time01-on-32bit-time_t.patch: Add patch to skip test
  'tests/time01.at' on platforms with 32-bit time_t for now.
- tar.spec: Reference it.
  (%check): Output the testsuite.log in case the testsuite failed.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1655726400">- Fix race condition while creating intermediate subdirectories,
  bsc#1200657
  * bsc1200657.patch</changelog>
  <changelog author="sflees@suse.de" date="1660737600">- bsc1200657.patch was previously incomplete leading to deadlocks
  * bsc#1202436
  * bsc1200657.patch updated</changelog>
  <changelog author="danilo.spinella@suse.com" date="1667217600">- Fix unexpected inconsistency when making directory, bsc#1203600
  * tar-avoid-overflow-in-symlinks-tests.patch
  * tar-fix-extract-unlink.patch
- Update race condition fix, bsc#1200657
  * tar-fix-race-condition.patch
- Refresh bsc1200657.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1671710400">- Fix hang when unpacking test tarball, bsc#1202436
  * bsc1202436.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676376000">- Fix CVE-2022-48303, tar has a one-byte out-of-bounds read that
  results in use of uninitialized memory for a conditional jump
  (CVE-2022-48303, bsc#1207753)
  * fix-CVE-2022-48303.patch
- Fix hang when unpacking test tarball, bsc#1202436
  * remove bsc1202436.patch
  * bsc1202436-1.patch
  * bsc1202436-1.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1702468800">- Fix CVE-2023-39804, Incorrectly handled extension attributes in
  PAX archives can lead to a crash, bsc#1217969
  * fix-CVE-2023-39804.patch</changelog>
</package>
<package pkgid="b7c5cc96e92f2b16e642b31228c81ff9dcf2d6d37cbab8868983e672d0f346b7" name="tar" arch="src">
  <version epoch="0" ver="1.34" rel="150000.3.34.1"/>
  <changelog author="kstreitova@suse.com" date="1515067200">- add tar-1.30-tests-difflink.patch to fix difflink.at test
  (https://www.mail-archive.com/bug-tar@gnu.org/msg05440.html)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1526040000">- add tar-1.30-tests_dirrem_race.patch to fix race in dirrem01 and
  dirrem02 tests that were passing/failing randomly because of that
- run spec-cleaner
- renumber patches</changelog>
  <changelog author="kstreitova@suse.com" date="1550145600">- update to version 1.31
  * Fix heap-buffer-overrun with --one-top-level, bug introduced
    with the addition of that option in 1.28
  * Support for zstd compression
  * New option '--zstd' instructs tar to use zstd as compression
    program. When listing, extractng and comparing, zstd compressed
    archives are recognized automatically. When '-a' option is in
    effect, zstd compression is selected if the destination archive
    name ends in '.zst' or '.tzst'.
  * The -K option interacts properly with member names given in the
    command line. Names of members to extract can be specified along
    with the "-K NAME" option. In this case, tar will extract NAME
    and those of named members that appear in the archive after it,
    which is consistent with the semantics of the option. Previous
    versions of tar extracted NAME, those of named members that
    appeared before it, and everything after it.
  * Fix CVE-2018-20482 - When creating archives with the --sparse
    option, previous versions of tar would loop endlessly if a
    sparse file had been truncated while being archived.
- remove the following patches (upstreamed)
  * tar-1.30-tests-difflink.patch
  * tar-1.30-tests_dirrem_race.patch
- refresh add_readme-tests.patch
- add tar-1.31-tests_dirrem.patch to fix expected output in dirrem
  tests
- add tar-1.31-racy_compress_tests.patch to fix compression tests</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1552651200">- Remove libattr-devel from buildrequires, tar no longer uses
  it but finds xattr functions in libc.</changelog>
  <changelog author="kstreitova@suse.com" date="1553515200">- update to version 1.32
  * Fix the use of --checkpoint without explicit --checkpoint-action
  * Fix extraction with the -U option
  * Fix iconv usage on BSD-based systems
  * Fix possible NULL dereference (savannah bug #55369)
    [bsc#1130496] [CVE-2019-9923]
  * Improve the testsuite
- remove tar-1.31-tests_dirrem.patch and
  tar-1.31-racy_compress_tests.patch that are no longer needed
  (applied usptream)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585915200">- Drop Requires(pre) info in the preamble: the main package does
  not contain any info files, and has not even a pre script. The
  - doc subpackage already has the correct deps.</changelog>
  <changelog author="lnussel@suse.de" date="1603108800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1610193600">- GNU tar 1.33:
  * POSIX extended format headers do not include PID by default
  * --delay-directory-restore works for archives with reversed
    member ordering
  * Fix extraction of a symbolic link hardlinked to another
    symbolic link
  * Wildcards in exclude-vcs-ignore mode don't match slash
  * Fix the --no-overwrite-dir option
  * Fix handling of chained renames in incremental backups
  * Link counting works for file names supplied with -T
  * Accept only position-sensitive (file-selection) options in file
    list files
- remove deprecated texinfo packaging macros</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1613304000">- GNU tar 1.34:
  * Fix extraction over pipe
  * Fix memory leak in read_header
  * Fix extraction when . and .. are unreadable
  * Gracefully handle duplicate symlinks when extracting
  * Re-initialize supplementary groups when switching to user
    privileges</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1623240000">- Link /var/lib/tests/tar/bin/genfile as Position-Independent Executable
  (bsc#1184124).
  + tar-PIE.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633694400">- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  * bsc#1181131, CVE-2021-20193
  * bsc#1120610</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1634212800">- tests-skip-time01-on-32bit-time_t.patch: Add patch to skip test
  'tests/time01.at' on platforms with 32-bit time_t for now.
- tar.spec: Reference it.
  (%check): Output the testsuite.log in case the testsuite failed.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1655726400">- Fix race condition while creating intermediate subdirectories,
  bsc#1200657
  * bsc1200657.patch</changelog>
  <changelog author="sflees@suse.de" date="1660737600">- bsc1200657.patch was previously incomplete leading to deadlocks
  * bsc#1202436
  * bsc1200657.patch updated</changelog>
  <changelog author="danilo.spinella@suse.com" date="1667217600">- Fix unexpected inconsistency when making directory, bsc#1203600
  * tar-avoid-overflow-in-symlinks-tests.patch
  * tar-fix-extract-unlink.patch
- Update race condition fix, bsc#1200657
  * tar-fix-race-condition.patch
- Refresh bsc1200657.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1671710400">- Fix hang when unpacking test tarball, bsc#1202436
  * bsc1202436.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676376000">- Fix CVE-2022-48303, tar has a one-byte out-of-bounds read that
  results in use of uninitialized memory for a conditional jump
  (CVE-2022-48303, bsc#1207753)
  * fix-CVE-2022-48303.patch
- Fix hang when unpacking test tarball, bsc#1202436
  * remove bsc1202436.patch
  * bsc1202436-1.patch
  * bsc1202436-1.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1702468800">- Fix CVE-2023-39804, Incorrectly handled extension attributes in
  PAX archives can lead to a crash, bsc#1217969
  * fix-CVE-2023-39804.patch</changelog>
</package>
<package pkgid="0a3d1c86114063f000ac325aae5ab1d8978e94e3fbbe275523dd869b4d012264" name="tar" arch="x86_64">
  <version epoch="0" ver="1.34" rel="150000.3.34.1"/>
  <changelog author="kstreitova@suse.com" date="1515067200">- add tar-1.30-tests-difflink.patch to fix difflink.at test
  (https://www.mail-archive.com/bug-tar@gnu.org/msg05440.html)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1526040000">- add tar-1.30-tests_dirrem_race.patch to fix race in dirrem01 and
  dirrem02 tests that were passing/failing randomly because of that
- run spec-cleaner
- renumber patches</changelog>
  <changelog author="kstreitova@suse.com" date="1550145600">- update to version 1.31
  * Fix heap-buffer-overrun with --one-top-level, bug introduced
    with the addition of that option in 1.28
  * Support for zstd compression
  * New option '--zstd' instructs tar to use zstd as compression
    program. When listing, extractng and comparing, zstd compressed
    archives are recognized automatically. When '-a' option is in
    effect, zstd compression is selected if the destination archive
    name ends in '.zst' or '.tzst'.
  * The -K option interacts properly with member names given in the
    command line. Names of members to extract can be specified along
    with the "-K NAME" option. In this case, tar will extract NAME
    and those of named members that appear in the archive after it,
    which is consistent with the semantics of the option. Previous
    versions of tar extracted NAME, those of named members that
    appeared before it, and everything after it.
  * Fix CVE-2018-20482 - When creating archives with the --sparse
    option, previous versions of tar would loop endlessly if a
    sparse file had been truncated while being archived.
- remove the following patches (upstreamed)
  * tar-1.30-tests-difflink.patch
  * tar-1.30-tests_dirrem_race.patch
- refresh add_readme-tests.patch
- add tar-1.31-tests_dirrem.patch to fix expected output in dirrem
  tests
- add tar-1.31-racy_compress_tests.patch to fix compression tests</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1552651200">- Remove libattr-devel from buildrequires, tar no longer uses
  it but finds xattr functions in libc.</changelog>
  <changelog author="kstreitova@suse.com" date="1553515200">- update to version 1.32
  * Fix the use of --checkpoint without explicit --checkpoint-action
  * Fix extraction with the -U option
  * Fix iconv usage on BSD-based systems
  * Fix possible NULL dereference (savannah bug #55369)
    [bsc#1130496] [CVE-2019-9923]
  * Improve the testsuite
- remove tar-1.31-tests_dirrem.patch and
  tar-1.31-racy_compress_tests.patch that are no longer needed
  (applied usptream)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585915200">- Drop Requires(pre) info in the preamble: the main package does
  not contain any info files, and has not even a pre script. The
  - doc subpackage already has the correct deps.</changelog>
  <changelog author="lnussel@suse.de" date="1603108800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1610193600">- GNU tar 1.33:
  * POSIX extended format headers do not include PID by default
  * --delay-directory-restore works for archives with reversed
    member ordering
  * Fix extraction of a symbolic link hardlinked to another
    symbolic link
  * Wildcards in exclude-vcs-ignore mode don't match slash
  * Fix the --no-overwrite-dir option
  * Fix handling of chained renames in incremental backups
  * Link counting works for file names supplied with -T
  * Accept only position-sensitive (file-selection) options in file
    list files
- remove deprecated texinfo packaging macros</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1613304000">- GNU tar 1.34:
  * Fix extraction over pipe
  * Fix memory leak in read_header
  * Fix extraction when . and .. are unreadable
  * Gracefully handle duplicate symlinks when extracting
  * Re-initialize supplementary groups when switching to user
    privileges</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1623240000">- Link /var/lib/tests/tar/bin/genfile as Position-Independent Executable
  (bsc#1184124).
  + tar-PIE.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633694400">- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  * bsc#1181131, CVE-2021-20193
  * bsc#1120610</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1634212800">- tests-skip-time01-on-32bit-time_t.patch: Add patch to skip test
  'tests/time01.at' on platforms with 32-bit time_t for now.
- tar.spec: Reference it.
  (%check): Output the testsuite.log in case the testsuite failed.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1655726400">- Fix race condition while creating intermediate subdirectories,
  bsc#1200657
  * bsc1200657.patch</changelog>
  <changelog author="sflees@suse.de" date="1660737600">- bsc1200657.patch was previously incomplete leading to deadlocks
  * bsc#1202436
  * bsc1200657.patch updated</changelog>
  <changelog author="danilo.spinella@suse.com" date="1667217600">- Fix unexpected inconsistency when making directory, bsc#1203600
  * tar-avoid-overflow-in-symlinks-tests.patch
  * tar-fix-extract-unlink.patch
- Update race condition fix, bsc#1200657
  * tar-fix-race-condition.patch
- Refresh bsc1200657.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1671710400">- Fix hang when unpacking test tarball, bsc#1202436
  * bsc1202436.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676376000">- Fix CVE-2022-48303, tar has a one-byte out-of-bounds read that
  results in use of uninitialized memory for a conditional jump
  (CVE-2022-48303, bsc#1207753)
  * fix-CVE-2022-48303.patch
- Fix hang when unpacking test tarball, bsc#1202436
  * remove bsc1202436.patch
  * bsc1202436-1.patch
  * bsc1202436-1.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1702468800">- Fix CVE-2023-39804, Incorrectly handled extension attributes in
  PAX archives can lead to a crash, bsc#1217969
  * fix-CVE-2023-39804.patch</changelog>
</package>
<package pkgid="709b069c0656c51e5c036ffdc914c09907bd31262e980717a8f97f83b1ee07e7" name="terminfo" arch="aarch64">
  <version epoch="0" ver="6.1" rel="150000.5.20.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()</changelog>
</package>
<package pkgid="8db99ebeb25164c3864639e26b5d077309e84ff98ff734e0a6e759e19e3f1537" name="terminfo" arch="s390x">
  <version epoch="0" ver="6.1" rel="150000.5.20.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()</changelog>
</package>
<package pkgid="fe5aba0f14b3476c7894ff193bd9db41514b007765f8c7b2869b985c82761f42" name="terminfo" arch="x86_64">
  <version epoch="0" ver="6.1" rel="150000.5.20.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()</changelog>
</package>
<package pkgid="1e731be371b0605486f2b2c0224d0e4716b9c64f5a20c8682588015089ed7389" name="terminfo-base" arch="aarch64">
  <version epoch="0" ver="6.1" rel="150000.5.20.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()</changelog>
</package>
<package pkgid="031ba41ea5db384fa4af4adcc069709acdf898964be097a8aed02326216c0889" name="terminfo-base" arch="s390x">
  <version epoch="0" ver="6.1" rel="150000.5.20.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()</changelog>
</package>
<package pkgid="1ec3e11394e42e3d5d6a1be21e629516dce7fde46d25bc04faf0a305aaec4d96" name="terminfo-base" arch="x86_64">
  <version epoch="0" ver="6.1" rel="150000.5.20.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()</changelog>
</package>
<package pkgid="11957073f86d86c106b0583cb063a508ff080150e4471cca5203201b5bbcbc59" name="tiff" arch="src">
  <version epoch="0" ver="4.0.9" rel="150000.45.32.1"/>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
</package>
<package pkgid="74e8408cbb11f894da7f38ccc18c9ffe7df7319cfd3891676a4d1fa6b6caa323" name="tiff" arch="src">
  <version epoch="0" ver="4.0.9" rel="150000.45.35.1"/>
  <changelog author="pgajdos@suse.com" date="1542024000">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
</package>
<package pkgid="4d403f02d45eb24c8b4dc65e259b06a2c286ef78d4e2679c55431f71d655ab62" name="tiff" arch="src">
  <version epoch="0" ver="4.0.9" rel="150000.45.38.1"/>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
</package>
<package pkgid="4adfe2dd9692ba22367a7fa1ef5bcc136d5a50d93422de84284dcb2d96bbff0e" name="traceroute" arch="aarch64">
  <version epoch="0" ver="2.0.21" rel="150000.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1359288000">- Initial version. obsoletes the version found in package net-tools
- This is the implementation used by the rest of the planet, not
  the one found in SUSE but Fedora, RHEL, Debian, Mandriva, Gentoo, Ubuntu.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1362657600">- The previous incarnation of traceroute had a traceroute6
  binary, provide a compatibility symlink for it.
- Build with full RELRO.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1409486400">- version 2.0.20
  * Describe all complementary long options in the man page
  * Use correct service name for AS lookups
  * Avoid some rare case null dereference
  * Improve expiration check for simultaneous probes
- traceroute-secure_getenv.patch use secure_getenv
- traceroute-autotools.patch refresh</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1437048000">- Version 2.0.21
  * fix -F --mtu with current kernel versions
- traceroute-autotools.patch refresh and add -fvisibility=hidden
  to CFLAGS.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1437048001">- traceroute-autotools.patch: switch to non-recursive automake
  without libtool.</changelog>
  <changelog author="pgajdos@suse.com" date="1700740800">- security update
- added patches
  fix CVE-2023-46316 [bsc#1216591], wrapper scripts do not properly parse command lines
  + traceroute-CVE-2023-46316.patch</changelog>
</package>
<package pkgid="65a53d77a26e5e584fd7d69ee371cbdfab6174cba5fa38004b962c815793c333" name="traceroute" arch="s390x">
  <version epoch="0" ver="2.0.21" rel="150000.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1359288000">- Initial version. obsoletes the version found in package net-tools
- This is the implementation used by the rest of the planet, not
  the one found in SUSE but Fedora, RHEL, Debian, Mandriva, Gentoo, Ubuntu.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1362657600">- The previous incarnation of traceroute had a traceroute6
  binary, provide a compatibility symlink for it.
- Build with full RELRO.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1409486400">- version 2.0.20
  * Describe all complementary long options in the man page
  * Use correct service name for AS lookups
  * Avoid some rare case null dereference
  * Improve expiration check for simultaneous probes
- traceroute-secure_getenv.patch use secure_getenv
- traceroute-autotools.patch refresh</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1437048000">- Version 2.0.21
  * fix -F --mtu with current kernel versions
- traceroute-autotools.patch refresh and add -fvisibility=hidden
  to CFLAGS.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1437048001">- traceroute-autotools.patch: switch to non-recursive automake
  without libtool.</changelog>
  <changelog author="pgajdos@suse.com" date="1700740800">- security update
- added patches
  fix CVE-2023-46316 [bsc#1216591], wrapper scripts do not properly parse command lines
  + traceroute-CVE-2023-46316.patch</changelog>
</package>
<package pkgid="50d76ff4bb916df82fb5f16f982d6a865e6c205f834ed5254423d432056e34bf" name="traceroute" arch="src">
  <version epoch="0" ver="2.0.21" rel="150000.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1359288000">- Initial version. obsoletes the version found in package net-tools
- This is the implementation used by the rest of the planet, not
  the one found in SUSE but Fedora, RHEL, Debian, Mandriva, Gentoo, Ubuntu.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1362657600">- The previous incarnation of traceroute had a traceroute6
  binary, provide a compatibility symlink for it.
- Build with full RELRO.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1409486400">- version 2.0.20
  * Describe all complementary long options in the man page
  * Use correct service name for AS lookups
  * Avoid some rare case null dereference
  * Improve expiration check for simultaneous probes
- traceroute-secure_getenv.patch use secure_getenv
- traceroute-autotools.patch refresh</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1437048000">- Version 2.0.21
  * fix -F --mtu with current kernel versions
- traceroute-autotools.patch refresh and add -fvisibility=hidden
  to CFLAGS.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1437048001">- traceroute-autotools.patch: switch to non-recursive automake
  without libtool.</changelog>
  <changelog author="pgajdos@suse.com" date="1700740800">- security update
- added patches
  fix CVE-2023-46316 [bsc#1216591], wrapper scripts do not properly parse command lines
  + traceroute-CVE-2023-46316.patch</changelog>
</package>
<package pkgid="54fc789d424da2a378c4f51ce3fde9c3785a80eb2bc51efa9c0e928579353072" name="traceroute" arch="x86_64">
  <version epoch="0" ver="2.0.21" rel="150000.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1359288000">- Initial version. obsoletes the version found in package net-tools
- This is the implementation used by the rest of the planet, not
  the one found in SUSE but Fedora, RHEL, Debian, Mandriva, Gentoo, Ubuntu.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1362657600">- The previous incarnation of traceroute had a traceroute6
  binary, provide a compatibility symlink for it.
- Build with full RELRO.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1409486400">- version 2.0.20
  * Describe all complementary long options in the man page
  * Use correct service name for AS lookups
  * Avoid some rare case null dereference
  * Improve expiration check for simultaneous probes
- traceroute-secure_getenv.patch use secure_getenv
- traceroute-autotools.patch refresh</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1437048000">- Version 2.0.21
  * fix -F --mtu with current kernel versions
- traceroute-autotools.patch refresh and add -fvisibility=hidden
  to CFLAGS.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1437048001">- traceroute-autotools.patch: switch to non-recursive automake
  without libtool.</changelog>
  <changelog author="pgajdos@suse.com" date="1700740800">- security update
- added patches
  fix CVE-2023-46316 [bsc#1216591], wrapper scripts do not properly parse command lines
  + traceroute-CVE-2023-46316.patch</changelog>
</package>
<package pkgid="cdf2d5fa14887eef35af3a64a0353332f290bd129932988b63e9ce3a9b466edd" name="transactional-update" arch="aarch64">
  <version epoch="0" ver="4.1.6" rel="150500.3.3.1"/>
  <changelog author="iforster@suse.com" date="1631880000">- Version 3.5.5
  - t-u: Use tukit for SUSEConnect call [bsc#1190574]
    Correctly registers repositories</changelog>
  <changelog author="iforster@suse.com" date="1632398400">- Version 3.5.6
  - tukit: Add S/390 bootloader support [bsc#1189807]
  - t-u: support purge-kernels with t-u patch [bsc#1190788]</changelog>
  <changelog author="iforster@suse.com" date="1634040000">- Version 3.5.7
  Various fixes affecting Salt support:
  - t-u: Don't squash stderr messages into stdout
  - t-u: Correctly handle case when the snapshot has been deleted due to
    using --drop-if-no-change: Don't show reboot messages and avoid an awk
    error message [bsc#1191475]
  - tukit: Make inotify handler less sensitive / ignore more directories
    [bsc#1191475]</changelog>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]
  - Fixed selfupdate
  - Code cleanup</changelog>
  <changelog author="iforster@suse.com" date="1651579200">- Version 4.0.0~rc3
  - Add Snapshot interface
  - Reworked signal handling: All public signals are sent from the
    main thread now, keeping the same sender for everything
  - Implement D-Bus call "Execute" for Transactions
  - Implement interface for listing Snapshots
  - Implement Reboot interface
  - Fix bug when using --continue on old snapshots
  - Fix hypothetical integer overflow in snapshot list [bsc#1196826]
  - Fix wrong sort order in status command
    [gh#openSUSE/transactional-update#80]</changelog>
  <changelog author="iforster@suse.com" date="1652788800">- Version 4.0.0~rc4
  - Fix building with GCC 12
  - Fix stack overflow with very long commands / ids [bsc#1196149]
  - Use separate mount namespace for chroot, allowing overwriting
    the bind mounts from the update environment - this could have
    lead to data loss of the bind mount previously
  - Fix C error and exception handling for snapshots</changelog>
  <changelog author="schubi@suse.com" date="1655812800">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="iforster@suse.com" date="1659441600">- Version 4.0.0
  - Last minute interface change: Changed "List" method of Snapshot D-Bus
    interface to return a map of properties instead of a comma separated
    list of strings; this will allow retrieving the snapshot properties
    even if they contain a comma in their value [boo#1202147]
  - Remove "Snapshot.hpp" as a public API for now - all public
    functionality is part of SnapshotManager.hpp
  - Add header file documentation for SnapshotManager.hpp
  - Add method to delete snapshot
    [gh#openSUSE/transactional-update#52]
  - Allow setting description of snapshot
    [gh#openSUSE/transactional-update#55]
  - create_dirs_from_rpmdb: set SELinux file context of missing directories
    [gh#openSUSE/transactional-update#84], [bsc#1197242]
  - Fix broken logrotate due to typo in config file
    [gh#openSUSE/transactional-update#87]
  - create_dirs_from_rpmdb: Fix handling return code of create_dirs()
    [gh#openSUSE/transactional-update#86]
  - Fix broken "shell" prompt after selfupdate
  - Add documented D-Bus interface definition files
  - Add tukit_sm_get_current and tukit_sm_get_default to C interface
  - Fixed typos</changelog>
  <changelog author="fvogt@suse.com" date="1661169600">- Version 4.0.1
  - create_dirs_from_rpmdb: Just warn if no default SELinux context found
    [gh#openSUSE/transactional-update#88], [bsc#1188215]
  - create_dirs_from_rpmdb: Don't update the rpmdb cookie on failure
    [gh#openSUSE/transactional-update#88]
  - Handle directories owned by multiple packages
    [gh#openSUSE/transactional-update#90], [bsc#1188215]</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration of logrotate configuration to /usr/etc: Saving user
  changed configuration files in /etc and restoring them while
  an RPM update.</changelog>
  <changelog author="iforster@suse.com" date="1664539200">- Version 4.1.0
  - t-u: Add a "setup-kdump" command; implements [jsc#PED-1441]
  - Export TRANSACTIONAL_UPDATE_ROOT (the path to the snapshot) in
    the update environment; implements [jsc#PED-1078]
  - Add support for "notify" reboot method for desktop use
    [gh#openSUSE/transactional-update#93]
  - Fix kdump initrd recreation detection; the check was performed in the
    active snapshot instead of the target snapshot
  - Document register command [bsc#1202900]
  - Avoid unnecessary snapshots for register command [bsc#1202901]
  - Various optimizations for register command
  - Remove bogus error message when triggering reboot
  - Rework /etc overlay documentation in "The Transactional Update Guide"
  - Fix incorrect manpage formatting
  - Remove leftover "salt" reboot method in configuration example file
  - Replace deprecated std::mem_fn with lambdas</changelog>
  <changelog author="iforster@suse.com" date="1674043200">- Version 4.1.1
  - Mount user specific binddirs last: Prevously the internal mounts would
    potentially overwrite user bind mounts [boo#1205011]
  - selinux: Relabel shadowed /var files during update to make sure they
    don't interfere with the update [boo#1205937]
  - Clean up /var/lib/overlay more aggressively [boo#1206947]
  - tukit: Merge /etc overlay into parent if --discard is used together
    with --continue - previously the files were incorrectly always merged
    with the currently running system
  - status: do not execute the status command if experimental
  - Don't delete created mount point dirs any more
  - Small code optimizations</changelog>
  <changelog author="iforster@suse.com" date="1674475200">- Version 4.1.2
  - Don't try to mount user mounts if they don't exist [boo#1207366]</changelog>
  <changelog author="iforster@suse.com" date="1675857600">- Version 4.1.3
  - Suppress SELinux relabelling output in quiet mode
  - Documentation readability improvements</changelog>
  <changelog author="iforster@suse.com" date="1678449600">- Version 4.1.4
  - Workaround for broken Tumbleweed package libfdisk1</changelog>
  <changelog author="iforster@suse.com" date="1696507200">- Version 4.1.6
  - Use permissions of real /etc when creating overlay
    [bsc#1215878]
- Version 4.1.5
  - Add support for configuration file snippets</changelog>
</package>
<package pkgid="cbbe87540da59f5b5b3278bc95ca12ff2f082ad28160ad024d059700edd4ef90" name="transactional-update" arch="s390x">
  <version epoch="0" ver="4.1.6" rel="150500.3.3.1"/>
  <changelog author="iforster@suse.com" date="1631880000">- Version 3.5.5
  - t-u: Use tukit for SUSEConnect call [bsc#1190574]
    Correctly registers repositories</changelog>
  <changelog author="iforster@suse.com" date="1632398400">- Version 3.5.6
  - tukit: Add S/390 bootloader support [bsc#1189807]
  - t-u: support purge-kernels with t-u patch [bsc#1190788]</changelog>
  <changelog author="iforster@suse.com" date="1634040000">- Version 3.5.7
  Various fixes affecting Salt support:
  - t-u: Don't squash stderr messages into stdout
  - t-u: Correctly handle case when the snapshot has been deleted due to
    using --drop-if-no-change: Don't show reboot messages and avoid an awk
    error message [bsc#1191475]
  - tukit: Make inotify handler less sensitive / ignore more directories
    [bsc#1191475]</changelog>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]
  - Fixed selfupdate
  - Code cleanup</changelog>
  <changelog author="iforster@suse.com" date="1651579200">- Version 4.0.0~rc3
  - Add Snapshot interface
  - Reworked signal handling: All public signals are sent from the
    main thread now, keeping the same sender for everything
  - Implement D-Bus call "Execute" for Transactions
  - Implement interface for listing Snapshots
  - Implement Reboot interface
  - Fix bug when using --continue on old snapshots
  - Fix hypothetical integer overflow in snapshot list [bsc#1196826]
  - Fix wrong sort order in status command
    [gh#openSUSE/transactional-update#80]</changelog>
  <changelog author="iforster@suse.com" date="1652788800">- Version 4.0.0~rc4
  - Fix building with GCC 12
  - Fix stack overflow with very long commands / ids [bsc#1196149]
  - Use separate mount namespace for chroot, allowing overwriting
    the bind mounts from the update environment - this could have
    lead to data loss of the bind mount previously
  - Fix C error and exception handling for snapshots</changelog>
  <changelog author="schubi@suse.com" date="1655812800">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="iforster@suse.com" date="1659441600">- Version 4.0.0
  - Last minute interface change: Changed "List" method of Snapshot D-Bus
    interface to return a map of properties instead of a comma separated
    list of strings; this will allow retrieving the snapshot properties
    even if they contain a comma in their value [boo#1202147]
  - Remove "Snapshot.hpp" as a public API for now - all public
    functionality is part of SnapshotManager.hpp
  - Add header file documentation for SnapshotManager.hpp
  - Add method to delete snapshot
    [gh#openSUSE/transactional-update#52]
  - Allow setting description of snapshot
    [gh#openSUSE/transactional-update#55]
  - create_dirs_from_rpmdb: set SELinux file context of missing directories
    [gh#openSUSE/transactional-update#84], [bsc#1197242]
  - Fix broken logrotate due to typo in config file
    [gh#openSUSE/transactional-update#87]
  - create_dirs_from_rpmdb: Fix handling return code of create_dirs()
    [gh#openSUSE/transactional-update#86]
  - Fix broken "shell" prompt after selfupdate
  - Add documented D-Bus interface definition files
  - Add tukit_sm_get_current and tukit_sm_get_default to C interface
  - Fixed typos</changelog>
  <changelog author="fvogt@suse.com" date="1661169600">- Version 4.0.1
  - create_dirs_from_rpmdb: Just warn if no default SELinux context found
    [gh#openSUSE/transactional-update#88], [bsc#1188215]
  - create_dirs_from_rpmdb: Don't update the rpmdb cookie on failure
    [gh#openSUSE/transactional-update#88]
  - Handle directories owned by multiple packages
    [gh#openSUSE/transactional-update#90], [bsc#1188215]</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration of logrotate configuration to /usr/etc: Saving user
  changed configuration files in /etc and restoring them while
  an RPM update.</changelog>
  <changelog author="iforster@suse.com" date="1664539200">- Version 4.1.0
  - t-u: Add a "setup-kdump" command; implements [jsc#PED-1441]
  - Export TRANSACTIONAL_UPDATE_ROOT (the path to the snapshot) in
    the update environment; implements [jsc#PED-1078]
  - Add support for "notify" reboot method for desktop use
    [gh#openSUSE/transactional-update#93]
  - Fix kdump initrd recreation detection; the check was performed in the
    active snapshot instead of the target snapshot
  - Document register command [bsc#1202900]
  - Avoid unnecessary snapshots for register command [bsc#1202901]
  - Various optimizations for register command
  - Remove bogus error message when triggering reboot
  - Rework /etc overlay documentation in "The Transactional Update Guide"
  - Fix incorrect manpage formatting
  - Remove leftover "salt" reboot method in configuration example file
  - Replace deprecated std::mem_fn with lambdas</changelog>
  <changelog author="iforster@suse.com" date="1674043200">- Version 4.1.1
  - Mount user specific binddirs last: Prevously the internal mounts would
    potentially overwrite user bind mounts [boo#1205011]
  - selinux: Relabel shadowed /var files during update to make sure they
    don't interfere with the update [boo#1205937]
  - Clean up /var/lib/overlay more aggressively [boo#1206947]
  - tukit: Merge /etc overlay into parent if --discard is used together
    with --continue - previously the files were incorrectly always merged
    with the currently running system
  - status: do not execute the status command if experimental
  - Don't delete created mount point dirs any more
  - Small code optimizations</changelog>
  <changelog author="iforster@suse.com" date="1674475200">- Version 4.1.2
  - Don't try to mount user mounts if they don't exist [boo#1207366]</changelog>
  <changelog author="iforster@suse.com" date="1675857600">- Version 4.1.3
  - Suppress SELinux relabelling output in quiet mode
  - Documentation readability improvements</changelog>
  <changelog author="iforster@suse.com" date="1678449600">- Version 4.1.4
  - Workaround for broken Tumbleweed package libfdisk1</changelog>
  <changelog author="iforster@suse.com" date="1696507200">- Version 4.1.6
  - Use permissions of real /etc when creating overlay
    [bsc#1215878]
- Version 4.1.5
  - Add support for configuration file snippets</changelog>
</package>
<package pkgid="61afb65c3c0306d9680b129123eee560ad8923e81970eb72e87b72572af04a8a" name="transactional-update" arch="src">
  <version epoch="0" ver="4.1.6" rel="150500.3.3.1"/>
  <changelog author="iforster@suse.com" date="1631880000">- Version 3.5.5
  - t-u: Use tukit for SUSEConnect call [bsc#1190574]
    Correctly registers repositories</changelog>
  <changelog author="iforster@suse.com" date="1632398400">- Version 3.5.6
  - tukit: Add S/390 bootloader support [bsc#1189807]
  - t-u: support purge-kernels with t-u patch [bsc#1190788]</changelog>
  <changelog author="iforster@suse.com" date="1634040000">- Version 3.5.7
  Various fixes affecting Salt support:
  - t-u: Don't squash stderr messages into stdout
  - t-u: Correctly handle case when the snapshot has been deleted due to
    using --drop-if-no-change: Don't show reboot messages and avoid an awk
    error message [bsc#1191475]
  - tukit: Make inotify handler less sensitive / ignore more directories
    [bsc#1191475]</changelog>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]
  - Fixed selfupdate
  - Code cleanup</changelog>
  <changelog author="iforster@suse.com" date="1651579200">- Version 4.0.0~rc3
  - Add Snapshot interface
  - Reworked signal handling: All public signals are sent from the
    main thread now, keeping the same sender for everything
  - Implement D-Bus call "Execute" for Transactions
  - Implement interface for listing Snapshots
  - Implement Reboot interface
  - Fix bug when using --continue on old snapshots
  - Fix hypothetical integer overflow in snapshot list [bsc#1196826]
  - Fix wrong sort order in status command
    [gh#openSUSE/transactional-update#80]</changelog>
  <changelog author="iforster@suse.com" date="1652788800">- Version 4.0.0~rc4
  - Fix building with GCC 12
  - Fix stack overflow with very long commands / ids [bsc#1196149]
  - Use separate mount namespace for chroot, allowing overwriting
    the bind mounts from the update environment - this could have
    lead to data loss of the bind mount previously
  - Fix C error and exception handling for snapshots</changelog>
  <changelog author="schubi@suse.com" date="1655812800">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="iforster@suse.com" date="1659441600">- Version 4.0.0
  - Last minute interface change: Changed "List" method of Snapshot D-Bus
    interface to return a map of properties instead of a comma separated
    list of strings; this will allow retrieving the snapshot properties
    even if they contain a comma in their value [boo#1202147]
  - Remove "Snapshot.hpp" as a public API for now - all public
    functionality is part of SnapshotManager.hpp
  - Add header file documentation for SnapshotManager.hpp
  - Add method to delete snapshot
    [gh#openSUSE/transactional-update#52]
  - Allow setting description of snapshot
    [gh#openSUSE/transactional-update#55]
  - create_dirs_from_rpmdb: set SELinux file context of missing directories
    [gh#openSUSE/transactional-update#84], [bsc#1197242]
  - Fix broken logrotate due to typo in config file
    [gh#openSUSE/transactional-update#87]
  - create_dirs_from_rpmdb: Fix handling return code of create_dirs()
    [gh#openSUSE/transactional-update#86]
  - Fix broken "shell" prompt after selfupdate
  - Add documented D-Bus interface definition files
  - Add tukit_sm_get_current and tukit_sm_get_default to C interface
  - Fixed typos</changelog>
  <changelog author="fvogt@suse.com" date="1661169600">- Version 4.0.1
  - create_dirs_from_rpmdb: Just warn if no default SELinux context found
    [gh#openSUSE/transactional-update#88], [bsc#1188215]
  - create_dirs_from_rpmdb: Don't update the rpmdb cookie on failure
    [gh#openSUSE/transactional-update#88]
  - Handle directories owned by multiple packages
    [gh#openSUSE/transactional-update#90], [bsc#1188215]</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration of logrotate configuration to /usr/etc: Saving user
  changed configuration files in /etc and restoring them while
  an RPM update.</changelog>
  <changelog author="iforster@suse.com" date="1664539200">- Version 4.1.0
  - t-u: Add a "setup-kdump" command; implements [jsc#PED-1441]
  - Export TRANSACTIONAL_UPDATE_ROOT (the path to the snapshot) in
    the update environment; implements [jsc#PED-1078]
  - Add support for "notify" reboot method for desktop use
    [gh#openSUSE/transactional-update#93]
  - Fix kdump initrd recreation detection; the check was performed in the
    active snapshot instead of the target snapshot
  - Document register command [bsc#1202900]
  - Avoid unnecessary snapshots for register command [bsc#1202901]
  - Various optimizations for register command
  - Remove bogus error message when triggering reboot
  - Rework /etc overlay documentation in "The Transactional Update Guide"
  - Fix incorrect manpage formatting
  - Remove leftover "salt" reboot method in configuration example file
  - Replace deprecated std::mem_fn with lambdas</changelog>
  <changelog author="iforster@suse.com" date="1674043200">- Version 4.1.1
  - Mount user specific binddirs last: Prevously the internal mounts would
    potentially overwrite user bind mounts [boo#1205011]
  - selinux: Relabel shadowed /var files during update to make sure they
    don't interfere with the update [boo#1205937]
  - Clean up /var/lib/overlay more aggressively [boo#1206947]
  - tukit: Merge /etc overlay into parent if --discard is used together
    with --continue - previously the files were incorrectly always merged
    with the currently running system
  - status: do not execute the status command if experimental
  - Don't delete created mount point dirs any more
  - Small code optimizations</changelog>
  <changelog author="iforster@suse.com" date="1674475200">- Version 4.1.2
  - Don't try to mount user mounts if they don't exist [boo#1207366]</changelog>
  <changelog author="iforster@suse.com" date="1675857600">- Version 4.1.3
  - Suppress SELinux relabelling output in quiet mode
  - Documentation readability improvements</changelog>
  <changelog author="iforster@suse.com" date="1678449600">- Version 4.1.4
  - Workaround for broken Tumbleweed package libfdisk1</changelog>
  <changelog author="iforster@suse.com" date="1696507200">- Version 4.1.6
  - Use permissions of real /etc when creating overlay
    [bsc#1215878]
- Version 4.1.5
  - Add support for configuration file snippets</changelog>
</package>
<package pkgid="bade43782df7a6cf530387ea5fb9f1356d7208e0d1dd9d743344c943309ec44c" name="transactional-update" arch="x86_64">
  <version epoch="0" ver="4.1.6" rel="150500.3.3.1"/>
  <changelog author="iforster@suse.com" date="1631880000">- Version 3.5.5
  - t-u: Use tukit for SUSEConnect call [bsc#1190574]
    Correctly registers repositories</changelog>
  <changelog author="iforster@suse.com" date="1632398400">- Version 3.5.6
  - tukit: Add S/390 bootloader support [bsc#1189807]
  - t-u: support purge-kernels with t-u patch [bsc#1190788]</changelog>
  <changelog author="iforster@suse.com" date="1634040000">- Version 3.5.7
  Various fixes affecting Salt support:
  - t-u: Don't squash stderr messages into stdout
  - t-u: Correctly handle case when the snapshot has been deleted due to
    using --drop-if-no-change: Don't show reboot messages and avoid an awk
    error message [bsc#1191475]
  - tukit: Make inotify handler less sensitive / ignore more directories
    [bsc#1191475]</changelog>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]
  - Fixed selfupdate
  - Code cleanup</changelog>
  <changelog author="iforster@suse.com" date="1651579200">- Version 4.0.0~rc3
  - Add Snapshot interface
  - Reworked signal handling: All public signals are sent from the
    main thread now, keeping the same sender for everything
  - Implement D-Bus call "Execute" for Transactions
  - Implement interface for listing Snapshots
  - Implement Reboot interface
  - Fix bug when using --continue on old snapshots
  - Fix hypothetical integer overflow in snapshot list [bsc#1196826]
  - Fix wrong sort order in status command
    [gh#openSUSE/transactional-update#80]</changelog>
  <changelog author="iforster@suse.com" date="1652788800">- Version 4.0.0~rc4
  - Fix building with GCC 12
  - Fix stack overflow with very long commands / ids [bsc#1196149]
  - Use separate mount namespace for chroot, allowing overwriting
    the bind mounts from the update environment - this could have
    lead to data loss of the bind mount previously
  - Fix C error and exception handling for snapshots</changelog>
  <changelog author="schubi@suse.com" date="1655812800">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="iforster@suse.com" date="1659441600">- Version 4.0.0
  - Last minute interface change: Changed "List" method of Snapshot D-Bus
    interface to return a map of properties instead of a comma separated
    list of strings; this will allow retrieving the snapshot properties
    even if they contain a comma in their value [boo#1202147]
  - Remove "Snapshot.hpp" as a public API for now - all public
    functionality is part of SnapshotManager.hpp
  - Add header file documentation for SnapshotManager.hpp
  - Add method to delete snapshot
    [gh#openSUSE/transactional-update#52]
  - Allow setting description of snapshot
    [gh#openSUSE/transactional-update#55]
  - create_dirs_from_rpmdb: set SELinux file context of missing directories
    [gh#openSUSE/transactional-update#84], [bsc#1197242]
  - Fix broken logrotate due to typo in config file
    [gh#openSUSE/transactional-update#87]
  - create_dirs_from_rpmdb: Fix handling return code of create_dirs()
    [gh#openSUSE/transactional-update#86]
  - Fix broken "shell" prompt after selfupdate
  - Add documented D-Bus interface definition files
  - Add tukit_sm_get_current and tukit_sm_get_default to C interface
  - Fixed typos</changelog>
  <changelog author="fvogt@suse.com" date="1661169600">- Version 4.0.1
  - create_dirs_from_rpmdb: Just warn if no default SELinux context found
    [gh#openSUSE/transactional-update#88], [bsc#1188215]
  - create_dirs_from_rpmdb: Don't update the rpmdb cookie on failure
    [gh#openSUSE/transactional-update#88]
  - Handle directories owned by multiple packages
    [gh#openSUSE/transactional-update#90], [bsc#1188215]</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration of logrotate configuration to /usr/etc: Saving user
  changed configuration files in /etc and restoring them while
  an RPM update.</changelog>
  <changelog author="iforster@suse.com" date="1664539200">- Version 4.1.0
  - t-u: Add a "setup-kdump" command; implements [jsc#PED-1441]
  - Export TRANSACTIONAL_UPDATE_ROOT (the path to the snapshot) in
    the update environment; implements [jsc#PED-1078]
  - Add support for "notify" reboot method for desktop use
    [gh#openSUSE/transactional-update#93]
  - Fix kdump initrd recreation detection; the check was performed in the
    active snapshot instead of the target snapshot
  - Document register command [bsc#1202900]
  - Avoid unnecessary snapshots for register command [bsc#1202901]
  - Various optimizations for register command
  - Remove bogus error message when triggering reboot
  - Rework /etc overlay documentation in "The Transactional Update Guide"
  - Fix incorrect manpage formatting
  - Remove leftover "salt" reboot method in configuration example file
  - Replace deprecated std::mem_fn with lambdas</changelog>
  <changelog author="iforster@suse.com" date="1674043200">- Version 4.1.1
  - Mount user specific binddirs last: Prevously the internal mounts would
    potentially overwrite user bind mounts [boo#1205011]
  - selinux: Relabel shadowed /var files during update to make sure they
    don't interfere with the update [boo#1205937]
  - Clean up /var/lib/overlay more aggressively [boo#1206947]
  - tukit: Merge /etc overlay into parent if --discard is used together
    with --continue - previously the files were incorrectly always merged
    with the currently running system
  - status: do not execute the status command if experimental
  - Don't delete created mount point dirs any more
  - Small code optimizations</changelog>
  <changelog author="iforster@suse.com" date="1674475200">- Version 4.1.2
  - Don't try to mount user mounts if they don't exist [boo#1207366]</changelog>
  <changelog author="iforster@suse.com" date="1675857600">- Version 4.1.3
  - Suppress SELinux relabelling output in quiet mode
  - Documentation readability improvements</changelog>
  <changelog author="iforster@suse.com" date="1678449600">- Version 4.1.4
  - Workaround for broken Tumbleweed package libfdisk1</changelog>
  <changelog author="iforster@suse.com" date="1696507200">- Version 4.1.6
  - Use permissions of real /etc when creating overlay
    [bsc#1215878]
- Version 4.1.5
  - Add support for configuration file snippets</changelog>
</package>
<package pkgid="563f368571aec08354f95223a5cf6bc572eb37df495d1c4f1fadf82e7d3ed411" name="transactional-update-zypp-config" arch="noarch">
  <version epoch="0" ver="4.1.6" rel="150500.3.3.1"/>
  <changelog author="iforster@suse.com" date="1631880000">- Version 3.5.5
  - t-u: Use tukit for SUSEConnect call [bsc#1190574]
    Correctly registers repositories</changelog>
  <changelog author="iforster@suse.com" date="1632398400">- Version 3.5.6
  - tukit: Add S/390 bootloader support [bsc#1189807]
  - t-u: support purge-kernels with t-u patch [bsc#1190788]</changelog>
  <changelog author="iforster@suse.com" date="1634040000">- Version 3.5.7
  Various fixes affecting Salt support:
  - t-u: Don't squash stderr messages into stdout
  - t-u: Correctly handle case when the snapshot has been deleted due to
    using --drop-if-no-change: Don't show reboot messages and avoid an awk
    error message [bsc#1191475]
  - tukit: Make inotify handler less sensitive / ignore more directories
    [bsc#1191475]</changelog>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]
  - Fixed selfupdate
  - Code cleanup</changelog>
  <changelog author="iforster@suse.com" date="1651579200">- Version 4.0.0~rc3
  - Add Snapshot interface
  - Reworked signal handling: All public signals are sent from the
    main thread now, keeping the same sender for everything
  - Implement D-Bus call "Execute" for Transactions
  - Implement interface for listing Snapshots
  - Implement Reboot interface
  - Fix bug when using --continue on old snapshots
  - Fix hypothetical integer overflow in snapshot list [bsc#1196826]
  - Fix wrong sort order in status command
    [gh#openSUSE/transactional-update#80]</changelog>
  <changelog author="iforster@suse.com" date="1652788800">- Version 4.0.0~rc4
  - Fix building with GCC 12
  - Fix stack overflow with very long commands / ids [bsc#1196149]
  - Use separate mount namespace for chroot, allowing overwriting
    the bind mounts from the update environment - this could have
    lead to data loss of the bind mount previously
  - Fix C error and exception handling for snapshots</changelog>
  <changelog author="schubi@suse.com" date="1655812800">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="iforster@suse.com" date="1659441600">- Version 4.0.0
  - Last minute interface change: Changed "List" method of Snapshot D-Bus
    interface to return a map of properties instead of a comma separated
    list of strings; this will allow retrieving the snapshot properties
    even if they contain a comma in their value [boo#1202147]
  - Remove "Snapshot.hpp" as a public API for now - all public
    functionality is part of SnapshotManager.hpp
  - Add header file documentation for SnapshotManager.hpp
  - Add method to delete snapshot
    [gh#openSUSE/transactional-update#52]
  - Allow setting description of snapshot
    [gh#openSUSE/transactional-update#55]
  - create_dirs_from_rpmdb: set SELinux file context of missing directories
    [gh#openSUSE/transactional-update#84], [bsc#1197242]
  - Fix broken logrotate due to typo in config file
    [gh#openSUSE/transactional-update#87]
  - create_dirs_from_rpmdb: Fix handling return code of create_dirs()
    [gh#openSUSE/transactional-update#86]
  - Fix broken "shell" prompt after selfupdate
  - Add documented D-Bus interface definition files
  - Add tukit_sm_get_current and tukit_sm_get_default to C interface
  - Fixed typos</changelog>
  <changelog author="fvogt@suse.com" date="1661169600">- Version 4.0.1
  - create_dirs_from_rpmdb: Just warn if no default SELinux context found
    [gh#openSUSE/transactional-update#88], [bsc#1188215]
  - create_dirs_from_rpmdb: Don't update the rpmdb cookie on failure
    [gh#openSUSE/transactional-update#88]
  - Handle directories owned by multiple packages
    [gh#openSUSE/transactional-update#90], [bsc#1188215]</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration of logrotate configuration to /usr/etc: Saving user
  changed configuration files in /etc and restoring them while
  an RPM update.</changelog>
  <changelog author="iforster@suse.com" date="1664539200">- Version 4.1.0
  - t-u: Add a "setup-kdump" command; implements [jsc#PED-1441]
  - Export TRANSACTIONAL_UPDATE_ROOT (the path to the snapshot) in
    the update environment; implements [jsc#PED-1078]
  - Add support for "notify" reboot method for desktop use
    [gh#openSUSE/transactional-update#93]
  - Fix kdump initrd recreation detection; the check was performed in the
    active snapshot instead of the target snapshot
  - Document register command [bsc#1202900]
  - Avoid unnecessary snapshots for register command [bsc#1202901]
  - Various optimizations for register command
  - Remove bogus error message when triggering reboot
  - Rework /etc overlay documentation in "The Transactional Update Guide"
  - Fix incorrect manpage formatting
  - Remove leftover "salt" reboot method in configuration example file
  - Replace deprecated std::mem_fn with lambdas</changelog>
  <changelog author="iforster@suse.com" date="1674043200">- Version 4.1.1
  - Mount user specific binddirs last: Prevously the internal mounts would
    potentially overwrite user bind mounts [boo#1205011]
  - selinux: Relabel shadowed /var files during update to make sure they
    don't interfere with the update [boo#1205937]
  - Clean up /var/lib/overlay more aggressively [boo#1206947]
  - tukit: Merge /etc overlay into parent if --discard is used together
    with --continue - previously the files were incorrectly always merged
    with the currently running system
  - status: do not execute the status command if experimental
  - Don't delete created mount point dirs any more
  - Small code optimizations</changelog>
  <changelog author="iforster@suse.com" date="1674475200">- Version 4.1.2
  - Don't try to mount user mounts if they don't exist [boo#1207366]</changelog>
  <changelog author="iforster@suse.com" date="1675857600">- Version 4.1.3
  - Suppress SELinux relabelling output in quiet mode
  - Documentation readability improvements</changelog>
  <changelog author="iforster@suse.com" date="1678449600">- Version 4.1.4
  - Workaround for broken Tumbleweed package libfdisk1</changelog>
  <changelog author="iforster@suse.com" date="1696507200">- Version 4.1.6
  - Use permissions of real /etc when creating overlay
    [bsc#1215878]
- Version 4.1.5
  - Add support for configuration file snippets</changelog>
</package>
<package pkgid="4a47711c41dca830c99975a06330a42a300ca3e21ea345d183f1d5dec675663b" name="tukit" arch="aarch64">
  <version epoch="0" ver="4.1.6" rel="150500.3.3.1"/>
  <changelog author="iforster@suse.com" date="1631880000">- Version 3.5.5
  - t-u: Use tukit for SUSEConnect call [bsc#1190574]
    Correctly registers repositories</changelog>
  <changelog author="iforster@suse.com" date="1632398400">- Version 3.5.6
  - tukit: Add S/390 bootloader support [bsc#1189807]
  - t-u: support purge-kernels with t-u patch [bsc#1190788]</changelog>
  <changelog author="iforster@suse.com" date="1634040000">- Version 3.5.7
  Various fixes affecting Salt support:
  - t-u: Don't squash stderr messages into stdout
  - t-u: Correctly handle case when the snapshot has been deleted due to
    using --drop-if-no-change: Don't show reboot messages and avoid an awk
    error message [bsc#1191475]
  - tukit: Make inotify handler less sensitive / ignore more directories
    [bsc#1191475]</changelog>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]
  - Fixed selfupdate
  - Code cleanup</changelog>
  <changelog author="iforster@suse.com" date="1651579200">- Version 4.0.0~rc3
  - Add Snapshot interface
  - Reworked signal handling: All public signals are sent from the
    main thread now, keeping the same sender for everything
  - Implement D-Bus call "Execute" for Transactions
  - Implement interface for listing Snapshots
  - Implement Reboot interface
  - Fix bug when using --continue on old snapshots
  - Fix hypothetical integer overflow in snapshot list [bsc#1196826]
  - Fix wrong sort order in status command
    [gh#openSUSE/transactional-update#80]</changelog>
  <changelog author="iforster@suse.com" date="1652788800">- Version 4.0.0~rc4
  - Fix building with GCC 12
  - Fix stack overflow with very long commands / ids [bsc#1196149]
  - Use separate mount namespace for chroot, allowing overwriting
    the bind mounts from the update environment - this could have
    lead to data loss of the bind mount previously
  - Fix C error and exception handling for snapshots</changelog>
  <changelog author="schubi@suse.com" date="1655812800">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="iforster@suse.com" date="1659441600">- Version 4.0.0
  - Last minute interface change: Changed "List" method of Snapshot D-Bus
    interface to return a map of properties instead of a comma separated
    list of strings; this will allow retrieving the snapshot properties
    even if they contain a comma in their value [boo#1202147]
  - Remove "Snapshot.hpp" as a public API for now - all public
    functionality is part of SnapshotManager.hpp
  - Add header file documentation for SnapshotManager.hpp
  - Add method to delete snapshot
    [gh#openSUSE/transactional-update#52]
  - Allow setting description of snapshot
    [gh#openSUSE/transactional-update#55]
  - create_dirs_from_rpmdb: set SELinux file context of missing directories
    [gh#openSUSE/transactional-update#84], [bsc#1197242]
  - Fix broken logrotate due to typo in config file
    [gh#openSUSE/transactional-update#87]
  - create_dirs_from_rpmdb: Fix handling return code of create_dirs()
    [gh#openSUSE/transactional-update#86]
  - Fix broken "shell" prompt after selfupdate
  - Add documented D-Bus interface definition files
  - Add tukit_sm_get_current and tukit_sm_get_default to C interface
  - Fixed typos</changelog>
  <changelog author="fvogt@suse.com" date="1661169600">- Version 4.0.1
  - create_dirs_from_rpmdb: Just warn if no default SELinux context found
    [gh#openSUSE/transactional-update#88], [bsc#1188215]
  - create_dirs_from_rpmdb: Don't update the rpmdb cookie on failure
    [gh#openSUSE/transactional-update#88]
  - Handle directories owned by multiple packages
    [gh#openSUSE/transactional-update#90], [bsc#1188215]</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration of logrotate configuration to /usr/etc: Saving user
  changed configuration files in /etc and restoring them while
  an RPM update.</changelog>
  <changelog author="iforster@suse.com" date="1664539200">- Version 4.1.0
  - t-u: Add a "setup-kdump" command; implements [jsc#PED-1441]
  - Export TRANSACTIONAL_UPDATE_ROOT (the path to the snapshot) in
    the update environment; implements [jsc#PED-1078]
  - Add support for "notify" reboot method for desktop use
    [gh#openSUSE/transactional-update#93]
  - Fix kdump initrd recreation detection; the check was performed in the
    active snapshot instead of the target snapshot
  - Document register command [bsc#1202900]
  - Avoid unnecessary snapshots for register command [bsc#1202901]
  - Various optimizations for register command
  - Remove bogus error message when triggering reboot
  - Rework /etc overlay documentation in "The Transactional Update Guide"
  - Fix incorrect manpage formatting
  - Remove leftover "salt" reboot method in configuration example file
  - Replace deprecated std::mem_fn with lambdas</changelog>
  <changelog author="iforster@suse.com" date="1674043200">- Version 4.1.1
  - Mount user specific binddirs last: Prevously the internal mounts would
    potentially overwrite user bind mounts [boo#1205011]
  - selinux: Relabel shadowed /var files during update to make sure they
    don't interfere with the update [boo#1205937]
  - Clean up /var/lib/overlay more aggressively [boo#1206947]
  - tukit: Merge /etc overlay into parent if --discard is used together
    with --continue - previously the files were incorrectly always merged
    with the currently running system
  - status: do not execute the status command if experimental
  - Don't delete created mount point dirs any more
  - Small code optimizations</changelog>
  <changelog author="iforster@suse.com" date="1674475200">- Version 4.1.2
  - Don't try to mount user mounts if they don't exist [boo#1207366]</changelog>
  <changelog author="iforster@suse.com" date="1675857600">- Version 4.1.3
  - Suppress SELinux relabelling output in quiet mode
  - Documentation readability improvements</changelog>
  <changelog author="iforster@suse.com" date="1678449600">- Version 4.1.4
  - Workaround for broken Tumbleweed package libfdisk1</changelog>
  <changelog author="iforster@suse.com" date="1696507200">- Version 4.1.6
  - Use permissions of real /etc when creating overlay
    [bsc#1215878]
- Version 4.1.5
  - Add support for configuration file snippets</changelog>
</package>
<package pkgid="093ead08b318445ea8e38b7a599e042779a2c2a79fc8e0f4bee4e72f97e32fd0" name="tukit" arch="s390x">
  <version epoch="0" ver="4.1.6" rel="150500.3.3.1"/>
  <changelog author="iforster@suse.com" date="1631880000">- Version 3.5.5
  - t-u: Use tukit for SUSEConnect call [bsc#1190574]
    Correctly registers repositories</changelog>
  <changelog author="iforster@suse.com" date="1632398400">- Version 3.5.6
  - tukit: Add S/390 bootloader support [bsc#1189807]
  - t-u: support purge-kernels with t-u patch [bsc#1190788]</changelog>
  <changelog author="iforster@suse.com" date="1634040000">- Version 3.5.7
  Various fixes affecting Salt support:
  - t-u: Don't squash stderr messages into stdout
  - t-u: Correctly handle case when the snapshot has been deleted due to
    using --drop-if-no-change: Don't show reboot messages and avoid an awk
    error message [bsc#1191475]
  - tukit: Make inotify handler less sensitive / ignore more directories
    [bsc#1191475]</changelog>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]
  - Fixed selfupdate
  - Code cleanup</changelog>
  <changelog author="iforster@suse.com" date="1651579200">- Version 4.0.0~rc3
  - Add Snapshot interface
  - Reworked signal handling: All public signals are sent from the
    main thread now, keeping the same sender for everything
  - Implement D-Bus call "Execute" for Transactions
  - Implement interface for listing Snapshots
  - Implement Reboot interface
  - Fix bug when using --continue on old snapshots
  - Fix hypothetical integer overflow in snapshot list [bsc#1196826]
  - Fix wrong sort order in status command
    [gh#openSUSE/transactional-update#80]</changelog>
  <changelog author="iforster@suse.com" date="1652788800">- Version 4.0.0~rc4
  - Fix building with GCC 12
  - Fix stack overflow with very long commands / ids [bsc#1196149]
  - Use separate mount namespace for chroot, allowing overwriting
    the bind mounts from the update environment - this could have
    lead to data loss of the bind mount previously
  - Fix C error and exception handling for snapshots</changelog>
  <changelog author="schubi@suse.com" date="1655812800">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="iforster@suse.com" date="1659441600">- Version 4.0.0
  - Last minute interface change: Changed "List" method of Snapshot D-Bus
    interface to return a map of properties instead of a comma separated
    list of strings; this will allow retrieving the snapshot properties
    even if they contain a comma in their value [boo#1202147]
  - Remove "Snapshot.hpp" as a public API for now - all public
    functionality is part of SnapshotManager.hpp
  - Add header file documentation for SnapshotManager.hpp
  - Add method to delete snapshot
    [gh#openSUSE/transactional-update#52]
  - Allow setting description of snapshot
    [gh#openSUSE/transactional-update#55]
  - create_dirs_from_rpmdb: set SELinux file context of missing directories
    [gh#openSUSE/transactional-update#84], [bsc#1197242]
  - Fix broken logrotate due to typo in config file
    [gh#openSUSE/transactional-update#87]
  - create_dirs_from_rpmdb: Fix handling return code of create_dirs()
    [gh#openSUSE/transactional-update#86]
  - Fix broken "shell" prompt after selfupdate
  - Add documented D-Bus interface definition files
  - Add tukit_sm_get_current and tukit_sm_get_default to C interface
  - Fixed typos</changelog>
  <changelog author="fvogt@suse.com" date="1661169600">- Version 4.0.1
  - create_dirs_from_rpmdb: Just warn if no default SELinux context found
    [gh#openSUSE/transactional-update#88], [bsc#1188215]
  - create_dirs_from_rpmdb: Don't update the rpmdb cookie on failure
    [gh#openSUSE/transactional-update#88]
  - Handle directories owned by multiple packages
    [gh#openSUSE/transactional-update#90], [bsc#1188215]</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration of logrotate configuration to /usr/etc: Saving user
  changed configuration files in /etc and restoring them while
  an RPM update.</changelog>
  <changelog author="iforster@suse.com" date="1664539200">- Version 4.1.0
  - t-u: Add a "setup-kdump" command; implements [jsc#PED-1441]
  - Export TRANSACTIONAL_UPDATE_ROOT (the path to the snapshot) in
    the update environment; implements [jsc#PED-1078]
  - Add support for "notify" reboot method for desktop use
    [gh#openSUSE/transactional-update#93]
  - Fix kdump initrd recreation detection; the check was performed in the
    active snapshot instead of the target snapshot
  - Document register command [bsc#1202900]
  - Avoid unnecessary snapshots for register command [bsc#1202901]
  - Various optimizations for register command
  - Remove bogus error message when triggering reboot
  - Rework /etc overlay documentation in "The Transactional Update Guide"
  - Fix incorrect manpage formatting
  - Remove leftover "salt" reboot method in configuration example file
  - Replace deprecated std::mem_fn with lambdas</changelog>
  <changelog author="iforster@suse.com" date="1674043200">- Version 4.1.1
  - Mount user specific binddirs last: Prevously the internal mounts would
    potentially overwrite user bind mounts [boo#1205011]
  - selinux: Relabel shadowed /var files during update to make sure they
    don't interfere with the update [boo#1205937]
  - Clean up /var/lib/overlay more aggressively [boo#1206947]
  - tukit: Merge /etc overlay into parent if --discard is used together
    with --continue - previously the files were incorrectly always merged
    with the currently running system
  - status: do not execute the status command if experimental
  - Don't delete created mount point dirs any more
  - Small code optimizations</changelog>
  <changelog author="iforster@suse.com" date="1674475200">- Version 4.1.2
  - Don't try to mount user mounts if they don't exist [boo#1207366]</changelog>
  <changelog author="iforster@suse.com" date="1675857600">- Version 4.1.3
  - Suppress SELinux relabelling output in quiet mode
  - Documentation readability improvements</changelog>
  <changelog author="iforster@suse.com" date="1678449600">- Version 4.1.4
  - Workaround for broken Tumbleweed package libfdisk1</changelog>
  <changelog author="iforster@suse.com" date="1696507200">- Version 4.1.6
  - Use permissions of real /etc when creating overlay
    [bsc#1215878]
- Version 4.1.5
  - Add support for configuration file snippets</changelog>
</package>
<package pkgid="848efc8868542125f8f74efbc1fbd4fdd378872add3830077704c3980a728bb9" name="tukit" arch="x86_64">
  <version epoch="0" ver="4.1.6" rel="150500.3.3.1"/>
  <changelog author="iforster@suse.com" date="1631880000">- Version 3.5.5
  - t-u: Use tukit for SUSEConnect call [bsc#1190574]
    Correctly registers repositories</changelog>
  <changelog author="iforster@suse.com" date="1632398400">- Version 3.5.6
  - tukit: Add S/390 bootloader support [bsc#1189807]
  - t-u: support purge-kernels with t-u patch [bsc#1190788]</changelog>
  <changelog author="iforster@suse.com" date="1634040000">- Version 3.5.7
  Various fixes affecting Salt support:
  - t-u: Don't squash stderr messages into stdout
  - t-u: Correctly handle case when the snapshot has been deleted due to
    using --drop-if-no-change: Don't show reboot messages and avoid an awk
    error message [bsc#1191475]
  - tukit: Make inotify handler less sensitive / ignore more directories
    [bsc#1191475]</changelog>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]
  - Fixed selfupdate
  - Code cleanup</changelog>
  <changelog author="iforster@suse.com" date="1651579200">- Version 4.0.0~rc3
  - Add Snapshot interface
  - Reworked signal handling: All public signals are sent from the
    main thread now, keeping the same sender for everything
  - Implement D-Bus call "Execute" for Transactions
  - Implement interface for listing Snapshots
  - Implement Reboot interface
  - Fix bug when using --continue on old snapshots
  - Fix hypothetical integer overflow in snapshot list [bsc#1196826]
  - Fix wrong sort order in status command
    [gh#openSUSE/transactional-update#80]</changelog>
  <changelog author="iforster@suse.com" date="1652788800">- Version 4.0.0~rc4
  - Fix building with GCC 12
  - Fix stack overflow with very long commands / ids [bsc#1196149]
  - Use separate mount namespace for chroot, allowing overwriting
    the bind mounts from the update environment - this could have
    lead to data loss of the bind mount previously
  - Fix C error and exception handling for snapshots</changelog>
  <changelog author="schubi@suse.com" date="1655812800">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="iforster@suse.com" date="1659441600">- Version 4.0.0
  - Last minute interface change: Changed "List" method of Snapshot D-Bus
    interface to return a map of properties instead of a comma separated
    list of strings; this will allow retrieving the snapshot properties
    even if they contain a comma in their value [boo#1202147]
  - Remove "Snapshot.hpp" as a public API for now - all public
    functionality is part of SnapshotManager.hpp
  - Add header file documentation for SnapshotManager.hpp
  - Add method to delete snapshot
    [gh#openSUSE/transactional-update#52]
  - Allow setting description of snapshot
    [gh#openSUSE/transactional-update#55]
  - create_dirs_from_rpmdb: set SELinux file context of missing directories
    [gh#openSUSE/transactional-update#84], [bsc#1197242]
  - Fix broken logrotate due to typo in config file
    [gh#openSUSE/transactional-update#87]
  - create_dirs_from_rpmdb: Fix handling return code of create_dirs()
    [gh#openSUSE/transactional-update#86]
  - Fix broken "shell" prompt after selfupdate
  - Add documented D-Bus interface definition files
  - Add tukit_sm_get_current and tukit_sm_get_default to C interface
  - Fixed typos</changelog>
  <changelog author="fvogt@suse.com" date="1661169600">- Version 4.0.1
  - create_dirs_from_rpmdb: Just warn if no default SELinux context found
    [gh#openSUSE/transactional-update#88], [bsc#1188215]
  - create_dirs_from_rpmdb: Don't update the rpmdb cookie on failure
    [gh#openSUSE/transactional-update#88]
  - Handle directories owned by multiple packages
    [gh#openSUSE/transactional-update#90], [bsc#1188215]</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration of logrotate configuration to /usr/etc: Saving user
  changed configuration files in /etc and restoring them while
  an RPM update.</changelog>
  <changelog author="iforster@suse.com" date="1664539200">- Version 4.1.0
  - t-u: Add a "setup-kdump" command; implements [jsc#PED-1441]
  - Export TRANSACTIONAL_UPDATE_ROOT (the path to the snapshot) in
    the update environment; implements [jsc#PED-1078]
  - Add support for "notify" reboot method for desktop use
    [gh#openSUSE/transactional-update#93]
  - Fix kdump initrd recreation detection; the check was performed in the
    active snapshot instead of the target snapshot
  - Document register command [bsc#1202900]
  - Avoid unnecessary snapshots for register command [bsc#1202901]
  - Various optimizations for register command
  - Remove bogus error message when triggering reboot
  - Rework /etc overlay documentation in "The Transactional Update Guide"
  - Fix incorrect manpage formatting
  - Remove leftover "salt" reboot method in configuration example file
  - Replace deprecated std::mem_fn with lambdas</changelog>
  <changelog author="iforster@suse.com" date="1674043200">- Version 4.1.1
  - Mount user specific binddirs last: Prevously the internal mounts would
    potentially overwrite user bind mounts [boo#1205011]
  - selinux: Relabel shadowed /var files during update to make sure they
    don't interfere with the update [boo#1205937]
  - Clean up /var/lib/overlay more aggressively [boo#1206947]
  - tukit: Merge /etc overlay into parent if --discard is used together
    with --continue - previously the files were incorrectly always merged
    with the currently running system
  - status: do not execute the status command if experimental
  - Don't delete created mount point dirs any more
  - Small code optimizations</changelog>
  <changelog author="iforster@suse.com" date="1674475200">- Version 4.1.2
  - Don't try to mount user mounts if they don't exist [boo#1207366]</changelog>
  <changelog author="iforster@suse.com" date="1675857600">- Version 4.1.3
  - Suppress SELinux relabelling output in quiet mode
  - Documentation readability improvements</changelog>
  <changelog author="iforster@suse.com" date="1678449600">- Version 4.1.4
  - Workaround for broken Tumbleweed package libfdisk1</changelog>
  <changelog author="iforster@suse.com" date="1696507200">- Version 4.1.6
  - Use permissions of real /etc when creating overlay
    [bsc#1215878]
- Version 4.1.5
  - Add support for configuration file snippets</changelog>
</package>
<package pkgid="1af04d7a2fb48857f9d104514bba67ebbe1be63f4650c41f725110066ace88c9" name="tukitd" arch="aarch64">
  <version epoch="0" ver="4.1.6" rel="150500.3.3.1"/>
  <changelog author="iforster@suse.com" date="1631880000">- Version 3.5.5
  - t-u: Use tukit for SUSEConnect call [bsc#1190574]
    Correctly registers repositories</changelog>
  <changelog author="iforster@suse.com" date="1632398400">- Version 3.5.6
  - tukit: Add S/390 bootloader support [bsc#1189807]
  - t-u: support purge-kernels with t-u patch [bsc#1190788]</changelog>
  <changelog author="iforster@suse.com" date="1634040000">- Version 3.5.7
  Various fixes affecting Salt support:
  - t-u: Don't squash stderr messages into stdout
  - t-u: Correctly handle case when the snapshot has been deleted due to
    using --drop-if-no-change: Don't show reboot messages and avoid an awk
    error message [bsc#1191475]
  - tukit: Make inotify handler less sensitive / ignore more directories
    [bsc#1191475]</changelog>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]
  - Fixed selfupdate
  - Code cleanup</changelog>
  <changelog author="iforster@suse.com" date="1651579200">- Version 4.0.0~rc3
  - Add Snapshot interface
  - Reworked signal handling: All public signals are sent from the
    main thread now, keeping the same sender for everything
  - Implement D-Bus call "Execute" for Transactions
  - Implement interface for listing Snapshots
  - Implement Reboot interface
  - Fix bug when using --continue on old snapshots
  - Fix hypothetical integer overflow in snapshot list [bsc#1196826]
  - Fix wrong sort order in status command
    [gh#openSUSE/transactional-update#80]</changelog>
  <changelog author="iforster@suse.com" date="1652788800">- Version 4.0.0~rc4
  - Fix building with GCC 12
  - Fix stack overflow with very long commands / ids [bsc#1196149]
  - Use separate mount namespace for chroot, allowing overwriting
    the bind mounts from the update environment - this could have
    lead to data loss of the bind mount previously
  - Fix C error and exception handling for snapshots</changelog>
  <changelog author="schubi@suse.com" date="1655812800">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="iforster@suse.com" date="1659441600">- Version 4.0.0
  - Last minute interface change: Changed "List" method of Snapshot D-Bus
    interface to return a map of properties instead of a comma separated
    list of strings; this will allow retrieving the snapshot properties
    even if they contain a comma in their value [boo#1202147]
  - Remove "Snapshot.hpp" as a public API for now - all public
    functionality is part of SnapshotManager.hpp
  - Add header file documentation for SnapshotManager.hpp
  - Add method to delete snapshot
    [gh#openSUSE/transactional-update#52]
  - Allow setting description of snapshot
    [gh#openSUSE/transactional-update#55]
  - create_dirs_from_rpmdb: set SELinux file context of missing directories
    [gh#openSUSE/transactional-update#84], [bsc#1197242]
  - Fix broken logrotate due to typo in config file
    [gh#openSUSE/transactional-update#87]
  - create_dirs_from_rpmdb: Fix handling return code of create_dirs()
    [gh#openSUSE/transactional-update#86]
  - Fix broken "shell" prompt after selfupdate
  - Add documented D-Bus interface definition files
  - Add tukit_sm_get_current and tukit_sm_get_default to C interface
  - Fixed typos</changelog>
  <changelog author="fvogt@suse.com" date="1661169600">- Version 4.0.1
  - create_dirs_from_rpmdb: Just warn if no default SELinux context found
    [gh#openSUSE/transactional-update#88], [bsc#1188215]
  - create_dirs_from_rpmdb: Don't update the rpmdb cookie on failure
    [gh#openSUSE/transactional-update#88]
  - Handle directories owned by multiple packages
    [gh#openSUSE/transactional-update#90], [bsc#1188215]</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration of logrotate configuration to /usr/etc: Saving user
  changed configuration files in /etc and restoring them while
  an RPM update.</changelog>
  <changelog author="iforster@suse.com" date="1664539200">- Version 4.1.0
  - t-u: Add a "setup-kdump" command; implements [jsc#PED-1441]
  - Export TRANSACTIONAL_UPDATE_ROOT (the path to the snapshot) in
    the update environment; implements [jsc#PED-1078]
  - Add support for "notify" reboot method for desktop use
    [gh#openSUSE/transactional-update#93]
  - Fix kdump initrd recreation detection; the check was performed in the
    active snapshot instead of the target snapshot
  - Document register command [bsc#1202900]
  - Avoid unnecessary snapshots for register command [bsc#1202901]
  - Various optimizations for register command
  - Remove bogus error message when triggering reboot
  - Rework /etc overlay documentation in "The Transactional Update Guide"
  - Fix incorrect manpage formatting
  - Remove leftover "salt" reboot method in configuration example file
  - Replace deprecated std::mem_fn with lambdas</changelog>
  <changelog author="iforster@suse.com" date="1674043200">- Version 4.1.1
  - Mount user specific binddirs last: Prevously the internal mounts would
    potentially overwrite user bind mounts [boo#1205011]
  - selinux: Relabel shadowed /var files during update to make sure they
    don't interfere with the update [boo#1205937]
  - Clean up /var/lib/overlay more aggressively [boo#1206947]
  - tukit: Merge /etc overlay into parent if --discard is used together
    with --continue - previously the files were incorrectly always merged
    with the currently running system
  - status: do not execute the status command if experimental
  - Don't delete created mount point dirs any more
  - Small code optimizations</changelog>
  <changelog author="iforster@suse.com" date="1674475200">- Version 4.1.2
  - Don't try to mount user mounts if they don't exist [boo#1207366]</changelog>
  <changelog author="iforster@suse.com" date="1675857600">- Version 4.1.3
  - Suppress SELinux relabelling output in quiet mode
  - Documentation readability improvements</changelog>
  <changelog author="iforster@suse.com" date="1678449600">- Version 4.1.4
  - Workaround for broken Tumbleweed package libfdisk1</changelog>
  <changelog author="iforster@suse.com" date="1696507200">- Version 4.1.6
  - Use permissions of real /etc when creating overlay
    [bsc#1215878]
- Version 4.1.5
  - Add support for configuration file snippets</changelog>
</package>
<package pkgid="0d199dfcad3aea853825e83c38ef03b2db255b0ee54eb3d8bdc05711f5fabacf" name="tukitd" arch="s390x">
  <version epoch="0" ver="4.1.6" rel="150500.3.3.1"/>
  <changelog author="iforster@suse.com" date="1631880000">- Version 3.5.5
  - t-u: Use tukit for SUSEConnect call [bsc#1190574]
    Correctly registers repositories</changelog>
  <changelog author="iforster@suse.com" date="1632398400">- Version 3.5.6
  - tukit: Add S/390 bootloader support [bsc#1189807]
  - t-u: support purge-kernels with t-u patch [bsc#1190788]</changelog>
  <changelog author="iforster@suse.com" date="1634040000">- Version 3.5.7
  Various fixes affecting Salt support:
  - t-u: Don't squash stderr messages into stdout
  - t-u: Correctly handle case when the snapshot has been deleted due to
    using --drop-if-no-change: Don't show reboot messages and avoid an awk
    error message [bsc#1191475]
  - tukit: Make inotify handler less sensitive / ignore more directories
    [bsc#1191475]</changelog>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]
  - Fixed selfupdate
  - Code cleanup</changelog>
  <changelog author="iforster@suse.com" date="1651579200">- Version 4.0.0~rc3
  - Add Snapshot interface
  - Reworked signal handling: All public signals are sent from the
    main thread now, keeping the same sender for everything
  - Implement D-Bus call "Execute" for Transactions
  - Implement interface for listing Snapshots
  - Implement Reboot interface
  - Fix bug when using --continue on old snapshots
  - Fix hypothetical integer overflow in snapshot list [bsc#1196826]
  - Fix wrong sort order in status command
    [gh#openSUSE/transactional-update#80]</changelog>
  <changelog author="iforster@suse.com" date="1652788800">- Version 4.0.0~rc4
  - Fix building with GCC 12
  - Fix stack overflow with very long commands / ids [bsc#1196149]
  - Use separate mount namespace for chroot, allowing overwriting
    the bind mounts from the update environment - this could have
    lead to data loss of the bind mount previously
  - Fix C error and exception handling for snapshots</changelog>
  <changelog author="schubi@suse.com" date="1655812800">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="iforster@suse.com" date="1659441600">- Version 4.0.0
  - Last minute interface change: Changed "List" method of Snapshot D-Bus
    interface to return a map of properties instead of a comma separated
    list of strings; this will allow retrieving the snapshot properties
    even if they contain a comma in their value [boo#1202147]
  - Remove "Snapshot.hpp" as a public API for now - all public
    functionality is part of SnapshotManager.hpp
  - Add header file documentation for SnapshotManager.hpp
  - Add method to delete snapshot
    [gh#openSUSE/transactional-update#52]
  - Allow setting description of snapshot
    [gh#openSUSE/transactional-update#55]
  - create_dirs_from_rpmdb: set SELinux file context of missing directories
    [gh#openSUSE/transactional-update#84], [bsc#1197242]
  - Fix broken logrotate due to typo in config file
    [gh#openSUSE/transactional-update#87]
  - create_dirs_from_rpmdb: Fix handling return code of create_dirs()
    [gh#openSUSE/transactional-update#86]
  - Fix broken "shell" prompt after selfupdate
  - Add documented D-Bus interface definition files
  - Add tukit_sm_get_current and tukit_sm_get_default to C interface
  - Fixed typos</changelog>
  <changelog author="fvogt@suse.com" date="1661169600">- Version 4.0.1
  - create_dirs_from_rpmdb: Just warn if no default SELinux context found
    [gh#openSUSE/transactional-update#88], [bsc#1188215]
  - create_dirs_from_rpmdb: Don't update the rpmdb cookie on failure
    [gh#openSUSE/transactional-update#88]
  - Handle directories owned by multiple packages
    [gh#openSUSE/transactional-update#90], [bsc#1188215]</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration of logrotate configuration to /usr/etc: Saving user
  changed configuration files in /etc and restoring them while
  an RPM update.</changelog>
  <changelog author="iforster@suse.com" date="1664539200">- Version 4.1.0
  - t-u: Add a "setup-kdump" command; implements [jsc#PED-1441]
  - Export TRANSACTIONAL_UPDATE_ROOT (the path to the snapshot) in
    the update environment; implements [jsc#PED-1078]
  - Add support for "notify" reboot method for desktop use
    [gh#openSUSE/transactional-update#93]
  - Fix kdump initrd recreation detection; the check was performed in the
    active snapshot instead of the target snapshot
  - Document register command [bsc#1202900]
  - Avoid unnecessary snapshots for register command [bsc#1202901]
  - Various optimizations for register command
  - Remove bogus error message when triggering reboot
  - Rework /etc overlay documentation in "The Transactional Update Guide"
  - Fix incorrect manpage formatting
  - Remove leftover "salt" reboot method in configuration example file
  - Replace deprecated std::mem_fn with lambdas</changelog>
  <changelog author="iforster@suse.com" date="1674043200">- Version 4.1.1
  - Mount user specific binddirs last: Prevously the internal mounts would
    potentially overwrite user bind mounts [boo#1205011]
  - selinux: Relabel shadowed /var files during update to make sure they
    don't interfere with the update [boo#1205937]
  - Clean up /var/lib/overlay more aggressively [boo#1206947]
  - tukit: Merge /etc overlay into parent if --discard is used together
    with --continue - previously the files were incorrectly always merged
    with the currently running system
  - status: do not execute the status command if experimental
  - Don't delete created mount point dirs any more
  - Small code optimizations</changelog>
  <changelog author="iforster@suse.com" date="1674475200">- Version 4.1.2
  - Don't try to mount user mounts if they don't exist [boo#1207366]</changelog>
  <changelog author="iforster@suse.com" date="1675857600">- Version 4.1.3
  - Suppress SELinux relabelling output in quiet mode
  - Documentation readability improvements</changelog>
  <changelog author="iforster@suse.com" date="1678449600">- Version 4.1.4
  - Workaround for broken Tumbleweed package libfdisk1</changelog>
  <changelog author="iforster@suse.com" date="1696507200">- Version 4.1.6
  - Use permissions of real /etc when creating overlay
    [bsc#1215878]
- Version 4.1.5
  - Add support for configuration file snippets</changelog>
</package>
<package pkgid="d2aaff011d4c388794c2babb9f9122bc78cdfb68a76cb015db59cb15a2f0d54a" name="tukitd" arch="x86_64">
  <version epoch="0" ver="4.1.6" rel="150500.3.3.1"/>
  <changelog author="iforster@suse.com" date="1631880000">- Version 3.5.5
  - t-u: Use tukit for SUSEConnect call [bsc#1190574]
    Correctly registers repositories</changelog>
  <changelog author="iforster@suse.com" date="1632398400">- Version 3.5.6
  - tukit: Add S/390 bootloader support [bsc#1189807]
  - t-u: support purge-kernels with t-u patch [bsc#1190788]</changelog>
  <changelog author="iforster@suse.com" date="1634040000">- Version 3.5.7
  Various fixes affecting Salt support:
  - t-u: Don't squash stderr messages into stdout
  - t-u: Correctly handle case when the snapshot has been deleted due to
    using --drop-if-no-change: Don't show reboot messages and avoid an awk
    error message [bsc#1191475]
  - tukit: Make inotify handler less sensitive / ignore more directories
    [bsc#1191475]</changelog>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]
  - Fixed selfupdate
  - Code cleanup</changelog>
  <changelog author="iforster@suse.com" date="1651579200">- Version 4.0.0~rc3
  - Add Snapshot interface
  - Reworked signal handling: All public signals are sent from the
    main thread now, keeping the same sender for everything
  - Implement D-Bus call "Execute" for Transactions
  - Implement interface for listing Snapshots
  - Implement Reboot interface
  - Fix bug when using --continue on old snapshots
  - Fix hypothetical integer overflow in snapshot list [bsc#1196826]
  - Fix wrong sort order in status command
    [gh#openSUSE/transactional-update#80]</changelog>
  <changelog author="iforster@suse.com" date="1652788800">- Version 4.0.0~rc4
  - Fix building with GCC 12
  - Fix stack overflow with very long commands / ids [bsc#1196149]
  - Use separate mount namespace for chroot, allowing overwriting
    the bind mounts from the update environment - this could have
    lead to data loss of the bind mount previously
  - Fix C error and exception handling for snapshots</changelog>
  <changelog author="schubi@suse.com" date="1655812800">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="iforster@suse.com" date="1659441600">- Version 4.0.0
  - Last minute interface change: Changed "List" method of Snapshot D-Bus
    interface to return a map of properties instead of a comma separated
    list of strings; this will allow retrieving the snapshot properties
    even if they contain a comma in their value [boo#1202147]
  - Remove "Snapshot.hpp" as a public API for now - all public
    functionality is part of SnapshotManager.hpp
  - Add header file documentation for SnapshotManager.hpp
  - Add method to delete snapshot
    [gh#openSUSE/transactional-update#52]
  - Allow setting description of snapshot
    [gh#openSUSE/transactional-update#55]
  - create_dirs_from_rpmdb: set SELinux file context of missing directories
    [gh#openSUSE/transactional-update#84], [bsc#1197242]
  - Fix broken logrotate due to typo in config file
    [gh#openSUSE/transactional-update#87]
  - create_dirs_from_rpmdb: Fix handling return code of create_dirs()
    [gh#openSUSE/transactional-update#86]
  - Fix broken "shell" prompt after selfupdate
  - Add documented D-Bus interface definition files
  - Add tukit_sm_get_current and tukit_sm_get_default to C interface
  - Fixed typos</changelog>
  <changelog author="fvogt@suse.com" date="1661169600">- Version 4.0.1
  - create_dirs_from_rpmdb: Just warn if no default SELinux context found
    [gh#openSUSE/transactional-update#88], [bsc#1188215]
  - create_dirs_from_rpmdb: Don't update the rpmdb cookie on failure
    [gh#openSUSE/transactional-update#88]
  - Handle directories owned by multiple packages
    [gh#openSUSE/transactional-update#90], [bsc#1188215]</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration of logrotate configuration to /usr/etc: Saving user
  changed configuration files in /etc and restoring them while
  an RPM update.</changelog>
  <changelog author="iforster@suse.com" date="1664539200">- Version 4.1.0
  - t-u: Add a "setup-kdump" command; implements [jsc#PED-1441]
  - Export TRANSACTIONAL_UPDATE_ROOT (the path to the snapshot) in
    the update environment; implements [jsc#PED-1078]
  - Add support for "notify" reboot method for desktop use
    [gh#openSUSE/transactional-update#93]
  - Fix kdump initrd recreation detection; the check was performed in the
    active snapshot instead of the target snapshot
  - Document register command [bsc#1202900]
  - Avoid unnecessary snapshots for register command [bsc#1202901]
  - Various optimizations for register command
  - Remove bogus error message when triggering reboot
  - Rework /etc overlay documentation in "The Transactional Update Guide"
  - Fix incorrect manpage formatting
  - Remove leftover "salt" reboot method in configuration example file
  - Replace deprecated std::mem_fn with lambdas</changelog>
  <changelog author="iforster@suse.com" date="1674043200">- Version 4.1.1
  - Mount user specific binddirs last: Prevously the internal mounts would
    potentially overwrite user bind mounts [boo#1205011]
  - selinux: Relabel shadowed /var files during update to make sure they
    don't interfere with the update [boo#1205937]
  - Clean up /var/lib/overlay more aggressively [boo#1206947]
  - tukit: Merge /etc overlay into parent if --discard is used together
    with --continue - previously the files were incorrectly always merged
    with the currently running system
  - status: do not execute the status command if experimental
  - Don't delete created mount point dirs any more
  - Small code optimizations</changelog>
  <changelog author="iforster@suse.com" date="1674475200">- Version 4.1.2
  - Don't try to mount user mounts if they don't exist [boo#1207366]</changelog>
  <changelog author="iforster@suse.com" date="1675857600">- Version 4.1.3
  - Suppress SELinux relabelling output in quiet mode
  - Documentation readability improvements</changelog>
  <changelog author="iforster@suse.com" date="1678449600">- Version 4.1.4
  - Workaround for broken Tumbleweed package libfdisk1</changelog>
  <changelog author="iforster@suse.com" date="1696507200">- Version 4.1.6
  - Use permissions of real /etc when creating overlay
    [bsc#1215878]
- Version 4.1.5
  - Add support for configuration file snippets</changelog>
</package>
<package pkgid="b5322d0de7a71bb4baff8799c4f09db9f8ad3d1849b7b6f39e5817209f963733" name="typelib-1_0-HarfBuzz-0_0" arch="aarch64">
  <version epoch="0" ver="3.4.0" rel="150400.3.8.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1591185600">- Update to version 2.6.7:
  + Update to Unicode 13.0.0
  + Fix hb_ot_layout_get_ligature_carets for fonts without lcar
    table
- includes fixes from 2.6.6:
  * A fix in AAT kerning for Geeza Pro</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1592913600">- update to 2.6.8:
  + New API to fetch glyph alternates from GSUB table
  + New API +hb_ot_layout_lookup_get_glyph_alternates()
- Drop gpg2 BuildRequires and stop verifying signature during
  build: upstream no longer signs the tarball/signature.</changelog>
  <changelog author="dmueller@suse.com" date="1600344000">- Update to version 2.7.2:
  + Fix a regression in the previous release that caused a crash
    with Kaithi.
  + More OOM fixes.
  + ot-funcs now handles variable empty glyphs better when
    hvar/vvar isn't present.
  + Reverted a GDEF processing regression.
  + A couple of fixes to handle OOM better.
  + Use an implementation for round that always rounds up, some
    minor fluctuations are expected on var font specially when
    hb-ot callback is used.
  + Fix an AAT's `kerx` issue on broken rendering of Devanagari
    Sangam MN.
  + Remove AAT's `lcar` table support from _get_ligature_carets
    API, not even much use on macOS installed fonts (only two
    files). GDEF support is the recommended one and expected to
    work properly after issues fixed two releases ago.
  - Minor memory fixes to handle OOM better specially in hb-ft.
  - Minor .so files versioning scheme change and remove
    stable/unstable scheme differences, was never used in practice
    (always default to stable scheme).
  - We are now suggesting careful packaging of the library using
    meson, https://github.com/harfbuzz/harfbuzz/wiki/Notes-on-migration-to-meson
    for more information.
  - Distribution package URL is changed, either use GitHub
    generated tarballs,
    `https://github.com/harfbuzz/harfbuzz/archive/$pkgver.tar.gz`
    or, even more preferably use commit hash of the release and git
    checkouts like,
    `git+https://github.com/harfbuzz/harfbuzz#commit=$commit`</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609070400">- Update to version 2.7.4:
  + Fix missing --enable-introspection configure option
- Changes from version 2.7.3:
  + Update USE shaper to 2020-08-13 specification, and other
    improvements
  + Don’t disable liga feature in myanmar shaper, to match
    Uniscribe
  + Improvements to language and script tags handling.
  + Update language system tag registry to OpenType 1.8.4
  + Support for serializing and deserializing Unicode buffers
  + Increase buffer work limits to handle fonts with many complex
    lookups
  + Handle more shaping operations in trace output
  + Memory access fixes
  + More OOM fixes
  + Improved documentation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610107200">- Switch to meson buildsystem:
  + Add meson BuildRequires and macros.
  + Replace gcc-c++ for generic c++_compiler BuildRequires.
  + Add meson_test macro in check section, run tests during build.
  + Drop pkgconfig(graphite2) BuildRequires: No longer build
    graphite2 support, following upstream that disables this by
    default.
  + Stop packaging gtk-docs, pass -Ddocs=disabled to meson, this
    way we might avoid a build-cycle and since we did not have a
    explicit docs subpackage, just silently drop them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610539200">- Re-enable graphite2 support: TexLive relies on this to be
  present:
  + Pass -Dgraphite=enabled to meson.
  + Add pkgconfig(graphite2) BuildRequires.</changelog>
  <changelog author="christophe@krop.fr" date="1618315200">- Update to version 2.8.0:
  + Shape joining scripts other than Arabic/Syriac using the
    Universal Shaping Engine. Previously these were shaped using
    the generalized Arabic shaper.
  + Fix regression in shaping of U+0B55 ORIYA SIGN OVERLINE.
  + Update language tags.
  + Variations: reduce error: do not round each interpolated delta.
  + Documentation improvements.
  + Subsetter improvements: subsets most, if not all, lookup types
    now.
  + Fuzzer-found fixes and other improvements when memory failures
    happen.
  + Removed most atomic implementations now that we have C++11
    atomic impl.
  + General codebase upkeep; using more C++11 features: constexpr
    constructors, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620302400">- Update to version 2.8.1:
  + Subsetter now fully supports GSUB/GPOS/GDEF tables (including
    variations); as such, layout tables are retained by subsetter
    by default
  + hb-view supports iTerm2 and kitty inline image protocols
    it can also use Chafa for terminal graphics if available
- Add  pkgconfig(chafa): new, optional depdency.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1626264000">- Update to version 2.8.2:
  + Shaping LTR digits for RTL scripts now makes the native
    direction of the digits LTR, applying shaping and positioning
    rules on the same glyph order as Uniscribe
  + Subsetting COLR v1 and CPAL tables is now supported
  + Various fixes and improvements to the subsetter
  + When applying morx table, mark glyph widths should not be zeroed
  + GPOS is preferred over kerx, if GSUB was applied
  + Regional_Indicator pairs are grouped together when clustering</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Drop pkgconfig(chafa) BuildRequires for now: causes a cycle
  between chafa and harfbuzz, and disable it in meson</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631448000">- harfbuzz 2.9.1:
  + Subsetter API close to stable
  + Various fuzzer-found bug fixes
  + hb_buffer_append() now handles the pre- and post-context which
    previously were left unchanged in the destination buffer
  + hb-view / hb-shape now accept following new arguments:
  - -unicodes: takes a list of hex numbers that represent Unicode
    codepoints.
  + Undeprecated API: hb_set_invert()
- includes changes from 2.9.0:
  + Support multiple variation axes with same tag, aka HOI
  + The coretext testing shaper now passes font variations to
    CoreText
  + hb-shape/hb-view does not break line at new lines unless text
    is read from file
  + hb-view and hb-subset has a --batch now, similar to hb-shape
  + The --batch mode now uses ; as argument separator instead of :
    used previously
  + The --batch in hb-shape does not expect 0th argument anymore.
    That is, the lines read are interpreted as argv[1:], instead
    of argv[0:].
  + The --batch option has been undocumented. We are ready to
    document it; send feedback if you find it useful
  + hb-subset got arguments revamps. Added much-requested
  - -gids-file, --glyphs, --glyphs-file, --unicodes-file,
    supporting ranges in --unicodes.
  + Various bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631966400">- harfbuzz 3.0.0:
  + Unicode 14.0 support
  + hb-subset API and harfbuzz-subset ABI now declared stable
  + hb-style API is now stable</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1636200000">- harfbuzz 3.1.0:
  * Better offset-overflow handling in the subsetter library
  * Improved Unicode 14 properties in the USE shaper, and various
    other USE shaper fixes
  * MATH and COLR v1 tables subsetting support, and various other
    subsetter fixes
  * Support for Pwo Karen / Ason Chin medial la. (Simon Cozens)
  * Apply GPOS positioning when substituting with morx table, if
    kerx is missing
  * Apply calt and clig features across syllable boundaries in
    Indic shaper
  * Meson option for enabling Graphite 2 has been renamed to
    graphite2
  * Build and documentation fixes
- add harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636459200">- Update to version 3.1.1:
  + Work around GCC cast-align error/warning on some platforms.
  + Documentation improvements.
- Drop patch fixed upstream:
  + harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742400">- Update to 3.1.2:
  + hb-shape / hb-view: revert treating text on the commandline as
    single paragraph (was introduced in 3.0.0); add new
  - -single-par to do that
  + Subsetter bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742401">- Update to 3.2.0:
  + Fixed shaping of Apple Color Emoji flags in right-to-left context
  + Fixed positioning of CFF fonts in HB_TINY profile
  + OpenType 1.9 language tags update
  + Add HB_NO_VERTICAL config option
  + Add HB_CONFIG_OVERRIDE_H for easier configuration
  + Improved packing of cmap, loca, and Ligature tables
  + Significantly improved overflow-resolution strategy in the repacker</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644235200">- update to 3.3.2:
  + Revert splitting of pair positioning values introduced in 3.3.0
    as it proved problematic
- includes changes from 3.3.1:
  + Fix heap-use-after-free in harfbuzz-subset introduced in
    previous release
- includes changes from 3.3.0:
  + Improved documentation, code cleanup
  + The low 16-bits of face index will be used by hb_face_create()
    to select a face inside a font collection file format, while the
    high 16-bits will be used by hb_font_create() to load the named
    instance
  + Glyph positions and other font metrics now apply synthetic slant
    set by hb_font_set_synthetic_slant(), for improved positioning
    for synthetically slanted fonts
  + Fixed unintentional locale dependency in hb_variation_to_string()
    for decimal point representation
  + When applying pair positioning (kerning) the positioning value
    is split between the two sides of the pair for improved cursor
    positioning between such pairs
  + Introduced new HB_GLYPH_FLAG_UNSAFE_TO_CONCAT, to be used in
    conjunction with HB_GLYPH_FLAG_UNSAFE_TO_BREAK for optimizing
    re-shaping during line breaking. Check the documentation for
    further details
  + Improved handling of macrolanguages when mapping BCP 47 codes
    to OpenType tags</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644753600">- update to 3.4.0:
  + Perform sanity checks on shaping results is now part of
    “harfbuzz” library and can be enabled by setting the buffer
    flag HB_BUFFER_FLAG_VERIFY
  + Arabic Mark Transient Reordering Algorithm have been updated
    to revision 6
  + ISO 15924 code for mathematical notation, ‘Zmth’, now maps to
    the OpenType ‘math’ tag
  + It is now possible to get at once all math kerning values for a
    given glyph at a given corner
  + Fix locale_t portability issues on systems the typedef’s it to
    a void pointer</changelog>
  <changelog author="mgorse@suse.com" date="1658836800">- Add harfbuzz-CVE-2022-33068.patch: sbix: limit glyph extents
  (boo#1200900 CVE-2022-33068).</changelog>
  <changelog author="mgorse@suse.com" date="1680696000">- Add CVE-2023-25193.patch: limit how far we skip when looking
  back (bsc#1207922 CVE-2023-25193).</changelog>
</package>
<package pkgid="26189e68a97c58b9fb27de7db2b4cc5e52c75f012e69c60455f0ad9308a80f24" name="typelib-1_0-HarfBuzz-0_0" arch="s390x">
  <version epoch="0" ver="3.4.0" rel="150400.3.8.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1591185600">- Update to version 2.6.7:
  + Update to Unicode 13.0.0
  + Fix hb_ot_layout_get_ligature_carets for fonts without lcar
    table
- includes fixes from 2.6.6:
  * A fix in AAT kerning for Geeza Pro</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1592913600">- update to 2.6.8:
  + New API to fetch glyph alternates from GSUB table
  + New API +hb_ot_layout_lookup_get_glyph_alternates()
- Drop gpg2 BuildRequires and stop verifying signature during
  build: upstream no longer signs the tarball/signature.</changelog>
  <changelog author="dmueller@suse.com" date="1600344000">- Update to version 2.7.2:
  + Fix a regression in the previous release that caused a crash
    with Kaithi.
  + More OOM fixes.
  + ot-funcs now handles variable empty glyphs better when
    hvar/vvar isn't present.
  + Reverted a GDEF processing regression.
  + A couple of fixes to handle OOM better.
  + Use an implementation for round that always rounds up, some
    minor fluctuations are expected on var font specially when
    hb-ot callback is used.
  + Fix an AAT's `kerx` issue on broken rendering of Devanagari
    Sangam MN.
  + Remove AAT's `lcar` table support from _get_ligature_carets
    API, not even much use on macOS installed fonts (only two
    files). GDEF support is the recommended one and expected to
    work properly after issues fixed two releases ago.
  - Minor memory fixes to handle OOM better specially in hb-ft.
  - Minor .so files versioning scheme change and remove
    stable/unstable scheme differences, was never used in practice
    (always default to stable scheme).
  - We are now suggesting careful packaging of the library using
    meson, https://github.com/harfbuzz/harfbuzz/wiki/Notes-on-migration-to-meson
    for more information.
  - Distribution package URL is changed, either use GitHub
    generated tarballs,
    `https://github.com/harfbuzz/harfbuzz/archive/$pkgver.tar.gz`
    or, even more preferably use commit hash of the release and git
    checkouts like,
    `git+https://github.com/harfbuzz/harfbuzz#commit=$commit`</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609070400">- Update to version 2.7.4:
  + Fix missing --enable-introspection configure option
- Changes from version 2.7.3:
  + Update USE shaper to 2020-08-13 specification, and other
    improvements
  + Don’t disable liga feature in myanmar shaper, to match
    Uniscribe
  + Improvements to language and script tags handling.
  + Update language system tag registry to OpenType 1.8.4
  + Support for serializing and deserializing Unicode buffers
  + Increase buffer work limits to handle fonts with many complex
    lookups
  + Handle more shaping operations in trace output
  + Memory access fixes
  + More OOM fixes
  + Improved documentation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610107200">- Switch to meson buildsystem:
  + Add meson BuildRequires and macros.
  + Replace gcc-c++ for generic c++_compiler BuildRequires.
  + Add meson_test macro in check section, run tests during build.
  + Drop pkgconfig(graphite2) BuildRequires: No longer build
    graphite2 support, following upstream that disables this by
    default.
  + Stop packaging gtk-docs, pass -Ddocs=disabled to meson, this
    way we might avoid a build-cycle and since we did not have a
    explicit docs subpackage, just silently drop them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610539200">- Re-enable graphite2 support: TexLive relies on this to be
  present:
  + Pass -Dgraphite=enabled to meson.
  + Add pkgconfig(graphite2) BuildRequires.</changelog>
  <changelog author="christophe@krop.fr" date="1618315200">- Update to version 2.8.0:
  + Shape joining scripts other than Arabic/Syriac using the
    Universal Shaping Engine. Previously these were shaped using
    the generalized Arabic shaper.
  + Fix regression in shaping of U+0B55 ORIYA SIGN OVERLINE.
  + Update language tags.
  + Variations: reduce error: do not round each interpolated delta.
  + Documentation improvements.
  + Subsetter improvements: subsets most, if not all, lookup types
    now.
  + Fuzzer-found fixes and other improvements when memory failures
    happen.
  + Removed most atomic implementations now that we have C++11
    atomic impl.
  + General codebase upkeep; using more C++11 features: constexpr
    constructors, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620302400">- Update to version 2.8.1:
  + Subsetter now fully supports GSUB/GPOS/GDEF tables (including
    variations); as such, layout tables are retained by subsetter
    by default
  + hb-view supports iTerm2 and kitty inline image protocols
    it can also use Chafa for terminal graphics if available
- Add  pkgconfig(chafa): new, optional depdency.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1626264000">- Update to version 2.8.2:
  + Shaping LTR digits for RTL scripts now makes the native
    direction of the digits LTR, applying shaping and positioning
    rules on the same glyph order as Uniscribe
  + Subsetting COLR v1 and CPAL tables is now supported
  + Various fixes and improvements to the subsetter
  + When applying morx table, mark glyph widths should not be zeroed
  + GPOS is preferred over kerx, if GSUB was applied
  + Regional_Indicator pairs are grouped together when clustering</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Drop pkgconfig(chafa) BuildRequires for now: causes a cycle
  between chafa and harfbuzz, and disable it in meson</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631448000">- harfbuzz 2.9.1:
  + Subsetter API close to stable
  + Various fuzzer-found bug fixes
  + hb_buffer_append() now handles the pre- and post-context which
    previously were left unchanged in the destination buffer
  + hb-view / hb-shape now accept following new arguments:
  - -unicodes: takes a list of hex numbers that represent Unicode
    codepoints.
  + Undeprecated API: hb_set_invert()
- includes changes from 2.9.0:
  + Support multiple variation axes with same tag, aka HOI
  + The coretext testing shaper now passes font variations to
    CoreText
  + hb-shape/hb-view does not break line at new lines unless text
    is read from file
  + hb-view and hb-subset has a --batch now, similar to hb-shape
  + The --batch mode now uses ; as argument separator instead of :
    used previously
  + The --batch in hb-shape does not expect 0th argument anymore.
    That is, the lines read are interpreted as argv[1:], instead
    of argv[0:].
  + The --batch option has been undocumented. We are ready to
    document it; send feedback if you find it useful
  + hb-subset got arguments revamps. Added much-requested
  - -gids-file, --glyphs, --glyphs-file, --unicodes-file,
    supporting ranges in --unicodes.
  + Various bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631966400">- harfbuzz 3.0.0:
  + Unicode 14.0 support
  + hb-subset API and harfbuzz-subset ABI now declared stable
  + hb-style API is now stable</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1636200000">- harfbuzz 3.1.0:
  * Better offset-overflow handling in the subsetter library
  * Improved Unicode 14 properties in the USE shaper, and various
    other USE shaper fixes
  * MATH and COLR v1 tables subsetting support, and various other
    subsetter fixes
  * Support for Pwo Karen / Ason Chin medial la. (Simon Cozens)
  * Apply GPOS positioning when substituting with morx table, if
    kerx is missing
  * Apply calt and clig features across syllable boundaries in
    Indic shaper
  * Meson option for enabling Graphite 2 has been renamed to
    graphite2
  * Build and documentation fixes
- add harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636459200">- Update to version 3.1.1:
  + Work around GCC cast-align error/warning on some platforms.
  + Documentation improvements.
- Drop patch fixed upstream:
  + harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742400">- Update to 3.1.2:
  + hb-shape / hb-view: revert treating text on the commandline as
    single paragraph (was introduced in 3.0.0); add new
  - -single-par to do that
  + Subsetter bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742401">- Update to 3.2.0:
  + Fixed shaping of Apple Color Emoji flags in right-to-left context
  + Fixed positioning of CFF fonts in HB_TINY profile
  + OpenType 1.9 language tags update
  + Add HB_NO_VERTICAL config option
  + Add HB_CONFIG_OVERRIDE_H for easier configuration
  + Improved packing of cmap, loca, and Ligature tables
  + Significantly improved overflow-resolution strategy in the repacker</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644235200">- update to 3.3.2:
  + Revert splitting of pair positioning values introduced in 3.3.0
    as it proved problematic
- includes changes from 3.3.1:
  + Fix heap-use-after-free in harfbuzz-subset introduced in
    previous release
- includes changes from 3.3.0:
  + Improved documentation, code cleanup
  + The low 16-bits of face index will be used by hb_face_create()
    to select a face inside a font collection file format, while the
    high 16-bits will be used by hb_font_create() to load the named
    instance
  + Glyph positions and other font metrics now apply synthetic slant
    set by hb_font_set_synthetic_slant(), for improved positioning
    for synthetically slanted fonts
  + Fixed unintentional locale dependency in hb_variation_to_string()
    for decimal point representation
  + When applying pair positioning (kerning) the positioning value
    is split between the two sides of the pair for improved cursor
    positioning between such pairs
  + Introduced new HB_GLYPH_FLAG_UNSAFE_TO_CONCAT, to be used in
    conjunction with HB_GLYPH_FLAG_UNSAFE_TO_BREAK for optimizing
    re-shaping during line breaking. Check the documentation for
    further details
  + Improved handling of macrolanguages when mapping BCP 47 codes
    to OpenType tags</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644753600">- update to 3.4.0:
  + Perform sanity checks on shaping results is now part of
    “harfbuzz” library and can be enabled by setting the buffer
    flag HB_BUFFER_FLAG_VERIFY
  + Arabic Mark Transient Reordering Algorithm have been updated
    to revision 6
  + ISO 15924 code for mathematical notation, ‘Zmth’, now maps to
    the OpenType ‘math’ tag
  + It is now possible to get at once all math kerning values for a
    given glyph at a given corner
  + Fix locale_t portability issues on systems the typedef’s it to
    a void pointer</changelog>
  <changelog author="mgorse@suse.com" date="1658836800">- Add harfbuzz-CVE-2022-33068.patch: sbix: limit glyph extents
  (boo#1200900 CVE-2022-33068).</changelog>
  <changelog author="mgorse@suse.com" date="1680696000">- Add CVE-2023-25193.patch: limit how far we skip when looking
  back (bsc#1207922 CVE-2023-25193).</changelog>
</package>
<package pkgid="42a92064a109b0c455f4bc7403126d6cd262ddd343088e42ed49488597c73a17" name="typelib-1_0-HarfBuzz-0_0" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="150400.3.8.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1591185600">- Update to version 2.6.7:
  + Update to Unicode 13.0.0
  + Fix hb_ot_layout_get_ligature_carets for fonts without lcar
    table
- includes fixes from 2.6.6:
  * A fix in AAT kerning for Geeza Pro</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1592913600">- update to 2.6.8:
  + New API to fetch glyph alternates from GSUB table
  + New API +hb_ot_layout_lookup_get_glyph_alternates()
- Drop gpg2 BuildRequires and stop verifying signature during
  build: upstream no longer signs the tarball/signature.</changelog>
  <changelog author="dmueller@suse.com" date="1600344000">- Update to version 2.7.2:
  + Fix a regression in the previous release that caused a crash
    with Kaithi.
  + More OOM fixes.
  + ot-funcs now handles variable empty glyphs better when
    hvar/vvar isn't present.
  + Reverted a GDEF processing regression.
  + A couple of fixes to handle OOM better.
  + Use an implementation for round that always rounds up, some
    minor fluctuations are expected on var font specially when
    hb-ot callback is used.
  + Fix an AAT's `kerx` issue on broken rendering of Devanagari
    Sangam MN.
  + Remove AAT's `lcar` table support from _get_ligature_carets
    API, not even much use on macOS installed fonts (only two
    files). GDEF support is the recommended one and expected to
    work properly after issues fixed two releases ago.
  - Minor memory fixes to handle OOM better specially in hb-ft.
  - Minor .so files versioning scheme change and remove
    stable/unstable scheme differences, was never used in practice
    (always default to stable scheme).
  - We are now suggesting careful packaging of the library using
    meson, https://github.com/harfbuzz/harfbuzz/wiki/Notes-on-migration-to-meson
    for more information.
  - Distribution package URL is changed, either use GitHub
    generated tarballs,
    `https://github.com/harfbuzz/harfbuzz/archive/$pkgver.tar.gz`
    or, even more preferably use commit hash of the release and git
    checkouts like,
    `git+https://github.com/harfbuzz/harfbuzz#commit=$commit`</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609070400">- Update to version 2.7.4:
  + Fix missing --enable-introspection configure option
- Changes from version 2.7.3:
  + Update USE shaper to 2020-08-13 specification, and other
    improvements
  + Don’t disable liga feature in myanmar shaper, to match
    Uniscribe
  + Improvements to language and script tags handling.
  + Update language system tag registry to OpenType 1.8.4
  + Support for serializing and deserializing Unicode buffers
  + Increase buffer work limits to handle fonts with many complex
    lookups
  + Handle more shaping operations in trace output
  + Memory access fixes
  + More OOM fixes
  + Improved documentation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610107200">- Switch to meson buildsystem:
  + Add meson BuildRequires and macros.
  + Replace gcc-c++ for generic c++_compiler BuildRequires.
  + Add meson_test macro in check section, run tests during build.
  + Drop pkgconfig(graphite2) BuildRequires: No longer build
    graphite2 support, following upstream that disables this by
    default.
  + Stop packaging gtk-docs, pass -Ddocs=disabled to meson, this
    way we might avoid a build-cycle and since we did not have a
    explicit docs subpackage, just silently drop them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610539200">- Re-enable graphite2 support: TexLive relies on this to be
  present:
  + Pass -Dgraphite=enabled to meson.
  + Add pkgconfig(graphite2) BuildRequires.</changelog>
  <changelog author="christophe@krop.fr" date="1618315200">- Update to version 2.8.0:
  + Shape joining scripts other than Arabic/Syriac using the
    Universal Shaping Engine. Previously these were shaped using
    the generalized Arabic shaper.
  + Fix regression in shaping of U+0B55 ORIYA SIGN OVERLINE.
  + Update language tags.
  + Variations: reduce error: do not round each interpolated delta.
  + Documentation improvements.
  + Subsetter improvements: subsets most, if not all, lookup types
    now.
  + Fuzzer-found fixes and other improvements when memory failures
    happen.
  + Removed most atomic implementations now that we have C++11
    atomic impl.
  + General codebase upkeep; using more C++11 features: constexpr
    constructors, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620302400">- Update to version 2.8.1:
  + Subsetter now fully supports GSUB/GPOS/GDEF tables (including
    variations); as such, layout tables are retained by subsetter
    by default
  + hb-view supports iTerm2 and kitty inline image protocols
    it can also use Chafa for terminal graphics if available
- Add  pkgconfig(chafa): new, optional depdency.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1626264000">- Update to version 2.8.2:
  + Shaping LTR digits for RTL scripts now makes the native
    direction of the digits LTR, applying shaping and positioning
    rules on the same glyph order as Uniscribe
  + Subsetting COLR v1 and CPAL tables is now supported
  + Various fixes and improvements to the subsetter
  + When applying morx table, mark glyph widths should not be zeroed
  + GPOS is preferred over kerx, if GSUB was applied
  + Regional_Indicator pairs are grouped together when clustering</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Drop pkgconfig(chafa) BuildRequires for now: causes a cycle
  between chafa and harfbuzz, and disable it in meson</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631448000">- harfbuzz 2.9.1:
  + Subsetter API close to stable
  + Various fuzzer-found bug fixes
  + hb_buffer_append() now handles the pre- and post-context which
    previously were left unchanged in the destination buffer
  + hb-view / hb-shape now accept following new arguments:
  - -unicodes: takes a list of hex numbers that represent Unicode
    codepoints.
  + Undeprecated API: hb_set_invert()
- includes changes from 2.9.0:
  + Support multiple variation axes with same tag, aka HOI
  + The coretext testing shaper now passes font variations to
    CoreText
  + hb-shape/hb-view does not break line at new lines unless text
    is read from file
  + hb-view and hb-subset has a --batch now, similar to hb-shape
  + The --batch mode now uses ; as argument separator instead of :
    used previously
  + The --batch in hb-shape does not expect 0th argument anymore.
    That is, the lines read are interpreted as argv[1:], instead
    of argv[0:].
  + The --batch option has been undocumented. We are ready to
    document it; send feedback if you find it useful
  + hb-subset got arguments revamps. Added much-requested
  - -gids-file, --glyphs, --glyphs-file, --unicodes-file,
    supporting ranges in --unicodes.
  + Various bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631966400">- harfbuzz 3.0.0:
  + Unicode 14.0 support
  + hb-subset API and harfbuzz-subset ABI now declared stable
  + hb-style API is now stable</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1636200000">- harfbuzz 3.1.0:
  * Better offset-overflow handling in the subsetter library
  * Improved Unicode 14 properties in the USE shaper, and various
    other USE shaper fixes
  * MATH and COLR v1 tables subsetting support, and various other
    subsetter fixes
  * Support for Pwo Karen / Ason Chin medial la. (Simon Cozens)
  * Apply GPOS positioning when substituting with morx table, if
    kerx is missing
  * Apply calt and clig features across syllable boundaries in
    Indic shaper
  * Meson option for enabling Graphite 2 has been renamed to
    graphite2
  * Build and documentation fixes
- add harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636459200">- Update to version 3.1.1:
  + Work around GCC cast-align error/warning on some platforms.
  + Documentation improvements.
- Drop patch fixed upstream:
  + harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742400">- Update to 3.1.2:
  + hb-shape / hb-view: revert treating text on the commandline as
    single paragraph (was introduced in 3.0.0); add new
  - -single-par to do that
  + Subsetter bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742401">- Update to 3.2.0:
  + Fixed shaping of Apple Color Emoji flags in right-to-left context
  + Fixed positioning of CFF fonts in HB_TINY profile
  + OpenType 1.9 language tags update
  + Add HB_NO_VERTICAL config option
  + Add HB_CONFIG_OVERRIDE_H for easier configuration
  + Improved packing of cmap, loca, and Ligature tables
  + Significantly improved overflow-resolution strategy in the repacker</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644235200">- update to 3.3.2:
  + Revert splitting of pair positioning values introduced in 3.3.0
    as it proved problematic
- includes changes from 3.3.1:
  + Fix heap-use-after-free in harfbuzz-subset introduced in
    previous release
- includes changes from 3.3.0:
  + Improved documentation, code cleanup
  + The low 16-bits of face index will be used by hb_face_create()
    to select a face inside a font collection file format, while the
    high 16-bits will be used by hb_font_create() to load the named
    instance
  + Glyph positions and other font metrics now apply synthetic slant
    set by hb_font_set_synthetic_slant(), for improved positioning
    for synthetically slanted fonts
  + Fixed unintentional locale dependency in hb_variation_to_string()
    for decimal point representation
  + When applying pair positioning (kerning) the positioning value
    is split between the two sides of the pair for improved cursor
    positioning between such pairs
  + Introduced new HB_GLYPH_FLAG_UNSAFE_TO_CONCAT, to be used in
    conjunction with HB_GLYPH_FLAG_UNSAFE_TO_BREAK for optimizing
    re-shaping during line breaking. Check the documentation for
    further details
  + Improved handling of macrolanguages when mapping BCP 47 codes
    to OpenType tags</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644753600">- update to 3.4.0:
  + Perform sanity checks on shaping results is now part of
    “harfbuzz” library and can be enabled by setting the buffer
    flag HB_BUFFER_FLAG_VERIFY
  + Arabic Mark Transient Reordering Algorithm have been updated
    to revision 6
  + ISO 15924 code for mathematical notation, ‘Zmth’, now maps to
    the OpenType ‘math’ tag
  + It is now possible to get at once all math kerning values for a
    given glyph at a given corner
  + Fix locale_t portability issues on systems the typedef’s it to
    a void pointer</changelog>
  <changelog author="mgorse@suse.com" date="1658836800">- Add harfbuzz-CVE-2022-33068.patch: sbix: limit glyph extents
  (boo#1200900 CVE-2022-33068).</changelog>
  <changelog author="mgorse@suse.com" date="1680696000">- Add CVE-2023-25193.patch: limit how far we skip when looking
  back (bsc#1207922 CVE-2023-25193).</changelog>
</package>
<package pkgid="804e8d94837b6ef0fa206da78f31162ddce288b617e4e7c9d4955fc2b89ce1b7" name="typelib-1_0-NM-1_0" arch="aarch64">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="3b13809bbc41d3f5bb96b716bb77ae7aa4be7f896d8ed95ee1c3844ca5b95bdc" name="typelib-1_0-NM-1_0" arch="s390x">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="68ef7e0f2f71df6ff90dc97cf2dafee45f3a391b396297a61cc8f2c068c70387" name="typelib-1_0-NM-1_0" arch="x86_64">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="70a353a245b57577a78ebf00c9f2f1e695e31d9e6309af8e63800436ef12c098" name="ucode-amd" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="f7df6dca0732c5fcf6bf438e72497b1b8cb5c6e16b698a1b7086590a52bc3b2e" name="ucode-intel" arch="src">
  <version epoch="0" ver="20231113" rel="150200.32.1"/>
  <changelog author="meissner@suse.com" date="1574164800">- Updated to 20191115 release (bsc#1157004)
  - Processor             Identifier     Version       Products
  - Model        Stepping F-MO-S/PI      Old-&gt;New
  - ---- updated platforms ------------------------------------
  - SKL-U/Y      D0       6-4e-3/c0 000000d4-&gt;000000d6 Core Gen6 Mobile
  - SKL-U23e     K1       6-4e-3/c0 000000d4-&gt;000000d6 Core Gen6 Mobile
  - SKL-H/S/E3   N0/R0/S0 6-5e-3/36 000000d4-&gt;000000d6 Core Gen6
  - AML-Y22      H0       6-8e-9/10 000000c6-&gt;000000ca Core Gen8 Mobile
  - KBL-U/Y      H0       6-8e-9/c0 000000c6-&gt;000000ca Core Gen7 Mobile
  - KBL-U23e     J1       6-8e-9/c0 000000c6-&gt;000000ca Core Gen7 Mobile
  - CFL-U43e     D0       6-8e-a/c0 000000c6-&gt;000000ca Core Gen8 Mobile
  - KBL-R U      Y0       6-8e-a/c0 000000c6-&gt;000000ca Core Gen8 Mobile
  - WHL-U        W0       6-8e-b/d0 000000c6-&gt;000000ca Core Gen8 Mobile
  - AML-Y42      V0       6-8e-c/94 000000c6-&gt;000000ca Core Gen10 Mobile
  - WHL-U        V0       6-8e-c/94 000000c6-&gt;000000ca Core Gen8 Mobile
  - CML-U42      V0       6-8e-c/94 000000c6-&gt;000000ca Core Gen10 Mobile
  - KBL-G/H/S/X/E3 B0     6-9e-9/2a 000000c6-&gt;000000ca Core Gen7 Desktop, Mobile, Xeon E3 v6
  - CFL-H/S/E3   U0       6-9e-a/22 000000c6-&gt;000000ca Core Gen8 Desktop, Mobile, Xeon E
  - CFL-S        B0       6-9e-b/02 000000c6-&gt;000000ca Core Gen8
  - CFL-S        P0       6-9e-c/22 000000c6-&gt;000000ca Core Gen9 Desktop
  - CFL-H/S/E3   R0       6-9e-d/22 000000c6-&gt;000000ca Core Gen9 Desktop, Mobile, Xeon E
  - CML-U62      A0       6-a6-0/80 000000c6-&gt;000000ca Core Gen10 Mobile
- Updated to 20191113 release
  - Processor             Identifier     Version       Products
  - Model        Stepping F-MO-S/PI      Old-&gt;New
  - ---- updated platforms ------------------------------------
  - CFL-S        P0       6-9e-c/22 000000a2-&gt;000000c6 Core Gen9 Desktop</changelog>
  <changelog author="meissner@suse.com" date="1579089600">- reverted the entry below to 02000064 due to occasional faults (bsc#1160478)
  - SKX-SP       H0/M0/U0 6-55-4/b7 02000064-&gt;02000065 Xeon Scalable</changelog>
  <changelog author="meissner@suse.com" date="1587470400">- updated skylake microcode to the current version. (bsc#1169570)
  - 02000064-&gt;02006901</changelog>
  <changelog author="meissner@suse.com" date="1591185600">- Updated Intel CPU Microcode to 20200602 (prerelease) (bsc#1172466)
  Fixes for:
  - CVE-2020-0543: Fixed a side channel attack against special registers
    which could have resulted in leaking of read values to cores other
    than the one which called it.  This attack is known as Special Register
    Buffer Data Sampling (SRBDS) or "CrossTalk" (bsc#1154824).
  - CVE-2020-0548,CVE-2020-0549: Additional ucode updates were supplied to
    mitigate the Vector Register and L1D Eviction Sampling aka "CacheOutAttack"
    attacks. (bsc#1156353)
  == 20200602_DEMO Release ==
  - - Updates upon 20200520 release --
  Processor             Identifier     Version       Products
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- new platforms ----------------------------------------
  - --- updated platforms ------------------------------------
  HSW          C0       6-3c-3/32 00000027-&gt;00000028 Core Gen4
  BDW-U/Y      E0/F0    6-3d-4/c0 0000002e-&gt;0000002f Core Gen5
  HSW-U        C0/D0    6-45-1/72 00000025-&gt;00000026 Core Gen4
  HSW-H        C0       6-46-1/32 0000001b-&gt;0000001c Core Gen4
  BDW-H/E3     E0/G0    6-47-1/22 00000021-&gt;00000022 Core Gen5
  SKL-U/Y      D0       6-4e-3/c0 000000d6-&gt;000000dc Core Gen6 Mobile
  SKL-U23e     K1       6-4e-3/c0 000000d6-&gt;000000dc Core Gen6 Mobile
  SKX-SP       B1       6-55-3/97 01000151-&gt;01000157 Xeon Scalable
  SKX-SP       H0/M0/U0 6-55-4/b7 02000065-&gt;02006906 Xeon Scalable
  SKX-D        M1       6-55-4/b7 02000065-&gt;02006906 Xeon D-21xx
  CLX-SP       B0       6-55-6/bf 0400002c-&gt;04002f01 Xeon Scalable Gen2
  CLX-SP       B1       6-55-7/bf 0500002c-&gt;04002f01 Xeon Scalable Gen2
  SKL-H/S      R0/N0    6-5e-3/36 000000d6-&gt;000000dc Core Gen6; Xeon E3 v5
  AML-Y22      H0       6-8e-9/10 000000ca-&gt;000000d6 Core Gen8 Mobile
  KBL-U/Y      H0       6-8e-9/c0 000000ca-&gt;000000d6 Core Gen7 Mobile
  CFL-U43e     D0       6-8e-a/c0 000000ca-&gt;000000d6 Core Gen8 Mobile
  WHL-U        W0       6-8e-b/d0 000000ca-&gt;000000d6 Core Gen8 Mobile
  AML-Y42      V0       6-8e-c/94 000000ca-&gt;000000d6 Core Gen10 Mobile
  CML-Y42      V0       6-8e-c/94 000000ca-&gt;000000d6 Core Gen10 Mobile
  WHL-U        V0       6-8e-c/94 000000ca-&gt;000000d6 Core Gen8 Mobile
  KBL-G/H/S/E3 B0       6-9e-9/2a 000000ca-&gt;000000d6 Core Gen7; Xeon E3 v6
  CFL-H/S/E3   U0       6-9e-a/22 000000ca-&gt;000000d6 Core Gen8 Desktop, Mobile, Xeon E
  CFL-S        B0       6-9e-b/02 000000ca-&gt;000000d6 Core Gen8
  CFL-H/S      P0       6-9e-c/22 000000ca-&gt;000000d6 Core Gen9
  CFL-H        R0       6-9e-d/22 000000ca-&gt;000000d6 Core Gen9 Mobile
- Updated Intel CPU Microcode to 20200520
  Processor             Identifier     Version       Products
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- new platforms ----------------------------------------
  - --- updated platforms ------------------------------------
  SNB-E/EN/EP  C1/M0    6-2d-6/6d 0000061f-&gt;00000621 Xeon E3/E5, Core X
  SNB-E/EN/EP  C2/M1    6-2d-7/6d 00000718-&gt;0000071a Xeon E3/E5, Core X</changelog>
  <changelog author="meissner@suse.com" date="1592222400">- Updated Intel CPU Microcode to 20200609 official release (bsc#1172466)
  - no changes to 20200602 prerelease</changelog>
  <changelog author="meissner@suse.com" date="1592395200">- Updated Intel CPU Microcode to 20200616 official release (bsc#1172856)
  - revert 06-4e-03 Skylake U/Y, U23e ucode back to 000000d6 release
  - revert 06-5e-03 Skylake H/S ucode back to 000000d6 release,
    as both cause stability issues.  (bsc#1172856)</changelog>
  <changelog author="meissner@suse.com" date="1604491200">- Updated Intel CPU Microcode to 20201027 prerelease (bsc#1170446)
  - CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX)
  [#] New Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | TGL            | B1       | 06-8c-01/80 |          | 00000068 | Core Gen11 Mobile
  | CPX-SP         | A1       | 06-55-0b/bf |          | 0700001e | Xeon Scalable Gen3
  | CML-H          | R1       | 06-a5-02/20 |          | 000000e0 | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 |          | 000000e0 | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 |          | 000000e0 | Core Gen10
  | CML-U62 V2     | K0       | 06-a6-01/80 |          | 000000e0 | Core Gen10 Mobile
  [#] Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | GKL-R          | R0       | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | SKL-U23e       | K1       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | APL            | D0       | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5
  | HSX-E/EP       | Cx/M1    | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3
  | SKX-SP         | B1       | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2
  | ICL-U/Y        | D1       | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile
  | AML-Y22        | H0       | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile
  | CML-U62        | A0       | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile</changelog>
  <changelog author="meissner@suse.com" date="1605096000">- Updated Intel CPU Microcode to 20201110 official release.
  - CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX) (bsc#1170446)
  - CVE-2020-8698: Fixed Fast Store Forward Predictor INTEL-SA-00381 (bsc#1173594)
  - CVE-2020-8696: Vector Register Sampling Active INTEL-SA-00381 (bsc#1173592)
- Releasenotes:
  - Security updates for [INTEL-SA-00381](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html).
  - Security updates for [INTEL-SA-00389](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00389.html).
  - Update for functional issues. Refer to [Second Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
  - Update for functional issues. Refer to [Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.
  - Update for functional issues. Refer to [Intel® Xeon® Processor E5 v3 Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e5-v3-spec-update.html?wapkw=processor+spec+update+e5) for details.
  - Update for functional issues. Refer to [10th Gen Intel® Core™ Processor Families Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/10th-gen-core-families-specification-update.html) for details.
  - Update for functional issues. Refer to [8th and 9th Gen Intel® Core™ Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-spec-update.html) for details.
  - Update for functional issues. Refer to [7th Gen and 8th Gen (U Quad-Core) Intel® Processor Families Specification Update](https://www.intel.com/content/www/us/en/processors/core/7th-gen-core-family-spec-update.html) for details.
  - Update for functional issues. Refer to [6th Gen Intel® Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/332689) for details.
  - Update for functional issues. Refer to [Intel® Xeon® E3-1200 v6 Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e3-1200v6-spec-update.html) for details.
  - Update for functional issues. Refer to [Intel® Xeon® E-2100 and E-2200 Processor Family Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-e-2100-specification-update.html) for details.
  [#]## New Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | CPX-SP         | A1       | 06-55-0b/bf |          | 0700001e | Xeon Scalable Gen3
  | LKF            | B2/B3    | 06-8a-01/10 |          | 00000028 | Core w/Hybrid Technology
  | TGL            | B1       | 06-8c-01/80 |          | 00000068 | Core Gen11 Mobile
  | CML-H          | R1       | 06-a5-02/20 |          | 000000e0 | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 |          | 000000e0 | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 |          | 000000e0 | Core Gen10
  | CML-U62 V2     | K0       | 06-a6-01/80 |          | 000000e0 | Core Gen10 Mobile
  [#]## Updated Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | HSX-E/EP       | Cx/M1    | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | SKL-U23e       | K1       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | SKX-SP         | B1       | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2
  | APL            | D0       | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5
  | GKL-R          | R0       | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile
  | AML-Y22        | H0       | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile
  | CML-U62        | A0       | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile</changelog>
  <changelog author="meissner@suse.com" date="1605787200">- Updated Intel CPU Microcode to 20201118 official release. (bsc#1178971)
  - Removed TGL/06-8c-01/80 due to functional issues with some OEM platforms.</changelog>
  <changelog author="meissner@suse.com" date="1607342400">- Reverted 3 microcodes back to 20200616 release level after regression reports. (bsc#1179224)
  - SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006906 | Xeon Scalable
  - SKX-D          | M1       | 06-55-04/b7 | 02006906 | Xeon D-21xx
  - CLX-SP         | B0       | 06-55-06/bf | 04002f01 | Xeon Scalable Gen2
  - CLX-SP         | B1       | 06-55-07/bf | 05002f01 | Xeon Scalable Gen2</changelog>
  <changelog author="meissner@suse.com" date="1613563200">- Updated Intel CPU Microcode to 20210216 official release. (bsc#1178971 bsc#1179224)
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006a08 | 02006a0a | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006a08 | 02006a0a | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04003003 | 04003006 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003003 | 05003006 | Xeon Scalable Gen2</changelog>
  <changelog author="meissner@suse.com" date="1623153600">- Updated to Intel CPU Microcode 20210525 release.
  - CVE-2020-24513: A domain bypass transient execution vulnerability was discovered on some Intel Atom processors that use a micro-architectural incident channel. (INTEL-SA-00465 bsc#1179833)
    See also: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00465.html
  - CVE-2020-24511: The IBRS feature to mitigate Spectre variant 2 transient execution side channel vulnerabilities may not fully prevent non-root (guest) branches from controlling the branch predictions of the root (host) (INTEL-SA-00464 bsc#1179836)
    See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)
  - CVE-2020-24512: Fixed trivial data value cache-lines such as all-zero value cache-lines may lead to changes in cache-allocation or write-back behavior for such cache-lines (bsc#1179837 INTEL-SA-00464)
    See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)
  - CVE-2020-24489: Fixed Intel VT-d device pass through potential local privilege escalation (INTEL-SA-00442 bsc#1179839)
    See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00442.html
- Update for functional issues. Refer to [Third Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780)for details.
- Update for functional issues. Refer to [Second Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
- Update for functional issues. Refer to [Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.
- Update for functional issues. Refer to [Intel Xeon Processor D-1500, D-1500 NS and D-1600 NS Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-d-1500-specification-update.html) for details.
- Update for functional issues. Refer to [Intel Xeon E7-8800 and E7-4800 v3 Processor Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e7-v3-spec-update.html) for details.
- Update for functional issues. Refer to [Intel Xeon Processor E5 v3 Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e5-v3-spec-update.html?wapkw=processor+spec+update+e5) for details.
- Update for functional issues. Refer to [10th Gen Intel Core Processor Families Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/10th-gen-core-families-specification-update.html) for details.
- Update for functional issues. Refer to [8th and 9th Gen Intel Core Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-spec-update.html) for details.
- Update for functional issues. Refer to [7th Gen and 8th Gen (U Quad-Core) Intel Processor Families Specification Update](https://www.intel.com/content/www/us/en/processors/core/7th-gen-core-family-spec-update.html) for details.
- Update for functional issues. Refer to [6th Gen Intel Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/332689) for details.
- Update for functional issues. Refer to [Intel Xeon E3-1200 v6 Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e3-1200v6-spec-update.html) for details.
- Update for functional issues. Refer to [Intel Xeon E-2100 and E-2200 Processor Family Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-e-2100-specification-update.html) for details.
- New platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | CLX-SP         | A0       | 06-55-05/b7 |          | 03000010 | Xeon Scalable Gen2
  | ICX-SP         | C0       | 06-6a-05/87 |          | 0c0002f0 | Xeon Scalable Gen3
  | ICX-SP         | D0       | 06-6a-06/87 |          | 0d0002a0 | Xeon Scalable Gen3
  | SNR            | B0       | 06-86-04/01 |          | 0b00000f | Atom P59xxB
  | SNR            | B1       | 06-86-05/01 |          | 0b00000f | Atom P59xxB
  | TGL            | B1       | 06-8c-01/80 |          | 00000088 | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 |          | 00000016 | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 |          | 0000002c | Core Gen11 Mobile
  | EHL            | B1       | 06-96-01/01 |          | 00000011 | Pentium J6426/N6415, Celeron J6412/J6413/N6210/N6211, Atom x6000E
  | JSL            | A0/A1    | 06-9c-00/01 |          | 0000001d | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105
  | RKL-S          | B0       | 06-a7-01/02 |          | 00000040 | Core Gen11
- Updated platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | HSX-E/EP       | Cx/M1    | 06-3f-02/6f | 00000044 | 00000046 | Core Gen4 X series; Xeon E5 v3
  | HSX-EX         | E0       | 06-3f-04/80 | 00000016 | 00000019 | Xeon E7 v3
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000e2 | 000000ea | Core Gen6 Mobile
  | SKL-U23e       | K1       | 06-4e-03/c0 | 000000e2 | 000000ea | Core Gen6 Mobile
  | BDX-ML         | B0/M0/R0 | 06-4f-01/ef | 0b000038 | 0b00003e | Xeon E5/E7 v4; Core i7-69xx/68xx
  | SKX-SP         | B1       | 06-55-03/97 | 01000159 | 0100015b | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006a0a | 02006b06 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006a0a | 02006b06 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04003006 | 04003102 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003006 | 05003102 | Xeon Scalable Gen2
  | CPX-SP         | A1       | 06-55-0b/bf | 0700001e | 07002302 | Xeon Scalable Gen3
  | BDX-DE         | V2/V3    | 06-56-03/10 | 07000019 | 0700001b | Xeon D-1518/19/21/27/28/31/33/37/41/48, Pentium D1507/08/09/17/19
  | BDX-DE         | Y0       | 06-56-04/10 | 0f000017 | 0f000019 | Xeon D-1557/59/67/71/77/81/87
  | BDX-NS         | A0       | 06-56-05/10 | 0e00000f | 0e000012 | Xeon D-1513N/23/33/43/53
  | APL            | D0       | 06-5c-09/03 | 00000040 | 00000044 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 0000001e | 00000020 | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000e2 | 000000ea | Core Gen6; Xeon E3 v5
  | DNV            | B0       | 06-5f-01/01 | 0000002e | 00000034 | Atom C Series
  | GLK            | B0       | 06-7a-01/01 | 00000034 | 00000036 | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GKL-R          | R0       | 06-7a-08/01 | 00000018 | 0000001a | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000a0 | 000000a6 | Core Gen10 Mobile
  | LKF            | B2/B3    | 06-8a-01/10 | 00000028 | 0000002a | Core w/Hybrid Technology
  | AML-Y22        | H0       | 06-8e-09/10 | 000000de | 000000ea | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000de | 000000ea | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000e0 | 000000ea | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000de | 000000ea | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen8 Mobile
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000de | 000000ea | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000de | 000000ea | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000de | 000000ea | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000de | 000000ea | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000de | 000000ea | Core Gen9 Mobile
  | CML-H          | R1       | 06-a5-02/20 | 000000e0 | 000000ea | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 | 000000e0 | 000000ea | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 | 000000e0 | 000000ec | Core Gen10
  | CML-U62        | A0       | 06-a6-00/80 | 000000e0 | 000000e8 | Core Gen10 Mobile
  | CML-U62 V2     | K0       | 06-a6-01/80 | 000000e0 | 000000ea | Core Gen10 Mobile</changelog>
  <changelog author="meissner@suse.com" date="1644494400">- Updated to Intel CPU Microcode 20220207 release.
  - CVE-2021-0146: Fixed a potential security vulnerability in some Intel Processors may allow escalation of privilege (bsc#1192615)
  - CVE-2021-0127: Intel Processor Breakpoint Control Flow (bsc#1195779)
  - CVE-2021-0145: Fast store forward predictor - Cross Domain Training (bsc#1195780)
  - CVE-2021-33120: Out of bounds read for some Intel Atom processors (bsc#1195781)
  - Security updates for [INTEL-SA-00528](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00528.html)
  - Security updates for [INTEL-SA-00532](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00532.html)
  - Update for functional issues. Refer to [Third Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.
  - Update for functional issues. Refer to [Second Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
  - Update for functional issues. Refer to [Intel® Xeon® Processor Scalable Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/scalable/xeon-scalable-spec-update.html?wapkw=processor+specification+update) for details.
  - Update for functional issues. Refer to [11th Generation Intel® Core" Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.
  - Update for functional issues. Refer to [11th Generation Intel® Core" Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634808) for details.
  - Update for functional issues. Refer to [10th Gen Intel® Core" Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.
  - Update for functional issues. Refer to [10th Generation Intel® Core" Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/615213) for details.
  - Update for functional issues. Refer to [8th Generation Intel® Core" Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338025) for details.
  - Update for functional issues. Refer to [8th Gen Intel® Core" Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-family-spec-update.html?wapkw=processor+specification+update) for details.
  - Update for functional issues. Refer to [7th and 8th Generation Intel® Core" Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/334663) for details.
  - Update for functional issues. Refer to [6th Generation Intel® Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/core/desktop-6th-gen-core-family-spec-update.html) for details.
  - Update for functional issues. Refer to [Intel® Pentium® Silver and Intel® Celeron® Processors](https://www.intel.com/content/www/us/en/products/docs/processors/pentium/silver-celeron-spec-update.html?wapkw=processor+specification+update) for details.</changelog>
  <changelog author="meissner@suse.com" date="1650542400">- Updated to Intel CPU Microcode 20220419 release. (bsc#1198717)
  - Update for functional issues. Refer to errata
    APLI-11 in [Intel Atom Processor E3900
    Series](https://cdrdv2.intel.com/v1/dl/getContent/612204) for details.
  - Changed Microcodes:
  - | APL            | E0       | 06-5c-0a/03 | 00000024 | 00000028 | Atom x5-E39xx</changelog>
  <changelog author="meissner@suse.com" date="1652270400">- Updated to Intel CPU Microcode 20220510 release. (bsc#1199423)
  - CVE-2022-21151: Security updates for [INTEL-SA-000617](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00617.html)
  - Update for functional issues. Refer to [Second Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
  - Update for functional issues. Refer to [Intel Xeon Processor Scalable Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/scalable/xeon-scalable-spec-update.html?wapkw=processor+specification+update) for details.
  - Update for functional issues. Refer to [Intel Atom C3000 Processor Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/atom/atom-c3000-family-spec-update.html?wapkw=processor+specification+update) for details.
  - Update for functional issues. Refer to [Intel Atom Processor E3900 Specification Update Addendum](https://cdrdv2.intel.com/v1/dl/getContent/612204) for details.
  - New Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | C0       | 06-97-02/03 |          | 0000001f | Core Gen12
  | ADL            | C0       | 06-97-05/03 |          | 0000001f | Core Gen12
  | ADL            | L0       | 06-9a-03/80 |          | 0000041c | Core Gen12
  | ADL            | L0       | 06-9a-04/80 |          | 0000041c | Core Gen12
  | ADL            | C0       | 06-bf-02/03 |          | 0000001f | Core Gen12
  | ADL            | C0       | 06-bf-02/03 |          | 0000001f | Core Gen12
  - Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | VLV            | D0       | 06-37-09/0F | 0000090c | 0000090d | Atom E38xx
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000ec | 000000f0 | Core Gen6 Mobile
  | SKX-SP         | B1       | 06-55-03/97 | 0100015c | 0100015d | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006c0a | 02006d05 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006c0a | 02006d05 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 0400320a | 04003302 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 0500320a | 05003302 | Xeon Scalable Gen2
  | CPX-SP         | A1       | 06-55-0b/bf | 07002402 | 07002501 | Xeon Scalable Gen3
  | APL            | D0       | 06-5c-09/03 | 00000046 | 00000048 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 00000024 | 00000028 | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000ec | 000000f0 | Core Gen6; Xeon E3 v5
  | DNV            | B0       | 06-5f-01/01 | 00000036 | 00000038 | Atom C Series
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000331 | 0d000363 | Xeon Scalable Gen3
  | GLK            | B0       | 06-7a-01/01 | 00000038 | 0000003a | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GKL-R          | R0       | 06-7a-08/01 | 0000001c | 0000001e | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000a8 | 000000b0 | Core Gen10 Mobile
  | LKF            | B2/B3    | 06-8a-01/10 | 0000002d | 00000031 | Core w/Hybrid Technology
  | TGL            | B1       | 06-8c-01/80 | 0000009a | 000000a4 | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 00000022 | 00000026 | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 0000003c | 0000003e | Core Gen11 Mobile
  | AML-Y22        | H0       | 06-8e-09/10 | 000000ec | 000000f0 | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000ec | 000000f0 | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000ec | 000000f0 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000ec | 000000f0 | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000ec | 000000f0 | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000ec | 000000f0 | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000ec | 000000f0 | Core Gen8 Mobile
  | EHL            | B1       | 06-96-01/01 | 00000015 | 00000016 | Pentium J6426/N6415, Celeron J6412/J6413/N6210/N6211, Atom x6000E
  | JSL            | A0/A1    | 06-9c-00/01 | 2400001f | 24000023 | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000ec | 000000f0 | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000ec | 000000f0 | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000ec | 000000f0 | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000ec | 000000f0 | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000ec | 000000f0 | Core Gen9 Mobile
  | CML-H          | R1       | 06-a5-02/20 | 000000ec | 000000f0 | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 | 000000ec | 000000f0 | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 | 000000ee | 000000f0 | Core Gen10
  | CML-U62 V1     | A0       | 06-a6-00/80 | 000000ea | 000000f0 | Core Gen10 Mobile
  | CML-U62 V2     | K1       | 06-a6-01/80 | 000000ec | 000000f0 | Core Gen10 Mobile
  | RKL-S          | B0       | 06-a7-01/02 | 00000050 | 00000053 | Core Gen11</changelog>
  <changelog author="meissner@suse.com" date="1660132800">- Updated to Intel CPU Microcode 20220809 release. (bsc#1201727)
  - CVE-2022-21233: Security updates for [INTEL-SA-00657](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00657.html).
  - Update for functional issues. Refer to [Intel® Xeon® Processor Scalable Family Specification
  +Update](https://www.intel.com/content/www/us/en/processors/xeon/scalable/xeon-scalable-spec-update.html?wapkw=processor+specification+update) for details.  - Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | SKX-SP         | B1       | 06-55-03/97 | 0100015d | 0100015e | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006d05 | 02006e05 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006d05 | 02006e05 | Xeon D-21xx
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000363 | 0d000375 | Xeon Scalable Gen3
  | GLK            | B0       | 06-7a-01/01 | 0000003a | 0000003c | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GLK-R          | R0       | 06-7a-08/01 | 0000001e | 00000020 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000b0 | 000000b2 | Core Gen10 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 00000026 | 00000028 | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 0000003e | 00000040 | Core Gen11 Mobile
  | RKL-S          | B0       | 06-a7-01/02 | 00000053 | 00000054 | Core Gen11
  | ADL            | C0       | 06-97-02/03 | 0000001f | 00000022 | Core Gen12
  | ADL            | C0       | 06-97-05/03 | 0000001f | 00000022 | Core Gen12
  | ADL            | L0       | 06-9a-03/80 | 0000041c | 00000421 | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 0000041c | 00000421 | Core Gen12
  | ADL            | C0       | 06-bf-02/03 | 0000001f | 00000022 | Core Gen12
  | ADL            | C0       | 06-bf-05/03 | 0000001f | 00000022 | Core Gen12</changelog>
  <changelog author="meissner@suse.com" date="1676462400">- Updated to Intel CPU Microcode 20230214 release.
  Security issues fixed:
  - CVE-2022-38090: Security updates for [INTEL-SA-00767](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00767.html) (bsc#1208275)
  - CVE-2022-33196: Security updates for [INTEL-SA-00738](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00738.html) (bsc#1208276)
  - CVE-2022-21216: Security updates for [INTEL-SA-00700](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00700.html) (bsc#1208277)
  - CVE-2022-33972: Security updates for [INTEL-SA-00730](http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00730.html) (bsc#1208479)
  New Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | SPR-SP         | E2       | 06-8f-05/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-SP         | E3       | 06-8f-06/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-SP         | E4       | 06-8f-07/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-SP         | E5       | 06-8f-08/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-HBM        | B3       | 06-8f-08/10 |          | 2c000170 | Xeon Max
  | RPL-P 6+8      | J0       | 06-ba-02/07 |          | 0000410e | Core Gen13
  | RPL-H 6+8      | J0       | 06-ba-02/07 |          | 0000410e | Core Gen13
  | RPL-U 2+8      | Q0       | 06-ba-02/07 |          | 0000410e | Core Gen13
  Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | C0       | 06-97-02/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | C0       | 06-97-05/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | C0       | 06-bf-02/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | C0       | 06-bf-05/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | L0       | 06-9a-03/80 | 00000424 | 00000429 | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 00000424 | 00000429 | Core Gen12
  | CLX-SP         | B0       | 06-55-06/bf | 04003302 | 04003303 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003302 | 05003303 | Xeon Scalable Gen2
  | CPX-SP         | A1       | 06-55-0b/bf | 07002501 | 07002503 | Xeon Scalable Gen3
  | GLK            | B0       | 06-7a-01/01 | 0000003c | 0000003e | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GLK-R          | R0       | 06-7a-08/01 | 00000020 | 00000022 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-D          | B0       | 06-6c-01/10 | 01000201 | 01000211 | Xeon D-17xx, D-27xx
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000b6 | 000000b8 | Core Gen10 Mobile
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000375 | 0d000389 | Xeon Scalable Gen3
  | JSL            | A0/A1    | 06-9c-00/01 | 24000023 | 24000024 | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105
  | LKF            | B2/B3    | 06-8a-01/10 | 00000031 | 00000032 | Core w/Hybrid Technology
  | RKL-S          | B0       | 06-a7-01/02 | 00000056 | 00000057 | Core Gen11
  | RPL-S          | S0       | 06-b7-01/32 | 0000010e | 00000112 | Core Gen13
  | SKX-SP         | B1       | 06-55-03/97 | 0100015e | 01000161 | Xeon Scalable</changelog>
  <changelog author="meissner@suse.com" date="1684238400">- Updated to Intel CPU Microcode 20230512 release. (bsc#1211382)
  - New Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL-N          | A0       | 06-be-00/01 |          | 00000010 | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  | AZB            | A0       | 06-9a-04/40 |          | 00000004 | Intel(R) Atom(R) C1100
  | AZB            | R0       | 06-9a-04/40 |          | 00000004 | Intel(R) Atom(R) C1100
  - Updated Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | L0       | 06-9a-03/80 | 00000429 | 0000042a | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 00000429 | 0000042a | Core Gen12
  | AML-Y22        | H0       | 06-8e-09/10 |          | 000000f2 | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CFL-H          | R0       | 06-9e-0d/22 | 000000f4 | 000000f8 | Core Gen9 Mobile
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000f0 | 000000f2 | Core Gen9
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000f0 | 000000f2 | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000f0 | 000000f2 | Core Gen8
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000f0 | 000000f2 | Core Gen8 Mobile
  | CLX-SP         | B0       | 06-55-06/bf | 04003303 | 04003501 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003303 | 05003501 | Xeon Scalable Gen2
  | CML-H          | R1       | 06-a5-02/20 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CML-S102       | Q0       | 06-a5-05/22 | 000000f4 | 000000f6 | Core Gen10
  | CML-S62        | G1       | 06-a5-03/22 | 000000f4 | 000000f6 | Core Gen10
  | CML-U62 V1     | A0       | 06-a6-00/80 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CML-U62 V2     | K1       | 06-a6-01/80 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CPX-SP         | A1       | 06-55-0b/bf | 07002503 | 07002601 | Xeon Scalable Gen3
  | ICL-D          | B0       | 06-6c-01/10 | 01000211 | 01000230 | Xeon D-17xx, D-27xx
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000b8 | 000000ba | Core Gen10 Mobile
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000389 | 0d000390 | Xeon Scalable Gen3
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000f0 | 000000f2 | Core Gen7; Xeon E3 v6
  | KBL-U/Y        | H0       | 06-8e-09/c0 |          | 000000f2 | Core Gen7 Mobile
  | LKF            | B2/B3    | 06-8a-01/10 | 00000032 | 00000033 | Core w/Hybrid Technology
  | RKL-S          | B0       | 06-a7-01/02 | 00000057 | 00000058 | Core Gen11
  | RPL-H 6+8      | J0       | 06-ba-02/07 | 0000410e | 00004112 | Core Gen13
  | RPL-P 6+8      | J0       | 06-ba-02/07 | 0000410e | 00004112 | Core Gen13
  | RPL-S          | S0       | 06-b7-01/32 | 00000112 | 00000113 | Core Gen13
  | RPL-U 2+8      | Q0       | 06-ba-03/07 | 0000410e | 00004112 | Core Gen13
  | SKX-D          | H0       | 06-55-04/b7 |          | 02006f05 | Xeon D-21xx
  | SKX-SP         | B1       | 06-55-03/97 | 01000161 | 01000171 | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 |          | 02006f05 | Xeon Scalable
  | SPR-HBM        | B3       | 06-8f-08/10 | 2c000170 | 2c0001d1 | Xeon Max
  | SPR-SP         | E0       | 06-8f-04/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E2       | 06-8f-05/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E3       | 06-8f-06/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E4       | 06-8f-07/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E5       | 06-8f-08/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | S2       | 06-8f-07/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | S3       | 06-8f-08/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | TGL            | B1       | 06-8c-01/80 | 000000a6 | 000000aa | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 00000042 | 00000044 | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 00000028 | 0000002a | Core Gen11 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 |          | 000000f2 | Core Gen8 Mobile</changelog>
  <changelog author="abergmann@suse.com" date="1691582400">- Updated to Intel CPU Microcode 20230808 release. (bsc#1214099)
  Security issues fixed:
  - CVE-2022-40982: Security updates for [INTEL-SA-00828](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00828.html) (bsc#1206418)
  - CVE-2023-23908: Security updates for [INTEL-SA-00836](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00836.html)
  - CVE-2022-41804: Security updates for [INTEL-SA-00837](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00837.html)
  Functional issues fixed:
  - Update for functional issues. Refer to [13th Generation Intel® Core™ Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.
  - Update for functional issues. Refer to [12th Generation Intel® Core™ Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.
  - Update for functional issues. Refer to [11th Gen Intel® Core™ Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.
  - Update for functional issues. Refer to [10th Gen Intel® Core™ Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.
  - Update for functional issues. Refer to [8th and 9th Generation Intel® Core™ Processor Family Spec Update](https://cdrdv2.intel.com/v1/dl/getContent/337346) for details.
  - Update for functional issues. Refer to [8th Generation Intel® Core™ Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338025) for details.
  - Update for functional issues. Refer to [7th and 8th Generation Intel® Core™ Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/334663) for details.
  - Update for functional issues. Refer to [Intel® Processors and Intel® Core™ i3 N-Series](https://cdrdv2.intel.com/v1/dl/getContent/764616) for details.
  - Update for functional issues. Refer to [4th Gen Intel® Xeon® Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/772415) for details.
  - Update for functional issues. Refer to [3rd Generation Intel® Xeon® Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634897) for details.
  - Update for functional issues. Refer to [2nd Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
  - Update for functional issues. Refer to [Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.
  - Update for functional issues. Refer to [3rd Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.
  - Update for functional issues. Refer to [Intel® Xeon® E-2300 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/709192) for details.
  - Update for functional issues. Refer to [Intel® Xeon® D-2700 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714071) for details.
  - Update for functional issues. Refer to [Intel® Xeon® D-2100 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338854) for details.
  New Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL-N          | A0       | 06-be-00/11 |          | 00000011 | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  | RPL-H/P/PX 6+8 | J0       | 06-ba-02/e0 |          | 00004119 | Core Gen13
  Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | CML-U62 V2     | K1       | 06-a6-01/80 | 000000f6 | 000000f8 | Core Gen10 Mobile
  | SKX-D          | H0       | 06-55-04/b7 | 02006f05 | 02007006 | Xeon D-21xx
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006e05 | 02007006 | Xeon Scalable
  | KBL-G/H/S/X/E3 | B0       | 06-9e-09/2a | 000000f2 | 000000f4 | Core Gen7; Xeon E3 v6
  | ADL            | L0       | 06-9a-03/80 | 0000042a | 0000042c | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 0000042a | 0000042c | Core Gen12
  | ICX-SP         | Dx/M1    | 06-6a-06/87 | 0d000390 | 0d0003a5 | Xeon Scalable Gen3
  | CML-S102       | Q0       | 06-a5-05/22 | 000000f6 | 000000f8 | Core Gen10
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000f2 | 000000f4 | Core Gen8 Mobile
  | KBL-R U        | Y0       | 06-8e-0a/c0 | 000000f2 | 000000f4 | Core Gen8 Mobile
  | CFL-H          | R0       | 06-9e-0d/22 | 000000f8 | 000000fa | Core Gen9 Mobile
  | RKL-S          | B0       | 06-a7-01/02 | 00000058 | 00000059 | Core Gen11
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000ba | 000000bc | Core Gen10 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 00000044 | 00000046 | Core Gen11 Mobile
  | SPR-SP         | E5/S3    | 06-8f-08/87 | 2b000461 | 2b0004b1 | Xeon Scalable Gen4
  | SPR-SP         | E4/S2    | 06-8f-07/87 | 2b000461 | 2b0004b1 | Xeon Scalable Gen4
  | SPR-SP         | E3       | 06-8f-06/87 | 2b000461 | 2b0004b1 | Xeon Scalable Gen4
  | SPR-SP         | E2       | 06-8f-05/87 | 2b000461 | 2b0004b1 | Xeon Scalable Gen4
  | SPR-SP         | E0       | 06-8f-04/87 | 2b000461 | 2b0004b1 | Xeon Scalable Gen4
  | CML-S62        | G1       | 06-a5-03/22 | 000000f6 | 000000f8 | Core Gen10
  | AML-Y22        | H0       | 06-8e-09/10 | 000000f0 | 000000f4 | Core Gen8 Mobile
  | RPL-S          | B0       | 06-b7-01/32 | 00000113 | 00000119 | Core Gen13
  | CML-U62 V1     | A0       | 06-a6-00/80 | 000000f6 | 000000f8 | Core Gen10 Mobile
  | ADL-N          | A0       | 06-be-00/11 |          | 00000011 | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  | CPX-SP         | A1       | 06-55-0b/bf | 07002601 | 07002703 | Xeon Scalable Gen3
  | CLX-SP         | B0       | 06-55-06/bf | 04003501 | 04003604 | Xeon Scalable Gen2
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000f2 | 000000f4 | Core Gen8 Desktop, Mobile, Xeon E
  | SPR-HBM        | Bx       | 06-8f-08/10 | 2c0001d1 | 2c000271 | Xeon Max
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000f2 | 000000f4 | Core Gen8 Mobile
  | CLX-SP         | B1       | 06-55-07/bf | 05003501 | 05003604 | Xeon Scalable Gen2
  | CFL-S          | B0       | 06-9e-0b/02 | 000000f2 | 000000f4 | Core Gen8
  | TGL-R          | C0       | 06-8c-02/c2 | 0000002a | 0000002c | Core Gen11 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000f2 | 000000f4 | Core Gen7 Mobile
  | KBL-U23e       | J1       | 06-8e-09/c0 | 000000f2 | 000000f4 | Core Gen7 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000f6 | 000000f8 | Core Gen10 Mobile
  | CML-U42        | V0       | 06-8e-0c/94 | 000000f6 | 000000f8 | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000f6 | 000000f8 | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000f6 | 000000f8 | Core Gen8 Mobile
  | SKX-SP         | B1       | 06-55-03/97 | 01000171 | 01000181 | Xeon Scalable
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000f2 | 000000f4 | Core Gen9
  | CFL-S          | P0       | 06-9e-0c/22 | 000000f2 | 000000f4 | Core Gen9 Desktop
  | TGL            | B0/B1    | 06-8c-01/80 | 000000aa | 000000ac | Core Gen11 Mobile
  | ADL            | C0       | 06-97-02/07 | 0000002c | 0000002e | Core Gen12
  | ADL            | C0       | 06-97-05/07 | 0000002c | 0000002e | Core Gen12
  | ADL            | C0       | 06-bf-02/07 | 0000002c | 0000002e | Core Gen12
  | ADL            | C0       | 06-bf-05/07 | 0000002c | 0000002e | Core Gen12
  | CML-H          | R1       | 06-a5-02/20 | 000000f6 | 000000f8 | Core Gen10 Mobile
  | RPL-H/P/PX 6+8 | J0       | 06-ba-02/e0 |          | 00004119 | Core Gen13
  | RPL-U 2+8      | Q0       | 06-ba-03/e0 |          | 00004119 | Core Gen13</changelog>
  <changelog author="meissner@suse.com" date="1697803200">- Updated to Intel CPU Microcode 20231114 pre-release (labeled 20231113).
  (bsc#1215278)
  - CVE-2023-23583: Fixed potential CPU deadlocks or privilege escalation (bsc#1215278)</changelog>
</package>
<package pkgid="204b9e52a1cf5e1303cb9194db8189049f474cc0bb3724cdf5d98b9eb147efc2" name="ucode-intel" arch="x86_64">
  <version epoch="0" ver="20231113" rel="150200.32.1"/>
  <changelog author="meissner@suse.com" date="1574164800">- Updated to 20191115 release (bsc#1157004)
  - Processor             Identifier     Version       Products
  - Model        Stepping F-MO-S/PI      Old-&gt;New
  - ---- updated platforms ------------------------------------
  - SKL-U/Y      D0       6-4e-3/c0 000000d4-&gt;000000d6 Core Gen6 Mobile
  - SKL-U23e     K1       6-4e-3/c0 000000d4-&gt;000000d6 Core Gen6 Mobile
  - SKL-H/S/E3   N0/R0/S0 6-5e-3/36 000000d4-&gt;000000d6 Core Gen6
  - AML-Y22      H0       6-8e-9/10 000000c6-&gt;000000ca Core Gen8 Mobile
  - KBL-U/Y      H0       6-8e-9/c0 000000c6-&gt;000000ca Core Gen7 Mobile
  - KBL-U23e     J1       6-8e-9/c0 000000c6-&gt;000000ca Core Gen7 Mobile
  - CFL-U43e     D0       6-8e-a/c0 000000c6-&gt;000000ca Core Gen8 Mobile
  - KBL-R U      Y0       6-8e-a/c0 000000c6-&gt;000000ca Core Gen8 Mobile
  - WHL-U        W0       6-8e-b/d0 000000c6-&gt;000000ca Core Gen8 Mobile
  - AML-Y42      V0       6-8e-c/94 000000c6-&gt;000000ca Core Gen10 Mobile
  - WHL-U        V0       6-8e-c/94 000000c6-&gt;000000ca Core Gen8 Mobile
  - CML-U42      V0       6-8e-c/94 000000c6-&gt;000000ca Core Gen10 Mobile
  - KBL-G/H/S/X/E3 B0     6-9e-9/2a 000000c6-&gt;000000ca Core Gen7 Desktop, Mobile, Xeon E3 v6
  - CFL-H/S/E3   U0       6-9e-a/22 000000c6-&gt;000000ca Core Gen8 Desktop, Mobile, Xeon E
  - CFL-S        B0       6-9e-b/02 000000c6-&gt;000000ca Core Gen8
  - CFL-S        P0       6-9e-c/22 000000c6-&gt;000000ca Core Gen9 Desktop
  - CFL-H/S/E3   R0       6-9e-d/22 000000c6-&gt;000000ca Core Gen9 Desktop, Mobile, Xeon E
  - CML-U62      A0       6-a6-0/80 000000c6-&gt;000000ca Core Gen10 Mobile
- Updated to 20191113 release
  - Processor             Identifier     Version       Products
  - Model        Stepping F-MO-S/PI      Old-&gt;New
  - ---- updated platforms ------------------------------------
  - CFL-S        P0       6-9e-c/22 000000a2-&gt;000000c6 Core Gen9 Desktop</changelog>
  <changelog author="meissner@suse.com" date="1579089600">- reverted the entry below to 02000064 due to occasional faults (bsc#1160478)
  - SKX-SP       H0/M0/U0 6-55-4/b7 02000064-&gt;02000065 Xeon Scalable</changelog>
  <changelog author="meissner@suse.com" date="1587470400">- updated skylake microcode to the current version. (bsc#1169570)
  - 02000064-&gt;02006901</changelog>
  <changelog author="meissner@suse.com" date="1591185600">- Updated Intel CPU Microcode to 20200602 (prerelease) (bsc#1172466)
  Fixes for:
  - CVE-2020-0543: Fixed a side channel attack against special registers
    which could have resulted in leaking of read values to cores other
    than the one which called it.  This attack is known as Special Register
    Buffer Data Sampling (SRBDS) or "CrossTalk" (bsc#1154824).
  - CVE-2020-0548,CVE-2020-0549: Additional ucode updates were supplied to
    mitigate the Vector Register and L1D Eviction Sampling aka "CacheOutAttack"
    attacks. (bsc#1156353)
  == 20200602_DEMO Release ==
  - - Updates upon 20200520 release --
  Processor             Identifier     Version       Products
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- new platforms ----------------------------------------
  - --- updated platforms ------------------------------------
  HSW          C0       6-3c-3/32 00000027-&gt;00000028 Core Gen4
  BDW-U/Y      E0/F0    6-3d-4/c0 0000002e-&gt;0000002f Core Gen5
  HSW-U        C0/D0    6-45-1/72 00000025-&gt;00000026 Core Gen4
  HSW-H        C0       6-46-1/32 0000001b-&gt;0000001c Core Gen4
  BDW-H/E3     E0/G0    6-47-1/22 00000021-&gt;00000022 Core Gen5
  SKL-U/Y      D0       6-4e-3/c0 000000d6-&gt;000000dc Core Gen6 Mobile
  SKL-U23e     K1       6-4e-3/c0 000000d6-&gt;000000dc Core Gen6 Mobile
  SKX-SP       B1       6-55-3/97 01000151-&gt;01000157 Xeon Scalable
  SKX-SP       H0/M0/U0 6-55-4/b7 02000065-&gt;02006906 Xeon Scalable
  SKX-D        M1       6-55-4/b7 02000065-&gt;02006906 Xeon D-21xx
  CLX-SP       B0       6-55-6/bf 0400002c-&gt;04002f01 Xeon Scalable Gen2
  CLX-SP       B1       6-55-7/bf 0500002c-&gt;04002f01 Xeon Scalable Gen2
  SKL-H/S      R0/N0    6-5e-3/36 000000d6-&gt;000000dc Core Gen6; Xeon E3 v5
  AML-Y22      H0       6-8e-9/10 000000ca-&gt;000000d6 Core Gen8 Mobile
  KBL-U/Y      H0       6-8e-9/c0 000000ca-&gt;000000d6 Core Gen7 Mobile
  CFL-U43e     D0       6-8e-a/c0 000000ca-&gt;000000d6 Core Gen8 Mobile
  WHL-U        W0       6-8e-b/d0 000000ca-&gt;000000d6 Core Gen8 Mobile
  AML-Y42      V0       6-8e-c/94 000000ca-&gt;000000d6 Core Gen10 Mobile
  CML-Y42      V0       6-8e-c/94 000000ca-&gt;000000d6 Core Gen10 Mobile
  WHL-U        V0       6-8e-c/94 000000ca-&gt;000000d6 Core Gen8 Mobile
  KBL-G/H/S/E3 B0       6-9e-9/2a 000000ca-&gt;000000d6 Core Gen7; Xeon E3 v6
  CFL-H/S/E3   U0       6-9e-a/22 000000ca-&gt;000000d6 Core Gen8 Desktop, Mobile, Xeon E
  CFL-S        B0       6-9e-b/02 000000ca-&gt;000000d6 Core Gen8
  CFL-H/S      P0       6-9e-c/22 000000ca-&gt;000000d6 Core Gen9
  CFL-H        R0       6-9e-d/22 000000ca-&gt;000000d6 Core Gen9 Mobile
- Updated Intel CPU Microcode to 20200520
  Processor             Identifier     Version       Products
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- new platforms ----------------------------------------
  - --- updated platforms ------------------------------------
  SNB-E/EN/EP  C1/M0    6-2d-6/6d 0000061f-&gt;00000621 Xeon E3/E5, Core X
  SNB-E/EN/EP  C2/M1    6-2d-7/6d 00000718-&gt;0000071a Xeon E3/E5, Core X</changelog>
  <changelog author="meissner@suse.com" date="1592222400">- Updated Intel CPU Microcode to 20200609 official release (bsc#1172466)
  - no changes to 20200602 prerelease</changelog>
  <changelog author="meissner@suse.com" date="1592395200">- Updated Intel CPU Microcode to 20200616 official release (bsc#1172856)
  - revert 06-4e-03 Skylake U/Y, U23e ucode back to 000000d6 release
  - revert 06-5e-03 Skylake H/S ucode back to 000000d6 release,
    as both cause stability issues.  (bsc#1172856)</changelog>
  <changelog author="meissner@suse.com" date="1604491200">- Updated Intel CPU Microcode to 20201027 prerelease (bsc#1170446)
  - CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX)
  [#] New Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | TGL            | B1       | 06-8c-01/80 |          | 00000068 | Core Gen11 Mobile
  | CPX-SP         | A1       | 06-55-0b/bf |          | 0700001e | Xeon Scalable Gen3
  | CML-H          | R1       | 06-a5-02/20 |          | 000000e0 | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 |          | 000000e0 | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 |          | 000000e0 | Core Gen10
  | CML-U62 V2     | K0       | 06-a6-01/80 |          | 000000e0 | Core Gen10 Mobile
  [#] Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | GKL-R          | R0       | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | SKL-U23e       | K1       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | APL            | D0       | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5
  | HSX-E/EP       | Cx/M1    | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3
  | SKX-SP         | B1       | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2
  | ICL-U/Y        | D1       | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile
  | AML-Y22        | H0       | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile
  | CML-U62        | A0       | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile</changelog>
  <changelog author="meissner@suse.com" date="1605096000">- Updated Intel CPU Microcode to 20201110 official release.
  - CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX) (bsc#1170446)
  - CVE-2020-8698: Fixed Fast Store Forward Predictor INTEL-SA-00381 (bsc#1173594)
  - CVE-2020-8696: Vector Register Sampling Active INTEL-SA-00381 (bsc#1173592)
- Releasenotes:
  - Security updates for [INTEL-SA-00381](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html).
  - Security updates for [INTEL-SA-00389](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00389.html).
  - Update for functional issues. Refer to [Second Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
  - Update for functional issues. Refer to [Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.
  - Update for functional issues. Refer to [Intel® Xeon® Processor E5 v3 Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e5-v3-spec-update.html?wapkw=processor+spec+update+e5) for details.
  - Update for functional issues. Refer to [10th Gen Intel® Core™ Processor Families Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/10th-gen-core-families-specification-update.html) for details.
  - Update for functional issues. Refer to [8th and 9th Gen Intel® Core™ Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-spec-update.html) for details.
  - Update for functional issues. Refer to [7th Gen and 8th Gen (U Quad-Core) Intel® Processor Families Specification Update](https://www.intel.com/content/www/us/en/processors/core/7th-gen-core-family-spec-update.html) for details.
  - Update for functional issues. Refer to [6th Gen Intel® Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/332689) for details.
  - Update for functional issues. Refer to [Intel® Xeon® E3-1200 v6 Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e3-1200v6-spec-update.html) for details.
  - Update for functional issues. Refer to [Intel® Xeon® E-2100 and E-2200 Processor Family Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-e-2100-specification-update.html) for details.
  [#]## New Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | CPX-SP         | A1       | 06-55-0b/bf |          | 0700001e | Xeon Scalable Gen3
  | LKF            | B2/B3    | 06-8a-01/10 |          | 00000028 | Core w/Hybrid Technology
  | TGL            | B1       | 06-8c-01/80 |          | 00000068 | Core Gen11 Mobile
  | CML-H          | R1       | 06-a5-02/20 |          | 000000e0 | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 |          | 000000e0 | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 |          | 000000e0 | Core Gen10
  | CML-U62 V2     | K0       | 06-a6-01/80 |          | 000000e0 | Core Gen10 Mobile
  [#]## Updated Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | HSX-E/EP       | Cx/M1    | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | SKL-U23e       | K1       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | SKX-SP         | B1       | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2
  | APL            | D0       | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5
  | GKL-R          | R0       | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile
  | AML-Y22        | H0       | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile
  | CML-U62        | A0       | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile</changelog>
  <changelog author="meissner@suse.com" date="1605787200">- Updated Intel CPU Microcode to 20201118 official release. (bsc#1178971)
  - Removed TGL/06-8c-01/80 due to functional issues with some OEM platforms.</changelog>
  <changelog author="meissner@suse.com" date="1607342400">- Reverted 3 microcodes back to 20200616 release level after regression reports. (bsc#1179224)
  - SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006906 | Xeon Scalable
  - SKX-D          | M1       | 06-55-04/b7 | 02006906 | Xeon D-21xx
  - CLX-SP         | B0       | 06-55-06/bf | 04002f01 | Xeon Scalable Gen2
  - CLX-SP         | B1       | 06-55-07/bf | 05002f01 | Xeon Scalable Gen2</changelog>
  <changelog author="meissner@suse.com" date="1613563200">- Updated Intel CPU Microcode to 20210216 official release. (bsc#1178971 bsc#1179224)
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006a08 | 02006a0a | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006a08 | 02006a0a | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04003003 | 04003006 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003003 | 05003006 | Xeon Scalable Gen2</changelog>
  <changelog author="meissner@suse.com" date="1623153600">- Updated to Intel CPU Microcode 20210525 release.
  - CVE-2020-24513: A domain bypass transient execution vulnerability was discovered on some Intel Atom processors that use a micro-architectural incident channel. (INTEL-SA-00465 bsc#1179833)
    See also: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00465.html
  - CVE-2020-24511: The IBRS feature to mitigate Spectre variant 2 transient execution side channel vulnerabilities may not fully prevent non-root (guest) branches from controlling the branch predictions of the root (host) (INTEL-SA-00464 bsc#1179836)
    See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)
  - CVE-2020-24512: Fixed trivial data value cache-lines such as all-zero value cache-lines may lead to changes in cache-allocation or write-back behavior for such cache-lines (bsc#1179837 INTEL-SA-00464)
    See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)
  - CVE-2020-24489: Fixed Intel VT-d device pass through potential local privilege escalation (INTEL-SA-00442 bsc#1179839)
    See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00442.html
- Update for functional issues. Refer to [Third Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780)for details.
- Update for functional issues. Refer to [Second Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
- Update for functional issues. Refer to [Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.
- Update for functional issues. Refer to [Intel Xeon Processor D-1500, D-1500 NS and D-1600 NS Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-d-1500-specification-update.html) for details.
- Update for functional issues. Refer to [Intel Xeon E7-8800 and E7-4800 v3 Processor Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e7-v3-spec-update.html) for details.
- Update for functional issues. Refer to [Intel Xeon Processor E5 v3 Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e5-v3-spec-update.html?wapkw=processor+spec+update+e5) for details.
- Update for functional issues. Refer to [10th Gen Intel Core Processor Families Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/10th-gen-core-families-specification-update.html) for details.
- Update for functional issues. Refer to [8th and 9th Gen Intel Core Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-spec-update.html) for details.
- Update for functional issues. Refer to [7th Gen and 8th Gen (U Quad-Core) Intel Processor Families Specification Update](https://www.intel.com/content/www/us/en/processors/core/7th-gen-core-family-spec-update.html) for details.
- Update for functional issues. Refer to [6th Gen Intel Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/332689) for details.
- Update for functional issues. Refer to [Intel Xeon E3-1200 v6 Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e3-1200v6-spec-update.html) for details.
- Update for functional issues. Refer to [Intel Xeon E-2100 and E-2200 Processor Family Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-e-2100-specification-update.html) for details.
- New platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | CLX-SP         | A0       | 06-55-05/b7 |          | 03000010 | Xeon Scalable Gen2
  | ICX-SP         | C0       | 06-6a-05/87 |          | 0c0002f0 | Xeon Scalable Gen3
  | ICX-SP         | D0       | 06-6a-06/87 |          | 0d0002a0 | Xeon Scalable Gen3
  | SNR            | B0       | 06-86-04/01 |          | 0b00000f | Atom P59xxB
  | SNR            | B1       | 06-86-05/01 |          | 0b00000f | Atom P59xxB
  | TGL            | B1       | 06-8c-01/80 |          | 00000088 | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 |          | 00000016 | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 |          | 0000002c | Core Gen11 Mobile
  | EHL            | B1       | 06-96-01/01 |          | 00000011 | Pentium J6426/N6415, Celeron J6412/J6413/N6210/N6211, Atom x6000E
  | JSL            | A0/A1    | 06-9c-00/01 |          | 0000001d | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105
  | RKL-S          | B0       | 06-a7-01/02 |          | 00000040 | Core Gen11
- Updated platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | HSX-E/EP       | Cx/M1    | 06-3f-02/6f | 00000044 | 00000046 | Core Gen4 X series; Xeon E5 v3
  | HSX-EX         | E0       | 06-3f-04/80 | 00000016 | 00000019 | Xeon E7 v3
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000e2 | 000000ea | Core Gen6 Mobile
  | SKL-U23e       | K1       | 06-4e-03/c0 | 000000e2 | 000000ea | Core Gen6 Mobile
  | BDX-ML         | B0/M0/R0 | 06-4f-01/ef | 0b000038 | 0b00003e | Xeon E5/E7 v4; Core i7-69xx/68xx
  | SKX-SP         | B1       | 06-55-03/97 | 01000159 | 0100015b | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006a0a | 02006b06 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006a0a | 02006b06 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04003006 | 04003102 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003006 | 05003102 | Xeon Scalable Gen2
  | CPX-SP         | A1       | 06-55-0b/bf | 0700001e | 07002302 | Xeon Scalable Gen3
  | BDX-DE         | V2/V3    | 06-56-03/10 | 07000019 | 0700001b | Xeon D-1518/19/21/27/28/31/33/37/41/48, Pentium D1507/08/09/17/19
  | BDX-DE         | Y0       | 06-56-04/10 | 0f000017 | 0f000019 | Xeon D-1557/59/67/71/77/81/87
  | BDX-NS         | A0       | 06-56-05/10 | 0e00000f | 0e000012 | Xeon D-1513N/23/33/43/53
  | APL            | D0       | 06-5c-09/03 | 00000040 | 00000044 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 0000001e | 00000020 | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000e2 | 000000ea | Core Gen6; Xeon E3 v5
  | DNV            | B0       | 06-5f-01/01 | 0000002e | 00000034 | Atom C Series
  | GLK            | B0       | 06-7a-01/01 | 00000034 | 00000036 | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GKL-R          | R0       | 06-7a-08/01 | 00000018 | 0000001a | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000a0 | 000000a6 | Core Gen10 Mobile
  | LKF            | B2/B3    | 06-8a-01/10 | 00000028 | 0000002a | Core w/Hybrid Technology
  | AML-Y22        | H0       | 06-8e-09/10 | 000000de | 000000ea | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000de | 000000ea | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000e0 | 000000ea | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000de | 000000ea | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen8 Mobile
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000de | 000000ea | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000de | 000000ea | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000de | 000000ea | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000de | 000000ea | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000de | 000000ea | Core Gen9 Mobile
  | CML-H          | R1       | 06-a5-02/20 | 000000e0 | 000000ea | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 | 000000e0 | 000000ea | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 | 000000e0 | 000000ec | Core Gen10
  | CML-U62        | A0       | 06-a6-00/80 | 000000e0 | 000000e8 | Core Gen10 Mobile
  | CML-U62 V2     | K0       | 06-a6-01/80 | 000000e0 | 000000ea | Core Gen10 Mobile</changelog>
  <changelog author="meissner@suse.com" date="1644494400">- Updated to Intel CPU Microcode 20220207 release.
  - CVE-2021-0146: Fixed a potential security vulnerability in some Intel Processors may allow escalation of privilege (bsc#1192615)
  - CVE-2021-0127: Intel Processor Breakpoint Control Flow (bsc#1195779)
  - CVE-2021-0145: Fast store forward predictor - Cross Domain Training (bsc#1195780)
  - CVE-2021-33120: Out of bounds read for some Intel Atom processors (bsc#1195781)
  - Security updates for [INTEL-SA-00528](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00528.html)
  - Security updates for [INTEL-SA-00532](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00532.html)
  - Update for functional issues. Refer to [Third Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.
  - Update for functional issues. Refer to [Second Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
  - Update for functional issues. Refer to [Intel® Xeon® Processor Scalable Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/scalable/xeon-scalable-spec-update.html?wapkw=processor+specification+update) for details.
  - Update for functional issues. Refer to [11th Generation Intel® Core" Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.
  - Update for functional issues. Refer to [11th Generation Intel® Core" Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634808) for details.
  - Update for functional issues. Refer to [10th Gen Intel® Core" Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.
  - Update for functional issues. Refer to [10th Generation Intel® Core" Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/615213) for details.
  - Update for functional issues. Refer to [8th Generation Intel® Core" Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338025) for details.
  - Update for functional issues. Refer to [8th Gen Intel® Core" Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-family-spec-update.html?wapkw=processor+specification+update) for details.
  - Update for functional issues. Refer to [7th and 8th Generation Intel® Core" Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/334663) for details.
  - Update for functional issues. Refer to [6th Generation Intel® Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/core/desktop-6th-gen-core-family-spec-update.html) for details.
  - Update for functional issues. Refer to [Intel® Pentium® Silver and Intel® Celeron® Processors](https://www.intel.com/content/www/us/en/products/docs/processors/pentium/silver-celeron-spec-update.html?wapkw=processor+specification+update) for details.</changelog>
  <changelog author="meissner@suse.com" date="1650542400">- Updated to Intel CPU Microcode 20220419 release. (bsc#1198717)
  - Update for functional issues. Refer to errata
    APLI-11 in [Intel Atom Processor E3900
    Series](https://cdrdv2.intel.com/v1/dl/getContent/612204) for details.
  - Changed Microcodes:
  - | APL            | E0       | 06-5c-0a/03 | 00000024 | 00000028 | Atom x5-E39xx</changelog>
  <changelog author="meissner@suse.com" date="1652270400">- Updated to Intel CPU Microcode 20220510 release. (bsc#1199423)
  - CVE-2022-21151: Security updates for [INTEL-SA-000617](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00617.html)
  - Update for functional issues. Refer to [Second Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
  - Update for functional issues. Refer to [Intel Xeon Processor Scalable Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/scalable/xeon-scalable-spec-update.html?wapkw=processor+specification+update) for details.
  - Update for functional issues. Refer to [Intel Atom C3000 Processor Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/atom/atom-c3000-family-spec-update.html?wapkw=processor+specification+update) for details.
  - Update for functional issues. Refer to [Intel Atom Processor E3900 Specification Update Addendum](https://cdrdv2.intel.com/v1/dl/getContent/612204) for details.
  - New Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | C0       | 06-97-02/03 |          | 0000001f | Core Gen12
  | ADL            | C0       | 06-97-05/03 |          | 0000001f | Core Gen12
  | ADL            | L0       | 06-9a-03/80 |          | 0000041c | Core Gen12
  | ADL            | L0       | 06-9a-04/80 |          | 0000041c | Core Gen12
  | ADL            | C0       | 06-bf-02/03 |          | 0000001f | Core Gen12
  | ADL            | C0       | 06-bf-02/03 |          | 0000001f | Core Gen12
  - Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | VLV            | D0       | 06-37-09/0F | 0000090c | 0000090d | Atom E38xx
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000ec | 000000f0 | Core Gen6 Mobile
  | SKX-SP         | B1       | 06-55-03/97 | 0100015c | 0100015d | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006c0a | 02006d05 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006c0a | 02006d05 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 0400320a | 04003302 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 0500320a | 05003302 | Xeon Scalable Gen2
  | CPX-SP         | A1       | 06-55-0b/bf | 07002402 | 07002501 | Xeon Scalable Gen3
  | APL            | D0       | 06-5c-09/03 | 00000046 | 00000048 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 00000024 | 00000028 | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000ec | 000000f0 | Core Gen6; Xeon E3 v5
  | DNV            | B0       | 06-5f-01/01 | 00000036 | 00000038 | Atom C Series
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000331 | 0d000363 | Xeon Scalable Gen3
  | GLK            | B0       | 06-7a-01/01 | 00000038 | 0000003a | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GKL-R          | R0       | 06-7a-08/01 | 0000001c | 0000001e | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000a8 | 000000b0 | Core Gen10 Mobile
  | LKF            | B2/B3    | 06-8a-01/10 | 0000002d | 00000031 | Core w/Hybrid Technology
  | TGL            | B1       | 06-8c-01/80 | 0000009a | 000000a4 | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 00000022 | 00000026 | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 0000003c | 0000003e | Core Gen11 Mobile
  | AML-Y22        | H0       | 06-8e-09/10 | 000000ec | 000000f0 | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000ec | 000000f0 | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000ec | 000000f0 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000ec | 000000f0 | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000ec | 000000f0 | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000ec | 000000f0 | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000ec | 000000f0 | Core Gen8 Mobile
  | EHL            | B1       | 06-96-01/01 | 00000015 | 00000016 | Pentium J6426/N6415, Celeron J6412/J6413/N6210/N6211, Atom x6000E
  | JSL            | A0/A1    | 06-9c-00/01 | 2400001f | 24000023 | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000ec | 000000f0 | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000ec | 000000f0 | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000ec | 000000f0 | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000ec | 000000f0 | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000ec | 000000f0 | Core Gen9 Mobile
  | CML-H          | R1       | 06-a5-02/20 | 000000ec | 000000f0 | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 | 000000ec | 000000f0 | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 | 000000ee | 000000f0 | Core Gen10
  | CML-U62 V1     | A0       | 06-a6-00/80 | 000000ea | 000000f0 | Core Gen10 Mobile
  | CML-U62 V2     | K1       | 06-a6-01/80 | 000000ec | 000000f0 | Core Gen10 Mobile
  | RKL-S          | B0       | 06-a7-01/02 | 00000050 | 00000053 | Core Gen11</changelog>
  <changelog author="meissner@suse.com" date="1660132800">- Updated to Intel CPU Microcode 20220809 release. (bsc#1201727)
  - CVE-2022-21233: Security updates for [INTEL-SA-00657](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00657.html).
  - Update for functional issues. Refer to [Intel® Xeon® Processor Scalable Family Specification
  +Update](https://www.intel.com/content/www/us/en/processors/xeon/scalable/xeon-scalable-spec-update.html?wapkw=processor+specification+update) for details.  - Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | SKX-SP         | B1       | 06-55-03/97 | 0100015d | 0100015e | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006d05 | 02006e05 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006d05 | 02006e05 | Xeon D-21xx
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000363 | 0d000375 | Xeon Scalable Gen3
  | GLK            | B0       | 06-7a-01/01 | 0000003a | 0000003c | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GLK-R          | R0       | 06-7a-08/01 | 0000001e | 00000020 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000b0 | 000000b2 | Core Gen10 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 00000026 | 00000028 | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 0000003e | 00000040 | Core Gen11 Mobile
  | RKL-S          | B0       | 06-a7-01/02 | 00000053 | 00000054 | Core Gen11
  | ADL            | C0       | 06-97-02/03 | 0000001f | 00000022 | Core Gen12
  | ADL            | C0       | 06-97-05/03 | 0000001f | 00000022 | Core Gen12
  | ADL            | L0       | 06-9a-03/80 | 0000041c | 00000421 | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 0000041c | 00000421 | Core Gen12
  | ADL            | C0       | 06-bf-02/03 | 0000001f | 00000022 | Core Gen12
  | ADL            | C0       | 06-bf-05/03 | 0000001f | 00000022 | Core Gen12</changelog>
  <changelog author="meissner@suse.com" date="1676462400">- Updated to Intel CPU Microcode 20230214 release.
  Security issues fixed:
  - CVE-2022-38090: Security updates for [INTEL-SA-00767](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00767.html) (bsc#1208275)
  - CVE-2022-33196: Security updates for [INTEL-SA-00738](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00738.html) (bsc#1208276)
  - CVE-2022-21216: Security updates for [INTEL-SA-00700](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00700.html) (bsc#1208277)
  - CVE-2022-33972: Security updates for [INTEL-SA-00730](http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00730.html) (bsc#1208479)
  New Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | SPR-SP         | E2       | 06-8f-05/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-SP         | E3       | 06-8f-06/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-SP         | E4       | 06-8f-07/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-SP         | E5       | 06-8f-08/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-HBM        | B3       | 06-8f-08/10 |          | 2c000170 | Xeon Max
  | RPL-P 6+8      | J0       | 06-ba-02/07 |          | 0000410e | Core Gen13
  | RPL-H 6+8      | J0       | 06-ba-02/07 |          | 0000410e | Core Gen13
  | RPL-U 2+8      | Q0       | 06-ba-02/07 |          | 0000410e | Core Gen13
  Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | C0       | 06-97-02/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | C0       | 06-97-05/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | C0       | 06-bf-02/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | C0       | 06-bf-05/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | L0       | 06-9a-03/80 | 00000424 | 00000429 | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 00000424 | 00000429 | Core Gen12
  | CLX-SP         | B0       | 06-55-06/bf | 04003302 | 04003303 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003302 | 05003303 | Xeon Scalable Gen2
  | CPX-SP         | A1       | 06-55-0b/bf | 07002501 | 07002503 | Xeon Scalable Gen3
  | GLK            | B0       | 06-7a-01/01 | 0000003c | 0000003e | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GLK-R          | R0       | 06-7a-08/01 | 00000020 | 00000022 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-D          | B0       | 06-6c-01/10 | 01000201 | 01000211 | Xeon D-17xx, D-27xx
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000b6 | 000000b8 | Core Gen10 Mobile
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000375 | 0d000389 | Xeon Scalable Gen3
  | JSL            | A0/A1    | 06-9c-00/01 | 24000023 | 24000024 | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105
  | LKF            | B2/B3    | 06-8a-01/10 | 00000031 | 00000032 | Core w/Hybrid Technology
  | RKL-S          | B0       | 06-a7-01/02 | 00000056 | 00000057 | Core Gen11
  | RPL-S          | S0       | 06-b7-01/32 | 0000010e | 00000112 | Core Gen13
  | SKX-SP         | B1       | 06-55-03/97 | 0100015e | 01000161 | Xeon Scalable</changelog>
  <changelog author="meissner@suse.com" date="1684238400">- Updated to Intel CPU Microcode 20230512 release. (bsc#1211382)
  - New Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL-N          | A0       | 06-be-00/01 |          | 00000010 | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  | AZB            | A0       | 06-9a-04/40 |          | 00000004 | Intel(R) Atom(R) C1100
  | AZB            | R0       | 06-9a-04/40 |          | 00000004 | Intel(R) Atom(R) C1100
  - Updated Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | L0       | 06-9a-03/80 | 00000429 | 0000042a | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 00000429 | 0000042a | Core Gen12
  | AML-Y22        | H0       | 06-8e-09/10 |          | 000000f2 | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CFL-H          | R0       | 06-9e-0d/22 | 000000f4 | 000000f8 | Core Gen9 Mobile
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000f0 | 000000f2 | Core Gen9
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000f0 | 000000f2 | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000f0 | 000000f2 | Core Gen8
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000f0 | 000000f2 | Core Gen8 Mobile
  | CLX-SP         | B0       | 06-55-06/bf | 04003303 | 04003501 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003303 | 05003501 | Xeon Scalable Gen2
  | CML-H          | R1       | 06-a5-02/20 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CML-S102       | Q0       | 06-a5-05/22 | 000000f4 | 000000f6 | Core Gen10
  | CML-S62        | G1       | 06-a5-03/22 | 000000f4 | 000000f6 | Core Gen10
  | CML-U62 V1     | A0       | 06-a6-00/80 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CML-U62 V2     | K1       | 06-a6-01/80 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CPX-SP         | A1       | 06-55-0b/bf | 07002503 | 07002601 | Xeon Scalable Gen3
  | ICL-D          | B0       | 06-6c-01/10 | 01000211 | 01000230 | Xeon D-17xx, D-27xx
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000b8 | 000000ba | Core Gen10 Mobile
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000389 | 0d000390 | Xeon Scalable Gen3
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000f0 | 000000f2 | Core Gen7; Xeon E3 v6
  | KBL-U/Y        | H0       | 06-8e-09/c0 |          | 000000f2 | Core Gen7 Mobile
  | LKF            | B2/B3    | 06-8a-01/10 | 00000032 | 00000033 | Core w/Hybrid Technology
  | RKL-S          | B0       | 06-a7-01/02 | 00000057 | 00000058 | Core Gen11
  | RPL-H 6+8      | J0       | 06-ba-02/07 | 0000410e | 00004112 | Core Gen13
  | RPL-P 6+8      | J0       | 06-ba-02/07 | 0000410e | 00004112 | Core Gen13
  | RPL-S          | S0       | 06-b7-01/32 | 00000112 | 00000113 | Core Gen13
  | RPL-U 2+8      | Q0       | 06-ba-03/07 | 0000410e | 00004112 | Core Gen13
  | SKX-D          | H0       | 06-55-04/b7 |          | 02006f05 | Xeon D-21xx
  | SKX-SP         | B1       | 06-55-03/97 | 01000161 | 01000171 | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 |          | 02006f05 | Xeon Scalable
  | SPR-HBM        | B3       | 06-8f-08/10 | 2c000170 | 2c0001d1 | Xeon Max
  | SPR-SP         | E0       | 06-8f-04/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E2       | 06-8f-05/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E3       | 06-8f-06/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E4       | 06-8f-07/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E5       | 06-8f-08/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | S2       | 06-8f-07/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | S3       | 06-8f-08/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | TGL            | B1       | 06-8c-01/80 | 000000a6 | 000000aa | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 00000042 | 00000044 | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 00000028 | 0000002a | Core Gen11 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 |          | 000000f2 | Core Gen8 Mobile</changelog>
  <changelog author="abergmann@suse.com" date="1691582400">- Updated to Intel CPU Microcode 20230808 release. (bsc#1214099)
  Security issues fixed:
  - CVE-2022-40982: Security updates for [INTEL-SA-00828](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00828.html) (bsc#1206418)
  - CVE-2023-23908: Security updates for [INTEL-SA-00836](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00836.html)
  - CVE-2022-41804: Security updates for [INTEL-SA-00837](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00837.html)
  Functional issues fixed:
  - Update for functional issues. Refer to [13th Generation Intel® Core™ Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.
  - Update for functional issues. Refer to [12th Generation Intel® Core™ Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.
  - Update for functional issues. Refer to [11th Gen Intel® Core™ Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.
  - Update for functional issues. Refer to [10th Gen Intel® Core™ Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.
  - Update for functional issues. Refer to [8th and 9th Generation Intel® Core™ Processor Family Spec Update](https://cdrdv2.intel.com/v1/dl/getContent/337346) for details.
  - Update for functional issues. Refer to [8th Generation Intel® Core™ Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338025) for details.
  - Update for functional issues. Refer to [7th and 8th Generation Intel® Core™ Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/334663) for details.
  - Update for functional issues. Refer to [Intel® Processors and Intel® Core™ i3 N-Series](https://cdrdv2.intel.com/v1/dl/getContent/764616) for details.
  - Update for functional issues. Refer to [4th Gen Intel® Xeon® Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/772415) for details.
  - Update for functional issues. Refer to [3rd Generation Intel® Xeon® Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634897) for details.
  - Update for functional issues. Refer to [2nd Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
  - Update for functional issues. Refer to [Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.
  - Update for functional issues. Refer to [3rd Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.
  - Update for functional issues. Refer to [Intel® Xeon® E-2300 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/709192) for details.
  - Update for functional issues. Refer to [Intel® Xeon® D-2700 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714071) for details.
  - Update for functional issues. Refer to [Intel® Xeon® D-2100 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338854) for details.
  New Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL-N          | A0       | 06-be-00/11 |          | 00000011 | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  | RPL-H/P/PX 6+8 | J0       | 06-ba-02/e0 |          | 00004119 | Core Gen13
  Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | CML-U62 V2     | K1       | 06-a6-01/80 | 000000f6 | 000000f8 | Core Gen10 Mobile
  | SKX-D          | H0       | 06-55-04/b7 | 02006f05 | 02007006 | Xeon D-21xx
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006e05 | 02007006 | Xeon Scalable
  | KBL-G/H/S/X/E3 | B0       | 06-9e-09/2a | 000000f2 | 000000f4 | Core Gen7; Xeon E3 v6
  | ADL            | L0       | 06-9a-03/80 | 0000042a | 0000042c | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 0000042a | 0000042c | Core Gen12
  | ICX-SP         | Dx/M1    | 06-6a-06/87 | 0d000390 | 0d0003a5 | Xeon Scalable Gen3
  | CML-S102       | Q0       | 06-a5-05/22 | 000000f6 | 000000f8 | Core Gen10
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000f2 | 000000f4 | Core Gen8 Mobile
  | KBL-R U        | Y0       | 06-8e-0a/c0 | 000000f2 | 000000f4 | Core Gen8 Mobile
  | CFL-H          | R0       | 06-9e-0d/22 | 000000f8 | 000000fa | Core Gen9 Mobile
  | RKL-S          | B0       | 06-a7-01/02 | 00000058 | 00000059 | Core Gen11
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000ba | 000000bc | Core Gen10 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 00000044 | 00000046 | Core Gen11 Mobile
  | SPR-SP         | E5/S3    | 06-8f-08/87 | 2b000461 | 2b0004b1 | Xeon Scalable Gen4
  | SPR-SP         | E4/S2    | 06-8f-07/87 | 2b000461 | 2b0004b1 | Xeon Scalable Gen4
  | SPR-SP         | E3       | 06-8f-06/87 | 2b000461 | 2b0004b1 | Xeon Scalable Gen4
  | SPR-SP         | E2       | 06-8f-05/87 | 2b000461 | 2b0004b1 | Xeon Scalable Gen4
  | SPR-SP         | E0       | 06-8f-04/87 | 2b000461 | 2b0004b1 | Xeon Scalable Gen4
  | CML-S62        | G1       | 06-a5-03/22 | 000000f6 | 000000f8 | Core Gen10
  | AML-Y22        | H0       | 06-8e-09/10 | 000000f0 | 000000f4 | Core Gen8 Mobile
  | RPL-S          | B0       | 06-b7-01/32 | 00000113 | 00000119 | Core Gen13
  | CML-U62 V1     | A0       | 06-a6-00/80 | 000000f6 | 000000f8 | Core Gen10 Mobile
  | ADL-N          | A0       | 06-be-00/11 |          | 00000011 | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  | CPX-SP         | A1       | 06-55-0b/bf | 07002601 | 07002703 | Xeon Scalable Gen3
  | CLX-SP         | B0       | 06-55-06/bf | 04003501 | 04003604 | Xeon Scalable Gen2
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000f2 | 000000f4 | Core Gen8 Desktop, Mobile, Xeon E
  | SPR-HBM        | Bx       | 06-8f-08/10 | 2c0001d1 | 2c000271 | Xeon Max
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000f2 | 000000f4 | Core Gen8 Mobile
  | CLX-SP         | B1       | 06-55-07/bf | 05003501 | 05003604 | Xeon Scalable Gen2
  | CFL-S          | B0       | 06-9e-0b/02 | 000000f2 | 000000f4 | Core Gen8
  | TGL-R          | C0       | 06-8c-02/c2 | 0000002a | 0000002c | Core Gen11 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000f2 | 000000f4 | Core Gen7 Mobile
  | KBL-U23e       | J1       | 06-8e-09/c0 | 000000f2 | 000000f4 | Core Gen7 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000f6 | 000000f8 | Core Gen10 Mobile
  | CML-U42        | V0       | 06-8e-0c/94 | 000000f6 | 000000f8 | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000f6 | 000000f8 | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000f6 | 000000f8 | Core Gen8 Mobile
  | SKX-SP         | B1       | 06-55-03/97 | 01000171 | 01000181 | Xeon Scalable
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000f2 | 000000f4 | Core Gen9
  | CFL-S          | P0       | 06-9e-0c/22 | 000000f2 | 000000f4 | Core Gen9 Desktop
  | TGL            | B0/B1    | 06-8c-01/80 | 000000aa | 000000ac | Core Gen11 Mobile
  | ADL            | C0       | 06-97-02/07 | 0000002c | 0000002e | Core Gen12
  | ADL            | C0       | 06-97-05/07 | 0000002c | 0000002e | Core Gen12
  | ADL            | C0       | 06-bf-02/07 | 0000002c | 0000002e | Core Gen12
  | ADL            | C0       | 06-bf-05/07 | 0000002c | 0000002e | Core Gen12
  | CML-H          | R1       | 06-a5-02/20 | 000000f6 | 000000f8 | Core Gen10 Mobile
  | RPL-H/P/PX 6+8 | J0       | 06-ba-02/e0 |          | 00004119 | Core Gen13
  | RPL-U 2+8      | Q0       | 06-ba-03/e0 |          | 00004119 | Core Gen13</changelog>
  <changelog author="meissner@suse.com" date="1697803200">- Updated to Intel CPU Microcode 20231114 pre-release (labeled 20231113).
  (bsc#1215278)
  - CVE-2023-23583: Fixed potential CPU deadlocks or privilege escalation (bsc#1215278)</changelog>
</package>
<package pkgid="e5873ada777dc2f65d46b69a65940498a87a863672de71ea6f3f3f44d6647a16" name="ucode-intel" arch="src">
  <version epoch="0" ver="20231114" rel="150200.35.1"/>
  <changelog author="meissner@suse.com" date="1579089600">- reverted the entry below to 02000064 due to occasional faults (bsc#1160478)
  - SKX-SP       H0/M0/U0 6-55-4/b7 02000064-&gt;02000065 Xeon Scalable</changelog>
  <changelog author="meissner@suse.com" date="1587470400">- updated skylake microcode to the current version. (bsc#1169570)
  - 02000064-&gt;02006901</changelog>
  <changelog author="meissner@suse.com" date="1591185600">- Updated Intel CPU Microcode to 20200602 (prerelease) (bsc#1172466)
  Fixes for:
  - CVE-2020-0543: Fixed a side channel attack against special registers
    which could have resulted in leaking of read values to cores other
    than the one which called it.  This attack is known as Special Register
    Buffer Data Sampling (SRBDS) or "CrossTalk" (bsc#1154824).
  - CVE-2020-0548,CVE-2020-0549: Additional ucode updates were supplied to
    mitigate the Vector Register and L1D Eviction Sampling aka "CacheOutAttack"
    attacks. (bsc#1156353)
  == 20200602_DEMO Release ==
  - - Updates upon 20200520 release --
  Processor             Identifier     Version       Products
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- new platforms ----------------------------------------
  - --- updated platforms ------------------------------------
  HSW          C0       6-3c-3/32 00000027-&gt;00000028 Core Gen4
  BDW-U/Y      E0/F0    6-3d-4/c0 0000002e-&gt;0000002f Core Gen5
  HSW-U        C0/D0    6-45-1/72 00000025-&gt;00000026 Core Gen4
  HSW-H        C0       6-46-1/32 0000001b-&gt;0000001c Core Gen4
  BDW-H/E3     E0/G0    6-47-1/22 00000021-&gt;00000022 Core Gen5
  SKL-U/Y      D0       6-4e-3/c0 000000d6-&gt;000000dc Core Gen6 Mobile
  SKL-U23e     K1       6-4e-3/c0 000000d6-&gt;000000dc Core Gen6 Mobile
  SKX-SP       B1       6-55-3/97 01000151-&gt;01000157 Xeon Scalable
  SKX-SP       H0/M0/U0 6-55-4/b7 02000065-&gt;02006906 Xeon Scalable
  SKX-D        M1       6-55-4/b7 02000065-&gt;02006906 Xeon D-21xx
  CLX-SP       B0       6-55-6/bf 0400002c-&gt;04002f01 Xeon Scalable Gen2
  CLX-SP       B1       6-55-7/bf 0500002c-&gt;04002f01 Xeon Scalable Gen2
  SKL-H/S      R0/N0    6-5e-3/36 000000d6-&gt;000000dc Core Gen6; Xeon E3 v5
  AML-Y22      H0       6-8e-9/10 000000ca-&gt;000000d6 Core Gen8 Mobile
  KBL-U/Y      H0       6-8e-9/c0 000000ca-&gt;000000d6 Core Gen7 Mobile
  CFL-U43e     D0       6-8e-a/c0 000000ca-&gt;000000d6 Core Gen8 Mobile
  WHL-U        W0       6-8e-b/d0 000000ca-&gt;000000d6 Core Gen8 Mobile
  AML-Y42      V0       6-8e-c/94 000000ca-&gt;000000d6 Core Gen10 Mobile
  CML-Y42      V0       6-8e-c/94 000000ca-&gt;000000d6 Core Gen10 Mobile
  WHL-U        V0       6-8e-c/94 000000ca-&gt;000000d6 Core Gen8 Mobile
  KBL-G/H/S/E3 B0       6-9e-9/2a 000000ca-&gt;000000d6 Core Gen7; Xeon E3 v6
  CFL-H/S/E3   U0       6-9e-a/22 000000ca-&gt;000000d6 Core Gen8 Desktop, Mobile, Xeon E
  CFL-S        B0       6-9e-b/02 000000ca-&gt;000000d6 Core Gen8
  CFL-H/S      P0       6-9e-c/22 000000ca-&gt;000000d6 Core Gen9
  CFL-H        R0       6-9e-d/22 000000ca-&gt;000000d6 Core Gen9 Mobile
- Updated Intel CPU Microcode to 20200520
  Processor             Identifier     Version       Products
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- new platforms ----------------------------------------
  - --- updated platforms ------------------------------------
  SNB-E/EN/EP  C1/M0    6-2d-6/6d 0000061f-&gt;00000621 Xeon E3/E5, Core X
  SNB-E/EN/EP  C2/M1    6-2d-7/6d 00000718-&gt;0000071a Xeon E3/E5, Core X</changelog>
  <changelog author="meissner@suse.com" date="1592222400">- Updated Intel CPU Microcode to 20200609 official release (bsc#1172466)
  - no changes to 20200602 prerelease</changelog>
  <changelog author="meissner@suse.com" date="1592395200">- Updated Intel CPU Microcode to 20200616 official release (bsc#1172856)
  - revert 06-4e-03 Skylake U/Y, U23e ucode back to 000000d6 release
  - revert 06-5e-03 Skylake H/S ucode back to 000000d6 release,
    as both cause stability issues.  (bsc#1172856)</changelog>
  <changelog author="meissner@suse.com" date="1604491200">- Updated Intel CPU Microcode to 20201027 prerelease (bsc#1170446)
  - CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX)
  [#] New Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | TGL            | B1       | 06-8c-01/80 |          | 00000068 | Core Gen11 Mobile
  | CPX-SP         | A1       | 06-55-0b/bf |          | 0700001e | Xeon Scalable Gen3
  | CML-H          | R1       | 06-a5-02/20 |          | 000000e0 | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 |          | 000000e0 | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 |          | 000000e0 | Core Gen10
  | CML-U62 V2     | K0       | 06-a6-01/80 |          | 000000e0 | Core Gen10 Mobile
  [#] Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | GKL-R          | R0       | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | SKL-U23e       | K1       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | APL            | D0       | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5
  | HSX-E/EP       | Cx/M1    | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3
  | SKX-SP         | B1       | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2
  | ICL-U/Y        | D1       | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile
  | AML-Y22        | H0       | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile
  | CML-U62        | A0       | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile</changelog>
  <changelog author="meissner@suse.com" date="1605096000">- Updated Intel CPU Microcode to 20201110 official release.
  - CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX) (bsc#1170446)
  - CVE-2020-8698: Fixed Fast Store Forward Predictor INTEL-SA-00381 (bsc#1173594)
  - CVE-2020-8696: Vector Register Sampling Active INTEL-SA-00381 (bsc#1173592)
- Releasenotes:
  - Security updates for [INTEL-SA-00381](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html).
  - Security updates for [INTEL-SA-00389](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00389.html).
  - Update for functional issues. Refer to [Second Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
  - Update for functional issues. Refer to [Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.
  - Update for functional issues. Refer to [Intel® Xeon® Processor E5 v3 Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e5-v3-spec-update.html?wapkw=processor+spec+update+e5) for details.
  - Update for functional issues. Refer to [10th Gen Intel® Core™ Processor Families Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/10th-gen-core-families-specification-update.html) for details.
  - Update for functional issues. Refer to [8th and 9th Gen Intel® Core™ Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-spec-update.html) for details.
  - Update for functional issues. Refer to [7th Gen and 8th Gen (U Quad-Core) Intel® Processor Families Specification Update](https://www.intel.com/content/www/us/en/processors/core/7th-gen-core-family-spec-update.html) for details.
  - Update for functional issues. Refer to [6th Gen Intel® Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/332689) for details.
  - Update for functional issues. Refer to [Intel® Xeon® E3-1200 v6 Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e3-1200v6-spec-update.html) for details.
  - Update for functional issues. Refer to [Intel® Xeon® E-2100 and E-2200 Processor Family Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-e-2100-specification-update.html) for details.
  [#]## New Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | CPX-SP         | A1       | 06-55-0b/bf |          | 0700001e | Xeon Scalable Gen3
  | LKF            | B2/B3    | 06-8a-01/10 |          | 00000028 | Core w/Hybrid Technology
  | TGL            | B1       | 06-8c-01/80 |          | 00000068 | Core Gen11 Mobile
  | CML-H          | R1       | 06-a5-02/20 |          | 000000e0 | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 |          | 000000e0 | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 |          | 000000e0 | Core Gen10
  | CML-U62 V2     | K0       | 06-a6-01/80 |          | 000000e0 | Core Gen10 Mobile
  [#]## Updated Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | HSX-E/EP       | Cx/M1    | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | SKL-U23e       | K1       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | SKX-SP         | B1       | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2
  | APL            | D0       | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5
  | GKL-R          | R0       | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile
  | AML-Y22        | H0       | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile
  | CML-U62        | A0       | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile</changelog>
  <changelog author="meissner@suse.com" date="1605787200">- Updated Intel CPU Microcode to 20201118 official release. (bsc#1178971)
  - Removed TGL/06-8c-01/80 due to functional issues with some OEM platforms.</changelog>
  <changelog author="meissner@suse.com" date="1607342400">- Reverted 3 microcodes back to 20200616 release level after regression reports. (bsc#1179224)
  - SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006906 | Xeon Scalable
  - SKX-D          | M1       | 06-55-04/b7 | 02006906 | Xeon D-21xx
  - CLX-SP         | B0       | 06-55-06/bf | 04002f01 | Xeon Scalable Gen2
  - CLX-SP         | B1       | 06-55-07/bf | 05002f01 | Xeon Scalable Gen2</changelog>
  <changelog author="meissner@suse.com" date="1613563200">- Updated Intel CPU Microcode to 20210216 official release. (bsc#1178971 bsc#1179224)
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006a08 | 02006a0a | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006a08 | 02006a0a | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04003003 | 04003006 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003003 | 05003006 | Xeon Scalable Gen2</changelog>
  <changelog author="meissner@suse.com" date="1623153600">- Updated to Intel CPU Microcode 20210525 release.
  - CVE-2020-24513: A domain bypass transient execution vulnerability was discovered on some Intel Atom processors that use a micro-architectural incident channel. (INTEL-SA-00465 bsc#1179833)
    See also: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00465.html
  - CVE-2020-24511: The IBRS feature to mitigate Spectre variant 2 transient execution side channel vulnerabilities may not fully prevent non-root (guest) branches from controlling the branch predictions of the root (host) (INTEL-SA-00464 bsc#1179836)
    See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)
  - CVE-2020-24512: Fixed trivial data value cache-lines such as all-zero value cache-lines may lead to changes in cache-allocation or write-back behavior for such cache-lines (bsc#1179837 INTEL-SA-00464)
    See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)
  - CVE-2020-24489: Fixed Intel VT-d device pass through potential local privilege escalation (INTEL-SA-00442 bsc#1179839)
    See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00442.html
- Update for functional issues. Refer to [Third Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780)for details.
- Update for functional issues. Refer to [Second Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
- Update for functional issues. Refer to [Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.
- Update for functional issues. Refer to [Intel Xeon Processor D-1500, D-1500 NS and D-1600 NS Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-d-1500-specification-update.html) for details.
- Update for functional issues. Refer to [Intel Xeon E7-8800 and E7-4800 v3 Processor Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e7-v3-spec-update.html) for details.
- Update for functional issues. Refer to [Intel Xeon Processor E5 v3 Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e5-v3-spec-update.html?wapkw=processor+spec+update+e5) for details.
- Update for functional issues. Refer to [10th Gen Intel Core Processor Families Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/10th-gen-core-families-specification-update.html) for details.
- Update for functional issues. Refer to [8th and 9th Gen Intel Core Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-spec-update.html) for details.
- Update for functional issues. Refer to [7th Gen and 8th Gen (U Quad-Core) Intel Processor Families Specification Update](https://www.intel.com/content/www/us/en/processors/core/7th-gen-core-family-spec-update.html) for details.
- Update for functional issues. Refer to [6th Gen Intel Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/332689) for details.
- Update for functional issues. Refer to [Intel Xeon E3-1200 v6 Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e3-1200v6-spec-update.html) for details.
- Update for functional issues. Refer to [Intel Xeon E-2100 and E-2200 Processor Family Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-e-2100-specification-update.html) for details.
- New platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | CLX-SP         | A0       | 06-55-05/b7 |          | 03000010 | Xeon Scalable Gen2
  | ICX-SP         | C0       | 06-6a-05/87 |          | 0c0002f0 | Xeon Scalable Gen3
  | ICX-SP         | D0       | 06-6a-06/87 |          | 0d0002a0 | Xeon Scalable Gen3
  | SNR            | B0       | 06-86-04/01 |          | 0b00000f | Atom P59xxB
  | SNR            | B1       | 06-86-05/01 |          | 0b00000f | Atom P59xxB
  | TGL            | B1       | 06-8c-01/80 |          | 00000088 | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 |          | 00000016 | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 |          | 0000002c | Core Gen11 Mobile
  | EHL            | B1       | 06-96-01/01 |          | 00000011 | Pentium J6426/N6415, Celeron J6412/J6413/N6210/N6211, Atom x6000E
  | JSL            | A0/A1    | 06-9c-00/01 |          | 0000001d | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105
  | RKL-S          | B0       | 06-a7-01/02 |          | 00000040 | Core Gen11
- Updated platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | HSX-E/EP       | Cx/M1    | 06-3f-02/6f | 00000044 | 00000046 | Core Gen4 X series; Xeon E5 v3
  | HSX-EX         | E0       | 06-3f-04/80 | 00000016 | 00000019 | Xeon E7 v3
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000e2 | 000000ea | Core Gen6 Mobile
  | SKL-U23e       | K1       | 06-4e-03/c0 | 000000e2 | 000000ea | Core Gen6 Mobile
  | BDX-ML         | B0/M0/R0 | 06-4f-01/ef | 0b000038 | 0b00003e | Xeon E5/E7 v4; Core i7-69xx/68xx
  | SKX-SP         | B1       | 06-55-03/97 | 01000159 | 0100015b | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006a0a | 02006b06 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006a0a | 02006b06 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04003006 | 04003102 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003006 | 05003102 | Xeon Scalable Gen2
  | CPX-SP         | A1       | 06-55-0b/bf | 0700001e | 07002302 | Xeon Scalable Gen3
  | BDX-DE         | V2/V3    | 06-56-03/10 | 07000019 | 0700001b | Xeon D-1518/19/21/27/28/31/33/37/41/48, Pentium D1507/08/09/17/19
  | BDX-DE         | Y0       | 06-56-04/10 | 0f000017 | 0f000019 | Xeon D-1557/59/67/71/77/81/87
  | BDX-NS         | A0       | 06-56-05/10 | 0e00000f | 0e000012 | Xeon D-1513N/23/33/43/53
  | APL            | D0       | 06-5c-09/03 | 00000040 | 00000044 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 0000001e | 00000020 | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000e2 | 000000ea | Core Gen6; Xeon E3 v5
  | DNV            | B0       | 06-5f-01/01 | 0000002e | 00000034 | Atom C Series
  | GLK            | B0       | 06-7a-01/01 | 00000034 | 00000036 | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GKL-R          | R0       | 06-7a-08/01 | 00000018 | 0000001a | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000a0 | 000000a6 | Core Gen10 Mobile
  | LKF            | B2/B3    | 06-8a-01/10 | 00000028 | 0000002a | Core w/Hybrid Technology
  | AML-Y22        | H0       | 06-8e-09/10 | 000000de | 000000ea | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000de | 000000ea | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000e0 | 000000ea | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000de | 000000ea | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen8 Mobile
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000de | 000000ea | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000de | 000000ea | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000de | 000000ea | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000de | 000000ea | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000de | 000000ea | Core Gen9 Mobile
  | CML-H          | R1       | 06-a5-02/20 | 000000e0 | 000000ea | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 | 000000e0 | 000000ea | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 | 000000e0 | 000000ec | Core Gen10
  | CML-U62        | A0       | 06-a6-00/80 | 000000e0 | 000000e8 | Core Gen10 Mobile
  | CML-U62 V2     | K0       | 06-a6-01/80 | 000000e0 | 000000ea | Core Gen10 Mobile</changelog>
  <changelog author="meissner@suse.com" date="1644494400">- Updated to Intel CPU Microcode 20220207 release.
  - CVE-2021-0146: Fixed a potential security vulnerability in some Intel Processors may allow escalation of privilege (bsc#1192615)
  - CVE-2021-0127: Intel Processor Breakpoint Control Flow (bsc#1195779)
  - CVE-2021-0145: Fast store forward predictor - Cross Domain Training (bsc#1195780)
  - CVE-2021-33120: Out of bounds read for some Intel Atom processors (bsc#1195781)
  - Security updates for [INTEL-SA-00528](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00528.html)
  - Security updates for [INTEL-SA-00532](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00532.html)
  - Update for functional issues. Refer to [Third Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.
  - Update for functional issues. Refer to [Second Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
  - Update for functional issues. Refer to [Intel® Xeon® Processor Scalable Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/scalable/xeon-scalable-spec-update.html?wapkw=processor+specification+update) for details.
  - Update for functional issues. Refer to [11th Generation Intel® Core" Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.
  - Update for functional issues. Refer to [11th Generation Intel® Core" Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634808) for details.
  - Update for functional issues. Refer to [10th Gen Intel® Core" Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.
  - Update for functional issues. Refer to [10th Generation Intel® Core" Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/615213) for details.
  - Update for functional issues. Refer to [8th Generation Intel® Core" Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338025) for details.
  - Update for functional issues. Refer to [8th Gen Intel® Core" Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-family-spec-update.html?wapkw=processor+specification+update) for details.
  - Update for functional issues. Refer to [7th and 8th Generation Intel® Core" Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/334663) for details.
  - Update for functional issues. Refer to [6th Generation Intel® Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/core/desktop-6th-gen-core-family-spec-update.html) for details.
  - Update for functional issues. Refer to [Intel® Pentium® Silver and Intel® Celeron® Processors](https://www.intel.com/content/www/us/en/products/docs/processors/pentium/silver-celeron-spec-update.html?wapkw=processor+specification+update) for details.</changelog>
  <changelog author="meissner@suse.com" date="1650542400">- Updated to Intel CPU Microcode 20220419 release. (bsc#1198717)
  - Update for functional issues. Refer to errata
    APLI-11 in [Intel Atom Processor E3900
    Series](https://cdrdv2.intel.com/v1/dl/getContent/612204) for details.
  - Changed Microcodes:
  - | APL            | E0       | 06-5c-0a/03 | 00000024 | 00000028 | Atom x5-E39xx</changelog>
  <changelog author="meissner@suse.com" date="1652270400">- Updated to Intel CPU Microcode 20220510 release. (bsc#1199423)
  - CVE-2022-21151: Security updates for [INTEL-SA-000617](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00617.html)
  - Update for functional issues. Refer to [Second Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
  - Update for functional issues. Refer to [Intel Xeon Processor Scalable Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/scalable/xeon-scalable-spec-update.html?wapkw=processor+specification+update) for details.
  - Update for functional issues. Refer to [Intel Atom C3000 Processor Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/atom/atom-c3000-family-spec-update.html?wapkw=processor+specification+update) for details.
  - Update for functional issues. Refer to [Intel Atom Processor E3900 Specification Update Addendum](https://cdrdv2.intel.com/v1/dl/getContent/612204) for details.
  - New Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | C0       | 06-97-02/03 |          | 0000001f | Core Gen12
  | ADL            | C0       | 06-97-05/03 |          | 0000001f | Core Gen12
  | ADL            | L0       | 06-9a-03/80 |          | 0000041c | Core Gen12
  | ADL            | L0       | 06-9a-04/80 |          | 0000041c | Core Gen12
  | ADL            | C0       | 06-bf-02/03 |          | 0000001f | Core Gen12
  | ADL            | C0       | 06-bf-02/03 |          | 0000001f | Core Gen12
  - Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | VLV            | D0       | 06-37-09/0F | 0000090c | 0000090d | Atom E38xx
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000ec | 000000f0 | Core Gen6 Mobile
  | SKX-SP         | B1       | 06-55-03/97 | 0100015c | 0100015d | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006c0a | 02006d05 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006c0a | 02006d05 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 0400320a | 04003302 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 0500320a | 05003302 | Xeon Scalable Gen2
  | CPX-SP         | A1       | 06-55-0b/bf | 07002402 | 07002501 | Xeon Scalable Gen3
  | APL            | D0       | 06-5c-09/03 | 00000046 | 00000048 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 00000024 | 00000028 | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000ec | 000000f0 | Core Gen6; Xeon E3 v5
  | DNV            | B0       | 06-5f-01/01 | 00000036 | 00000038 | Atom C Series
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000331 | 0d000363 | Xeon Scalable Gen3
  | GLK            | B0       | 06-7a-01/01 | 00000038 | 0000003a | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GKL-R          | R0       | 06-7a-08/01 | 0000001c | 0000001e | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000a8 | 000000b0 | Core Gen10 Mobile
  | LKF            | B2/B3    | 06-8a-01/10 | 0000002d | 00000031 | Core w/Hybrid Technology
  | TGL            | B1       | 06-8c-01/80 | 0000009a | 000000a4 | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 00000022 | 00000026 | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 0000003c | 0000003e | Core Gen11 Mobile
  | AML-Y22        | H0       | 06-8e-09/10 | 000000ec | 000000f0 | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000ec | 000000f0 | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000ec | 000000f0 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000ec | 000000f0 | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000ec | 000000f0 | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000ec | 000000f0 | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000ec | 000000f0 | Core Gen8 Mobile
  | EHL            | B1       | 06-96-01/01 | 00000015 | 00000016 | Pentium J6426/N6415, Celeron J6412/J6413/N6210/N6211, Atom x6000E
  | JSL            | A0/A1    | 06-9c-00/01 | 2400001f | 24000023 | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000ec | 000000f0 | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000ec | 000000f0 | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000ec | 000000f0 | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000ec | 000000f0 | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000ec | 000000f0 | Core Gen9 Mobile
  | CML-H          | R1       | 06-a5-02/20 | 000000ec | 000000f0 | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 | 000000ec | 000000f0 | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 | 000000ee | 000000f0 | Core Gen10
  | CML-U62 V1     | A0       | 06-a6-00/80 | 000000ea | 000000f0 | Core Gen10 Mobile
  | CML-U62 V2     | K1       | 06-a6-01/80 | 000000ec | 000000f0 | Core Gen10 Mobile
  | RKL-S          | B0       | 06-a7-01/02 | 00000050 | 00000053 | Core Gen11</changelog>
  <changelog author="meissner@suse.com" date="1660132800">- Updated to Intel CPU Microcode 20220809 release. (bsc#1201727)
  - CVE-2022-21233: Security updates for [INTEL-SA-00657](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00657.html).
  - Update for functional issues. Refer to [Intel® Xeon® Processor Scalable Family Specification
  +Update](https://www.intel.com/content/www/us/en/processors/xeon/scalable/xeon-scalable-spec-update.html?wapkw=processor+specification+update) for details.  - Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | SKX-SP         | B1       | 06-55-03/97 | 0100015d | 0100015e | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006d05 | 02006e05 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006d05 | 02006e05 | Xeon D-21xx
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000363 | 0d000375 | Xeon Scalable Gen3
  | GLK            | B0       | 06-7a-01/01 | 0000003a | 0000003c | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GLK-R          | R0       | 06-7a-08/01 | 0000001e | 00000020 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000b0 | 000000b2 | Core Gen10 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 00000026 | 00000028 | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 0000003e | 00000040 | Core Gen11 Mobile
  | RKL-S          | B0       | 06-a7-01/02 | 00000053 | 00000054 | Core Gen11
  | ADL            | C0       | 06-97-02/03 | 0000001f | 00000022 | Core Gen12
  | ADL            | C0       | 06-97-05/03 | 0000001f | 00000022 | Core Gen12
  | ADL            | L0       | 06-9a-03/80 | 0000041c | 00000421 | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 0000041c | 00000421 | Core Gen12
  | ADL            | C0       | 06-bf-02/03 | 0000001f | 00000022 | Core Gen12
  | ADL            | C0       | 06-bf-05/03 | 0000001f | 00000022 | Core Gen12</changelog>
  <changelog author="meissner@suse.com" date="1676462400">- Updated to Intel CPU Microcode 20230214 release.
  Security issues fixed:
  - CVE-2022-38090: Security updates for [INTEL-SA-00767](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00767.html) (bsc#1208275)
  - CVE-2022-33196: Security updates for [INTEL-SA-00738](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00738.html) (bsc#1208276)
  - CVE-2022-21216: Security updates for [INTEL-SA-00700](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00700.html) (bsc#1208277)
  - CVE-2022-33972: Security updates for [INTEL-SA-00730](http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00730.html) (bsc#1208479)
  New Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | SPR-SP         | E2       | 06-8f-05/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-SP         | E3       | 06-8f-06/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-SP         | E4       | 06-8f-07/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-SP         | E5       | 06-8f-08/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-HBM        | B3       | 06-8f-08/10 |          | 2c000170 | Xeon Max
  | RPL-P 6+8      | J0       | 06-ba-02/07 |          | 0000410e | Core Gen13
  | RPL-H 6+8      | J0       | 06-ba-02/07 |          | 0000410e | Core Gen13
  | RPL-U 2+8      | Q0       | 06-ba-02/07 |          | 0000410e | Core Gen13
  Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | C0       | 06-97-02/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | C0       | 06-97-05/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | C0       | 06-bf-02/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | C0       | 06-bf-05/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | L0       | 06-9a-03/80 | 00000424 | 00000429 | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 00000424 | 00000429 | Core Gen12
  | CLX-SP         | B0       | 06-55-06/bf | 04003302 | 04003303 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003302 | 05003303 | Xeon Scalable Gen2
  | CPX-SP         | A1       | 06-55-0b/bf | 07002501 | 07002503 | Xeon Scalable Gen3
  | GLK            | B0       | 06-7a-01/01 | 0000003c | 0000003e | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GLK-R          | R0       | 06-7a-08/01 | 00000020 | 00000022 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-D          | B0       | 06-6c-01/10 | 01000201 | 01000211 | Xeon D-17xx, D-27xx
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000b6 | 000000b8 | Core Gen10 Mobile
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000375 | 0d000389 | Xeon Scalable Gen3
  | JSL            | A0/A1    | 06-9c-00/01 | 24000023 | 24000024 | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105
  | LKF            | B2/B3    | 06-8a-01/10 | 00000031 | 00000032 | Core w/Hybrid Technology
  | RKL-S          | B0       | 06-a7-01/02 | 00000056 | 00000057 | Core Gen11
  | RPL-S          | S0       | 06-b7-01/32 | 0000010e | 00000112 | Core Gen13
  | SKX-SP         | B1       | 06-55-03/97 | 0100015e | 01000161 | Xeon Scalable</changelog>
  <changelog author="meissner@suse.com" date="1684238400">- Updated to Intel CPU Microcode 20230512 release. (bsc#1211382)
  - New Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL-N          | A0       | 06-be-00/01 |          | 00000010 | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  | AZB            | A0       | 06-9a-04/40 |          | 00000004 | Intel(R) Atom(R) C1100
  | AZB            | R0       | 06-9a-04/40 |          | 00000004 | Intel(R) Atom(R) C1100
  - Updated Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | L0       | 06-9a-03/80 | 00000429 | 0000042a | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 00000429 | 0000042a | Core Gen12
  | AML-Y22        | H0       | 06-8e-09/10 |          | 000000f2 | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CFL-H          | R0       | 06-9e-0d/22 | 000000f4 | 000000f8 | Core Gen9 Mobile
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000f0 | 000000f2 | Core Gen9
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000f0 | 000000f2 | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000f0 | 000000f2 | Core Gen8
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000f0 | 000000f2 | Core Gen8 Mobile
  | CLX-SP         | B0       | 06-55-06/bf | 04003303 | 04003501 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003303 | 05003501 | Xeon Scalable Gen2
  | CML-H          | R1       | 06-a5-02/20 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CML-S102       | Q0       | 06-a5-05/22 | 000000f4 | 000000f6 | Core Gen10
  | CML-S62        | G1       | 06-a5-03/22 | 000000f4 | 000000f6 | Core Gen10
  | CML-U62 V1     | A0       | 06-a6-00/80 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CML-U62 V2     | K1       | 06-a6-01/80 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CPX-SP         | A1       | 06-55-0b/bf | 07002503 | 07002601 | Xeon Scalable Gen3
  | ICL-D          | B0       | 06-6c-01/10 | 01000211 | 01000230 | Xeon D-17xx, D-27xx
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000b8 | 000000ba | Core Gen10 Mobile
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000389 | 0d000390 | Xeon Scalable Gen3
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000f0 | 000000f2 | Core Gen7; Xeon E3 v6
  | KBL-U/Y        | H0       | 06-8e-09/c0 |          | 000000f2 | Core Gen7 Mobile
  | LKF            | B2/B3    | 06-8a-01/10 | 00000032 | 00000033 | Core w/Hybrid Technology
  | RKL-S          | B0       | 06-a7-01/02 | 00000057 | 00000058 | Core Gen11
  | RPL-H 6+8      | J0       | 06-ba-02/07 | 0000410e | 00004112 | Core Gen13
  | RPL-P 6+8      | J0       | 06-ba-02/07 | 0000410e | 00004112 | Core Gen13
  | RPL-S          | S0       | 06-b7-01/32 | 00000112 | 00000113 | Core Gen13
  | RPL-U 2+8      | Q0       | 06-ba-03/07 | 0000410e | 00004112 | Core Gen13
  | SKX-D          | H0       | 06-55-04/b7 |          | 02006f05 | Xeon D-21xx
  | SKX-SP         | B1       | 06-55-03/97 | 01000161 | 01000171 | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 |          | 02006f05 | Xeon Scalable
  | SPR-HBM        | B3       | 06-8f-08/10 | 2c000170 | 2c0001d1 | Xeon Max
  | SPR-SP         | E0       | 06-8f-04/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E2       | 06-8f-05/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E3       | 06-8f-06/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E4       | 06-8f-07/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E5       | 06-8f-08/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | S2       | 06-8f-07/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | S3       | 06-8f-08/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | TGL            | B1       | 06-8c-01/80 | 000000a6 | 000000aa | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 00000042 | 00000044 | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 00000028 | 0000002a | Core Gen11 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 |          | 000000f2 | Core Gen8 Mobile</changelog>
  <changelog author="abergmann@suse.com" date="1691582400">- Updated to Intel CPU Microcode 20230808 release. (bsc#1214099)
  Security issues fixed:
  - CVE-2022-40982: Security updates for [INTEL-SA-00828](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00828.html) (bsc#1206418)
  - CVE-2023-23908: Security updates for [INTEL-SA-00836](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00836.html)
  - CVE-2022-41804: Security updates for [INTEL-SA-00837](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00837.html)
  Functional issues fixed:
  - Update for functional issues. Refer to [13th Generation Intel® Core™ Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.
  - Update for functional issues. Refer to [12th Generation Intel® Core™ Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.
  - Update for functional issues. Refer to [11th Gen Intel® Core™ Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.
  - Update for functional issues. Refer to [10th Gen Intel® Core™ Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.
  - Update for functional issues. Refer to [8th and 9th Generation Intel® Core™ Processor Family Spec Update](https://cdrdv2.intel.com/v1/dl/getContent/337346) for details.
  - Update for functional issues. Refer to [8th Generation Intel® Core™ Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338025) for details.
  - Update for functional issues. Refer to [7th and 8th Generation Intel® Core™ Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/334663) for details.
  - Update for functional issues. Refer to [Intel® Processors and Intel® Core™ i3 N-Series](https://cdrdv2.intel.com/v1/dl/getContent/764616) for details.
  - Update for functional issues. Refer to [4th Gen Intel® Xeon® Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/772415) for details.
  - Update for functional issues. Refer to [3rd Generation Intel® Xeon® Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634897) for details.
  - Update for functional issues. Refer to [2nd Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
  - Update for functional issues. Refer to [Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.
  - Update for functional issues. Refer to [3rd Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.
  - Update for functional issues. Refer to [Intel® Xeon® E-2300 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/709192) for details.
  - Update for functional issues. Refer to [Intel® Xeon® D-2700 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714071) for details.
  - Update for functional issues. Refer to [Intel® Xeon® D-2100 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338854) for details.
  New Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL-N          | A0       | 06-be-00/11 |          | 00000011 | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  | RPL-H/P/PX 6+8 | J0       | 06-ba-02/e0 |          | 00004119 | Core Gen13
  Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | CML-U62 V2     | K1       | 06-a6-01/80 | 000000f6 | 000000f8 | Core Gen10 Mobile
  | SKX-D          | H0       | 06-55-04/b7 | 02006f05 | 02007006 | Xeon D-21xx
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006e05 | 02007006 | Xeon Scalable
  | KBL-G/H/S/X/E3 | B0       | 06-9e-09/2a | 000000f2 | 000000f4 | Core Gen7; Xeon E3 v6
  | ADL            | L0       | 06-9a-03/80 | 0000042a | 0000042c | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 0000042a | 0000042c | Core Gen12
  | ICX-SP         | Dx/M1    | 06-6a-06/87 | 0d000390 | 0d0003a5 | Xeon Scalable Gen3
  | CML-S102       | Q0       | 06-a5-05/22 | 000000f6 | 000000f8 | Core Gen10
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000f2 | 000000f4 | Core Gen8 Mobile
  | KBL-R U        | Y0       | 06-8e-0a/c0 | 000000f2 | 000000f4 | Core Gen8 Mobile
  | CFL-H          | R0       | 06-9e-0d/22 | 000000f8 | 000000fa | Core Gen9 Mobile
  | RKL-S          | B0       | 06-a7-01/02 | 00000058 | 00000059 | Core Gen11
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000ba | 000000bc | Core Gen10 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 00000044 | 00000046 | Core Gen11 Mobile
  | SPR-SP         | E5/S3    | 06-8f-08/87 | 2b000461 | 2b0004b1 | Xeon Scalable Gen4
  | SPR-SP         | E4/S2    | 06-8f-07/87 | 2b000461 | 2b0004b1 | Xeon Scalable Gen4
  | SPR-SP         | E3       | 06-8f-06/87 | 2b000461 | 2b0004b1 | Xeon Scalable Gen4
  | SPR-SP         | E2       | 06-8f-05/87 | 2b000461 | 2b0004b1 | Xeon Scalable Gen4
  | SPR-SP         | E0       | 06-8f-04/87 | 2b000461 | 2b0004b1 | Xeon Scalable Gen4
  | CML-S62        | G1       | 06-a5-03/22 | 000000f6 | 000000f8 | Core Gen10
  | AML-Y22        | H0       | 06-8e-09/10 | 000000f0 | 000000f4 | Core Gen8 Mobile
  | RPL-S          | B0       | 06-b7-01/32 | 00000113 | 00000119 | Core Gen13
  | CML-U62 V1     | A0       | 06-a6-00/80 | 000000f6 | 000000f8 | Core Gen10 Mobile
  | ADL-N          | A0       | 06-be-00/11 |          | 00000011 | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  | CPX-SP         | A1       | 06-55-0b/bf | 07002601 | 07002703 | Xeon Scalable Gen3
  | CLX-SP         | B0       | 06-55-06/bf | 04003501 | 04003604 | Xeon Scalable Gen2
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000f2 | 000000f4 | Core Gen8 Desktop, Mobile, Xeon E
  | SPR-HBM        | Bx       | 06-8f-08/10 | 2c0001d1 | 2c000271 | Xeon Max
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000f2 | 000000f4 | Core Gen8 Mobile
  | CLX-SP         | B1       | 06-55-07/bf | 05003501 | 05003604 | Xeon Scalable Gen2
  | CFL-S          | B0       | 06-9e-0b/02 | 000000f2 | 000000f4 | Core Gen8
  | TGL-R          | C0       | 06-8c-02/c2 | 0000002a | 0000002c | Core Gen11 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000f2 | 000000f4 | Core Gen7 Mobile
  | KBL-U23e       | J1       | 06-8e-09/c0 | 000000f2 | 000000f4 | Core Gen7 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000f6 | 000000f8 | Core Gen10 Mobile
  | CML-U42        | V0       | 06-8e-0c/94 | 000000f6 | 000000f8 | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000f6 | 000000f8 | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000f6 | 000000f8 | Core Gen8 Mobile
  | SKX-SP         | B1       | 06-55-03/97 | 01000171 | 01000181 | Xeon Scalable
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000f2 | 000000f4 | Core Gen9
  | CFL-S          | P0       | 06-9e-0c/22 | 000000f2 | 000000f4 | Core Gen9 Desktop
  | TGL            | B0/B1    | 06-8c-01/80 | 000000aa | 000000ac | Core Gen11 Mobile
  | ADL            | C0       | 06-97-02/07 | 0000002c | 0000002e | Core Gen12
  | ADL            | C0       | 06-97-05/07 | 0000002c | 0000002e | Core Gen12
  | ADL            | C0       | 06-bf-02/07 | 0000002c | 0000002e | Core Gen12
  | ADL            | C0       | 06-bf-05/07 | 0000002c | 0000002e | Core Gen12
  | CML-H          | R1       | 06-a5-02/20 | 000000f6 | 000000f8 | Core Gen10 Mobile
  | RPL-H/P/PX 6+8 | J0       | 06-ba-02/e0 |          | 00004119 | Core Gen13
  | RPL-U 2+8      | Q0       | 06-ba-03/e0 |          | 00004119 | Core Gen13</changelog>
  <changelog author="meissner@suse.com" date="1697803200">- Updated to Intel CPU Microcode 20231114 pre-release (labeled 20231113).
  (bsc#1215278)
  - CVE-2023-23583: Fixed potential CPU deadlocks or privilege escalation (bsc#1215278)</changelog>
  <changelog author="meissner@suse.com" date="1700049600">- Updated to Intel CPU Microcode 20231114 release. (bsc#1215278)
  - Security updates for [INTEL-SA-00950](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00950.html)
  - CVE-2023-23583: Fixed potential CPU deadlocks or privilege escalation (bsc#1215278)
  - Update for functional issues. Refer to [13th Generation Intel® Core™ Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.
  - Update for functional issues. Refer to [12th Generation Intel® Core™ Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.
  - Update for functional issues. Refer to [11th Gen Intel® Core™ Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.
  - Update for functional issues. Refer to [10th Gen Intel® Core™ Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.
  - Update for functional issues. Refer to [4th Gen Intel® Xeon® Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/772415) for details.
  - Update for functional issues. Refer to [3rd Generation Intel® Xeon® Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634897) for details.
  - Update for functional issues. Refer to [Intel® Processors and Intel® Core™ i3 N-Series](https://cdrdv2.intel.com/v1/dl/getContent/764616) for details.
  - Update for functional issues. Refer to [Intel® Xeon® D-2700 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714071) for details.
  - Update for functional issues. Refer to [Intel® Xeon® E-2300 Processor Specification Update ](https://cdrdv2.intel.com/v1/dl/getContent/709192) for details.
  [#]## Updated Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | C0       | 06-97-02/07 | 0000002e | 00000032 | Core Gen12
  | ADL            | H0       | 06-97-05/07 | 0000002e | 00000032 | Core Gen12
  | ADL            | L0       | 06-9a-03/80 | 0000042c | 00000430 | Core Gen12
  | ADL            | R0       | 06-9a-04/80 | 0000042c | 00000430 | Core Gen12
  | ADL-N          | N0       | 06-be-00/11 | 00000011 | 00000012 | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  | AZB            | A0       | 06-9a-04/40 | 00000004 | 00000005 | Intel(R) Atom(R) C1100
  | AZB            | R0       | 06-9a-04/40 | 00000004 | 00000005 | Intel(R) Atom(R) C1100
  | ICL-D          | B0       | 06-6c-01/10 | 01000230 | 01000268 | Xeon D-17xx, D-27xx
  | ICX-SP         | Dx/M1    | 06-6a-06/87 | 0d0003a5 | 0d0003b9 | Xeon Scalable Gen3
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000bc | 000000c2 | Core Gen10 Mobile
  | RPL-H/P/PX 6+8 | J0       | 06-ba-02/e0 | 00004119 | 0000411c | Core Gen13
  | RPL-S          | B0       | 06-b7-01/32 | 00000119 | 0000011d | Core Gen13
  | RKL-S          | B0       | 06-a7-01/02 | 00000059 | 0000005d | Core Gen11
  | RPL-S          | H0       | 06-bf-05/07 | 0000002e | 00000032 | Core Gen12
  | RPL-S/HX       | C0       | 06-bf-02/07 | 0000002e | 00000032 | Core Gen12
  | RPL-U 2+8      | Q0       | 06-ba-03/e0 | 00004119 | 0000411c | Core Gen13
  | SPR-SP         | E5/S3    | 06-8f-08/87 | 2b0004b1 | 2b0004d0 | Xeon Scalable Gen4
  | SPR-SP         | E4/S2    | 06-8f-07/87 | 2b0004b1 | 2b0004d0 | Xeon Scalable Gen4
  | SPR-SP         | E3       | 06-8f-06/87 | 2b0004b1 | 2b0004d0 | Xeon Scalable Gen4
  | SPR-SP         | E2       | 06-8f-05/87 | 2b0004b1 | 2b0004d0 | Xeon Scalable Gen4
  | SPR-SP         | E0       | 06-8f-04/87 | 2b0004b1 | 2b0004d0 | Xeon Scalable Gen4
  | SPR-HBM        | Bx       | 06-8f-08/10 | 2c000271 | 2c000290 | Xeon Max
  | TGL            | B0/B1    | 06-8c-01/80 | 000000ac | 000000b4 | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 00000046 | 0000004e | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 0000002c | 00000034 | Core Gen11 Mobile</changelog>
</package>
<package pkgid="8030e4d3aa95be0752b3f8a739a0e4389a3fd64ca667d8b34e4b9200a7458982" name="ucode-intel" arch="x86_64">
  <version epoch="0" ver="20231114" rel="150200.35.1"/>
  <changelog author="meissner@suse.com" date="1579089600">- reverted the entry below to 02000064 due to occasional faults (bsc#1160478)
  - SKX-SP       H0/M0/U0 6-55-4/b7 02000064-&gt;02000065 Xeon Scalable</changelog>
  <changelog author="meissner@suse.com" date="1587470400">- updated skylake microcode to the current version. (bsc#1169570)
  - 02000064-&gt;02006901</changelog>
  <changelog author="meissner@suse.com" date="1591185600">- Updated Intel CPU Microcode to 20200602 (prerelease) (bsc#1172466)
  Fixes for:
  - CVE-2020-0543: Fixed a side channel attack against special registers
    which could have resulted in leaking of read values to cores other
    than the one which called it.  This attack is known as Special Register
    Buffer Data Sampling (SRBDS) or "CrossTalk" (bsc#1154824).
  - CVE-2020-0548,CVE-2020-0549: Additional ucode updates were supplied to
    mitigate the Vector Register and L1D Eviction Sampling aka "CacheOutAttack"
    attacks. (bsc#1156353)
  == 20200602_DEMO Release ==
  - - Updates upon 20200520 release --
  Processor             Identifier     Version       Products
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- new platforms ----------------------------------------
  - --- updated platforms ------------------------------------
  HSW          C0       6-3c-3/32 00000027-&gt;00000028 Core Gen4
  BDW-U/Y      E0/F0    6-3d-4/c0 0000002e-&gt;0000002f Core Gen5
  HSW-U        C0/D0    6-45-1/72 00000025-&gt;00000026 Core Gen4
  HSW-H        C0       6-46-1/32 0000001b-&gt;0000001c Core Gen4
  BDW-H/E3     E0/G0    6-47-1/22 00000021-&gt;00000022 Core Gen5
  SKL-U/Y      D0       6-4e-3/c0 000000d6-&gt;000000dc Core Gen6 Mobile
  SKL-U23e     K1       6-4e-3/c0 000000d6-&gt;000000dc Core Gen6 Mobile
  SKX-SP       B1       6-55-3/97 01000151-&gt;01000157 Xeon Scalable
  SKX-SP       H0/M0/U0 6-55-4/b7 02000065-&gt;02006906 Xeon Scalable
  SKX-D        M1       6-55-4/b7 02000065-&gt;02006906 Xeon D-21xx
  CLX-SP       B0       6-55-6/bf 0400002c-&gt;04002f01 Xeon Scalable Gen2
  CLX-SP       B1       6-55-7/bf 0500002c-&gt;04002f01 Xeon Scalable Gen2
  SKL-H/S      R0/N0    6-5e-3/36 000000d6-&gt;000000dc Core Gen6; Xeon E3 v5
  AML-Y22      H0       6-8e-9/10 000000ca-&gt;000000d6 Core Gen8 Mobile
  KBL-U/Y      H0       6-8e-9/c0 000000ca-&gt;000000d6 Core Gen7 Mobile
  CFL-U43e     D0       6-8e-a/c0 000000ca-&gt;000000d6 Core Gen8 Mobile
  WHL-U        W0       6-8e-b/d0 000000ca-&gt;000000d6 Core Gen8 Mobile
  AML-Y42      V0       6-8e-c/94 000000ca-&gt;000000d6 Core Gen10 Mobile
  CML-Y42      V0       6-8e-c/94 000000ca-&gt;000000d6 Core Gen10 Mobile
  WHL-U        V0       6-8e-c/94 000000ca-&gt;000000d6 Core Gen8 Mobile
  KBL-G/H/S/E3 B0       6-9e-9/2a 000000ca-&gt;000000d6 Core Gen7; Xeon E3 v6
  CFL-H/S/E3   U0       6-9e-a/22 000000ca-&gt;000000d6 Core Gen8 Desktop, Mobile, Xeon E
  CFL-S        B0       6-9e-b/02 000000ca-&gt;000000d6 Core Gen8
  CFL-H/S      P0       6-9e-c/22 000000ca-&gt;000000d6 Core Gen9
  CFL-H        R0       6-9e-d/22 000000ca-&gt;000000d6 Core Gen9 Mobile
- Updated Intel CPU Microcode to 20200520
  Processor             Identifier     Version       Products
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- new platforms ----------------------------------------
  - --- updated platforms ------------------------------------
  SNB-E/EN/EP  C1/M0    6-2d-6/6d 0000061f-&gt;00000621 Xeon E3/E5, Core X
  SNB-E/EN/EP  C2/M1    6-2d-7/6d 00000718-&gt;0000071a Xeon E3/E5, Core X</changelog>
  <changelog author="meissner@suse.com" date="1592222400">- Updated Intel CPU Microcode to 20200609 official release (bsc#1172466)
  - no changes to 20200602 prerelease</changelog>
  <changelog author="meissner@suse.com" date="1592395200">- Updated Intel CPU Microcode to 20200616 official release (bsc#1172856)
  - revert 06-4e-03 Skylake U/Y, U23e ucode back to 000000d6 release
  - revert 06-5e-03 Skylake H/S ucode back to 000000d6 release,
    as both cause stability issues.  (bsc#1172856)</changelog>
  <changelog author="meissner@suse.com" date="1604491200">- Updated Intel CPU Microcode to 20201027 prerelease (bsc#1170446)
  - CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX)
  [#] New Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | TGL            | B1       | 06-8c-01/80 |          | 00000068 | Core Gen11 Mobile
  | CPX-SP         | A1       | 06-55-0b/bf |          | 0700001e | Xeon Scalable Gen3
  | CML-H          | R1       | 06-a5-02/20 |          | 000000e0 | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 |          | 000000e0 | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 |          | 000000e0 | Core Gen10
  | CML-U62 V2     | K0       | 06-a6-01/80 |          | 000000e0 | Core Gen10 Mobile
  [#] Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | GKL-R          | R0       | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | SKL-U23e       | K1       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | APL            | D0       | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5
  | HSX-E/EP       | Cx/M1    | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3
  | SKX-SP         | B1       | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2
  | ICL-U/Y        | D1       | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile
  | AML-Y22        | H0       | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile
  | CML-U62        | A0       | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile</changelog>
  <changelog author="meissner@suse.com" date="1605096000">- Updated Intel CPU Microcode to 20201110 official release.
  - CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX) (bsc#1170446)
  - CVE-2020-8698: Fixed Fast Store Forward Predictor INTEL-SA-00381 (bsc#1173594)
  - CVE-2020-8696: Vector Register Sampling Active INTEL-SA-00381 (bsc#1173592)
- Releasenotes:
  - Security updates for [INTEL-SA-00381](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html).
  - Security updates for [INTEL-SA-00389](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00389.html).
  - Update for functional issues. Refer to [Second Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
  - Update for functional issues. Refer to [Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.
  - Update for functional issues. Refer to [Intel® Xeon® Processor E5 v3 Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e5-v3-spec-update.html?wapkw=processor+spec+update+e5) for details.
  - Update for functional issues. Refer to [10th Gen Intel® Core™ Processor Families Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/10th-gen-core-families-specification-update.html) for details.
  - Update for functional issues. Refer to [8th and 9th Gen Intel® Core™ Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-spec-update.html) for details.
  - Update for functional issues. Refer to [7th Gen and 8th Gen (U Quad-Core) Intel® Processor Families Specification Update](https://www.intel.com/content/www/us/en/processors/core/7th-gen-core-family-spec-update.html) for details.
  - Update for functional issues. Refer to [6th Gen Intel® Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/332689) for details.
  - Update for functional issues. Refer to [Intel® Xeon® E3-1200 v6 Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e3-1200v6-spec-update.html) for details.
  - Update for functional issues. Refer to [Intel® Xeon® E-2100 and E-2200 Processor Family Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-e-2100-specification-update.html) for details.
  [#]## New Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | CPX-SP         | A1       | 06-55-0b/bf |          | 0700001e | Xeon Scalable Gen3
  | LKF            | B2/B3    | 06-8a-01/10 |          | 00000028 | Core w/Hybrid Technology
  | TGL            | B1       | 06-8c-01/80 |          | 00000068 | Core Gen11 Mobile
  | CML-H          | R1       | 06-a5-02/20 |          | 000000e0 | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 |          | 000000e0 | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 |          | 000000e0 | Core Gen10
  | CML-U62 V2     | K0       | 06-a6-01/80 |          | 000000e0 | Core Gen10 Mobile
  [#]## Updated Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | HSX-E/EP       | Cx/M1    | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | SKL-U23e       | K1       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | SKX-SP         | B1       | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2
  | APL            | D0       | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5
  | GKL-R          | R0       | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile
  | AML-Y22        | H0       | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile
  | CML-U62        | A0       | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile</changelog>
  <changelog author="meissner@suse.com" date="1605787200">- Updated Intel CPU Microcode to 20201118 official release. (bsc#1178971)
  - Removed TGL/06-8c-01/80 due to functional issues with some OEM platforms.</changelog>
  <changelog author="meissner@suse.com" date="1607342400">- Reverted 3 microcodes back to 20200616 release level after regression reports. (bsc#1179224)
  - SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006906 | Xeon Scalable
  - SKX-D          | M1       | 06-55-04/b7 | 02006906 | Xeon D-21xx
  - CLX-SP         | B0       | 06-55-06/bf | 04002f01 | Xeon Scalable Gen2
  - CLX-SP         | B1       | 06-55-07/bf | 05002f01 | Xeon Scalable Gen2</changelog>
  <changelog author="meissner@suse.com" date="1613563200">- Updated Intel CPU Microcode to 20210216 official release. (bsc#1178971 bsc#1179224)
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006a08 | 02006a0a | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006a08 | 02006a0a | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04003003 | 04003006 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003003 | 05003006 | Xeon Scalable Gen2</changelog>
  <changelog author="meissner@suse.com" date="1623153600">- Updated to Intel CPU Microcode 20210525 release.
  - CVE-2020-24513: A domain bypass transient execution vulnerability was discovered on some Intel Atom processors that use a micro-architectural incident channel. (INTEL-SA-00465 bsc#1179833)
    See also: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00465.html
  - CVE-2020-24511: The IBRS feature to mitigate Spectre variant 2 transient execution side channel vulnerabilities may not fully prevent non-root (guest) branches from controlling the branch predictions of the root (host) (INTEL-SA-00464 bsc#1179836)
    See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)
  - CVE-2020-24512: Fixed trivial data value cache-lines such as all-zero value cache-lines may lead to changes in cache-allocation or write-back behavior for such cache-lines (bsc#1179837 INTEL-SA-00464)
    See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)
  - CVE-2020-24489: Fixed Intel VT-d device pass through potential local privilege escalation (INTEL-SA-00442 bsc#1179839)
    See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00442.html
- Update for functional issues. Refer to [Third Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780)for details.
- Update for functional issues. Refer to [Second Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
- Update for functional issues. Refer to [Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.
- Update for functional issues. Refer to [Intel Xeon Processor D-1500, D-1500 NS and D-1600 NS Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-d-1500-specification-update.html) for details.
- Update for functional issues. Refer to [Intel Xeon E7-8800 and E7-4800 v3 Processor Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e7-v3-spec-update.html) for details.
- Update for functional issues. Refer to [Intel Xeon Processor E5 v3 Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e5-v3-spec-update.html?wapkw=processor+spec+update+e5) for details.
- Update for functional issues. Refer to [10th Gen Intel Core Processor Families Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/10th-gen-core-families-specification-update.html) for details.
- Update for functional issues. Refer to [8th and 9th Gen Intel Core Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-spec-update.html) for details.
- Update for functional issues. Refer to [7th Gen and 8th Gen (U Quad-Core) Intel Processor Families Specification Update](https://www.intel.com/content/www/us/en/processors/core/7th-gen-core-family-spec-update.html) for details.
- Update for functional issues. Refer to [6th Gen Intel Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/332689) for details.
- Update for functional issues. Refer to [Intel Xeon E3-1200 v6 Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e3-1200v6-spec-update.html) for details.
- Update for functional issues. Refer to [Intel Xeon E-2100 and E-2200 Processor Family Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-e-2100-specification-update.html) for details.
- New platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | CLX-SP         | A0       | 06-55-05/b7 |          | 03000010 | Xeon Scalable Gen2
  | ICX-SP         | C0       | 06-6a-05/87 |          | 0c0002f0 | Xeon Scalable Gen3
  | ICX-SP         | D0       | 06-6a-06/87 |          | 0d0002a0 | Xeon Scalable Gen3
  | SNR            | B0       | 06-86-04/01 |          | 0b00000f | Atom P59xxB
  | SNR            | B1       | 06-86-05/01 |          | 0b00000f | Atom P59xxB
  | TGL            | B1       | 06-8c-01/80 |          | 00000088 | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 |          | 00000016 | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 |          | 0000002c | Core Gen11 Mobile
  | EHL            | B1       | 06-96-01/01 |          | 00000011 | Pentium J6426/N6415, Celeron J6412/J6413/N6210/N6211, Atom x6000E
  | JSL            | A0/A1    | 06-9c-00/01 |          | 0000001d | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105
  | RKL-S          | B0       | 06-a7-01/02 |          | 00000040 | Core Gen11
- Updated platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | HSX-E/EP       | Cx/M1    | 06-3f-02/6f | 00000044 | 00000046 | Core Gen4 X series; Xeon E5 v3
  | HSX-EX         | E0       | 06-3f-04/80 | 00000016 | 00000019 | Xeon E7 v3
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000e2 | 000000ea | Core Gen6 Mobile
  | SKL-U23e       | K1       | 06-4e-03/c0 | 000000e2 | 000000ea | Core Gen6 Mobile
  | BDX-ML         | B0/M0/R0 | 06-4f-01/ef | 0b000038 | 0b00003e | Xeon E5/E7 v4; Core i7-69xx/68xx
  | SKX-SP         | B1       | 06-55-03/97 | 01000159 | 0100015b | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006a0a | 02006b06 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006a0a | 02006b06 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04003006 | 04003102 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003006 | 05003102 | Xeon Scalable Gen2
  | CPX-SP         | A1       | 06-55-0b/bf | 0700001e | 07002302 | Xeon Scalable Gen3
  | BDX-DE         | V2/V3    | 06-56-03/10 | 07000019 | 0700001b | Xeon D-1518/19/21/27/28/31/33/37/41/48, Pentium D1507/08/09/17/19
  | BDX-DE         | Y0       | 06-56-04/10 | 0f000017 | 0f000019 | Xeon D-1557/59/67/71/77/81/87
  | BDX-NS         | A0       | 06-56-05/10 | 0e00000f | 0e000012 | Xeon D-1513N/23/33/43/53
  | APL            | D0       | 06-5c-09/03 | 00000040 | 00000044 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 0000001e | 00000020 | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000e2 | 000000ea | Core Gen6; Xeon E3 v5
  | DNV            | B0       | 06-5f-01/01 | 0000002e | 00000034 | Atom C Series
  | GLK            | B0       | 06-7a-01/01 | 00000034 | 00000036 | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GKL-R          | R0       | 06-7a-08/01 | 00000018 | 0000001a | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000a0 | 000000a6 | Core Gen10 Mobile
  | LKF            | B2/B3    | 06-8a-01/10 | 00000028 | 0000002a | Core w/Hybrid Technology
  | AML-Y22        | H0       | 06-8e-09/10 | 000000de | 000000ea | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000de | 000000ea | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000e0 | 000000ea | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000de | 000000ea | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen8 Mobile
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000de | 000000ea | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000de | 000000ea | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000de | 000000ea | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000de | 000000ea | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000de | 000000ea | Core Gen9 Mobile
  | CML-H          | R1       | 06-a5-02/20 | 000000e0 | 000000ea | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 | 000000e0 | 000000ea | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 | 000000e0 | 000000ec | Core Gen10
  | CML-U62        | A0       | 06-a6-00/80 | 000000e0 | 000000e8 | Core Gen10 Mobile
  | CML-U62 V2     | K0       | 06-a6-01/80 | 000000e0 | 000000ea | Core Gen10 Mobile</changelog>
  <changelog author="meissner@suse.com" date="1644494400">- Updated to Intel CPU Microcode 20220207 release.
  - CVE-2021-0146: Fixed a potential security vulnerability in some Intel Processors may allow escalation of privilege (bsc#1192615)
  - CVE-2021-0127: Intel Processor Breakpoint Control Flow (bsc#1195779)
  - CVE-2021-0145: Fast store forward predictor - Cross Domain Training (bsc#1195780)
  - CVE-2021-33120: Out of bounds read for some Intel Atom processors (bsc#1195781)
  - Security updates for [INTEL-SA-00528](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00528.html)
  - Security updates for [INTEL-SA-00532](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00532.html)
  - Update for functional issues. Refer to [Third Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.
  - Update for functional issues. Refer to [Second Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
  - Update for functional issues. Refer to [Intel® Xeon® Processor Scalable Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/scalable/xeon-scalable-spec-update.html?wapkw=processor+specification+update) for details.
  - Update for functional issues. Refer to [11th Generation Intel® Core" Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.
  - Update for functional issues. Refer to [11th Generation Intel® Core" Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634808) for details.
  - Update for functional issues. Refer to [10th Gen Intel® Core" Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.
  - Update for functional issues. Refer to [10th Generation Intel® Core" Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/615213) for details.
  - Update for functional issues. Refer to [8th Generation Intel® Core" Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338025) for details.
  - Update for functional issues. Refer to [8th Gen Intel® Core" Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-family-spec-update.html?wapkw=processor+specification+update) for details.
  - Update for functional issues. Refer to [7th and 8th Generation Intel® Core" Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/334663) for details.
  - Update for functional issues. Refer to [6th Generation Intel® Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/core/desktop-6th-gen-core-family-spec-update.html) for details.
  - Update for functional issues. Refer to [Intel® Pentium® Silver and Intel® Celeron® Processors](https://www.intel.com/content/www/us/en/products/docs/processors/pentium/silver-celeron-spec-update.html?wapkw=processor+specification+update) for details.</changelog>
  <changelog author="meissner@suse.com" date="1650542400">- Updated to Intel CPU Microcode 20220419 release. (bsc#1198717)
  - Update for functional issues. Refer to errata
    APLI-11 in [Intel Atom Processor E3900
    Series](https://cdrdv2.intel.com/v1/dl/getContent/612204) for details.
  - Changed Microcodes:
  - | APL            | E0       | 06-5c-0a/03 | 00000024 | 00000028 | Atom x5-E39xx</changelog>
  <changelog author="meissner@suse.com" date="1652270400">- Updated to Intel CPU Microcode 20220510 release. (bsc#1199423)
  - CVE-2022-21151: Security updates for [INTEL-SA-000617](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00617.html)
  - Update for functional issues. Refer to [Second Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
  - Update for functional issues. Refer to [Intel Xeon Processor Scalable Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/scalable/xeon-scalable-spec-update.html?wapkw=processor+specification+update) for details.
  - Update for functional issues. Refer to [Intel Atom C3000 Processor Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/atom/atom-c3000-family-spec-update.html?wapkw=processor+specification+update) for details.
  - Update for functional issues. Refer to [Intel Atom Processor E3900 Specification Update Addendum](https://cdrdv2.intel.com/v1/dl/getContent/612204) for details.
  - New Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | C0       | 06-97-02/03 |          | 0000001f | Core Gen12
  | ADL            | C0       | 06-97-05/03 |          | 0000001f | Core Gen12
  | ADL            | L0       | 06-9a-03/80 |          | 0000041c | Core Gen12
  | ADL            | L0       | 06-9a-04/80 |          | 0000041c | Core Gen12
  | ADL            | C0       | 06-bf-02/03 |          | 0000001f | Core Gen12
  | ADL            | C0       | 06-bf-02/03 |          | 0000001f | Core Gen12
  - Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | VLV            | D0       | 06-37-09/0F | 0000090c | 0000090d | Atom E38xx
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000ec | 000000f0 | Core Gen6 Mobile
  | SKX-SP         | B1       | 06-55-03/97 | 0100015c | 0100015d | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006c0a | 02006d05 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006c0a | 02006d05 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 0400320a | 04003302 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 0500320a | 05003302 | Xeon Scalable Gen2
  | CPX-SP         | A1       | 06-55-0b/bf | 07002402 | 07002501 | Xeon Scalable Gen3
  | APL            | D0       | 06-5c-09/03 | 00000046 | 00000048 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 00000024 | 00000028 | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000ec | 000000f0 | Core Gen6; Xeon E3 v5
  | DNV            | B0       | 06-5f-01/01 | 00000036 | 00000038 | Atom C Series
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000331 | 0d000363 | Xeon Scalable Gen3
  | GLK            | B0       | 06-7a-01/01 | 00000038 | 0000003a | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GKL-R          | R0       | 06-7a-08/01 | 0000001c | 0000001e | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000a8 | 000000b0 | Core Gen10 Mobile
  | LKF            | B2/B3    | 06-8a-01/10 | 0000002d | 00000031 | Core w/Hybrid Technology
  | TGL            | B1       | 06-8c-01/80 | 0000009a | 000000a4 | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 00000022 | 00000026 | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 0000003c | 0000003e | Core Gen11 Mobile
  | AML-Y22        | H0       | 06-8e-09/10 | 000000ec | 000000f0 | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000ec | 000000f0 | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000ec | 000000f0 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000ec | 000000f0 | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000ec | 000000f0 | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000ec | 000000f0 | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000ec | 000000f0 | Core Gen8 Mobile
  | EHL            | B1       | 06-96-01/01 | 00000015 | 00000016 | Pentium J6426/N6415, Celeron J6412/J6413/N6210/N6211, Atom x6000E
  | JSL            | A0/A1    | 06-9c-00/01 | 2400001f | 24000023 | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000ec | 000000f0 | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000ec | 000000f0 | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000ec | 000000f0 | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000ec | 000000f0 | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000ec | 000000f0 | Core Gen9 Mobile
  | CML-H          | R1       | 06-a5-02/20 | 000000ec | 000000f0 | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 | 000000ec | 000000f0 | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 | 000000ee | 000000f0 | Core Gen10
  | CML-U62 V1     | A0       | 06-a6-00/80 | 000000ea | 000000f0 | Core Gen10 Mobile
  | CML-U62 V2     | K1       | 06-a6-01/80 | 000000ec | 000000f0 | Core Gen10 Mobile
  | RKL-S          | B0       | 06-a7-01/02 | 00000050 | 00000053 | Core Gen11</changelog>
  <changelog author="meissner@suse.com" date="1660132800">- Updated to Intel CPU Microcode 20220809 release. (bsc#1201727)
  - CVE-2022-21233: Security updates for [INTEL-SA-00657](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00657.html).
  - Update for functional issues. Refer to [Intel® Xeon® Processor Scalable Family Specification
  +Update](https://www.intel.com/content/www/us/en/processors/xeon/scalable/xeon-scalable-spec-update.html?wapkw=processor+specification+update) for details.  - Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | SKX-SP         | B1       | 06-55-03/97 | 0100015d | 0100015e | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006d05 | 02006e05 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006d05 | 02006e05 | Xeon D-21xx
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000363 | 0d000375 | Xeon Scalable Gen3
  | GLK            | B0       | 06-7a-01/01 | 0000003a | 0000003c | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GLK-R          | R0       | 06-7a-08/01 | 0000001e | 00000020 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000b0 | 000000b2 | Core Gen10 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 00000026 | 00000028 | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 0000003e | 00000040 | Core Gen11 Mobile
  | RKL-S          | B0       | 06-a7-01/02 | 00000053 | 00000054 | Core Gen11
  | ADL            | C0       | 06-97-02/03 | 0000001f | 00000022 | Core Gen12
  | ADL            | C0       | 06-97-05/03 | 0000001f | 00000022 | Core Gen12
  | ADL            | L0       | 06-9a-03/80 | 0000041c | 00000421 | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 0000041c | 00000421 | Core Gen12
  | ADL            | C0       | 06-bf-02/03 | 0000001f | 00000022 | Core Gen12
  | ADL            | C0       | 06-bf-05/03 | 0000001f | 00000022 | Core Gen12</changelog>
  <changelog author="meissner@suse.com" date="1676462400">- Updated to Intel CPU Microcode 20230214 release.
  Security issues fixed:
  - CVE-2022-38090: Security updates for [INTEL-SA-00767](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00767.html) (bsc#1208275)
  - CVE-2022-33196: Security updates for [INTEL-SA-00738](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00738.html) (bsc#1208276)
  - CVE-2022-21216: Security updates for [INTEL-SA-00700](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00700.html) (bsc#1208277)
  - CVE-2022-33972: Security updates for [INTEL-SA-00730](http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00730.html) (bsc#1208479)
  New Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | SPR-SP         | E2       | 06-8f-05/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-SP         | E3       | 06-8f-06/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-SP         | E4       | 06-8f-07/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-SP         | E5       | 06-8f-08/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-HBM        | B3       | 06-8f-08/10 |          | 2c000170 | Xeon Max
  | RPL-P 6+8      | J0       | 06-ba-02/07 |          | 0000410e | Core Gen13
  | RPL-H 6+8      | J0       | 06-ba-02/07 |          | 0000410e | Core Gen13
  | RPL-U 2+8      | Q0       | 06-ba-02/07 |          | 0000410e | Core Gen13
  Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | C0       | 06-97-02/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | C0       | 06-97-05/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | C0       | 06-bf-02/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | C0       | 06-bf-05/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | L0       | 06-9a-03/80 | 00000424 | 00000429 | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 00000424 | 00000429 | Core Gen12
  | CLX-SP         | B0       | 06-55-06/bf | 04003302 | 04003303 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003302 | 05003303 | Xeon Scalable Gen2
  | CPX-SP         | A1       | 06-55-0b/bf | 07002501 | 07002503 | Xeon Scalable Gen3
  | GLK            | B0       | 06-7a-01/01 | 0000003c | 0000003e | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GLK-R          | R0       | 06-7a-08/01 | 00000020 | 00000022 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-D          | B0       | 06-6c-01/10 | 01000201 | 01000211 | Xeon D-17xx, D-27xx
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000b6 | 000000b8 | Core Gen10 Mobile
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000375 | 0d000389 | Xeon Scalable Gen3
  | JSL            | A0/A1    | 06-9c-00/01 | 24000023 | 24000024 | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105
  | LKF            | B2/B3    | 06-8a-01/10 | 00000031 | 00000032 | Core w/Hybrid Technology
  | RKL-S          | B0       | 06-a7-01/02 | 00000056 | 00000057 | Core Gen11
  | RPL-S          | S0       | 06-b7-01/32 | 0000010e | 00000112 | Core Gen13
  | SKX-SP         | B1       | 06-55-03/97 | 0100015e | 01000161 | Xeon Scalable</changelog>
  <changelog author="meissner@suse.com" date="1684238400">- Updated to Intel CPU Microcode 20230512 release. (bsc#1211382)
  - New Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL-N          | A0       | 06-be-00/01 |          | 00000010 | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  | AZB            | A0       | 06-9a-04/40 |          | 00000004 | Intel(R) Atom(R) C1100
  | AZB            | R0       | 06-9a-04/40 |          | 00000004 | Intel(R) Atom(R) C1100
  - Updated Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | L0       | 06-9a-03/80 | 00000429 | 0000042a | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 00000429 | 0000042a | Core Gen12
  | AML-Y22        | H0       | 06-8e-09/10 |          | 000000f2 | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CFL-H          | R0       | 06-9e-0d/22 | 000000f4 | 000000f8 | Core Gen9 Mobile
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000f0 | 000000f2 | Core Gen9
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000f0 | 000000f2 | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000f0 | 000000f2 | Core Gen8
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000f0 | 000000f2 | Core Gen8 Mobile
  | CLX-SP         | B0       | 06-55-06/bf | 04003303 | 04003501 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003303 | 05003501 | Xeon Scalable Gen2
  | CML-H          | R1       | 06-a5-02/20 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CML-S102       | Q0       | 06-a5-05/22 | 000000f4 | 000000f6 | Core Gen10
  | CML-S62        | G1       | 06-a5-03/22 | 000000f4 | 000000f6 | Core Gen10
  | CML-U62 V1     | A0       | 06-a6-00/80 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CML-U62 V2     | K1       | 06-a6-01/80 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CPX-SP         | A1       | 06-55-0b/bf | 07002503 | 07002601 | Xeon Scalable Gen3
  | ICL-D          | B0       | 06-6c-01/10 | 01000211 | 01000230 | Xeon D-17xx, D-27xx
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000b8 | 000000ba | Core Gen10 Mobile
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000389 | 0d000390 | Xeon Scalable Gen3
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000f0 | 000000f2 | Core Gen7; Xeon E3 v6
  | KBL-U/Y        | H0       | 06-8e-09/c0 |          | 000000f2 | Core Gen7 Mobile
  | LKF            | B2/B3    | 06-8a-01/10 | 00000032 | 00000033 | Core w/Hybrid Technology
  | RKL-S          | B0       | 06-a7-01/02 | 00000057 | 00000058 | Core Gen11
  | RPL-H 6+8      | J0       | 06-ba-02/07 | 0000410e | 00004112 | Core Gen13
  | RPL-P 6+8      | J0       | 06-ba-02/07 | 0000410e | 00004112 | Core Gen13
  | RPL-S          | S0       | 06-b7-01/32 | 00000112 | 00000113 | Core Gen13
  | RPL-U 2+8      | Q0       | 06-ba-03/07 | 0000410e | 00004112 | Core Gen13
  | SKX-D          | H0       | 06-55-04/b7 |          | 02006f05 | Xeon D-21xx
  | SKX-SP         | B1       | 06-55-03/97 | 01000161 | 01000171 | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 |          | 02006f05 | Xeon Scalable
  | SPR-HBM        | B3       | 06-8f-08/10 | 2c000170 | 2c0001d1 | Xeon Max
  | SPR-SP         | E0       | 06-8f-04/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E2       | 06-8f-05/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E3       | 06-8f-06/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E4       | 06-8f-07/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E5       | 06-8f-08/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | S2       | 06-8f-07/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | S3       | 06-8f-08/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | TGL            | B1       | 06-8c-01/80 | 000000a6 | 000000aa | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 00000042 | 00000044 | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 00000028 | 0000002a | Core Gen11 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 |          | 000000f2 | Core Gen8 Mobile</changelog>
  <changelog author="abergmann@suse.com" date="1691582400">- Updated to Intel CPU Microcode 20230808 release. (bsc#1214099)
  Security issues fixed:
  - CVE-2022-40982: Security updates for [INTEL-SA-00828](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00828.html) (bsc#1206418)
  - CVE-2023-23908: Security updates for [INTEL-SA-00836](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00836.html)
  - CVE-2022-41804: Security updates for [INTEL-SA-00837](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00837.html)
  Functional issues fixed:
  - Update for functional issues. Refer to [13th Generation Intel® Core™ Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.
  - Update for functional issues. Refer to [12th Generation Intel® Core™ Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.
  - Update for functional issues. Refer to [11th Gen Intel® Core™ Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.
  - Update for functional issues. Refer to [10th Gen Intel® Core™ Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.
  - Update for functional issues. Refer to [8th and 9th Generation Intel® Core™ Processor Family Spec Update](https://cdrdv2.intel.com/v1/dl/getContent/337346) for details.
  - Update for functional issues. Refer to [8th Generation Intel® Core™ Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338025) for details.
  - Update for functional issues. Refer to [7th and 8th Generation Intel® Core™ Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/334663) for details.
  - Update for functional issues. Refer to [Intel® Processors and Intel® Core™ i3 N-Series](https://cdrdv2.intel.com/v1/dl/getContent/764616) for details.
  - Update for functional issues. Refer to [4th Gen Intel® Xeon® Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/772415) for details.
  - Update for functional issues. Refer to [3rd Generation Intel® Xeon® Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634897) for details.
  - Update for functional issues. Refer to [2nd Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
  - Update for functional issues. Refer to [Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.
  - Update for functional issues. Refer to [3rd Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.
  - Update for functional issues. Refer to [Intel® Xeon® E-2300 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/709192) for details.
  - Update for functional issues. Refer to [Intel® Xeon® D-2700 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714071) for details.
  - Update for functional issues. Refer to [Intel® Xeon® D-2100 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338854) for details.
  New Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL-N          | A0       | 06-be-00/11 |          | 00000011 | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  | RPL-H/P/PX 6+8 | J0       | 06-ba-02/e0 |          | 00004119 | Core Gen13
  Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | CML-U62 V2     | K1       | 06-a6-01/80 | 000000f6 | 000000f8 | Core Gen10 Mobile
  | SKX-D          | H0       | 06-55-04/b7 | 02006f05 | 02007006 | Xeon D-21xx
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006e05 | 02007006 | Xeon Scalable
  | KBL-G/H/S/X/E3 | B0       | 06-9e-09/2a | 000000f2 | 000000f4 | Core Gen7; Xeon E3 v6
  | ADL            | L0       | 06-9a-03/80 | 0000042a | 0000042c | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 0000042a | 0000042c | Core Gen12
  | ICX-SP         | Dx/M1    | 06-6a-06/87 | 0d000390 | 0d0003a5 | Xeon Scalable Gen3
  | CML-S102       | Q0       | 06-a5-05/22 | 000000f6 | 000000f8 | Core Gen10
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000f2 | 000000f4 | Core Gen8 Mobile
  | KBL-R U        | Y0       | 06-8e-0a/c0 | 000000f2 | 000000f4 | Core Gen8 Mobile
  | CFL-H          | R0       | 06-9e-0d/22 | 000000f8 | 000000fa | Core Gen9 Mobile
  | RKL-S          | B0       | 06-a7-01/02 | 00000058 | 00000059 | Core Gen11
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000ba | 000000bc | Core Gen10 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 00000044 | 00000046 | Core Gen11 Mobile
  | SPR-SP         | E5/S3    | 06-8f-08/87 | 2b000461 | 2b0004b1 | Xeon Scalable Gen4
  | SPR-SP         | E4/S2    | 06-8f-07/87 | 2b000461 | 2b0004b1 | Xeon Scalable Gen4
  | SPR-SP         | E3       | 06-8f-06/87 | 2b000461 | 2b0004b1 | Xeon Scalable Gen4
  | SPR-SP         | E2       | 06-8f-05/87 | 2b000461 | 2b0004b1 | Xeon Scalable Gen4
  | SPR-SP         | E0       | 06-8f-04/87 | 2b000461 | 2b0004b1 | Xeon Scalable Gen4
  | CML-S62        | G1       | 06-a5-03/22 | 000000f6 | 000000f8 | Core Gen10
  | AML-Y22        | H0       | 06-8e-09/10 | 000000f0 | 000000f4 | Core Gen8 Mobile
  | RPL-S          | B0       | 06-b7-01/32 | 00000113 | 00000119 | Core Gen13
  | CML-U62 V1     | A0       | 06-a6-00/80 | 000000f6 | 000000f8 | Core Gen10 Mobile
  | ADL-N          | A0       | 06-be-00/11 |          | 00000011 | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  | CPX-SP         | A1       | 06-55-0b/bf | 07002601 | 07002703 | Xeon Scalable Gen3
  | CLX-SP         | B0       | 06-55-06/bf | 04003501 | 04003604 | Xeon Scalable Gen2
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000f2 | 000000f4 | Core Gen8 Desktop, Mobile, Xeon E
  | SPR-HBM        | Bx       | 06-8f-08/10 | 2c0001d1 | 2c000271 | Xeon Max
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000f2 | 000000f4 | Core Gen8 Mobile
  | CLX-SP         | B1       | 06-55-07/bf | 05003501 | 05003604 | Xeon Scalable Gen2
  | CFL-S          | B0       | 06-9e-0b/02 | 000000f2 | 000000f4 | Core Gen8
  | TGL-R          | C0       | 06-8c-02/c2 | 0000002a | 0000002c | Core Gen11 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000f2 | 000000f4 | Core Gen7 Mobile
  | KBL-U23e       | J1       | 06-8e-09/c0 | 000000f2 | 000000f4 | Core Gen7 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000f6 | 000000f8 | Core Gen10 Mobile
  | CML-U42        | V0       | 06-8e-0c/94 | 000000f6 | 000000f8 | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000f6 | 000000f8 | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000f6 | 000000f8 | Core Gen8 Mobile
  | SKX-SP         | B1       | 06-55-03/97 | 01000171 | 01000181 | Xeon Scalable
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000f2 | 000000f4 | Core Gen9
  | CFL-S          | P0       | 06-9e-0c/22 | 000000f2 | 000000f4 | Core Gen9 Desktop
  | TGL            | B0/B1    | 06-8c-01/80 | 000000aa | 000000ac | Core Gen11 Mobile
  | ADL            | C0       | 06-97-02/07 | 0000002c | 0000002e | Core Gen12
  | ADL            | C0       | 06-97-05/07 | 0000002c | 0000002e | Core Gen12
  | ADL            | C0       | 06-bf-02/07 | 0000002c | 0000002e | Core Gen12
  | ADL            | C0       | 06-bf-05/07 | 0000002c | 0000002e | Core Gen12
  | CML-H          | R1       | 06-a5-02/20 | 000000f6 | 000000f8 | Core Gen10 Mobile
  | RPL-H/P/PX 6+8 | J0       | 06-ba-02/e0 |          | 00004119 | Core Gen13
  | RPL-U 2+8      | Q0       | 06-ba-03/e0 |          | 00004119 | Core Gen13</changelog>
  <changelog author="meissner@suse.com" date="1697803200">- Updated to Intel CPU Microcode 20231114 pre-release (labeled 20231113).
  (bsc#1215278)
  - CVE-2023-23583: Fixed potential CPU deadlocks or privilege escalation (bsc#1215278)</changelog>
  <changelog author="meissner@suse.com" date="1700049600">- Updated to Intel CPU Microcode 20231114 release. (bsc#1215278)
  - Security updates for [INTEL-SA-00950](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00950.html)
  - CVE-2023-23583: Fixed potential CPU deadlocks or privilege escalation (bsc#1215278)
  - Update for functional issues. Refer to [13th Generation Intel® Core™ Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.
  - Update for functional issues. Refer to [12th Generation Intel® Core™ Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.
  - Update for functional issues. Refer to [11th Gen Intel® Core™ Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.
  - Update for functional issues. Refer to [10th Gen Intel® Core™ Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.
  - Update for functional issues. Refer to [4th Gen Intel® Xeon® Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/772415) for details.
  - Update for functional issues. Refer to [3rd Generation Intel® Xeon® Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634897) for details.
  - Update for functional issues. Refer to [Intel® Processors and Intel® Core™ i3 N-Series](https://cdrdv2.intel.com/v1/dl/getContent/764616) for details.
  - Update for functional issues. Refer to [Intel® Xeon® D-2700 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714071) for details.
  - Update for functional issues. Refer to [Intel® Xeon® E-2300 Processor Specification Update ](https://cdrdv2.intel.com/v1/dl/getContent/709192) for details.
  [#]## Updated Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | C0       | 06-97-02/07 | 0000002e | 00000032 | Core Gen12
  | ADL            | H0       | 06-97-05/07 | 0000002e | 00000032 | Core Gen12
  | ADL            | L0       | 06-9a-03/80 | 0000042c | 00000430 | Core Gen12
  | ADL            | R0       | 06-9a-04/80 | 0000042c | 00000430 | Core Gen12
  | ADL-N          | N0       | 06-be-00/11 | 00000011 | 00000012 | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  | AZB            | A0       | 06-9a-04/40 | 00000004 | 00000005 | Intel(R) Atom(R) C1100
  | AZB            | R0       | 06-9a-04/40 | 00000004 | 00000005 | Intel(R) Atom(R) C1100
  | ICL-D          | B0       | 06-6c-01/10 | 01000230 | 01000268 | Xeon D-17xx, D-27xx
  | ICX-SP         | Dx/M1    | 06-6a-06/87 | 0d0003a5 | 0d0003b9 | Xeon Scalable Gen3
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000bc | 000000c2 | Core Gen10 Mobile
  | RPL-H/P/PX 6+8 | J0       | 06-ba-02/e0 | 00004119 | 0000411c | Core Gen13
  | RPL-S          | B0       | 06-b7-01/32 | 00000119 | 0000011d | Core Gen13
  | RKL-S          | B0       | 06-a7-01/02 | 00000059 | 0000005d | Core Gen11
  | RPL-S          | H0       | 06-bf-05/07 | 0000002e | 00000032 | Core Gen12
  | RPL-S/HX       | C0       | 06-bf-02/07 | 0000002e | 00000032 | Core Gen12
  | RPL-U 2+8      | Q0       | 06-ba-03/e0 | 00004119 | 0000411c | Core Gen13
  | SPR-SP         | E5/S3    | 06-8f-08/87 | 2b0004b1 | 2b0004d0 | Xeon Scalable Gen4
  | SPR-SP         | E4/S2    | 06-8f-07/87 | 2b0004b1 | 2b0004d0 | Xeon Scalable Gen4
  | SPR-SP         | E3       | 06-8f-06/87 | 2b0004b1 | 2b0004d0 | Xeon Scalable Gen4
  | SPR-SP         | E2       | 06-8f-05/87 | 2b0004b1 | 2b0004d0 | Xeon Scalable Gen4
  | SPR-SP         | E0       | 06-8f-04/87 | 2b0004b1 | 2b0004d0 | Xeon Scalable Gen4
  | SPR-HBM        | Bx       | 06-8f-08/10 | 2c000271 | 2c000290 | Xeon Max
  | TGL            | B0/B1    | 06-8c-01/80 | 000000ac | 000000b4 | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 00000046 | 0000004e | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 0000002c | 00000034 | Core Gen11 Mobile</changelog>
</package>
<package pkgid="4fb93ed927d4a7084eb9e6bcd03b2a2a81bdc961fdf63daaa24ac06d4ea5b5bc" name="udev" arch="aarch64">
  <version epoch="0" ver="249.16" rel="150400.8.35.5"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="4805422e3895b1bbb80e950072d487e4998c3b4692b673ccd0225c5585323343" name="udev" arch="s390x">
  <version epoch="0" ver="249.16" rel="150400.8.35.5"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="0237fd8c58a98503759aceaad33095f049c7b5bbbb3e8276d6ee9586be3fffa8" name="udev" arch="x86_64">
  <version epoch="0" ver="249.16" rel="150400.8.35.5"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="51134d8db2b5390771868fcd0a5e893b891b1feaed928942fb087c541c784e4e" name="udev" arch="aarch64">
  <version epoch="0" ver="249.17" rel="150400.8.40.1"/>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction</changelog>
</package>
<package pkgid="7c16359bbf79189ee66089e5e7cc9755cdee5c4c66a4ddcc44730ab60863b831" name="udev" arch="s390x">
  <version epoch="0" ver="249.17" rel="150400.8.40.1"/>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction</changelog>
</package>
<package pkgid="1bd7cfd0542bfa596f9b811a7f123e7875fa36638f9ed3c5eab9fbf22d529c47" name="udev" arch="x86_64">
  <version epoch="0" ver="249.17" rel="150400.8.40.1"/>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction</changelog>
</package>
<package pkgid="9d11a453a6716a08c69b793fde3a5bebc4cea55be7d4bb6ebe90433ceca2e984" name="util-linux" arch="aarch64">
  <version epoch="0" ver="2.37.4" rel="150500.9.3.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="98420796aa64138211c3d5be48be603323750975827f23ec2bde2586fe7a6c72" name="util-linux" arch="s390x">
  <version epoch="0" ver="2.37.4" rel="150500.9.3.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="66f5d2e65489bf5d86e8b572c2eb19ee9fa88093107ec31f5199b673d484747c" name="util-linux" arch="src">
  <version epoch="0" ver="2.37.4" rel="150500.9.3.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="3cb466fa51eee04b7eddc61d089388d8838b5d5e6aba94ebe5256f3ae7e68bac" name="util-linux" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="150500.9.3.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="d0a4f8e4c223307bf128136bdea29bc17388096860339d11661844f25a6e44ef" name="util-linux-systemd" arch="aarch64">
  <version epoch="0" ver="2.37.4" rel="150500.9.3.1"/>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
</package>
<package pkgid="a90b4611f35dcb28755dfca051ae195a789bd76f86c499bc951b5a9fe31f708d" name="util-linux-systemd" arch="s390x">
  <version epoch="0" ver="2.37.4" rel="150500.9.3.1"/>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
</package>
<package pkgid="225c34c53201e523968476f54b55689616e1804e9fbb8287443c084a85766cdf" name="util-linux-systemd" arch="src">
  <version epoch="0" ver="2.37.4" rel="150500.9.3.1"/>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
</package>
<package pkgid="c73157fc09cb0e02270003394ee2345e480542797d182f3db0234ec9691ab74b" name="util-linux-systemd" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="150500.9.3.1"/>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
</package>
<package pkgid="f71b9ecbaffca5159b12e7cd2f5daa214d1ef089ea26a4a01e6cb9ac94115d07" name="vim" arch="src">
  <version epoch="0" ver="9.0.2103" rel="150500.20.6.1"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="lnussel@suse.de" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="idonmez@suse.com" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="lnussel@suse.de" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="lnussel@suse.de" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="lnussel@suse.de" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
  <changelog author="zbalogh@suse.com" date="1645185600">- Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim:
  Heap-based Buffer Overflow in vim prior to 8.2.
  / vim-8.0.1568-CVE-2022-0413.patch
- Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in
  normal.c / vim-8.0.1568-CVE-2021-3796.patch
- Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in
  win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch
- Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch
- Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to
  Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch
- Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch
- Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting
  could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch
- Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
  / vim-8.0.1568-CVE-2021-3778.patch
- Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
  / vim-8.0.1568-CVE-2021-4193.patch
- Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability
  exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which
  causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch
- Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch
- Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
  / vim-8.0.1568-CVE-2022-0351.patch
- Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch
- Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c
  / vim-8.0.1568-CVE-2022-0413.patch</changelog>
  <changelog author="zbalogh@suse.com" date="1654776000">- Deleted patches:
  * restrict-shell-commands.patch
  * source-check-sandbox.patch
  * vim-8.0.1568-CVE-2021-3778.patch
  * vim-8.0.1568-CVE-2021-3796.patch
  * vim-8.0.1568-CVE-2021-3872.patch
  * vim-8.0.1568-CVE-2021-3927.patch
  * vim-8.0.1568-CVE-2021-3928.patch
  * vim-8.0.1568-CVE-2021-3984.patch
  * vim-8.0.1568-CVE-2021-4019.patch
  * vim-8.0.1568-CVE-2021-4193.patch
  * vim-8.0.1568-CVE-2021-46059.patch
  * vim-8.0.1568-CVE-2022-0319.patch
  * vim-8.0.1568-CVE-2022-0351.patch
  * vim-8.0.1568-CVE-2022-0361.patch
  * vim-8.0.1568-CVE-2022-0413.patch
  * vim-8.0.1568-globalvimrc.patch
- Added patches:
  * vim-8.1.0297-dump3.patch
  * vim-8.2.2411-globalvimrc.patch
  * disable-unreliable-tests-arch.patch
- Updated patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_changes.patch
  * vim-7.3-filetype_ftl.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.3-gvimrc_fontset.patch
  * vim-7.3-help_tags.patch
  * vim-7.3-mktemp_tutor.patch
  * vim-7.3-name_vimrc.patch
  * vim-7.3-sh_is_bash.patch
  * vim-7.3-use_awk.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-filetype_apparmor.patch
  * vim-7.4-filetype_mine.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch
  * vim-8.0.1568-defaults.patch
  * vim73-no-static-libpython.patch
- Updated to version 8.2 with patch level 5038, fixes the following problems
  * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow
  * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow
  * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use
    After Free
  * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open()
    in src/ex_docmd.c
  * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free
  * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow
    in vim prior to 8.2.
  * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in
    vim prior to 8.2.
  * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in
    init_ccline() in ex_getln.c
  * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in
    Conda vim prior to 8.2.
  * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow
    in skip_range
  * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in
    append_command
  * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in
    function cmdline_erase_chars
  * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in
    function vim_regexec_string
  * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in
    find_pattern_in_path
  * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim
  * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior
    to 8.2
  * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior
    to 8.2
  * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a
    .swp file to the editor's primary group, which allows local users to obtain
    sensitive information
  * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow
    in vim prior to 8.2
  * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in
    vim prior to 8.2
  * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset
  * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow
  * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in
    cindent.c
  * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior
    to 8.2.
  * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write
  * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read</changelog>
  <changelog author="zbalogh@suse.com" date="1661947200">- Updated to version 9.0 with patch level 0313, fixes the following problems
  * Fixing bsc#1200884 Vim: Error on startup
  * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32
  * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37
  * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37
  * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()
  * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044
  * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045
  * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046.
  * Fixing bsc#1201620 PUBLIC SUSE Linux Enterprise Server 15 SP4 Basesystem zbalogh@suse.com NEW --- SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue
  * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()
  * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()
  * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char
  * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()
  * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()
  * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()
  * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()
  * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()
  * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()
  * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow
  * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()
  * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()
  * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()
  * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()
  * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()
  * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()
  * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()
  * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand
  * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line()
  * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()
  * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()
  * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput()
  * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()
  * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()
  * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()
  * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()
  * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()
  * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c
  * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240
  * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval
  * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00</changelog>
  <changelog author="zbalogh@suse.com" date="1669204800">- Updated to version 9.0 with patch level 0814, fixes the following problems
  * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
  * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.
  * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.
  * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
  * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()
  * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c
  * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c
  * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c
  * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()
  * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
  * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c
  * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free
  * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()
  * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321
- ignore-flaky-test-failure.patch: Ignore failure of flaky tests
- disable-unreliable-tests-arch.patch: Removed
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.0313...v9.0.0814</changelog>
  <changelog author="zbalogh@suse.com" date="1671451200">- Updated to version 9.0 with patch level 1040, fixes the following security problems
  * Fixing bsc#1206028 VUL-0: CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742
  * Fixing bsc#1206071 VUL-0: CVE-2022-3520: vim: Heap-based Buffer Overflow
  * Fixing bsc#1206072 VUL-0: CVE-2022-3591: vim: Use After Free
  * Fixing bsc#1206075 VUL-0: CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882.
  * Fixing bsc#1206077 VUL-0: CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
  * Fixing bsc#1205797 VUL-0: CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.814...v9.0.1040</changelog>
  <changelog author="zbalogh@suse.com" date="1674648000">- Updated to version 9.0 with patch level 1234, fixes the following security problems
  * Fixing bsc#1207396 VUL-0: CVE-2023-0433: vim: Heap-based Buffer Overflow in vim prior to 9.0.1225
  * Fixing bsc#1207162 VUL-1: CVE-2023-0288: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
  * Fixing bsc#1206868 VUL-1: CVE-2023-0054: vim: Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
  * Fixing bsc#1206867 VUL-1: CVE-2023-0051: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
  * Fixing bsc#1206866 VUL-1: CVE-2023-0049: vim: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
- refreshed vim-7.4-highlight_fstab.patch
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1040...v9.0.1234</changelog>
  <changelog author="zbalogh@suse.com" date="1678190400">- Updated to version 9.0 with patch level 1386, fixes the following security problems
  * Fixing bsc#1207780 - (CVE-2023-0512) VUL-0: CVE-2023-0512: vim: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247
  * Fixing bsc#1208957 - (CVE-2023-1175) VUL-0: CVE-2023-1175: vim: Incorrect Calculation of Buffer Size
  * Fixing bsc#1208959 - (CVE-2023-1170) VUL-0: CVE-2023-1170: vim: Heap-based Buffer Overflow in vim prior to 9.0.1376
  * Fixing bsc#1208828 - (CVE-2023-1127) VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386</changelog>
  <changelog author="zbalogh@suse.com" date="1682596800">- Updated to version 9.0 with patch level 1443, fixes the following security problems
  * Fixing bsc#1209042 (CVE-2023-1264) - VUL-0: CVE-2023-1264: vim: NULL Pointer Dereference vim prior to 9.0.1392
  * Fixing bsc#1209187 (CVE-2023-1355) - VUL-0: CVE-2023-1355: vim: NULL Pointer Dereference prior to 9.0.1402.
  * Fixing bsc#1208828 (CVE-2023-1127) - VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- drop vim-8.0-ttytype-test.patch as it changes test_options.vim which we
  remove during %prep anyway. And this breaks quilt setup.
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1386...v9.0.1443</changelog>
  <changelog author="zbalogh@suse.com" date="1683633600">- Fixing bsc#1211144 - [Build 96.1] openQA test fails in zypper_migration - conflict between xxd and vim
  * Revert the creation standalone xxd packages</changelog>
  <changelog author="jehan.singh@suse.com" date="1684843200">- Fixing bsc#1211461 - L3: vim "eats" first character from prompt in xterm
  * Add: reorder-exit-raw-mode.patch
  * Swaps out_str_t_TE() and cursor_on() during exit to prevent missing characters in xterm prompt on exit.</changelog>
  <changelog author="zbalogh@suse.com" date="1685620800">- Updated to version 9.0 with patch level 1572, fixes the following security problems
  * Fixing bsc#1210996 (CVE-2023-2426) - VUL-0: CVE-2023-2426: vim: Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.
  * Fixing bsc#1211256 (CVE-2023-2609) - VUL-1: CVE-2023-2609: vim: NULL Pointer Dereference prior to 9.0.1531
  * Fixing bsc#1211257 (CVE-2023-2610) - VUL-1: CVE-2023-2610: vim: Integer Overflow or Wraparound prior to 9.0.1532
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1443...v9.0.1572</changelog>
  <changelog author="zbalogh@suse.com" date="1692187200">- Use app icon generated from vimlogo.eps in source tarball; add
  higher res icons of sizes 128, 256, and 512px as png sources.
  Our current icons deviate from upstream flatpaks for example.
- Updated to version 9.0 with patch level 1632
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1443...v9.0.1632</changelog>
  <changelog author="zbalogh@suse.com" date="1700654400">- Updated to version 9.0 with patch level 2103, fixes the following security problems
  * Fixing bsc#1215940 (CVE-2023-5344) - VUL-0: CVE-2023-5344: vim: Heap-based Buffer Overflow in vim prior to 9.0.1969.
  * Fixing bsc#1216001 (CVE-2023-5441) - VUL-0: CVE-2023-5441: vim: segfault in exmode when redrawing
  * Fixing bsc#1216167 (CVE-2023-5535) - VUL-0: CVE-2023-5535: vim: use-after-free from buf_contents_changed()
  * Fixing bsc#1216696 (CVE-2023-46246) - VUL-0: CVE-2023-46246: vim: Integer Overflow in :history command
  * Fixing bsc#1214922 (CVE-2023-4738) - VUL-0: CVE-2023-4738: vim: heap-buffer-overflow in vim_regsub_both
  * Fixing bsc#1214924 (CVE-2023-4735) - VUL-0: CVE-2023-4735: vim: OOB Write ops.c
  * Fixing bsc#1214925 (CVE-2023-4734) - VUL-0: CVE-2023-4734: vim: segmentation fault in function f_fullcommand
  * Fixing bsc#1215004 (CVE-2023-4733) - VUL-0: CVE-2023-4733: vim: use-after-free in function buflist_altfpos
  * Fixing bsc#1215006 (CVE-2023-4752) - VUL-0: CVE-2023-4752: vim: Heap Use After Free in function ins_compl_get_exp
  * Fixing bsc#1215033 (CVE-2023-4781) - VUL-0: CVE-2023-4781: vim: heap-buffer-overflow in function vim_regsub_both
- drop patches: disable-unreliable-tests.patch
    ignore-flaky-test-failure.patch
    vim-8.1.0297-dump3.patch
- dropped %check - most of tests didn't work correctly in OBS
    and maintenance burden of this was getting too big
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1632...v9.0.2103</changelog>
</package>
<package pkgid="6d088bb36117b46fec5c88faf36431d238be5d8f7c2926bac024619d601101ef" name="vim-data-common" arch="noarch">
  <version epoch="0" ver="9.0.2103" rel="150500.20.6.1"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="lnussel@suse.de" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="idonmez@suse.com" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="lnussel@suse.de" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="lnussel@suse.de" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="lnussel@suse.de" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
  <changelog author="zbalogh@suse.com" date="1645185600">- Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim:
  Heap-based Buffer Overflow in vim prior to 8.2.
  / vim-8.0.1568-CVE-2022-0413.patch
- Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in
  normal.c / vim-8.0.1568-CVE-2021-3796.patch
- Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in
  win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch
- Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch
- Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to
  Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch
- Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch
- Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting
  could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch
- Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
  / vim-8.0.1568-CVE-2021-3778.patch
- Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
  / vim-8.0.1568-CVE-2021-4193.patch
- Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability
  exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which
  causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch
- Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch
- Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
  / vim-8.0.1568-CVE-2022-0351.patch
- Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch
- Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c
  / vim-8.0.1568-CVE-2022-0413.patch</changelog>
  <changelog author="zbalogh@suse.com" date="1654776000">- Deleted patches:
  * restrict-shell-commands.patch
  * source-check-sandbox.patch
  * vim-8.0.1568-CVE-2021-3778.patch
  * vim-8.0.1568-CVE-2021-3796.patch
  * vim-8.0.1568-CVE-2021-3872.patch
  * vim-8.0.1568-CVE-2021-3927.patch
  * vim-8.0.1568-CVE-2021-3928.patch
  * vim-8.0.1568-CVE-2021-3984.patch
  * vim-8.0.1568-CVE-2021-4019.patch
  * vim-8.0.1568-CVE-2021-4193.patch
  * vim-8.0.1568-CVE-2021-46059.patch
  * vim-8.0.1568-CVE-2022-0319.patch
  * vim-8.0.1568-CVE-2022-0351.patch
  * vim-8.0.1568-CVE-2022-0361.patch
  * vim-8.0.1568-CVE-2022-0413.patch
  * vim-8.0.1568-globalvimrc.patch
- Added patches:
  * vim-8.1.0297-dump3.patch
  * vim-8.2.2411-globalvimrc.patch
  * disable-unreliable-tests-arch.patch
- Updated patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_changes.patch
  * vim-7.3-filetype_ftl.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.3-gvimrc_fontset.patch
  * vim-7.3-help_tags.patch
  * vim-7.3-mktemp_tutor.patch
  * vim-7.3-name_vimrc.patch
  * vim-7.3-sh_is_bash.patch
  * vim-7.3-use_awk.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-filetype_apparmor.patch
  * vim-7.4-filetype_mine.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch
  * vim-8.0.1568-defaults.patch
  * vim73-no-static-libpython.patch
- Updated to version 8.2 with patch level 5038, fixes the following problems
  * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow
  * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow
  * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use
    After Free
  * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open()
    in src/ex_docmd.c
  * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free
  * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow
    in vim prior to 8.2.
  * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in
    vim prior to 8.2.
  * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in
    init_ccline() in ex_getln.c
  * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in
    Conda vim prior to 8.2.
  * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow
    in skip_range
  * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in
    append_command
  * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in
    function cmdline_erase_chars
  * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in
    function vim_regexec_string
  * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in
    find_pattern_in_path
  * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim
  * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior
    to 8.2
  * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior
    to 8.2
  * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a
    .swp file to the editor's primary group, which allows local users to obtain
    sensitive information
  * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow
    in vim prior to 8.2
  * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in
    vim prior to 8.2
  * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset
  * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow
  * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in
    cindent.c
  * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior
    to 8.2.
  * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write
  * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read</changelog>
  <changelog author="zbalogh@suse.com" date="1661947200">- Updated to version 9.0 with patch level 0313, fixes the following problems
  * Fixing bsc#1200884 Vim: Error on startup
  * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32
  * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37
  * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37
  * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()
  * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044
  * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045
  * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046.
  * Fixing bsc#1201620 PUBLIC SUSE Linux Enterprise Server 15 SP4 Basesystem zbalogh@suse.com NEW --- SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue
  * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()
  * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()
  * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char
  * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()
  * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()
  * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()
  * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()
  * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()
  * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()
  * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow
  * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()
  * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()
  * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()
  * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()
  * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()
  * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()
  * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()
  * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand
  * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line()
  * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()
  * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()
  * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput()
  * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()
  * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()
  * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()
  * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()
  * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()
  * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c
  * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240
  * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval
  * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00</changelog>
  <changelog author="zbalogh@suse.com" date="1669204800">- Updated to version 9.0 with patch level 0814, fixes the following problems
  * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
  * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.
  * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.
  * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
  * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()
  * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c
  * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c
  * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c
  * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()
  * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
  * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c
  * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free
  * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()
  * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321
- ignore-flaky-test-failure.patch: Ignore failure of flaky tests
- disable-unreliable-tests-arch.patch: Removed
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.0313...v9.0.0814</changelog>
  <changelog author="zbalogh@suse.com" date="1671451200">- Updated to version 9.0 with patch level 1040, fixes the following security problems
  * Fixing bsc#1206028 VUL-0: CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742
  * Fixing bsc#1206071 VUL-0: CVE-2022-3520: vim: Heap-based Buffer Overflow
  * Fixing bsc#1206072 VUL-0: CVE-2022-3591: vim: Use After Free
  * Fixing bsc#1206075 VUL-0: CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882.
  * Fixing bsc#1206077 VUL-0: CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
  * Fixing bsc#1205797 VUL-0: CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.814...v9.0.1040</changelog>
  <changelog author="zbalogh@suse.com" date="1674648000">- Updated to version 9.0 with patch level 1234, fixes the following security problems
  * Fixing bsc#1207396 VUL-0: CVE-2023-0433: vim: Heap-based Buffer Overflow in vim prior to 9.0.1225
  * Fixing bsc#1207162 VUL-1: CVE-2023-0288: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
  * Fixing bsc#1206868 VUL-1: CVE-2023-0054: vim: Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
  * Fixing bsc#1206867 VUL-1: CVE-2023-0051: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
  * Fixing bsc#1206866 VUL-1: CVE-2023-0049: vim: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
- refreshed vim-7.4-highlight_fstab.patch
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1040...v9.0.1234</changelog>
  <changelog author="zbalogh@suse.com" date="1678190400">- Updated to version 9.0 with patch level 1386, fixes the following security problems
  * Fixing bsc#1207780 - (CVE-2023-0512) VUL-0: CVE-2023-0512: vim: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247
  * Fixing bsc#1208957 - (CVE-2023-1175) VUL-0: CVE-2023-1175: vim: Incorrect Calculation of Buffer Size
  * Fixing bsc#1208959 - (CVE-2023-1170) VUL-0: CVE-2023-1170: vim: Heap-based Buffer Overflow in vim prior to 9.0.1376
  * Fixing bsc#1208828 - (CVE-2023-1127) VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386</changelog>
  <changelog author="zbalogh@suse.com" date="1682596800">- Updated to version 9.0 with patch level 1443, fixes the following security problems
  * Fixing bsc#1209042 (CVE-2023-1264) - VUL-0: CVE-2023-1264: vim: NULL Pointer Dereference vim prior to 9.0.1392
  * Fixing bsc#1209187 (CVE-2023-1355) - VUL-0: CVE-2023-1355: vim: NULL Pointer Dereference prior to 9.0.1402.
  * Fixing bsc#1208828 (CVE-2023-1127) - VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- drop vim-8.0-ttytype-test.patch as it changes test_options.vim which we
  remove during %prep anyway. And this breaks quilt setup.
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1386...v9.0.1443</changelog>
  <changelog author="zbalogh@suse.com" date="1683633600">- Fixing bsc#1211144 - [Build 96.1] openQA test fails in zypper_migration - conflict between xxd and vim
  * Revert the creation standalone xxd packages</changelog>
  <changelog author="jehan.singh@suse.com" date="1684843200">- Fixing bsc#1211461 - L3: vim "eats" first character from prompt in xterm
  * Add: reorder-exit-raw-mode.patch
  * Swaps out_str_t_TE() and cursor_on() during exit to prevent missing characters in xterm prompt on exit.</changelog>
  <changelog author="zbalogh@suse.com" date="1685620800">- Updated to version 9.0 with patch level 1572, fixes the following security problems
  * Fixing bsc#1210996 (CVE-2023-2426) - VUL-0: CVE-2023-2426: vim: Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.
  * Fixing bsc#1211256 (CVE-2023-2609) - VUL-1: CVE-2023-2609: vim: NULL Pointer Dereference prior to 9.0.1531
  * Fixing bsc#1211257 (CVE-2023-2610) - VUL-1: CVE-2023-2610: vim: Integer Overflow or Wraparound prior to 9.0.1532
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1443...v9.0.1572</changelog>
  <changelog author="zbalogh@suse.com" date="1692187200">- Use app icon generated from vimlogo.eps in source tarball; add
  higher res icons of sizes 128, 256, and 512px as png sources.
  Our current icons deviate from upstream flatpaks for example.
- Updated to version 9.0 with patch level 1632
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1443...v9.0.1632</changelog>
  <changelog author="zbalogh@suse.com" date="1700654400">- Updated to version 9.0 with patch level 2103, fixes the following security problems
  * Fixing bsc#1215940 (CVE-2023-5344) - VUL-0: CVE-2023-5344: vim: Heap-based Buffer Overflow in vim prior to 9.0.1969.
  * Fixing bsc#1216001 (CVE-2023-5441) - VUL-0: CVE-2023-5441: vim: segfault in exmode when redrawing
  * Fixing bsc#1216167 (CVE-2023-5535) - VUL-0: CVE-2023-5535: vim: use-after-free from buf_contents_changed()
  * Fixing bsc#1216696 (CVE-2023-46246) - VUL-0: CVE-2023-46246: vim: Integer Overflow in :history command
  * Fixing bsc#1214922 (CVE-2023-4738) - VUL-0: CVE-2023-4738: vim: heap-buffer-overflow in vim_regsub_both
  * Fixing bsc#1214924 (CVE-2023-4735) - VUL-0: CVE-2023-4735: vim: OOB Write ops.c
  * Fixing bsc#1214925 (CVE-2023-4734) - VUL-0: CVE-2023-4734: vim: segmentation fault in function f_fullcommand
  * Fixing bsc#1215004 (CVE-2023-4733) - VUL-0: CVE-2023-4733: vim: use-after-free in function buflist_altfpos
  * Fixing bsc#1215006 (CVE-2023-4752) - VUL-0: CVE-2023-4752: vim: Heap Use After Free in function ins_compl_get_exp
  * Fixing bsc#1215033 (CVE-2023-4781) - VUL-0: CVE-2023-4781: vim: heap-buffer-overflow in function vim_regsub_both
- drop patches: disable-unreliable-tests.patch
    ignore-flaky-test-failure.patch
    vim-8.1.0297-dump3.patch
- dropped %check - most of tests didn't work correctly in OBS
    and maintenance burden of this was getting too big
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1632...v9.0.2103</changelog>
</package>
<package pkgid="ddd2a52374fbe653dabfa90dff1e02d5ca2ac34372d0e71c028c0b737ec91f30" name="vim-small" arch="aarch64">
  <version epoch="0" ver="9.0.2103" rel="150500.20.6.1"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="lnussel@suse.de" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="idonmez@suse.com" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="lnussel@suse.de" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="lnussel@suse.de" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="lnussel@suse.de" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
  <changelog author="zbalogh@suse.com" date="1645185600">- Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim:
  Heap-based Buffer Overflow in vim prior to 8.2.
  / vim-8.0.1568-CVE-2022-0413.patch
- Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in
  normal.c / vim-8.0.1568-CVE-2021-3796.patch
- Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in
  win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch
- Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch
- Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to
  Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch
- Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch
- Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting
  could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch
- Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
  / vim-8.0.1568-CVE-2021-3778.patch
- Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
  / vim-8.0.1568-CVE-2021-4193.patch
- Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability
  exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which
  causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch
- Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch
- Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
  / vim-8.0.1568-CVE-2022-0351.patch
- Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch
- Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c
  / vim-8.0.1568-CVE-2022-0413.patch</changelog>
  <changelog author="zbalogh@suse.com" date="1654776000">- Deleted patches:
  * restrict-shell-commands.patch
  * source-check-sandbox.patch
  * vim-8.0.1568-CVE-2021-3778.patch
  * vim-8.0.1568-CVE-2021-3796.patch
  * vim-8.0.1568-CVE-2021-3872.patch
  * vim-8.0.1568-CVE-2021-3927.patch
  * vim-8.0.1568-CVE-2021-3928.patch
  * vim-8.0.1568-CVE-2021-3984.patch
  * vim-8.0.1568-CVE-2021-4019.patch
  * vim-8.0.1568-CVE-2021-4193.patch
  * vim-8.0.1568-CVE-2021-46059.patch
  * vim-8.0.1568-CVE-2022-0319.patch
  * vim-8.0.1568-CVE-2022-0351.patch
  * vim-8.0.1568-CVE-2022-0361.patch
  * vim-8.0.1568-CVE-2022-0413.patch
  * vim-8.0.1568-globalvimrc.patch
- Added patches:
  * vim-8.1.0297-dump3.patch
  * vim-8.2.2411-globalvimrc.patch
  * disable-unreliable-tests-arch.patch
- Updated patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_changes.patch
  * vim-7.3-filetype_ftl.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.3-gvimrc_fontset.patch
  * vim-7.3-help_tags.patch
  * vim-7.3-mktemp_tutor.patch
  * vim-7.3-name_vimrc.patch
  * vim-7.3-sh_is_bash.patch
  * vim-7.3-use_awk.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-filetype_apparmor.patch
  * vim-7.4-filetype_mine.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch
  * vim-8.0.1568-defaults.patch
  * vim73-no-static-libpython.patch
- Updated to version 8.2 with patch level 5038, fixes the following problems
  * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow
  * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow
  * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use
    After Free
  * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open()
    in src/ex_docmd.c
  * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free
  * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow
    in vim prior to 8.2.
  * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in
    vim prior to 8.2.
  * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in
    init_ccline() in ex_getln.c
  * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in
    Conda vim prior to 8.2.
  * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow
    in skip_range
  * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in
    append_command
  * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in
    function cmdline_erase_chars
  * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in
    function vim_regexec_string
  * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in
    find_pattern_in_path
  * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim
  * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior
    to 8.2
  * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior
    to 8.2
  * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a
    .swp file to the editor's primary group, which allows local users to obtain
    sensitive information
  * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow
    in vim prior to 8.2
  * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in
    vim prior to 8.2
  * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset
  * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow
  * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in
    cindent.c
  * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior
    to 8.2.
  * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write
  * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read</changelog>
  <changelog author="zbalogh@suse.com" date="1661947200">- Updated to version 9.0 with patch level 0313, fixes the following problems
  * Fixing bsc#1200884 Vim: Error on startup
  * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32
  * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37
  * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37
  * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()
  * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044
  * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045
  * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046.
  * Fixing bsc#1201620 PUBLIC SUSE Linux Enterprise Server 15 SP4 Basesystem zbalogh@suse.com NEW --- SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue
  * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()
  * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()
  * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char
  * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()
  * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()
  * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()
  * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()
  * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()
  * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()
  * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow
  * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()
  * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()
  * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()
  * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()
  * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()
  * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()
  * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()
  * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand
  * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line()
  * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()
  * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()
  * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput()
  * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()
  * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()
  * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()
  * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()
  * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()
  * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c
  * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240
  * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval
  * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00</changelog>
  <changelog author="zbalogh@suse.com" date="1669204800">- Updated to version 9.0 with patch level 0814, fixes the following problems
  * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
  * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.
  * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.
  * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
  * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()
  * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c
  * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c
  * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c
  * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()
  * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
  * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c
  * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free
  * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()
  * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321
- ignore-flaky-test-failure.patch: Ignore failure of flaky tests
- disable-unreliable-tests-arch.patch: Removed
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.0313...v9.0.0814</changelog>
  <changelog author="zbalogh@suse.com" date="1671451200">- Updated to version 9.0 with patch level 1040, fixes the following security problems
  * Fixing bsc#1206028 VUL-0: CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742
  * Fixing bsc#1206071 VUL-0: CVE-2022-3520: vim: Heap-based Buffer Overflow
  * Fixing bsc#1206072 VUL-0: CVE-2022-3591: vim: Use After Free
  * Fixing bsc#1206075 VUL-0: CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882.
  * Fixing bsc#1206077 VUL-0: CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
  * Fixing bsc#1205797 VUL-0: CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.814...v9.0.1040</changelog>
  <changelog author="zbalogh@suse.com" date="1674648000">- Updated to version 9.0 with patch level 1234, fixes the following security problems
  * Fixing bsc#1207396 VUL-0: CVE-2023-0433: vim: Heap-based Buffer Overflow in vim prior to 9.0.1225
  * Fixing bsc#1207162 VUL-1: CVE-2023-0288: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
  * Fixing bsc#1206868 VUL-1: CVE-2023-0054: vim: Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
  * Fixing bsc#1206867 VUL-1: CVE-2023-0051: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
  * Fixing bsc#1206866 VUL-1: CVE-2023-0049: vim: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
- refreshed vim-7.4-highlight_fstab.patch
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1040...v9.0.1234</changelog>
  <changelog author="zbalogh@suse.com" date="1678190400">- Updated to version 9.0 with patch level 1386, fixes the following security problems
  * Fixing bsc#1207780 - (CVE-2023-0512) VUL-0: CVE-2023-0512: vim: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247
  * Fixing bsc#1208957 - (CVE-2023-1175) VUL-0: CVE-2023-1175: vim: Incorrect Calculation of Buffer Size
  * Fixing bsc#1208959 - (CVE-2023-1170) VUL-0: CVE-2023-1170: vim: Heap-based Buffer Overflow in vim prior to 9.0.1376
  * Fixing bsc#1208828 - (CVE-2023-1127) VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386</changelog>
  <changelog author="zbalogh@suse.com" date="1682596800">- Updated to version 9.0 with patch level 1443, fixes the following security problems
  * Fixing bsc#1209042 (CVE-2023-1264) - VUL-0: CVE-2023-1264: vim: NULL Pointer Dereference vim prior to 9.0.1392
  * Fixing bsc#1209187 (CVE-2023-1355) - VUL-0: CVE-2023-1355: vim: NULL Pointer Dereference prior to 9.0.1402.
  * Fixing bsc#1208828 (CVE-2023-1127) - VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- drop vim-8.0-ttytype-test.patch as it changes test_options.vim which we
  remove during %prep anyway. And this breaks quilt setup.
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1386...v9.0.1443</changelog>
  <changelog author="zbalogh@suse.com" date="1683633600">- Fixing bsc#1211144 - [Build 96.1] openQA test fails in zypper_migration - conflict between xxd and vim
  * Revert the creation standalone xxd packages</changelog>
  <changelog author="jehan.singh@suse.com" date="1684843200">- Fixing bsc#1211461 - L3: vim "eats" first character from prompt in xterm
  * Add: reorder-exit-raw-mode.patch
  * Swaps out_str_t_TE() and cursor_on() during exit to prevent missing characters in xterm prompt on exit.</changelog>
  <changelog author="zbalogh@suse.com" date="1685620800">- Updated to version 9.0 with patch level 1572, fixes the following security problems
  * Fixing bsc#1210996 (CVE-2023-2426) - VUL-0: CVE-2023-2426: vim: Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.
  * Fixing bsc#1211256 (CVE-2023-2609) - VUL-1: CVE-2023-2609: vim: NULL Pointer Dereference prior to 9.0.1531
  * Fixing bsc#1211257 (CVE-2023-2610) - VUL-1: CVE-2023-2610: vim: Integer Overflow or Wraparound prior to 9.0.1532
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1443...v9.0.1572</changelog>
  <changelog author="zbalogh@suse.com" date="1692187200">- Use app icon generated from vimlogo.eps in source tarball; add
  higher res icons of sizes 128, 256, and 512px as png sources.
  Our current icons deviate from upstream flatpaks for example.
- Updated to version 9.0 with patch level 1632
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1443...v9.0.1632</changelog>
  <changelog author="zbalogh@suse.com" date="1700654400">- Updated to version 9.0 with patch level 2103, fixes the following security problems
  * Fixing bsc#1215940 (CVE-2023-5344) - VUL-0: CVE-2023-5344: vim: Heap-based Buffer Overflow in vim prior to 9.0.1969.
  * Fixing bsc#1216001 (CVE-2023-5441) - VUL-0: CVE-2023-5441: vim: segfault in exmode when redrawing
  * Fixing bsc#1216167 (CVE-2023-5535) - VUL-0: CVE-2023-5535: vim: use-after-free from buf_contents_changed()
  * Fixing bsc#1216696 (CVE-2023-46246) - VUL-0: CVE-2023-46246: vim: Integer Overflow in :history command
  * Fixing bsc#1214922 (CVE-2023-4738) - VUL-0: CVE-2023-4738: vim: heap-buffer-overflow in vim_regsub_both
  * Fixing bsc#1214924 (CVE-2023-4735) - VUL-0: CVE-2023-4735: vim: OOB Write ops.c
  * Fixing bsc#1214925 (CVE-2023-4734) - VUL-0: CVE-2023-4734: vim: segmentation fault in function f_fullcommand
  * Fixing bsc#1215004 (CVE-2023-4733) - VUL-0: CVE-2023-4733: vim: use-after-free in function buflist_altfpos
  * Fixing bsc#1215006 (CVE-2023-4752) - VUL-0: CVE-2023-4752: vim: Heap Use After Free in function ins_compl_get_exp
  * Fixing bsc#1215033 (CVE-2023-4781) - VUL-0: CVE-2023-4781: vim: heap-buffer-overflow in function vim_regsub_both
- drop patches: disable-unreliable-tests.patch
    ignore-flaky-test-failure.patch
    vim-8.1.0297-dump3.patch
- dropped %check - most of tests didn't work correctly in OBS
    and maintenance burden of this was getting too big
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1632...v9.0.2103</changelog>
</package>
<package pkgid="d5d95d5d63f759ffc8d84f23619afdef115b59555e105d0fd023a8db139a04eb" name="vim-small" arch="s390x">
  <version epoch="0" ver="9.0.2103" rel="150500.20.6.1"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="lnussel@suse.de" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="idonmez@suse.com" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="lnussel@suse.de" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="lnussel@suse.de" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="lnussel@suse.de" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
  <changelog author="zbalogh@suse.com" date="1645185600">- Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim:
  Heap-based Buffer Overflow in vim prior to 8.2.
  / vim-8.0.1568-CVE-2022-0413.patch
- Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in
  normal.c / vim-8.0.1568-CVE-2021-3796.patch
- Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in
  win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch
- Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch
- Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to
  Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch
- Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch
- Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting
  could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch
- Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
  / vim-8.0.1568-CVE-2021-3778.patch
- Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
  / vim-8.0.1568-CVE-2021-4193.patch
- Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability
  exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which
  causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch
- Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch
- Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
  / vim-8.0.1568-CVE-2022-0351.patch
- Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch
- Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c
  / vim-8.0.1568-CVE-2022-0413.patch</changelog>
  <changelog author="zbalogh@suse.com" date="1654776000">- Deleted patches:
  * restrict-shell-commands.patch
  * source-check-sandbox.patch
  * vim-8.0.1568-CVE-2021-3778.patch
  * vim-8.0.1568-CVE-2021-3796.patch
  * vim-8.0.1568-CVE-2021-3872.patch
  * vim-8.0.1568-CVE-2021-3927.patch
  * vim-8.0.1568-CVE-2021-3928.patch
  * vim-8.0.1568-CVE-2021-3984.patch
  * vim-8.0.1568-CVE-2021-4019.patch
  * vim-8.0.1568-CVE-2021-4193.patch
  * vim-8.0.1568-CVE-2021-46059.patch
  * vim-8.0.1568-CVE-2022-0319.patch
  * vim-8.0.1568-CVE-2022-0351.patch
  * vim-8.0.1568-CVE-2022-0361.patch
  * vim-8.0.1568-CVE-2022-0413.patch
  * vim-8.0.1568-globalvimrc.patch
- Added patches:
  * vim-8.1.0297-dump3.patch
  * vim-8.2.2411-globalvimrc.patch
  * disable-unreliable-tests-arch.patch
- Updated patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_changes.patch
  * vim-7.3-filetype_ftl.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.3-gvimrc_fontset.patch
  * vim-7.3-help_tags.patch
  * vim-7.3-mktemp_tutor.patch
  * vim-7.3-name_vimrc.patch
  * vim-7.3-sh_is_bash.patch
  * vim-7.3-use_awk.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-filetype_apparmor.patch
  * vim-7.4-filetype_mine.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch
  * vim-8.0.1568-defaults.patch
  * vim73-no-static-libpython.patch
- Updated to version 8.2 with patch level 5038, fixes the following problems
  * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow
  * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow
  * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use
    After Free
  * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open()
    in src/ex_docmd.c
  * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free
  * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow
    in vim prior to 8.2.
  * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in
    vim prior to 8.2.
  * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in
    init_ccline() in ex_getln.c
  * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in
    Conda vim prior to 8.2.
  * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow
    in skip_range
  * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in
    append_command
  * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in
    function cmdline_erase_chars
  * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in
    function vim_regexec_string
  * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in
    find_pattern_in_path
  * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim
  * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior
    to 8.2
  * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior
    to 8.2
  * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a
    .swp file to the editor's primary group, which allows local users to obtain
    sensitive information
  * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow
    in vim prior to 8.2
  * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in
    vim prior to 8.2
  * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset
  * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow
  * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in
    cindent.c
  * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior
    to 8.2.
  * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write
  * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read</changelog>
  <changelog author="zbalogh@suse.com" date="1661947200">- Updated to version 9.0 with patch level 0313, fixes the following problems
  * Fixing bsc#1200884 Vim: Error on startup
  * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32
  * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37
  * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37
  * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()
  * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044
  * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045
  * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046.
  * Fixing bsc#1201620 PUBLIC SUSE Linux Enterprise Server 15 SP4 Basesystem zbalogh@suse.com NEW --- SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue
  * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()
  * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()
  * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char
  * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()
  * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()
  * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()
  * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()
  * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()
  * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()
  * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow
  * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()
  * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()
  * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()
  * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()
  * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()
  * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()
  * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()
  * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand
  * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line()
  * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()
  * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()
  * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput()
  * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()
  * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()
  * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()
  * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()
  * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()
  * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c
  * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240
  * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval
  * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00</changelog>
  <changelog author="zbalogh@suse.com" date="1669204800">- Updated to version 9.0 with patch level 0814, fixes the following problems
  * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
  * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.
  * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.
  * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
  * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()
  * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c
  * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c
  * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c
  * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()
  * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
  * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c
  * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free
  * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()
  * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321
- ignore-flaky-test-failure.patch: Ignore failure of flaky tests
- disable-unreliable-tests-arch.patch: Removed
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.0313...v9.0.0814</changelog>
  <changelog author="zbalogh@suse.com" date="1671451200">- Updated to version 9.0 with patch level 1040, fixes the following security problems
  * Fixing bsc#1206028 VUL-0: CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742
  * Fixing bsc#1206071 VUL-0: CVE-2022-3520: vim: Heap-based Buffer Overflow
  * Fixing bsc#1206072 VUL-0: CVE-2022-3591: vim: Use After Free
  * Fixing bsc#1206075 VUL-0: CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882.
  * Fixing bsc#1206077 VUL-0: CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
  * Fixing bsc#1205797 VUL-0: CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.814...v9.0.1040</changelog>
  <changelog author="zbalogh@suse.com" date="1674648000">- Updated to version 9.0 with patch level 1234, fixes the following security problems
  * Fixing bsc#1207396 VUL-0: CVE-2023-0433: vim: Heap-based Buffer Overflow in vim prior to 9.0.1225
  * Fixing bsc#1207162 VUL-1: CVE-2023-0288: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
  * Fixing bsc#1206868 VUL-1: CVE-2023-0054: vim: Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
  * Fixing bsc#1206867 VUL-1: CVE-2023-0051: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
  * Fixing bsc#1206866 VUL-1: CVE-2023-0049: vim: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
- refreshed vim-7.4-highlight_fstab.patch
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1040...v9.0.1234</changelog>
  <changelog author="zbalogh@suse.com" date="1678190400">- Updated to version 9.0 with patch level 1386, fixes the following security problems
  * Fixing bsc#1207780 - (CVE-2023-0512) VUL-0: CVE-2023-0512: vim: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247
  * Fixing bsc#1208957 - (CVE-2023-1175) VUL-0: CVE-2023-1175: vim: Incorrect Calculation of Buffer Size
  * Fixing bsc#1208959 - (CVE-2023-1170) VUL-0: CVE-2023-1170: vim: Heap-based Buffer Overflow in vim prior to 9.0.1376
  * Fixing bsc#1208828 - (CVE-2023-1127) VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386</changelog>
  <changelog author="zbalogh@suse.com" date="1682596800">- Updated to version 9.0 with patch level 1443, fixes the following security problems
  * Fixing bsc#1209042 (CVE-2023-1264) - VUL-0: CVE-2023-1264: vim: NULL Pointer Dereference vim prior to 9.0.1392
  * Fixing bsc#1209187 (CVE-2023-1355) - VUL-0: CVE-2023-1355: vim: NULL Pointer Dereference prior to 9.0.1402.
  * Fixing bsc#1208828 (CVE-2023-1127) - VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- drop vim-8.0-ttytype-test.patch as it changes test_options.vim which we
  remove during %prep anyway. And this breaks quilt setup.
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1386...v9.0.1443</changelog>
  <changelog author="zbalogh@suse.com" date="1683633600">- Fixing bsc#1211144 - [Build 96.1] openQA test fails in zypper_migration - conflict between xxd and vim
  * Revert the creation standalone xxd packages</changelog>
  <changelog author="jehan.singh@suse.com" date="1684843200">- Fixing bsc#1211461 - L3: vim "eats" first character from prompt in xterm
  * Add: reorder-exit-raw-mode.patch
  * Swaps out_str_t_TE() and cursor_on() during exit to prevent missing characters in xterm prompt on exit.</changelog>
  <changelog author="zbalogh@suse.com" date="1685620800">- Updated to version 9.0 with patch level 1572, fixes the following security problems
  * Fixing bsc#1210996 (CVE-2023-2426) - VUL-0: CVE-2023-2426: vim: Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.
  * Fixing bsc#1211256 (CVE-2023-2609) - VUL-1: CVE-2023-2609: vim: NULL Pointer Dereference prior to 9.0.1531
  * Fixing bsc#1211257 (CVE-2023-2610) - VUL-1: CVE-2023-2610: vim: Integer Overflow or Wraparound prior to 9.0.1532
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1443...v9.0.1572</changelog>
  <changelog author="zbalogh@suse.com" date="1692187200">- Use app icon generated from vimlogo.eps in source tarball; add
  higher res icons of sizes 128, 256, and 512px as png sources.
  Our current icons deviate from upstream flatpaks for example.
- Updated to version 9.0 with patch level 1632
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1443...v9.0.1632</changelog>
  <changelog author="zbalogh@suse.com" date="1700654400">- Updated to version 9.0 with patch level 2103, fixes the following security problems
  * Fixing bsc#1215940 (CVE-2023-5344) - VUL-0: CVE-2023-5344: vim: Heap-based Buffer Overflow in vim prior to 9.0.1969.
  * Fixing bsc#1216001 (CVE-2023-5441) - VUL-0: CVE-2023-5441: vim: segfault in exmode when redrawing
  * Fixing bsc#1216167 (CVE-2023-5535) - VUL-0: CVE-2023-5535: vim: use-after-free from buf_contents_changed()
  * Fixing bsc#1216696 (CVE-2023-46246) - VUL-0: CVE-2023-46246: vim: Integer Overflow in :history command
  * Fixing bsc#1214922 (CVE-2023-4738) - VUL-0: CVE-2023-4738: vim: heap-buffer-overflow in vim_regsub_both
  * Fixing bsc#1214924 (CVE-2023-4735) - VUL-0: CVE-2023-4735: vim: OOB Write ops.c
  * Fixing bsc#1214925 (CVE-2023-4734) - VUL-0: CVE-2023-4734: vim: segmentation fault in function f_fullcommand
  * Fixing bsc#1215004 (CVE-2023-4733) - VUL-0: CVE-2023-4733: vim: use-after-free in function buflist_altfpos
  * Fixing bsc#1215006 (CVE-2023-4752) - VUL-0: CVE-2023-4752: vim: Heap Use After Free in function ins_compl_get_exp
  * Fixing bsc#1215033 (CVE-2023-4781) - VUL-0: CVE-2023-4781: vim: heap-buffer-overflow in function vim_regsub_both
- drop patches: disable-unreliable-tests.patch
    ignore-flaky-test-failure.patch
    vim-8.1.0297-dump3.patch
- dropped %check - most of tests didn't work correctly in OBS
    and maintenance burden of this was getting too big
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1632...v9.0.2103</changelog>
</package>
<package pkgid="d16d954ab875a9542a124394510100d6946531afb502f481f723caebdf9b7429" name="vim-small" arch="x86_64">
  <version epoch="0" ver="9.0.2103" rel="150500.20.6.1"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="lnussel@suse.de" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="idonmez@suse.com" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="lnussel@suse.de" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="lnussel@suse.de" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="lnussel@suse.de" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
  <changelog author="zbalogh@suse.com" date="1645185600">- Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim:
  Heap-based Buffer Overflow in vim prior to 8.2.
  / vim-8.0.1568-CVE-2022-0413.patch
- Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in
  normal.c / vim-8.0.1568-CVE-2021-3796.patch
- Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in
  win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch
- Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch
- Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to
  Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch
- Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch
- Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting
  could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch
- Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
  / vim-8.0.1568-CVE-2021-3778.patch
- Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
  / vim-8.0.1568-CVE-2021-4193.patch
- Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability
  exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which
  causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch
- Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch
- Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
  / vim-8.0.1568-CVE-2022-0351.patch
- Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch
- Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c
  / vim-8.0.1568-CVE-2022-0413.patch</changelog>
  <changelog author="zbalogh@suse.com" date="1654776000">- Deleted patches:
  * restrict-shell-commands.patch
  * source-check-sandbox.patch
  * vim-8.0.1568-CVE-2021-3778.patch
  * vim-8.0.1568-CVE-2021-3796.patch
  * vim-8.0.1568-CVE-2021-3872.patch
  * vim-8.0.1568-CVE-2021-3927.patch
  * vim-8.0.1568-CVE-2021-3928.patch
  * vim-8.0.1568-CVE-2021-3984.patch
  * vim-8.0.1568-CVE-2021-4019.patch
  * vim-8.0.1568-CVE-2021-4193.patch
  * vim-8.0.1568-CVE-2021-46059.patch
  * vim-8.0.1568-CVE-2022-0319.patch
  * vim-8.0.1568-CVE-2022-0351.patch
  * vim-8.0.1568-CVE-2022-0361.patch
  * vim-8.0.1568-CVE-2022-0413.patch
  * vim-8.0.1568-globalvimrc.patch
- Added patches:
  * vim-8.1.0297-dump3.patch
  * vim-8.2.2411-globalvimrc.patch
  * disable-unreliable-tests-arch.patch
- Updated patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_changes.patch
  * vim-7.3-filetype_ftl.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.3-gvimrc_fontset.patch
  * vim-7.3-help_tags.patch
  * vim-7.3-mktemp_tutor.patch
  * vim-7.3-name_vimrc.patch
  * vim-7.3-sh_is_bash.patch
  * vim-7.3-use_awk.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-filetype_apparmor.patch
  * vim-7.4-filetype_mine.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch
  * vim-8.0.1568-defaults.patch
  * vim73-no-static-libpython.patch
- Updated to version 8.2 with patch level 5038, fixes the following problems
  * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow
  * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow
  * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use
    After Free
  * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open()
    in src/ex_docmd.c
  * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free
  * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow
    in vim prior to 8.2.
  * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in
    vim prior to 8.2.
  * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in
    init_ccline() in ex_getln.c
  * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in
    Conda vim prior to 8.2.
  * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow
    in skip_range
  * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in
    append_command
  * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in
    function cmdline_erase_chars
  * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in
    function vim_regexec_string
  * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in
    find_pattern_in_path
  * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim
  * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior
    to 8.2
  * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior
    to 8.2
  * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a
    .swp file to the editor's primary group, which allows local users to obtain
    sensitive information
  * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow
    in vim prior to 8.2
  * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in
    vim prior to 8.2
  * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset
  * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow
  * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in
    cindent.c
  * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior
    to 8.2.
  * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write
  * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read</changelog>
  <changelog author="zbalogh@suse.com" date="1661947200">- Updated to version 9.0 with patch level 0313, fixes the following problems
  * Fixing bsc#1200884 Vim: Error on startup
  * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32
  * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37
  * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37
  * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()
  * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044
  * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045
  * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046.
  * Fixing bsc#1201620 PUBLIC SUSE Linux Enterprise Server 15 SP4 Basesystem zbalogh@suse.com NEW --- SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue
  * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()
  * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()
  * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char
  * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()
  * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()
  * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()
  * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()
  * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()
  * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()
  * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow
  * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()
  * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()
  * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()
  * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()
  * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()
  * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()
  * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()
  * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand
  * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line()
  * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()
  * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()
  * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput()
  * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()
  * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()
  * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()
  * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()
  * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()
  * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c
  * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240
  * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval
  * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00</changelog>
  <changelog author="zbalogh@suse.com" date="1669204800">- Updated to version 9.0 with patch level 0814, fixes the following problems
  * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
  * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.
  * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.
  * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
  * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()
  * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c
  * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c
  * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c
  * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()
  * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
  * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c
  * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free
  * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()
  * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321
- ignore-flaky-test-failure.patch: Ignore failure of flaky tests
- disable-unreliable-tests-arch.patch: Removed
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.0313...v9.0.0814</changelog>
  <changelog author="zbalogh@suse.com" date="1671451200">- Updated to version 9.0 with patch level 1040, fixes the following security problems
  * Fixing bsc#1206028 VUL-0: CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742
  * Fixing bsc#1206071 VUL-0: CVE-2022-3520: vim: Heap-based Buffer Overflow
  * Fixing bsc#1206072 VUL-0: CVE-2022-3591: vim: Use After Free
  * Fixing bsc#1206075 VUL-0: CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882.
  * Fixing bsc#1206077 VUL-0: CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
  * Fixing bsc#1205797 VUL-0: CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.814...v9.0.1040</changelog>
  <changelog author="zbalogh@suse.com" date="1674648000">- Updated to version 9.0 with patch level 1234, fixes the following security problems
  * Fixing bsc#1207396 VUL-0: CVE-2023-0433: vim: Heap-based Buffer Overflow in vim prior to 9.0.1225
  * Fixing bsc#1207162 VUL-1: CVE-2023-0288: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
  * Fixing bsc#1206868 VUL-1: CVE-2023-0054: vim: Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
  * Fixing bsc#1206867 VUL-1: CVE-2023-0051: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
  * Fixing bsc#1206866 VUL-1: CVE-2023-0049: vim: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
- refreshed vim-7.4-highlight_fstab.patch
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1040...v9.0.1234</changelog>
  <changelog author="zbalogh@suse.com" date="1678190400">- Updated to version 9.0 with patch level 1386, fixes the following security problems
  * Fixing bsc#1207780 - (CVE-2023-0512) VUL-0: CVE-2023-0512: vim: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247
  * Fixing bsc#1208957 - (CVE-2023-1175) VUL-0: CVE-2023-1175: vim: Incorrect Calculation of Buffer Size
  * Fixing bsc#1208959 - (CVE-2023-1170) VUL-0: CVE-2023-1170: vim: Heap-based Buffer Overflow in vim prior to 9.0.1376
  * Fixing bsc#1208828 - (CVE-2023-1127) VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386</changelog>
  <changelog author="zbalogh@suse.com" date="1682596800">- Updated to version 9.0 with patch level 1443, fixes the following security problems
  * Fixing bsc#1209042 (CVE-2023-1264) - VUL-0: CVE-2023-1264: vim: NULL Pointer Dereference vim prior to 9.0.1392
  * Fixing bsc#1209187 (CVE-2023-1355) - VUL-0: CVE-2023-1355: vim: NULL Pointer Dereference prior to 9.0.1402.
  * Fixing bsc#1208828 (CVE-2023-1127) - VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- drop vim-8.0-ttytype-test.patch as it changes test_options.vim which we
  remove during %prep anyway. And this breaks quilt setup.
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1386...v9.0.1443</changelog>
  <changelog author="zbalogh@suse.com" date="1683633600">- Fixing bsc#1211144 - [Build 96.1] openQA test fails in zypper_migration - conflict between xxd and vim
  * Revert the creation standalone xxd packages</changelog>
  <changelog author="jehan.singh@suse.com" date="1684843200">- Fixing bsc#1211461 - L3: vim "eats" first character from prompt in xterm
  * Add: reorder-exit-raw-mode.patch
  * Swaps out_str_t_TE() and cursor_on() during exit to prevent missing characters in xterm prompt on exit.</changelog>
  <changelog author="zbalogh@suse.com" date="1685620800">- Updated to version 9.0 with patch level 1572, fixes the following security problems
  * Fixing bsc#1210996 (CVE-2023-2426) - VUL-0: CVE-2023-2426: vim: Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.
  * Fixing bsc#1211256 (CVE-2023-2609) - VUL-1: CVE-2023-2609: vim: NULL Pointer Dereference prior to 9.0.1531
  * Fixing bsc#1211257 (CVE-2023-2610) - VUL-1: CVE-2023-2610: vim: Integer Overflow or Wraparound prior to 9.0.1532
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1443...v9.0.1572</changelog>
  <changelog author="zbalogh@suse.com" date="1692187200">- Use app icon generated from vimlogo.eps in source tarball; add
  higher res icons of sizes 128, 256, and 512px as png sources.
  Our current icons deviate from upstream flatpaks for example.
- Updated to version 9.0 with patch level 1632
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1443...v9.0.1632</changelog>
  <changelog author="zbalogh@suse.com" date="1700654400">- Updated to version 9.0 with patch level 2103, fixes the following security problems
  * Fixing bsc#1215940 (CVE-2023-5344) - VUL-0: CVE-2023-5344: vim: Heap-based Buffer Overflow in vim prior to 9.0.1969.
  * Fixing bsc#1216001 (CVE-2023-5441) - VUL-0: CVE-2023-5441: vim: segfault in exmode when redrawing
  * Fixing bsc#1216167 (CVE-2023-5535) - VUL-0: CVE-2023-5535: vim: use-after-free from buf_contents_changed()
  * Fixing bsc#1216696 (CVE-2023-46246) - VUL-0: CVE-2023-46246: vim: Integer Overflow in :history command
  * Fixing bsc#1214922 (CVE-2023-4738) - VUL-0: CVE-2023-4738: vim: heap-buffer-overflow in vim_regsub_both
  * Fixing bsc#1214924 (CVE-2023-4735) - VUL-0: CVE-2023-4735: vim: OOB Write ops.c
  * Fixing bsc#1214925 (CVE-2023-4734) - VUL-0: CVE-2023-4734: vim: segmentation fault in function f_fullcommand
  * Fixing bsc#1215004 (CVE-2023-4733) - VUL-0: CVE-2023-4733: vim: use-after-free in function buflist_altfpos
  * Fixing bsc#1215006 (CVE-2023-4752) - VUL-0: CVE-2023-4752: vim: Heap Use After Free in function ins_compl_get_exp
  * Fixing bsc#1215033 (CVE-2023-4781) - VUL-0: CVE-2023-4781: vim: heap-buffer-overflow in function vim_regsub_both
- drop patches: disable-unreliable-tests.patch
    ignore-flaky-test-failure.patch
    vim-8.1.0297-dump3.patch
- dropped %check - most of tests didn't work correctly in OBS
    and maintenance burden of this was getting too big
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1632...v9.0.2103</changelog>
</package>
<package pkgid="f99a8e4cbf0afe9c5592756751c361d1ad6275353b00322e47cf357be19c7fdb" name="virt-install" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="150500.3.6.1"/>
  <changelog author="carnold@suse.com" date="1648641600">- bsc#1196806 - [jsc#SLE-18834][virt-install] ERROR SEV launch
  security requires a Q35 UEFI machine (epic: jsc#SLE-18732)
  virtman-add-sev-memory-support.patch
- Add firmware features to description tooltip when mouse hovers
  over the selected firmware file.
  virtman-add-tooltip-to-firmware.patch</changelog>
  <changelog author="carnold@suse.com" date="1653307200">- Change dependency on package xorriso to Requires from Recommends
  virt-manager.spec</changelog>
  <changelog author="carnold@suse.com" date="1655899200">- bsc#1200691 - SLES 15 SP4 GMC --os-variant tag shouldn't be
  mandatory on s390x (see also bsc#1200422)
  revert-363fca41-virt-install-Require-osinfo-for-non-x86-HVM-case-too.patch</changelog>
  <changelog author="carnold@suse.com" date="1657627200">- Upstream bug fix (bsc#1027942)
  d51541e1-Fix-UI-rename-with-firmware-efi.patch
- Use autosetup in spec file</changelog>
  <changelog author="code@bnavigator.de" date="1658232000">- Add Source URL
- Add upstream patch virtman-pr381-setuptools-61.patch
  gh#virt-manager/virt-manager#381
- Enable tests
  * No python package should go untested
  * Use multibuild so that all runtime requirements are checked
  * Add virtman-34662fe-argcomplete.patch</changelog>
  <changelog author="carnold@suse.com" date="1659528000">- Upstream bug fixes (bsc#1027942)
  c6107419-tests-Drop-usage-of-sgio-unfiltered.patch
  9ac94ef7-tests-Fix-another-sgio-filtered-case.patch
  b8a77805-domain-cpu-Clear-migratable-when-changing-to-custom-cpu.patch
  0d84bcfb-cli-Add-iothreadids-attributes-thread_pool_min-and-thread_pool_max.patch
  90e13549-Fix-build-with-setuptools-61+.patch
  424283ad-launch_security-Use-SEV-ES-policy-0x07-if-host-supports-it.patch
- Modified virtman-add-sev-memory-support.patch
- Renamed upstream patches
  virtman-pr381-setuptools-61.patch to
    46dc0616-setup-add-bits-for-setuptools-61.patch
  virtman-34662fe-argcomplete.patch to
    34662fec-tests-Fix-with-latest-argcomplete.patch</changelog>
  <changelog author="code@bnavigator.de" date="1659700800">- Update to 4.1.0
  * Fix build with setuptools-61 (Peter Alfredsen, Miro Hrončok)
  * add UI and cli support for qemu-vdagent channel (Jonathon Jongsma)
  * cli: More --iothreads suboptions (Lin Ma)
  * launch_security: Use SEV-ES policy=0x07 if host supports it (Charles
  * Arnold)
  * cli: Add support for URL query with disks (Martin Kletzander)
- Drop patches merged upstream:
  * c6107419-tests-Drop-usage-of-sgio-unfiltered.patch
  * 90e13549-Fix-build-with-setuptools-61+.patch
  * 46dc0616-setup-add-bits-for-setuptools-61.patch
  * 9ac94ef7-tests-Fix-another-sgio-filtered-case.patch
  * 34662fec-tests-Fix-with-latest-argcomplete.patch
  * d51541e1-Fix-UI-rename-with-firmware-efi.patch
  * b8a77805-domain-cpu-Clear-migratable-when-changing-to-custom-cpu.patch
  * 0d84bcfb-cli-Add-iothreadids-attributes-thread_pool_min-and-thread_pool_max.patch
  * 424283ad-launch_security-Use-SEV-ES-policy-0x07-if-host-supports-it.patch
- Refresh patches
  * virtman-add-tooltip-to-firmware.patch
  - - changed surrounding imports
  * virtinst-set-cache-mode-unsafe-for-install.patch
  - - the patch changes the expected output in tests
- Refresh test skips</changelog>
  <changelog author="carnold@suse.com" date="1664884800">- jsc#PED-2113 [Virt Tools] Refresh Virtualization Tools for Xen
  and KVM Management</changelog>
  <changelog author="carnold@suse.com" date="1667563200">- Upstream bug fixes (bsc#1027942)
  11a887ec-cli-disk-Add-driver.metadata_cache-options.patch
  7295ebfb-tests-cli-Fix-test-output-after-previous-commit.patch
  58f5e36d-fsdetails-Fix-an-error-with-source.socket-of-virtiofs.patch
  c22a876e-tests-Add-a-compat-check-for-linux2020-in-amd-sev-test-case.patch
  fbdf0516-cli-cpu-Add-maxphysaddr.mode-bits-options.patch
  b0d05167-cloner-Sync-uuid-and-sysinfo-system-uuid.patch
  999ccb85-virt-install-unattended-and-cloud-init-conflict.patch</changelog>
  <changelog author="carnold@suse.com" date="1667822400">- Refresh test skips
- Drop the very old "Obsoletes: python-virtinst &lt;= 0.600.4"
  virt-manager.spec</changelog>
  <changelog author="carnold@suse.com" date="1668513600">- bsc#1203252 - virt-manager regression - cannot add second
  virtio-scsi controller
  virtman-fix-uninitialized-controller-index.patch</changelog>
  <changelog author="carnold@suse.com" date="1669636800">- bsc#1205675 - [Build 20221122] virt-install: Specifying --boot no
  longer implies no_install=yes
  1cb0be40-virtinstall-split-no_install-conditional-apart-to-track-code-coverage.patch
  e94786c0-virtinstall-fix-regression-with-boot-and-no-install-method.patch</changelog>
  <changelog author="carnold@suse.com" date="1672920000">- Replace downstream patch with upstream version (bsc#1203252)
  67832d30-addhardware-Fix-backtrace-when-controller-index-is-None.patch
  Drop virtman-fix-uninitialized-controller-index.patch</changelog>
  <changelog author="carnold@suse.com" date="1674216000">- bsc#1207070 - libvirt fails to start the guest once the new
  shared disk is added, with the error, "cannot get 'write'
  permission without 'resize' image size is not a multiple of
  request alignment"
  virtman-fix-shared-disk-request-alignment-error.patch</changelog>
  <changelog author="carnold@suse.com" date="1680782400">- Language file fixes
  bsc#1209800, bsc#1197945, bsc#1197947, bsc#1198041
  virtman-language-fixes.patch</changelog>
  <changelog author="carnold@suse.com" date="1681732800">- Drop virtman-check-for-valid-display.patch. This patch is no
  longer required.</changelog>
  <changelog author="carnold@suse.com" date="1682424000">- bsc#1201748 - virt-install --graphics vnc fails with not support
  for video model 'virtio'
  virtinst-enable-video-virtio-for-arm.patch</changelog>
  <changelog author="carnold@suse.com" date="1686657600">- bsc#1212195 - libvirtd crashes when virt-manager connects
  virt-manager qemu:///system on a fresh installation tumbleweed
  virtman-check-for-libvirt-modular-daemons.patch
- Changes to osinfo-db cause some virt-manager tests to fail.
  virtman-fix-osinfo-tests.patch</changelog>
  <changelog author="carnold@suse.com" date="1690804800">- bsc#1213790 - Application tab in virt-manager is collapsed,
  therefore I can't read anything
  virtman-fix-inspection-apps-window.patch</changelog>
  <changelog author="carnold@suse.com" date="1708430400">- bsc#1220012 - KVM/QEMU video driver fails - virtio and qxl
  exhibit issues (see also bsc#1219791)
  virtinst-enable-video-virtio-for-arm.patch</changelog>
</package>
<package pkgid="ed33dd0d14bdd2f5fca71a9ba42a711dc1384d8a4affb00bac260a801294d9a3" name="virt-manager" arch="src">
  <version epoch="0" ver="4.1.0" rel="150500.3.6.1"/>
  <changelog author="carnold@suse.com" date="1648641600">- bsc#1196806 - [jsc#SLE-18834][virt-install] ERROR SEV launch
  security requires a Q35 UEFI machine (epic: jsc#SLE-18732)
  virtman-add-sev-memory-support.patch
- Add firmware features to description tooltip when mouse hovers
  over the selected firmware file.
  virtman-add-tooltip-to-firmware.patch</changelog>
  <changelog author="carnold@suse.com" date="1653307200">- Change dependency on package xorriso to Requires from Recommends
  virt-manager.spec</changelog>
  <changelog author="carnold@suse.com" date="1655899200">- bsc#1200691 - SLES 15 SP4 GMC --os-variant tag shouldn't be
  mandatory on s390x (see also bsc#1200422)
  revert-363fca41-virt-install-Require-osinfo-for-non-x86-HVM-case-too.patch</changelog>
  <changelog author="carnold@suse.com" date="1657627200">- Upstream bug fix (bsc#1027942)
  d51541e1-Fix-UI-rename-with-firmware-efi.patch
- Use autosetup in spec file</changelog>
  <changelog author="code@bnavigator.de" date="1658232000">- Add Source URL
- Add upstream patch virtman-pr381-setuptools-61.patch
  gh#virt-manager/virt-manager#381
- Enable tests
  * No python package should go untested
  * Use multibuild so that all runtime requirements are checked
  * Add virtman-34662fe-argcomplete.patch</changelog>
  <changelog author="carnold@suse.com" date="1659528000">- Upstream bug fixes (bsc#1027942)
  c6107419-tests-Drop-usage-of-sgio-unfiltered.patch
  9ac94ef7-tests-Fix-another-sgio-filtered-case.patch
  b8a77805-domain-cpu-Clear-migratable-when-changing-to-custom-cpu.patch
  0d84bcfb-cli-Add-iothreadids-attributes-thread_pool_min-and-thread_pool_max.patch
  90e13549-Fix-build-with-setuptools-61+.patch
  424283ad-launch_security-Use-SEV-ES-policy-0x07-if-host-supports-it.patch
- Modified virtman-add-sev-memory-support.patch
- Renamed upstream patches
  virtman-pr381-setuptools-61.patch to
    46dc0616-setup-add-bits-for-setuptools-61.patch
  virtman-34662fe-argcomplete.patch to
    34662fec-tests-Fix-with-latest-argcomplete.patch</changelog>
  <changelog author="code@bnavigator.de" date="1659700800">- Update to 4.1.0
  * Fix build with setuptools-61 (Peter Alfredsen, Miro Hrončok)
  * add UI and cli support for qemu-vdagent channel (Jonathon Jongsma)
  * cli: More --iothreads suboptions (Lin Ma)
  * launch_security: Use SEV-ES policy=0x07 if host supports it (Charles
  * Arnold)
  * cli: Add support for URL query with disks (Martin Kletzander)
- Drop patches merged upstream:
  * c6107419-tests-Drop-usage-of-sgio-unfiltered.patch
  * 90e13549-Fix-build-with-setuptools-61+.patch
  * 46dc0616-setup-add-bits-for-setuptools-61.patch
  * 9ac94ef7-tests-Fix-another-sgio-filtered-case.patch
  * 34662fec-tests-Fix-with-latest-argcomplete.patch
  * d51541e1-Fix-UI-rename-with-firmware-efi.patch
  * b8a77805-domain-cpu-Clear-migratable-when-changing-to-custom-cpu.patch
  * 0d84bcfb-cli-Add-iothreadids-attributes-thread_pool_min-and-thread_pool_max.patch
  * 424283ad-launch_security-Use-SEV-ES-policy-0x07-if-host-supports-it.patch
- Refresh patches
  * virtman-add-tooltip-to-firmware.patch
  - - changed surrounding imports
  * virtinst-set-cache-mode-unsafe-for-install.patch
  - - the patch changes the expected output in tests
- Refresh test skips</changelog>
  <changelog author="carnold@suse.com" date="1664884800">- jsc#PED-2113 [Virt Tools] Refresh Virtualization Tools for Xen
  and KVM Management</changelog>
  <changelog author="carnold@suse.com" date="1667563200">- Upstream bug fixes (bsc#1027942)
  11a887ec-cli-disk-Add-driver.metadata_cache-options.patch
  7295ebfb-tests-cli-Fix-test-output-after-previous-commit.patch
  58f5e36d-fsdetails-Fix-an-error-with-source.socket-of-virtiofs.patch
  c22a876e-tests-Add-a-compat-check-for-linux2020-in-amd-sev-test-case.patch
  fbdf0516-cli-cpu-Add-maxphysaddr.mode-bits-options.patch
  b0d05167-cloner-Sync-uuid-and-sysinfo-system-uuid.patch
  999ccb85-virt-install-unattended-and-cloud-init-conflict.patch</changelog>
  <changelog author="carnold@suse.com" date="1667822400">- Refresh test skips
- Drop the very old "Obsoletes: python-virtinst &lt;= 0.600.4"
  virt-manager.spec</changelog>
  <changelog author="carnold@suse.com" date="1668513600">- bsc#1203252 - virt-manager regression - cannot add second
  virtio-scsi controller
  virtman-fix-uninitialized-controller-index.patch</changelog>
  <changelog author="carnold@suse.com" date="1669636800">- bsc#1205675 - [Build 20221122] virt-install: Specifying --boot no
  longer implies no_install=yes
  1cb0be40-virtinstall-split-no_install-conditional-apart-to-track-code-coverage.patch
  e94786c0-virtinstall-fix-regression-with-boot-and-no-install-method.patch</changelog>
  <changelog author="carnold@suse.com" date="1672920000">- Replace downstream patch with upstream version (bsc#1203252)
  67832d30-addhardware-Fix-backtrace-when-controller-index-is-None.patch
  Drop virtman-fix-uninitialized-controller-index.patch</changelog>
  <changelog author="carnold@suse.com" date="1674216000">- bsc#1207070 - libvirt fails to start the guest once the new
  shared disk is added, with the error, "cannot get 'write'
  permission without 'resize' image size is not a multiple of
  request alignment"
  virtman-fix-shared-disk-request-alignment-error.patch</changelog>
  <changelog author="carnold@suse.com" date="1680782400">- Language file fixes
  bsc#1209800, bsc#1197945, bsc#1197947, bsc#1198041
  virtman-language-fixes.patch</changelog>
  <changelog author="carnold@suse.com" date="1681732800">- Drop virtman-check-for-valid-display.patch. This patch is no
  longer required.</changelog>
  <changelog author="carnold@suse.com" date="1682424000">- bsc#1201748 - virt-install --graphics vnc fails with not support
  for video model 'virtio'
  virtinst-enable-video-virtio-for-arm.patch</changelog>
  <changelog author="carnold@suse.com" date="1686657600">- bsc#1212195 - libvirtd crashes when virt-manager connects
  virt-manager qemu:///system on a fresh installation tumbleweed
  virtman-check-for-libvirt-modular-daemons.patch
- Changes to osinfo-db cause some virt-manager tests to fail.
  virtman-fix-osinfo-tests.patch</changelog>
  <changelog author="carnold@suse.com" date="1690804800">- bsc#1213790 - Application tab in virt-manager is collapsed,
  therefore I can't read anything
  virtman-fix-inspection-apps-window.patch</changelog>
  <changelog author="carnold@suse.com" date="1708430400">- bsc#1220012 - KVM/QEMU video driver fails - virtio and qxl
  exhibit issues (see also bsc#1219791)
  virtinst-enable-video-virtio-for-arm.patch</changelog>
</package>
<package pkgid="d8d7bcb4e7465bcb1717555dd71e1e5d04af5ba99f064844ddea4f6e997854af" name="virt-manager-common" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="150500.3.6.1"/>
  <changelog author="carnold@suse.com" date="1648641600">- bsc#1196806 - [jsc#SLE-18834][virt-install] ERROR SEV launch
  security requires a Q35 UEFI machine (epic: jsc#SLE-18732)
  virtman-add-sev-memory-support.patch
- Add firmware features to description tooltip when mouse hovers
  over the selected firmware file.
  virtman-add-tooltip-to-firmware.patch</changelog>
  <changelog author="carnold@suse.com" date="1653307200">- Change dependency on package xorriso to Requires from Recommends
  virt-manager.spec</changelog>
  <changelog author="carnold@suse.com" date="1655899200">- bsc#1200691 - SLES 15 SP4 GMC --os-variant tag shouldn't be
  mandatory on s390x (see also bsc#1200422)
  revert-363fca41-virt-install-Require-osinfo-for-non-x86-HVM-case-too.patch</changelog>
  <changelog author="carnold@suse.com" date="1657627200">- Upstream bug fix (bsc#1027942)
  d51541e1-Fix-UI-rename-with-firmware-efi.patch
- Use autosetup in spec file</changelog>
  <changelog author="code@bnavigator.de" date="1658232000">- Add Source URL
- Add upstream patch virtman-pr381-setuptools-61.patch
  gh#virt-manager/virt-manager#381
- Enable tests
  * No python package should go untested
  * Use multibuild so that all runtime requirements are checked
  * Add virtman-34662fe-argcomplete.patch</changelog>
  <changelog author="carnold@suse.com" date="1659528000">- Upstream bug fixes (bsc#1027942)
  c6107419-tests-Drop-usage-of-sgio-unfiltered.patch
  9ac94ef7-tests-Fix-another-sgio-filtered-case.patch
  b8a77805-domain-cpu-Clear-migratable-when-changing-to-custom-cpu.patch
  0d84bcfb-cli-Add-iothreadids-attributes-thread_pool_min-and-thread_pool_max.patch
  90e13549-Fix-build-with-setuptools-61+.patch
  424283ad-launch_security-Use-SEV-ES-policy-0x07-if-host-supports-it.patch
- Modified virtman-add-sev-memory-support.patch
- Renamed upstream patches
  virtman-pr381-setuptools-61.patch to
    46dc0616-setup-add-bits-for-setuptools-61.patch
  virtman-34662fe-argcomplete.patch to
    34662fec-tests-Fix-with-latest-argcomplete.patch</changelog>
  <changelog author="code@bnavigator.de" date="1659700800">- Update to 4.1.0
  * Fix build with setuptools-61 (Peter Alfredsen, Miro Hrončok)
  * add UI and cli support for qemu-vdagent channel (Jonathon Jongsma)
  * cli: More --iothreads suboptions (Lin Ma)
  * launch_security: Use SEV-ES policy=0x07 if host supports it (Charles
  * Arnold)
  * cli: Add support for URL query with disks (Martin Kletzander)
- Drop patches merged upstream:
  * c6107419-tests-Drop-usage-of-sgio-unfiltered.patch
  * 90e13549-Fix-build-with-setuptools-61+.patch
  * 46dc0616-setup-add-bits-for-setuptools-61.patch
  * 9ac94ef7-tests-Fix-another-sgio-filtered-case.patch
  * 34662fec-tests-Fix-with-latest-argcomplete.patch
  * d51541e1-Fix-UI-rename-with-firmware-efi.patch
  * b8a77805-domain-cpu-Clear-migratable-when-changing-to-custom-cpu.patch
  * 0d84bcfb-cli-Add-iothreadids-attributes-thread_pool_min-and-thread_pool_max.patch
  * 424283ad-launch_security-Use-SEV-ES-policy-0x07-if-host-supports-it.patch
- Refresh patches
  * virtman-add-tooltip-to-firmware.patch
  - - changed surrounding imports
  * virtinst-set-cache-mode-unsafe-for-install.patch
  - - the patch changes the expected output in tests
- Refresh test skips</changelog>
  <changelog author="carnold@suse.com" date="1664884800">- jsc#PED-2113 [Virt Tools] Refresh Virtualization Tools for Xen
  and KVM Management</changelog>
  <changelog author="carnold@suse.com" date="1667563200">- Upstream bug fixes (bsc#1027942)
  11a887ec-cli-disk-Add-driver.metadata_cache-options.patch
  7295ebfb-tests-cli-Fix-test-output-after-previous-commit.patch
  58f5e36d-fsdetails-Fix-an-error-with-source.socket-of-virtiofs.patch
  c22a876e-tests-Add-a-compat-check-for-linux2020-in-amd-sev-test-case.patch
  fbdf0516-cli-cpu-Add-maxphysaddr.mode-bits-options.patch
  b0d05167-cloner-Sync-uuid-and-sysinfo-system-uuid.patch
  999ccb85-virt-install-unattended-and-cloud-init-conflict.patch</changelog>
  <changelog author="carnold@suse.com" date="1667822400">- Refresh test skips
- Drop the very old "Obsoletes: python-virtinst &lt;= 0.600.4"
  virt-manager.spec</changelog>
  <changelog author="carnold@suse.com" date="1668513600">- bsc#1203252 - virt-manager regression - cannot add second
  virtio-scsi controller
  virtman-fix-uninitialized-controller-index.patch</changelog>
  <changelog author="carnold@suse.com" date="1669636800">- bsc#1205675 - [Build 20221122] virt-install: Specifying --boot no
  longer implies no_install=yes
  1cb0be40-virtinstall-split-no_install-conditional-apart-to-track-code-coverage.patch
  e94786c0-virtinstall-fix-regression-with-boot-and-no-install-method.patch</changelog>
  <changelog author="carnold@suse.com" date="1672920000">- Replace downstream patch with upstream version (bsc#1203252)
  67832d30-addhardware-Fix-backtrace-when-controller-index-is-None.patch
  Drop virtman-fix-uninitialized-controller-index.patch</changelog>
  <changelog author="carnold@suse.com" date="1674216000">- bsc#1207070 - libvirt fails to start the guest once the new
  shared disk is added, with the error, "cannot get 'write'
  permission without 'resize' image size is not a multiple of
  request alignment"
  virtman-fix-shared-disk-request-alignment-error.patch</changelog>
  <changelog author="carnold@suse.com" date="1680782400">- Language file fixes
  bsc#1209800, bsc#1197945, bsc#1197947, bsc#1198041
  virtman-language-fixes.patch</changelog>
  <changelog author="carnold@suse.com" date="1681732800">- Drop virtman-check-for-valid-display.patch. This patch is no
  longer required.</changelog>
  <changelog author="carnold@suse.com" date="1682424000">- bsc#1201748 - virt-install --graphics vnc fails with not support
  for video model 'virtio'
  virtinst-enable-video-virtio-for-arm.patch</changelog>
  <changelog author="carnold@suse.com" date="1686657600">- bsc#1212195 - libvirtd crashes when virt-manager connects
  virt-manager qemu:///system on a fresh installation tumbleweed
  virtman-check-for-libvirt-modular-daemons.patch
- Changes to osinfo-db cause some virt-manager tests to fail.
  virtman-fix-osinfo-tests.patch</changelog>
  <changelog author="carnold@suse.com" date="1690804800">- bsc#1213790 - Application tab in virt-manager is collapsed,
  therefore I can't read anything
  virtman-fix-inspection-apps-window.patch</changelog>
  <changelog author="carnold@suse.com" date="1708430400">- bsc#1220012 - KVM/QEMU video driver fails - virtio and qxl
  exhibit issues (see also bsc#1219791)
  virtinst-enable-video-virtio-for-arm.patch</changelog>
</package>
<package pkgid="19fca7533c578a3f0467146427b5ac1823f810e1df681037e3a922a411ab05c6" name="wireless-regdb" arch="noarch">
  <version epoch="0" ver="20230901" rel="150000.3.17.1"/>
  <changelog author="mpluskal@suse.com" date="1613563200">- Update to version 20210129:
  * wireless-regdb: Update regulatory rules for Ukraine (UA)
  * wireless-regdb: update CNAF regulation url for ES</changelog>
  <changelog author="mpluskal@suse.com" date="1618315200">- Update to version 20210407:
  * wireless-regdb: Update regulatory rules for Cuba (CU) on 5GHz
  * wireless-regdb: Do not hardcode 'sforshee' in the certificate commonName</changelog>
  <changelog author="mpluskal@suse.com" date="1619611200">- Update to version 20210421:
  * wireless-regdb: update regulatory database based on preceding changes
  * wireless-regdb: re-add source url and info for CU</changelog>
  <changelog author="mpluskal@suse.com" date="1634040000">- Update to version 20210828:
  * wireless-regdb: update regulatory database based on preceding changes
  * Update regulatory rules for Ecuador (EC)
  * wireless-regdb: Update regulatory rules for Norway (NO) on 6 and 60 GHz
  * wireless-regdb: Update regulatory rules for Germany (DE) on 6GHz
  * wireless-regdb: update regulatory database based on preceding changes
  * wireless-regdb: reduce bandwidth for 5730-5850 and 5850-5895 MHz in US
  * wireless-regdb: remove PTMP-ONLY from 5850-5895 MHz for US
  * wireless-regdb: recent FCC report and order allows 5850-5895 immediately
  * wireless-regdb: update 5725-5850 MHz rule for GB</changelog>
  <changelog author="mpluskal@suse.com" date="1639569600">- Update to version 20211209:
  * wireless-regdb: Raise DFS TX power limit to 250 mW (24 dBm) for the US</changelog>
  <changelog author="mpluskal@suse.com" date="1644321600">- Update to version 20220108:
  * wireless-regdb: Update regulatory rules for Croatia (HR) on 6GHz</changelog>
  <changelog author="mpluskal@suse.com" date="1646740800">- Update to version 20220218:
  * wireless-regdb: update regulatory database based on preceding changes
  * wireless-regdb: Update regulatory rules for the Netherlands (NL) on 6GHz
  * wireless-regdb: Update regulatory rules for China (CN)
  * wireless-regdb: Update regulatory rules for South Korea (KR)
  * Revert "wireless-regdb: Update regulatory rules for South Korea (KR)"
  * wireless-regdb: Update regulatory rules for Spain (ES) on 6GHz
  * wireless-regdb: add 802.11ah bands to world regulatory domain
  * wireless-regdb: add support for US S1G channels
  * wireless-regdb: Update regulatory rules for France (FR) on 6 and 60 GHz
  * wireless-regdb: Update regulatory rules for South Korea (KR)</changelog>
  <changelog author="mpluskal@suse.com" date="1648468800">- Update to version 20220324:
  * wireless-regdb: Update regulatory rules for Israel (IL)</changelog>
  <changelog author="mpluskal@suse.com" date="1650369600">- Update to version 20220408:
  * wireless-regdb: add db files missing from previous commit
  * wireless-regdb: update regulatory database based on preceding changes
  * wireless-regdb: Update regulatory rules for Australia (AU)
  * wireless-regdb: add missing spaces for US S1G rules</changelog>
  <changelog author="mpluskal@suse.com" date="1653998400">- Update to version 20220527:
  * wireless-regdb: update regulatory rules for Bulgaria (BG) on 6GHz
  * Regulatory update for 6 GHz operation in FI
  * Regulatory update for 6 GHz operation in United States (US)
  * Regulatory update for 6 GHz operation in Canada (CA)</changelog>
  <changelog author="mpluskal@suse.com" date="1655294400">- Update to version 20220606:
  * wireless-regdb: update regulatory database based on preceding changes
  * wireless-regdb: Unify 6 GHz rules for EU contries
  * wireless-regdb: Remove AUTO-BW from 6 GHz rules</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- Update to version 20220812:
  * wireless-regdb: update regulatory database based on preceding changes
  * wireless-regdb: update 5 GHz rules for PK and add 60 GHz rule
  * wireless-regdb: add 5 GHz rules for GY
  * wireless-regdb: update regulatory database based on preceding changes
  * wireless-regdb: Unify 6 GHz rules for EU contries
  * wireless-regdb: Remove AUTO-BW from 6 GHz rules
  * wireless-regdb: update regulatory rules for Bulgaria (BG) on 6GHz
  * Regulatory update for 6 GHz operation in FI
  * Regulatory update for 6 GHz operation in United States (US)
  * Regulatory update for 6 GHz operation in Canada (CA)</changelog>
  <changelog author="mpluskal@suse.com" date="1668427200">- Update to version 20221012:
  * wireless-regdb: update regulatory rules for Switzerland (CH)
  * wireless-regdb: Update regulatory rules for Brazil (BR)</changelog>
  <changelog author="mpluskal@suse.com" date="1670328000">- Update to version 20221205:
  * wireless-regdb: Update regulatory rules for Japan (JP) on 6GHz
  * wireless-regdb: Update regulatory rules for Japan (JP) on 5GHz</changelog>
  <changelog author="mpluskal@suse.com" date="1678190400">- Update to version 20230213:
  * wireless-regdb: update regulatory database based on preceding changes
  * wireless-regdb: Update regulatory info for Russia (RU) on 5GHz</changelog>
  <changelog author="mpluskal@suse.com" date="1683633600">- Update to version 20230503:
  * wireless-regdb: update regulatory database based on preceding changes
  * wireless-regdb: Update regulatory rules for Hong Kong (HK)
  * wireless-regdb: update regulatory rules for India (IN)
  * wireless-regdb: Update regulatory rules for Russia (RU). Remove DFS requirement.
  * Update regulatory info for Russia (RU) on 6GHz</changelog>
  <changelog author="mpluskal@suse.com" date="1686312000">- Update to version 20230601:
  * wireless-regdb: Update regulatory rules for Philippines (PH)</changelog>
  <changelog author="mpluskal@suse.com" date="1690545600">- Update to version 20230721:
  * wireless-regdb: Update regulatory info for Türkiye (TR)
  * wireless-regdb: Update regulatory rules for Egypt (EG) from March 2022 guidelines</changelog>
  <changelog author="mpluskal@suse.com" date="1694088000">- Update to version 20230901:
  * wireless-regdb: update regulatory database based on preceding changes
  * wireless-regdb: Update regulatory rules for Australia (AU) for June 2023</changelog>
  <changelog author="ivan.ivanov@suse.com" date="1695038400">- Define %{_firmwaredir} if not defined. This fixes RPM build errors.</changelog>
</package>
<package pkgid="c19569c666199b42d7b46049d7b5284e54487e2dd4dc64b0e5351f489147dd70" name="wireless-regdb" arch="src">
  <version epoch="0" ver="20230901" rel="150000.3.17.1"/>
  <changelog author="mpluskal@suse.com" date="1613563200">- Update to version 20210129:
  * wireless-regdb: Update regulatory rules for Ukraine (UA)
  * wireless-regdb: update CNAF regulation url for ES</changelog>
  <changelog author="mpluskal@suse.com" date="1618315200">- Update to version 20210407:
  * wireless-regdb: Update regulatory rules for Cuba (CU) on 5GHz
  * wireless-regdb: Do not hardcode 'sforshee' in the certificate commonName</changelog>
  <changelog author="mpluskal@suse.com" date="1619611200">- Update to version 20210421:
  * wireless-regdb: update regulatory database based on preceding changes
  * wireless-regdb: re-add source url and info for CU</changelog>
  <changelog author="mpluskal@suse.com" date="1634040000">- Update to version 20210828:
  * wireless-regdb: update regulatory database based on preceding changes
  * Update regulatory rules for Ecuador (EC)
  * wireless-regdb: Update regulatory rules for Norway (NO) on 6 and 60 GHz
  * wireless-regdb: Update regulatory rules for Germany (DE) on 6GHz
  * wireless-regdb: update regulatory database based on preceding changes
  * wireless-regdb: reduce bandwidth for 5730-5850 and 5850-5895 MHz in US
  * wireless-regdb: remove PTMP-ONLY from 5850-5895 MHz for US
  * wireless-regdb: recent FCC report and order allows 5850-5895 immediately
  * wireless-regdb: update 5725-5850 MHz rule for GB</changelog>
  <changelog author="mpluskal@suse.com" date="1639569600">- Update to version 20211209:
  * wireless-regdb: Raise DFS TX power limit to 250 mW (24 dBm) for the US</changelog>
  <changelog author="mpluskal@suse.com" date="1644321600">- Update to version 20220108:
  * wireless-regdb: Update regulatory rules for Croatia (HR) on 6GHz</changelog>
  <changelog author="mpluskal@suse.com" date="1646740800">- Update to version 20220218:
  * wireless-regdb: update regulatory database based on preceding changes
  * wireless-regdb: Update regulatory rules for the Netherlands (NL) on 6GHz
  * wireless-regdb: Update regulatory rules for China (CN)
  * wireless-regdb: Update regulatory rules for South Korea (KR)
  * Revert "wireless-regdb: Update regulatory rules for South Korea (KR)"
  * wireless-regdb: Update regulatory rules for Spain (ES) on 6GHz
  * wireless-regdb: add 802.11ah bands to world regulatory domain
  * wireless-regdb: add support for US S1G channels
  * wireless-regdb: Update regulatory rules for France (FR) on 6 and 60 GHz
  * wireless-regdb: Update regulatory rules for South Korea (KR)</changelog>
  <changelog author="mpluskal@suse.com" date="1648468800">- Update to version 20220324:
  * wireless-regdb: Update regulatory rules for Israel (IL)</changelog>
  <changelog author="mpluskal@suse.com" date="1650369600">- Update to version 20220408:
  * wireless-regdb: add db files missing from previous commit
  * wireless-regdb: update regulatory database based on preceding changes
  * wireless-regdb: Update regulatory rules for Australia (AU)
  * wireless-regdb: add missing spaces for US S1G rules</changelog>
  <changelog author="mpluskal@suse.com" date="1653998400">- Update to version 20220527:
  * wireless-regdb: update regulatory rules for Bulgaria (BG) on 6GHz
  * Regulatory update for 6 GHz operation in FI
  * Regulatory update for 6 GHz operation in United States (US)
  * Regulatory update for 6 GHz operation in Canada (CA)</changelog>
  <changelog author="mpluskal@suse.com" date="1655294400">- Update to version 20220606:
  * wireless-regdb: update regulatory database based on preceding changes
  * wireless-regdb: Unify 6 GHz rules for EU contries
  * wireless-regdb: Remove AUTO-BW from 6 GHz rules</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- Update to version 20220812:
  * wireless-regdb: update regulatory database based on preceding changes
  * wireless-regdb: update 5 GHz rules for PK and add 60 GHz rule
  * wireless-regdb: add 5 GHz rules for GY
  * wireless-regdb: update regulatory database based on preceding changes
  * wireless-regdb: Unify 6 GHz rules for EU contries
  * wireless-regdb: Remove AUTO-BW from 6 GHz rules
  * wireless-regdb: update regulatory rules for Bulgaria (BG) on 6GHz
  * Regulatory update for 6 GHz operation in FI
  * Regulatory update for 6 GHz operation in United States (US)
  * Regulatory update for 6 GHz operation in Canada (CA)</changelog>
  <changelog author="mpluskal@suse.com" date="1668427200">- Update to version 20221012:
  * wireless-regdb: update regulatory rules for Switzerland (CH)
  * wireless-regdb: Update regulatory rules for Brazil (BR)</changelog>
  <changelog author="mpluskal@suse.com" date="1670328000">- Update to version 20221205:
  * wireless-regdb: Update regulatory rules for Japan (JP) on 6GHz
  * wireless-regdb: Update regulatory rules for Japan (JP) on 5GHz</changelog>
  <changelog author="mpluskal@suse.com" date="1678190400">- Update to version 20230213:
  * wireless-regdb: update regulatory database based on preceding changes
  * wireless-regdb: Update regulatory info for Russia (RU) on 5GHz</changelog>
  <changelog author="mpluskal@suse.com" date="1683633600">- Update to version 20230503:
  * wireless-regdb: update regulatory database based on preceding changes
  * wireless-regdb: Update regulatory rules for Hong Kong (HK)
  * wireless-regdb: update regulatory rules for India (IN)
  * wireless-regdb: Update regulatory rules for Russia (RU). Remove DFS requirement.
  * Update regulatory info for Russia (RU) on 6GHz</changelog>
  <changelog author="mpluskal@suse.com" date="1686312000">- Update to version 20230601:
  * wireless-regdb: Update regulatory rules for Philippines (PH)</changelog>
  <changelog author="mpluskal@suse.com" date="1690545600">- Update to version 20230721:
  * wireless-regdb: Update regulatory info for Türkiye (TR)
  * wireless-regdb: Update regulatory rules for Egypt (EG) from March 2022 guidelines</changelog>
  <changelog author="mpluskal@suse.com" date="1694088000">- Update to version 20230901:
  * wireless-regdb: update regulatory database based on preceding changes
  * wireless-regdb: Update regulatory rules for Australia (AU) for June 2023</changelog>
  <changelog author="ivan.ivanov@suse.com" date="1695038400">- Define %{_firmwaredir} if not defined. This fixes RPM build errors.</changelog>
</package>
<package pkgid="6eaac692a150df354bf9d8e3f01b484f6569aa80692a39a83bf43d2e105ca01f" name="xen" arch="src">
  <version epoch="0" ver="4.17.2_06" rel="150500.3.12.1"/>
  <changelog author="carnold@suse.com" date="1677758400">- bsc#1208736 - GCC 13: xen package fails
  bunzip-gcc13.patch
  altp2m-gcc13.patch
- Drop gcc13-fixes.patch</changelog>
  <changelog author="carnold@suse.com" date="1678190400">- bsc#1209017 - VUL-0: CVE-2022-42332: xen: x86 shadow plus
  log-dirty mode use-after-free (XSA-427)
  xsa427.patch
- bsc#1209018 - VUL-0: CVE-2022-42333,CVE-2022-42334: xen: x86/HVM
  pinned cache attributes mis-handling (XSA-428)
  xsa428-1.patch
  xsa428-2.patch
- bsc#1209019 - VUL-0: CVE-2022-42331: xen: x86: speculative
  vulnerability in 32bit SYSCALL path (XSA-429)
  xsa429.patch</changelog>
  <changelog author="ohering@suse.de" date="1678968000">- bsc#1209245 - fix host-assisted kexec/kdump for HVM domUs
  libxl.fix-guest-kexec-skip-cpuid-policy.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1679572800">- Upstream bug fixes (bsc#1027519)
  63a03b73-VMX-VMExit-based-BusLock-detection.patch
  63a03ba6-VMX-INTR_SHADOW_NMI-helper.patch
  63a03bce-VMX-Notify-VMExit.patch
  63e53ac9-x86-CPUID-leaves-7-1-ecx-edx.patch
  63e53ac9-x86-disable-CET-SS-when-fractured-updates.patch
  63f4d045-x86-ucode-AMD-apply-early-on-all-threads.patch
  63fe06e0-x86-ucode-AMD-apply-late-on-all-threads.patch
  641041e8-VT-d-constrain-IGD-check.patch
  6419697d-AMD-IOMMU-no-XT-x2APIC-phys.patch
- Use "proper" upstream backports:
  640f3035-x86-altp2m-help-gcc13.patch
  64104238-bunzip-gcc13.patch
  64199e0c-x86-shadow-account-for-log-dirty-mode.patch
  64199e0d-x86-HVM-bound-number-of-pca-regions.patch
  64199e0e-x86-HVM-serialize-pca-list-manipulation.patch
  64199e0f-x86-spec-ctrl-defer-CR4_PV32_RESTORE-for-CSTAR.patch
- ... in place of:
  bunzip-gcc13.patch
  altp2m-gcc13.patch
  xsa427.patch
  xsa428-1.patch
  xsa428-2.patch
  xsa429.patch</changelog>
  <changelog author="carnold@suse.com" date="1680264000">- Not building the shim is correctly handled by --disable-pvshim
  Drop disable-building-pv-shim.patch</changelog>
  <changelog author="carnold@suse.com" date="1681214400">- bsc#1210315 - VUL-0: CVE-2022-42335: xen: x86 shadow paging
  arbitrary pointer dereference (XSA-430)
  xsa430.patch</changelog>
  <changelog author="carnold@suse.com" date="1682596800">- Update to Xen 4.17.1 bug fix release (bsc#1027519)
  xen-4.17.1-testing-src.tar.bz2
  * No upstream changelog found in sources or webpage
- Dropped patches contained in new tarball
  63a03b73-VMX-VMExit-based-BusLock-detection.patch
  63a03ba6-VMX-INTR_SHADOW_NMI-helper.patch
  63a03bce-VMX-Notify-VMExit.patch
  63a03e28-x86-high-freq-TSC-overflow.patch
  63c05478-VMX-calculate-model-specific-LBRs-once.patch
  63c05478-VMX-support-CPUs-without-model-specific-LBR.patch
  63d24e91-tools-xenstore-revert-simplify-loop-handling.patch
  63e53ac9-x86-CPUID-leaves-7-1-ecx-edx.patch
  63e53ac9-x86-disable-CET-SS-when-fractured-updates.patch
  63ebca9c-x86-spec-ctrl-Mitigate-Cross-Thread-Return-Address-Predictions.patch
  63f4d045-x86-ucode-AMD-apply-early-on-all-threads.patch
  63fe06e0-x86-ucode-AMD-apply-late-on-all-threads.patch
  640f3035-x86-altp2m-help-gcc13.patch
  641041e8-VT-d-constrain-IGD-check.patch
  64104238-bunzip-gcc13.patch
  6419697d-AMD-IOMMU-no-XT-x2APIC-phys.patch
  64199e0c-x86-shadow-account-for-log-dirty-mode.patch
  64199e0d-x86-HVM-bound-number-of-pca-regions.patch
  64199e0e-x86-HVM-serialize-pca-list-manipulation.patch
  64199e0f-x86-spec-ctrl-defer-CR4_PV32_RESTORE-for-CSTAR.patch
  libxl.fix-guest-kexec-skip-cpuid-policy.patch
  xsa430.patch</changelog>
  <changelog author="carnold@suse.com" date="1682683200">- bsc#1209237 - xen-syms doesn't contain debug-info
  643e3810-CONFIG_DEBUG_INFO-no-EXPERT.patch
  643e387f-xen-update-CONFIG_DEBUG_INFO-help-text.patch
  6447a8fd-x86-EFI-permit-crash-dump-analysis.patch</changelog>
  <changelog author="carnold@suse.com" date="1683201600">- bsc#1210570 - gcc-13 realloc use-after-free analysis error
  64525c61-tools-libs-guest-assist-gcc13s-realloc-analyzer.patch</changelog>
  <changelog author="carnold@suse.com" date="1684756800">- bsc#1211433 - VUL-0: CVE-2022-42336: xen: Mishandling of guest
  SSBD selection on AMD hardware (XSA-431)
  64639e84-amd-fix-legacy-setting-of-SSBD-on-AMD-Family-17h.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1688644800">- Upstream bug fixes (bsc#1027519)
  645dec48-AMD-IOMMU-assert-boolean-enum.patch
  646b782b-PCI-pci_get_pdev-respect-segment.patch
  647dfb0e-x86-missing-unlock-in-microcode_update_helper.patch
  648863fc-AMD-IOMMU-Invalidate-All-check.patch</changelog>
  <changelog author="carnold@suse.com" date="1690286400">- bsc#1213616 - VUL-0: CVE-2023-20593: xen: x86/AMD: Zenbleed
  (XSA-433)
  64bea1b2-x86-AMD-Zenbleed.patch</changelog>
  <changelog author="ohering@suse.de" date="1690545600">- Add more debug to libxc-sr-track-migration-time.patch
  This is supposed to help with doing the math in case xl restore
  fails with ERANGE as reported in bug#1209311</changelog>
  <changelog author="ohering@suse.de" date="1690891200">- Handle potential off-by-one errors in libxc-sr-xg_sr_bitmap.patch
  A bit is an index in bitmap, while bits is the allocated size
  of the bitmap.</changelog>
  <changelog author="carnold@suse.com" date="1691496000">- Update to Xen 4.17.2 bug fix release (bsc#1027519)
  xen-4.17.2-testing-src.tar.bz2
  * No upstream changelog found in sources or webpage
- bsc#1214082 - VUL-0: CVE-2023-20569: xen: x86/AMD: Speculative
  Return Stack Overflow (XSA-434)
- bsc#1214083 - VUL-0: CVE-2022-40982: xen: x86/Intel: Gather Data
  Sampling (XSA-435)
- Dropped patches contained in new tarball
  64525c61-tools-libs-guest-assist-gcc13s-realloc-analyzer.patch
  645dec48-AMD-IOMMU-assert-boolean-enum.patch
  64639e84-amd-fix-legacy-setting-of-SSBD-on-AMD-Family-17h.patch
  646b782b-PCI-pci_get_pdev-respect-segment.patch
  647dfb0e-x86-missing-unlock-in-microcode_update_helper.patch
  648863fc-AMD-IOMMU-Invalidate-All-check.patch
  64bea1b2-x86-AMD-Zenbleed.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1691668800">- bsc#1212684 - xentop fails with long interface name
  64d33a57-libxenstat-Linux-nul-terminate-string.patch</changelog>
  <changelog author="ohering@suse.de" date="1691928000">- Handle potential unaligned access to bitmap in
  libxc-sr-restore-hvm-legacy-superpage.patch
  If setting BITS_PER_LONG at once, the initial bit must be aligned</changelog>
  <changelog author="carnold@suse.com" date="1694174400">- bsc#1215145 - VUL-0: CVE-2023-34322: xen: top-level shadow
  reference dropped too early for 64-bit PV guests (XSA-438)
  xsa438.patch</changelog>
  <changelog author="carnold@suse.com" date="1695038400">- bsc#1215474 - VUL-0: CVE-2023-20588: xen: AMD CPU transitional
  execution leak via division by zero (XSA-439)
  xsa439-00.patch
  xsa439-01.patch
  xsa439-02.patch
  xsa439-03.patch
  xsa439-04.patch
  xsa439-05.patch
  xsa439-06.patch
  xsa439-07.patch
  xsa439-08.patch
  xsa439-09.patch</changelog>
  <changelog author="carnold@suse.com" date="1695816000">- bsc#1215744 - VUL-0: CVE-2023-34323: xen: xenstored: A
  transaction conflict can crash C Xenstored (XSA-440)
  xsa440.patch
- bsc#1215746 - VUL-0: CVE-2023-34326: xen: x86/AMD: missing IOMMU
  TLB flushing (XSA-442)
  xsa442.patch
- bsc#1215747 - VUL-0: CVE-2023-34325: xen: Multiple
  vulnerabilities in libfsimage disk handling (XSA-443)
  xsa443-01.patch
  xsa443-02.patch
  xsa443-03.patch
  xsa443-04.patch
  xsa443-05.patch
  xsa443-06.patch
  xsa443-07.patch
  xsa443-08.patch
  xsa443-09.patch
  xsa443-10.patch
  xsa443-11.patch
- bsc#1215748 - VUL-0: CVE-2023-34327,CVE-2023-34328: xen: x86/AMD:
  Debug Mask handling (XSA-444)
  xsa444-1.patch
  xsa444-2.patch</changelog>
</package>
<package pkgid="b5c74f0f61919c38df74dc3f5518e7f91c41fc1d5a66d59dcb6d9de7d3c54f2f" name="xen" arch="src">
  <version epoch="0" ver="4.17.2_08" rel="150500.3.15.1"/>
  <changelog author="jbeulich@suse.com" date="1679572800">- Upstream bug fixes (bsc#1027519)
  63a03b73-VMX-VMExit-based-BusLock-detection.patch
  63a03ba6-VMX-INTR_SHADOW_NMI-helper.patch
  63a03bce-VMX-Notify-VMExit.patch
  63e53ac9-x86-CPUID-leaves-7-1-ecx-edx.patch
  63e53ac9-x86-disable-CET-SS-when-fractured-updates.patch
  63f4d045-x86-ucode-AMD-apply-early-on-all-threads.patch
  63fe06e0-x86-ucode-AMD-apply-late-on-all-threads.patch
  641041e8-VT-d-constrain-IGD-check.patch
  6419697d-AMD-IOMMU-no-XT-x2APIC-phys.patch
- Use "proper" upstream backports:
  640f3035-x86-altp2m-help-gcc13.patch
  64104238-bunzip-gcc13.patch
  64199e0c-x86-shadow-account-for-log-dirty-mode.patch
  64199e0d-x86-HVM-bound-number-of-pca-regions.patch
  64199e0e-x86-HVM-serialize-pca-list-manipulation.patch
  64199e0f-x86-spec-ctrl-defer-CR4_PV32_RESTORE-for-CSTAR.patch
- ... in place of:
  bunzip-gcc13.patch
  altp2m-gcc13.patch
  xsa427.patch
  xsa428-1.patch
  xsa428-2.patch
  xsa429.patch</changelog>
  <changelog author="carnold@suse.com" date="1680264000">- Not building the shim is correctly handled by --disable-pvshim
  Drop disable-building-pv-shim.patch</changelog>
  <changelog author="carnold@suse.com" date="1681214400">- bsc#1210315 - VUL-0: CVE-2022-42335: xen: x86 shadow paging
  arbitrary pointer dereference (XSA-430)
  xsa430.patch</changelog>
  <changelog author="carnold@suse.com" date="1682596800">- Update to Xen 4.17.1 bug fix release (bsc#1027519)
  xen-4.17.1-testing-src.tar.bz2
  * No upstream changelog found in sources or webpage
- Dropped patches contained in new tarball
  63a03b73-VMX-VMExit-based-BusLock-detection.patch
  63a03ba6-VMX-INTR_SHADOW_NMI-helper.patch
  63a03bce-VMX-Notify-VMExit.patch
  63a03e28-x86-high-freq-TSC-overflow.patch
  63c05478-VMX-calculate-model-specific-LBRs-once.patch
  63c05478-VMX-support-CPUs-without-model-specific-LBR.patch
  63d24e91-tools-xenstore-revert-simplify-loop-handling.patch
  63e53ac9-x86-CPUID-leaves-7-1-ecx-edx.patch
  63e53ac9-x86-disable-CET-SS-when-fractured-updates.patch
  63ebca9c-x86-spec-ctrl-Mitigate-Cross-Thread-Return-Address-Predictions.patch
  63f4d045-x86-ucode-AMD-apply-early-on-all-threads.patch
  63fe06e0-x86-ucode-AMD-apply-late-on-all-threads.patch
  640f3035-x86-altp2m-help-gcc13.patch
  641041e8-VT-d-constrain-IGD-check.patch
  64104238-bunzip-gcc13.patch
  6419697d-AMD-IOMMU-no-XT-x2APIC-phys.patch
  64199e0c-x86-shadow-account-for-log-dirty-mode.patch
  64199e0d-x86-HVM-bound-number-of-pca-regions.patch
  64199e0e-x86-HVM-serialize-pca-list-manipulation.patch
  64199e0f-x86-spec-ctrl-defer-CR4_PV32_RESTORE-for-CSTAR.patch
  libxl.fix-guest-kexec-skip-cpuid-policy.patch
  xsa430.patch</changelog>
  <changelog author="carnold@suse.com" date="1682683200">- bsc#1209237 - xen-syms doesn't contain debug-info
  643e3810-CONFIG_DEBUG_INFO-no-EXPERT.patch
  643e387f-xen-update-CONFIG_DEBUG_INFO-help-text.patch
  6447a8fd-x86-EFI-permit-crash-dump-analysis.patch</changelog>
  <changelog author="carnold@suse.com" date="1683201600">- bsc#1210570 - gcc-13 realloc use-after-free analysis error
  64525c61-tools-libs-guest-assist-gcc13s-realloc-analyzer.patch</changelog>
  <changelog author="carnold@suse.com" date="1684756800">- bsc#1211433 - VUL-0: CVE-2022-42336: xen: Mishandling of guest
  SSBD selection on AMD hardware (XSA-431)
  64639e84-amd-fix-legacy-setting-of-SSBD-on-AMD-Family-17h.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1688644800">- Upstream bug fixes (bsc#1027519)
  645dec48-AMD-IOMMU-assert-boolean-enum.patch
  646b782b-PCI-pci_get_pdev-respect-segment.patch
  647dfb0e-x86-missing-unlock-in-microcode_update_helper.patch
  648863fc-AMD-IOMMU-Invalidate-All-check.patch</changelog>
  <changelog author="carnold@suse.com" date="1690286400">- bsc#1213616 - VUL-0: CVE-2023-20593: xen: x86/AMD: Zenbleed
  (XSA-433)
  64bea1b2-x86-AMD-Zenbleed.patch</changelog>
  <changelog author="ohering@suse.de" date="1690545600">- Add more debug to libxc-sr-track-migration-time.patch
  This is supposed to help with doing the math in case xl restore
  fails with ERANGE as reported in bug#1209311</changelog>
  <changelog author="ohering@suse.de" date="1690891200">- Handle potential off-by-one errors in libxc-sr-xg_sr_bitmap.patch
  A bit is an index in bitmap, while bits is the allocated size
  of the bitmap.</changelog>
  <changelog author="carnold@suse.com" date="1691496000">- Update to Xen 4.17.2 bug fix release (bsc#1027519)
  xen-4.17.2-testing-src.tar.bz2
  * No upstream changelog found in sources or webpage
- bsc#1214082 - VUL-0: CVE-2023-20569: xen: x86/AMD: Speculative
  Return Stack Overflow (XSA-434)
- bsc#1214083 - VUL-0: CVE-2022-40982: xen: x86/Intel: Gather Data
  Sampling (XSA-435)
- Dropped patches contained in new tarball
  64525c61-tools-libs-guest-assist-gcc13s-realloc-analyzer.patch
  645dec48-AMD-IOMMU-assert-boolean-enum.patch
  64639e84-amd-fix-legacy-setting-of-SSBD-on-AMD-Family-17h.patch
  646b782b-PCI-pci_get_pdev-respect-segment.patch
  647dfb0e-x86-missing-unlock-in-microcode_update_helper.patch
  648863fc-AMD-IOMMU-Invalidate-All-check.patch
  64bea1b2-x86-AMD-Zenbleed.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1691668800">- bsc#1212684 - xentop fails with long interface name
  64d33a57-libxenstat-Linux-nul-terminate-string.patch</changelog>
  <changelog author="ohering@suse.de" date="1691928000">- Handle potential unaligned access to bitmap in
  libxc-sr-restore-hvm-legacy-superpage.patch
  If setting BITS_PER_LONG at once, the initial bit must be aligned</changelog>
  <changelog author="carnold@suse.com" date="1694174400">- bsc#1215145 - VUL-0: CVE-2023-34322: xen: top-level shadow
  reference dropped too early for 64-bit PV guests (XSA-438)
  xsa438.patch</changelog>
  <changelog author="carnold@suse.com" date="1695038400">- bsc#1215474 - VUL-0: CVE-2023-20588: xen: AMD CPU transitional
  execution leak via division by zero (XSA-439)
  xsa439-00.patch
  xsa439-01.patch
  xsa439-02.patch
  xsa439-03.patch
  xsa439-04.patch
  xsa439-05.patch
  xsa439-06.patch
  xsa439-07.patch
  xsa439-08.patch
  xsa439-09.patch</changelog>
  <changelog author="carnold@suse.com" date="1695816000">- bsc#1215744 - VUL-0: CVE-2023-34323: xen: xenstored: A
  transaction conflict can crash C Xenstored (XSA-440)
  xsa440.patch
- bsc#1215746 - VUL-0: CVE-2023-34326: xen: x86/AMD: missing IOMMU
  TLB flushing (XSA-442)
  xsa442.patch
- bsc#1215747 - VUL-0: CVE-2023-34325: xen: Multiple
  vulnerabilities in libfsimage disk handling (XSA-443)
  xsa443-01.patch
  xsa443-02.patch
  xsa443-03.patch
  xsa443-04.patch
  xsa443-05.patch
  xsa443-06.patch
  xsa443-07.patch
  xsa443-08.patch
  xsa443-09.patch
  xsa443-10.patch
  xsa443-11.patch
- bsc#1215748 - VUL-0: CVE-2023-34327,CVE-2023-34328: xen: x86/AMD:
  Debug Mask handling (XSA-444)
  xsa444-1.patch
  xsa444-2.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1697544000">- bsc#1215145 - VUL-0: CVE-2023-34322: xen: top-level shadow
  reference dropped too early for 64-bit PV guests (XSA-438)
  650abbfe-x86-shadow-defer-PV-top-level-release.patch
- bsc#1215474 - VUL-0: CVE-2023-20588: xen: AMD CPU transitional
  execution leak via division by zero (XSA-439)
  64e5b4ac-x86-AMD-extend-Zenbleed-check.patch
  65087000-x86-spec-ctrl-SPEC_CTRL_EXIT_TO_XEN-confusion.patch
  65087001-x86-spec-ctrl-fold-DO_SPEC_CTRL_EXIT_TO_XEN.patch
  65087002-x86-spec-ctrl-SPEC_CTRL-ENTRY-EXIT-asm-macros.patch
  65087003-x86-spec-ctrl-SPEC_CTRL-ENTER-EXIT-comments.patch
  65087004-x86-entry-restore_all_xen-stack_end.patch
  65087005-x86-entry-track-IST-ness-of-entry.patch
  65087006-x86-spec-ctrl-VERW-on-IST-exit-to-Xen.patch
  65087007-x86-AMD-Zen-1-2-predicates.patch
  65087008-x86-spec-ctrl-Zen1-DIV-leakage.patch
- bsc#1215746 - VUL-0: CVE-2023-34326: xen: x86/AMD: missing IOMMU
  TLB flushing (XSA-442)
  65263470-AMD-IOMMU-flush-TLB-when-flushing-DTE.patch
- bsc#1215747 - VUL-0: CVE-2023-34325: xen: Multiple
  vulnerabilities in libfsimage disk handling (XSA-443)
  65263471-libfsimage-xfs-remove-dead-code.patch
  65263472-libfsimage-xfs-amend-mask32lo.patch
  65263473-libfsimage-xfs-sanity-check-superblock.patch
  65263474-libfsimage-xfs-compile-time-check.patch
  65263475-pygrub-remove-unnecessary-hypercall.patch
  65263476-pygrub-small-refactors.patch
  65263477-pygrub-open-output-files-earlier.patch
  65263478-libfsimage-function-to-preload-plugins.patch
  65263479-pygrub-deprivilege.patch
  6526347a-libxl-allow-bootloader-restricted-mode.patch
  6526347b-libxl-limit-bootloader-when-restricted.patch
- bsc#1215748 - VUL-0: CVE-2023-34327,CVE-2023-34328: xen: x86/AMD:
  Debug Mask handling (XSA-444)
  6526347c-SVM-fix-AMD-DR-MASK-context-switch-asymmetry.patch
  6526347d-x86-PV-auditing-of-guest-breakpoints.patch
- Upstream bug fixes (bsc#1027519)
  64e6459b-revert-VMX-sanitize-rIP-before-reentering.patch
  64eef7e9-x86-reporting-spurious-i8259-interrupts.patch
  64f71f50-Arm-handle-cache-flush-at-top.patch
  65084ba5-x86-AMD-dont-expose-TscFreqSel.patch
- Patches dropped / replaced by newer upstream versions
  xsa438.patch
  xsa439-00.patch
  xsa439-01.patch
  xsa439-02.patch
  xsa439-03.patch
  xsa439-04.patch
  xsa439-05.patch
  xsa439-06.patch
  xsa439-07.patch
  xsa439-08.patch
  xsa439-09.patch
  xsa442.patch
  xsa443-01.patch
  xsa443-02.patch
  xsa443-03.patch
  xsa443-04.patch
  xsa443-05.patch
  xsa443-06.patch
  xsa443-07.patch
  xsa443-08.patch
  xsa443-09.patch
  xsa443-10.patch
  xsa443-11.patch
  xsa444-1.patch
  xsa444-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1698408000">- bsc#1216654 - VUL-0: CVE-2023-46835: xen: x86/AMD: mismatch in
  IOMMU quarantine page table levels (XSA-445)
  xsa445.patch</changelog>
  <changelog author="carnold@suse.com" date="1698926400">- bsc#1216807 - VUL-0: CVE-2023-46836: xen: x86: BTC/SRSO fixes not
  fully effective (XSA-446)
  xsa446.patch</changelog>
</package>
<package pkgid="5e959111aa49d2ee62fb4f57be154ed39210d3ce0d4fabe707bea713206f0e3a" name="xen" arch="src">
  <version epoch="0" ver="4.17.3_02" rel="150500.3.18.1"/>
  <changelog author="carnold@suse.com" date="1681214400">- bsc#1210315 - VUL-0: CVE-2022-42335: xen: x86 shadow paging
  arbitrary pointer dereference (XSA-430)
  xsa430.patch</changelog>
  <changelog author="carnold@suse.com" date="1682596800">- Update to Xen 4.17.1 bug fix release (bsc#1027519)
  xen-4.17.1-testing-src.tar.bz2
  * No upstream changelog found in sources or webpage
- Dropped patches contained in new tarball
  63a03b73-VMX-VMExit-based-BusLock-detection.patch
  63a03ba6-VMX-INTR_SHADOW_NMI-helper.patch
  63a03bce-VMX-Notify-VMExit.patch
  63a03e28-x86-high-freq-TSC-overflow.patch
  63c05478-VMX-calculate-model-specific-LBRs-once.patch
  63c05478-VMX-support-CPUs-without-model-specific-LBR.patch
  63d24e91-tools-xenstore-revert-simplify-loop-handling.patch
  63e53ac9-x86-CPUID-leaves-7-1-ecx-edx.patch
  63e53ac9-x86-disable-CET-SS-when-fractured-updates.patch
  63ebca9c-x86-spec-ctrl-Mitigate-Cross-Thread-Return-Address-Predictions.patch
  63f4d045-x86-ucode-AMD-apply-early-on-all-threads.patch
  63fe06e0-x86-ucode-AMD-apply-late-on-all-threads.patch
  640f3035-x86-altp2m-help-gcc13.patch
  641041e8-VT-d-constrain-IGD-check.patch
  64104238-bunzip-gcc13.patch
  6419697d-AMD-IOMMU-no-XT-x2APIC-phys.patch
  64199e0c-x86-shadow-account-for-log-dirty-mode.patch
  64199e0d-x86-HVM-bound-number-of-pca-regions.patch
  64199e0e-x86-HVM-serialize-pca-list-manipulation.patch
  64199e0f-x86-spec-ctrl-defer-CR4_PV32_RESTORE-for-CSTAR.patch
  libxl.fix-guest-kexec-skip-cpuid-policy.patch
  xsa430.patch</changelog>
  <changelog author="carnold@suse.com" date="1682683200">- bsc#1209237 - xen-syms doesn't contain debug-info
  643e3810-CONFIG_DEBUG_INFO-no-EXPERT.patch
  643e387f-xen-update-CONFIG_DEBUG_INFO-help-text.patch
  6447a8fd-x86-EFI-permit-crash-dump-analysis.patch</changelog>
  <changelog author="carnold@suse.com" date="1683201600">- bsc#1210570 - gcc-13 realloc use-after-free analysis error
  64525c61-tools-libs-guest-assist-gcc13s-realloc-analyzer.patch</changelog>
  <changelog author="carnold@suse.com" date="1684756800">- bsc#1211433 - VUL-0: CVE-2022-42336: xen: Mishandling of guest
  SSBD selection on AMD hardware (XSA-431)
  64639e84-amd-fix-legacy-setting-of-SSBD-on-AMD-Family-17h.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1688644800">- Upstream bug fixes (bsc#1027519)
  645dec48-AMD-IOMMU-assert-boolean-enum.patch
  646b782b-PCI-pci_get_pdev-respect-segment.patch
  647dfb0e-x86-missing-unlock-in-microcode_update_helper.patch
  648863fc-AMD-IOMMU-Invalidate-All-check.patch</changelog>
  <changelog author="carnold@suse.com" date="1690286400">- bsc#1213616 - VUL-0: CVE-2023-20593: xen: x86/AMD: Zenbleed
  (XSA-433)
  64bea1b2-x86-AMD-Zenbleed.patch</changelog>
  <changelog author="ohering@suse.de" date="1690545600">- Add more debug to libxc-sr-track-migration-time.patch
  This is supposed to help with doing the math in case xl restore
  fails with ERANGE as reported in bug#1209311</changelog>
  <changelog author="ohering@suse.de" date="1690891200">- Handle potential off-by-one errors in libxc-sr-xg_sr_bitmap.patch
  A bit is an index in bitmap, while bits is the allocated size
  of the bitmap.</changelog>
  <changelog author="carnold@suse.com" date="1691496000">- Update to Xen 4.17.2 bug fix release (bsc#1027519)
  xen-4.17.2-testing-src.tar.bz2
  * No upstream changelog found in sources or webpage
- bsc#1214082 - VUL-0: CVE-2023-20569: xen: x86/AMD: Speculative
  Return Stack Overflow (XSA-434)
- bsc#1214083 - VUL-0: CVE-2022-40982: xen: x86/Intel: Gather Data
  Sampling (XSA-435)
- Dropped patches contained in new tarball
  64525c61-tools-libs-guest-assist-gcc13s-realloc-analyzer.patch
  645dec48-AMD-IOMMU-assert-boolean-enum.patch
  64639e84-amd-fix-legacy-setting-of-SSBD-on-AMD-Family-17h.patch
  646b782b-PCI-pci_get_pdev-respect-segment.patch
  647dfb0e-x86-missing-unlock-in-microcode_update_helper.patch
  648863fc-AMD-IOMMU-Invalidate-All-check.patch
  64bea1b2-x86-AMD-Zenbleed.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1691668800">- bsc#1212684 - xentop fails with long interface name
  64d33a57-libxenstat-Linux-nul-terminate-string.patch</changelog>
  <changelog author="ohering@suse.de" date="1691928000">- Handle potential unaligned access to bitmap in
  libxc-sr-restore-hvm-legacy-superpage.patch
  If setting BITS_PER_LONG at once, the initial bit must be aligned</changelog>
  <changelog author="carnold@suse.com" date="1694174400">- bsc#1215145 - VUL-0: CVE-2023-34322: xen: top-level shadow
  reference dropped too early for 64-bit PV guests (XSA-438)
  xsa438.patch</changelog>
  <changelog author="carnold@suse.com" date="1695038400">- bsc#1215474 - VUL-0: CVE-2023-20588: xen: AMD CPU transitional
  execution leak via division by zero (XSA-439)
  xsa439-00.patch
  xsa439-01.patch
  xsa439-02.patch
  xsa439-03.patch
  xsa439-04.patch
  xsa439-05.patch
  xsa439-06.patch
  xsa439-07.patch
  xsa439-08.patch
  xsa439-09.patch</changelog>
  <changelog author="carnold@suse.com" date="1695816000">- bsc#1215744 - VUL-0: CVE-2023-34323: xen: xenstored: A
  transaction conflict can crash C Xenstored (XSA-440)
  xsa440.patch
- bsc#1215746 - VUL-0: CVE-2023-34326: xen: x86/AMD: missing IOMMU
  TLB flushing (XSA-442)
  xsa442.patch
- bsc#1215747 - VUL-0: CVE-2023-34325: xen: Multiple
  vulnerabilities in libfsimage disk handling (XSA-443)
  xsa443-01.patch
  xsa443-02.patch
  xsa443-03.patch
  xsa443-04.patch
  xsa443-05.patch
  xsa443-06.patch
  xsa443-07.patch
  xsa443-08.patch
  xsa443-09.patch
  xsa443-10.patch
  xsa443-11.patch
- bsc#1215748 - VUL-0: CVE-2023-34327,CVE-2023-34328: xen: x86/AMD:
  Debug Mask handling (XSA-444)
  xsa444-1.patch
  xsa444-2.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1697544000">- bsc#1215145 - VUL-0: CVE-2023-34322: xen: top-level shadow
  reference dropped too early for 64-bit PV guests (XSA-438)
  650abbfe-x86-shadow-defer-PV-top-level-release.patch
- bsc#1215474 - VUL-0: CVE-2023-20588: xen: AMD CPU transitional
  execution leak via division by zero (XSA-439)
  64e5b4ac-x86-AMD-extend-Zenbleed-check.patch
  65087000-x86-spec-ctrl-SPEC_CTRL_EXIT_TO_XEN-confusion.patch
  65087001-x86-spec-ctrl-fold-DO_SPEC_CTRL_EXIT_TO_XEN.patch
  65087002-x86-spec-ctrl-SPEC_CTRL-ENTRY-EXIT-asm-macros.patch
  65087003-x86-spec-ctrl-SPEC_CTRL-ENTER-EXIT-comments.patch
  65087004-x86-entry-restore_all_xen-stack_end.patch
  65087005-x86-entry-track-IST-ness-of-entry.patch
  65087006-x86-spec-ctrl-VERW-on-IST-exit-to-Xen.patch
  65087007-x86-AMD-Zen-1-2-predicates.patch
  65087008-x86-spec-ctrl-Zen1-DIV-leakage.patch
- bsc#1215746 - VUL-0: CVE-2023-34326: xen: x86/AMD: missing IOMMU
  TLB flushing (XSA-442)
  65263470-AMD-IOMMU-flush-TLB-when-flushing-DTE.patch
- bsc#1215747 - VUL-0: CVE-2023-34325: xen: Multiple
  vulnerabilities in libfsimage disk handling (XSA-443)
  65263471-libfsimage-xfs-remove-dead-code.patch
  65263472-libfsimage-xfs-amend-mask32lo.patch
  65263473-libfsimage-xfs-sanity-check-superblock.patch
  65263474-libfsimage-xfs-compile-time-check.patch
  65263475-pygrub-remove-unnecessary-hypercall.patch
  65263476-pygrub-small-refactors.patch
  65263477-pygrub-open-output-files-earlier.patch
  65263478-libfsimage-function-to-preload-plugins.patch
  65263479-pygrub-deprivilege.patch
  6526347a-libxl-allow-bootloader-restricted-mode.patch
  6526347b-libxl-limit-bootloader-when-restricted.patch
- bsc#1215748 - VUL-0: CVE-2023-34327,CVE-2023-34328: xen: x86/AMD:
  Debug Mask handling (XSA-444)
  6526347c-SVM-fix-AMD-DR-MASK-context-switch-asymmetry.patch
  6526347d-x86-PV-auditing-of-guest-breakpoints.patch
- Upstream bug fixes (bsc#1027519)
  64e6459b-revert-VMX-sanitize-rIP-before-reentering.patch
  64eef7e9-x86-reporting-spurious-i8259-interrupts.patch
  64f71f50-Arm-handle-cache-flush-at-top.patch
  65084ba5-x86-AMD-dont-expose-TscFreqSel.patch
- Patches dropped / replaced by newer upstream versions
  xsa438.patch
  xsa439-00.patch
  xsa439-01.patch
  xsa439-02.patch
  xsa439-03.patch
  xsa439-04.patch
  xsa439-05.patch
  xsa439-06.patch
  xsa439-07.patch
  xsa439-08.patch
  xsa439-09.patch
  xsa442.patch
  xsa443-01.patch
  xsa443-02.patch
  xsa443-03.patch
  xsa443-04.patch
  xsa443-05.patch
  xsa443-06.patch
  xsa443-07.patch
  xsa443-08.patch
  xsa443-09.patch
  xsa443-10.patch
  xsa443-11.patch
  xsa444-1.patch
  xsa444-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1698408000">- bsc#1216654 - VUL-0: CVE-2023-46835: xen: x86/AMD: mismatch in
  IOMMU quarantine page table levels (XSA-445)
  xsa445.patch</changelog>
  <changelog author="carnold@suse.com" date="1698926400">- bsc#1216807 - VUL-0: CVE-2023-46836: xen: x86: BTC/SRSO fixes not
  fully effective (XSA-446)
  xsa446.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1700568000">- Upstream bug fixes (bsc#1027519)
  64763137-x86-AutoIBRS-definitions.patch
  652fef4f-x86-AMD-erratum-1485.patch
  65319724-VT-d-SAGAW-parsing.patch
  6532858d-x86-DOITM.patch
  654370e2-x86-x2APIC-remove-ACPI_FADT_APIC_CLUSTER-use.patch
  65437103-x86-i8259-dont-assume-IRQs-always-target-CPU0.patch
  655b2ba9-fix-sched_move_domain.patch
- bsc#1216654 - VUL-0: CVE-2023-46835: xen: x86/AMD: mismatch in
  IOMMU quarantine page table levels (XSA-445)
  65536847-AMD-IOMMU-correct-level-for-quarantine-pt.patch
- bsc#1216807 - VUL-0: CVE-2023-46836: xen: x86: BTC/SRSO fixes not
  fully effective (XSA-446)
  65536848-x86-spec-ctrl-remove-conditional-IRQs-on-ness.patch
- Patches replaced by newer upstream versions
  xsa445.patch
  xsa446.patch</changelog>
  <changelog author="carnold@suse.com" date="1702900800">- Update to Xen 4.17.3 bug fix release (bsc#1027519)
  xen-4.17.3-testing-src.tar.bz2
  * No upstream changelog found in sources or webpage
- Dropped patches contained in new tarball
  64763137-x86-AutoIBRS-definitions.patch
  64e5b4ac-x86-AMD-extend-Zenbleed-check.patch
  64e6459b-revert-VMX-sanitize-rIP-before-reentering.patch
  64eef7e9-x86-reporting-spurious-i8259-interrupts.patch
  64f71f50-Arm-handle-cache-flush-at-top.patch
  65084ba5-x86-AMD-dont-expose-TscFreqSel.patch
  65087000-x86-spec-ctrl-SPEC_CTRL_EXIT_TO_XEN-confusion.patch
  65087001-x86-spec-ctrl-fold-DO_SPEC_CTRL_EXIT_TO_XEN.patch
  65087002-x86-spec-ctrl-SPEC_CTRL-ENTRY-EXIT-asm-macros.patch
  65087003-x86-spec-ctrl-SPEC_CTRL-ENTER-EXIT-comments.patch
  65087004-x86-entry-restore_all_xen-stack_end.patch
  65087005-x86-entry-track-IST-ness-of-entry.patch
  65087006-x86-spec-ctrl-VERW-on-IST-exit-to-Xen.patch
  65087007-x86-AMD-Zen-1-2-predicates.patch
  65087008-x86-spec-ctrl-Zen1-DIV-leakage.patch
  650abbfe-x86-shadow-defer-PV-top-level-release.patch
  65263470-AMD-IOMMU-flush-TLB-when-flushing-DTE.patch
  65263471-libfsimage-xfs-remove-dead-code.patch
  65263472-libfsimage-xfs-amend-mask32lo.patch
  65263473-libfsimage-xfs-sanity-check-superblock.patch
  65263474-libfsimage-xfs-compile-time-check.patch
  65263475-pygrub-remove-unnecessary-hypercall.patch
  65263476-pygrub-small-refactors.patch
  65263477-pygrub-open-output-files-earlier.patch
  65263478-libfsimage-function-to-preload-plugins.patch
  65263479-pygrub-deprivilege.patch
  6526347a-libxl-allow-bootloader-restricted-mode.patch
  6526347b-libxl-limit-bootloader-when-restricted.patch
  6526347c-SVM-fix-AMD-DR-MASK-context-switch-asymmetry.patch
  6526347d-x86-PV-auditing-of-guest-breakpoints.patch
  652fef4f-x86-AMD-erratum-1485.patch
  65319724-VT-d-SAGAW-parsing.patch
  6532858d-x86-DOITM.patch
  654370e2-x86-x2APIC-remove-ACPI_FADT_APIC_CLUSTER-use.patch
  65437103-x86-i8259-dont-assume-IRQs-always-target-CPU0.patch
  65536847-AMD-IOMMU-correct-level-for-quarantine-pt.patch
  65536848-x86-spec-ctrl-remove-conditional-IRQs-on-ness.patch
  655b2ba9-fix-sched_move_domain.patch
  xsa440.patch</changelog>
</package>
<package pkgid="f87d0298e53a8f2df54dab20918c85eddec06394489cbecfb730612089adc60f" name="xen" arch="src">
  <version epoch="0" ver="4.17.3_04" rel="150500.3.21.1"/>
  <changelog author="carnold@suse.com" date="1682683200">- bsc#1209237 - xen-syms doesn't contain debug-info
  643e3810-CONFIG_DEBUG_INFO-no-EXPERT.patch
  643e387f-xen-update-CONFIG_DEBUG_INFO-help-text.patch
  6447a8fd-x86-EFI-permit-crash-dump-analysis.patch</changelog>
  <changelog author="carnold@suse.com" date="1683201600">- bsc#1210570 - gcc-13 realloc use-after-free analysis error
  64525c61-tools-libs-guest-assist-gcc13s-realloc-analyzer.patch</changelog>
  <changelog author="carnold@suse.com" date="1684756800">- bsc#1211433 - VUL-0: CVE-2022-42336: xen: Mishandling of guest
  SSBD selection on AMD hardware (XSA-431)
  64639e84-amd-fix-legacy-setting-of-SSBD-on-AMD-Family-17h.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1688644800">- Upstream bug fixes (bsc#1027519)
  645dec48-AMD-IOMMU-assert-boolean-enum.patch
  646b782b-PCI-pci_get_pdev-respect-segment.patch
  647dfb0e-x86-missing-unlock-in-microcode_update_helper.patch
  648863fc-AMD-IOMMU-Invalidate-All-check.patch</changelog>
  <changelog author="carnold@suse.com" date="1690286400">- bsc#1213616 - VUL-0: CVE-2023-20593: xen: x86/AMD: Zenbleed
  (XSA-433)
  64bea1b2-x86-AMD-Zenbleed.patch</changelog>
  <changelog author="ohering@suse.de" date="1690545600">- Add more debug to libxc-sr-track-migration-time.patch
  This is supposed to help with doing the math in case xl restore
  fails with ERANGE as reported in bug#1209311</changelog>
  <changelog author="ohering@suse.de" date="1690891200">- Handle potential off-by-one errors in libxc-sr-xg_sr_bitmap.patch
  A bit is an index in bitmap, while bits is the allocated size
  of the bitmap.</changelog>
  <changelog author="carnold@suse.com" date="1691496000">- Update to Xen 4.17.2 bug fix release (bsc#1027519)
  xen-4.17.2-testing-src.tar.bz2
  * No upstream changelog found in sources or webpage
- bsc#1214082 - VUL-0: CVE-2023-20569: xen: x86/AMD: Speculative
  Return Stack Overflow (XSA-434)
- bsc#1214083 - VUL-0: CVE-2022-40982: xen: x86/Intel: Gather Data
  Sampling (XSA-435)
- Dropped patches contained in new tarball
  64525c61-tools-libs-guest-assist-gcc13s-realloc-analyzer.patch
  645dec48-AMD-IOMMU-assert-boolean-enum.patch
  64639e84-amd-fix-legacy-setting-of-SSBD-on-AMD-Family-17h.patch
  646b782b-PCI-pci_get_pdev-respect-segment.patch
  647dfb0e-x86-missing-unlock-in-microcode_update_helper.patch
  648863fc-AMD-IOMMU-Invalidate-All-check.patch
  64bea1b2-x86-AMD-Zenbleed.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1691668800">- bsc#1212684 - xentop fails with long interface name
  64d33a57-libxenstat-Linux-nul-terminate-string.patch</changelog>
  <changelog author="ohering@suse.de" date="1691928000">- Handle potential unaligned access to bitmap in
  libxc-sr-restore-hvm-legacy-superpage.patch
  If setting BITS_PER_LONG at once, the initial bit must be aligned</changelog>
  <changelog author="carnold@suse.com" date="1694174400">- bsc#1215145 - VUL-0: CVE-2023-34322: xen: top-level shadow
  reference dropped too early for 64-bit PV guests (XSA-438)
  xsa438.patch</changelog>
  <changelog author="carnold@suse.com" date="1695038400">- bsc#1215474 - VUL-0: CVE-2023-20588: xen: AMD CPU transitional
  execution leak via division by zero (XSA-439)
  xsa439-00.patch
  xsa439-01.patch
  xsa439-02.patch
  xsa439-03.patch
  xsa439-04.patch
  xsa439-05.patch
  xsa439-06.patch
  xsa439-07.patch
  xsa439-08.patch
  xsa439-09.patch</changelog>
  <changelog author="carnold@suse.com" date="1695816000">- bsc#1215744 - VUL-0: CVE-2023-34323: xen: xenstored: A
  transaction conflict can crash C Xenstored (XSA-440)
  xsa440.patch
- bsc#1215746 - VUL-0: CVE-2023-34326: xen: x86/AMD: missing IOMMU
  TLB flushing (XSA-442)
  xsa442.patch
- bsc#1215747 - VUL-0: CVE-2023-34325: xen: Multiple
  vulnerabilities in libfsimage disk handling (XSA-443)
  xsa443-01.patch
  xsa443-02.patch
  xsa443-03.patch
  xsa443-04.patch
  xsa443-05.patch
  xsa443-06.patch
  xsa443-07.patch
  xsa443-08.patch
  xsa443-09.patch
  xsa443-10.patch
  xsa443-11.patch
- bsc#1215748 - VUL-0: CVE-2023-34327,CVE-2023-34328: xen: x86/AMD:
  Debug Mask handling (XSA-444)
  xsa444-1.patch
  xsa444-2.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1697544000">- bsc#1215145 - VUL-0: CVE-2023-34322: xen: top-level shadow
  reference dropped too early for 64-bit PV guests (XSA-438)
  650abbfe-x86-shadow-defer-PV-top-level-release.patch
- bsc#1215474 - VUL-0: CVE-2023-20588: xen: AMD CPU transitional
  execution leak via division by zero (XSA-439)
  64e5b4ac-x86-AMD-extend-Zenbleed-check.patch
  65087000-x86-spec-ctrl-SPEC_CTRL_EXIT_TO_XEN-confusion.patch
  65087001-x86-spec-ctrl-fold-DO_SPEC_CTRL_EXIT_TO_XEN.patch
  65087002-x86-spec-ctrl-SPEC_CTRL-ENTRY-EXIT-asm-macros.patch
  65087003-x86-spec-ctrl-SPEC_CTRL-ENTER-EXIT-comments.patch
  65087004-x86-entry-restore_all_xen-stack_end.patch
  65087005-x86-entry-track-IST-ness-of-entry.patch
  65087006-x86-spec-ctrl-VERW-on-IST-exit-to-Xen.patch
  65087007-x86-AMD-Zen-1-2-predicates.patch
  65087008-x86-spec-ctrl-Zen1-DIV-leakage.patch
- bsc#1215746 - VUL-0: CVE-2023-34326: xen: x86/AMD: missing IOMMU
  TLB flushing (XSA-442)
  65263470-AMD-IOMMU-flush-TLB-when-flushing-DTE.patch
- bsc#1215747 - VUL-0: CVE-2023-34325: xen: Multiple
  vulnerabilities in libfsimage disk handling (XSA-443)
  65263471-libfsimage-xfs-remove-dead-code.patch
  65263472-libfsimage-xfs-amend-mask32lo.patch
  65263473-libfsimage-xfs-sanity-check-superblock.patch
  65263474-libfsimage-xfs-compile-time-check.patch
  65263475-pygrub-remove-unnecessary-hypercall.patch
  65263476-pygrub-small-refactors.patch
  65263477-pygrub-open-output-files-earlier.patch
  65263478-libfsimage-function-to-preload-plugins.patch
  65263479-pygrub-deprivilege.patch
  6526347a-libxl-allow-bootloader-restricted-mode.patch
  6526347b-libxl-limit-bootloader-when-restricted.patch
- bsc#1215748 - VUL-0: CVE-2023-34327,CVE-2023-34328: xen: x86/AMD:
  Debug Mask handling (XSA-444)
  6526347c-SVM-fix-AMD-DR-MASK-context-switch-asymmetry.patch
  6526347d-x86-PV-auditing-of-guest-breakpoints.patch
- Upstream bug fixes (bsc#1027519)
  64e6459b-revert-VMX-sanitize-rIP-before-reentering.patch
  64eef7e9-x86-reporting-spurious-i8259-interrupts.patch
  64f71f50-Arm-handle-cache-flush-at-top.patch
  65084ba5-x86-AMD-dont-expose-TscFreqSel.patch
- Patches dropped / replaced by newer upstream versions
  xsa438.patch
  xsa439-00.patch
  xsa439-01.patch
  xsa439-02.patch
  xsa439-03.patch
  xsa439-04.patch
  xsa439-05.patch
  xsa439-06.patch
  xsa439-07.patch
  xsa439-08.patch
  xsa439-09.patch
  xsa442.patch
  xsa443-01.patch
  xsa443-02.patch
  xsa443-03.patch
  xsa443-04.patch
  xsa443-05.patch
  xsa443-06.patch
  xsa443-07.patch
  xsa443-08.patch
  xsa443-09.patch
  xsa443-10.patch
  xsa443-11.patch
  xsa444-1.patch
  xsa444-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1698408000">- bsc#1216654 - VUL-0: CVE-2023-46835: xen: x86/AMD: mismatch in
  IOMMU quarantine page table levels (XSA-445)
  xsa445.patch</changelog>
  <changelog author="carnold@suse.com" date="1698926400">- bsc#1216807 - VUL-0: CVE-2023-46836: xen: x86: BTC/SRSO fixes not
  fully effective (XSA-446)
  xsa446.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1700568000">- Upstream bug fixes (bsc#1027519)
  64763137-x86-AutoIBRS-definitions.patch
  652fef4f-x86-AMD-erratum-1485.patch
  65319724-VT-d-SAGAW-parsing.patch
  6532858d-x86-DOITM.patch
  654370e2-x86-x2APIC-remove-ACPI_FADT_APIC_CLUSTER-use.patch
  65437103-x86-i8259-dont-assume-IRQs-always-target-CPU0.patch
  655b2ba9-fix-sched_move_domain.patch
- bsc#1216654 - VUL-0: CVE-2023-46835: xen: x86/AMD: mismatch in
  IOMMU quarantine page table levels (XSA-445)
  65536847-AMD-IOMMU-correct-level-for-quarantine-pt.patch
- bsc#1216807 - VUL-0: CVE-2023-46836: xen: x86: BTC/SRSO fixes not
  fully effective (XSA-446)
  65536848-x86-spec-ctrl-remove-conditional-IRQs-on-ness.patch
- Patches replaced by newer upstream versions
  xsa445.patch
  xsa446.patch</changelog>
  <changelog author="carnold@suse.com" date="1702900800">- Update to Xen 4.17.3 bug fix release (bsc#1027519)
  xen-4.17.3-testing-src.tar.bz2
  * No upstream changelog found in sources or webpage
- Dropped patches contained in new tarball
  64763137-x86-AutoIBRS-definitions.patch
  64e5b4ac-x86-AMD-extend-Zenbleed-check.patch
  64e6459b-revert-VMX-sanitize-rIP-before-reentering.patch
  64eef7e9-x86-reporting-spurious-i8259-interrupts.patch
  64f71f50-Arm-handle-cache-flush-at-top.patch
  65084ba5-x86-AMD-dont-expose-TscFreqSel.patch
  65087000-x86-spec-ctrl-SPEC_CTRL_EXIT_TO_XEN-confusion.patch
  65087001-x86-spec-ctrl-fold-DO_SPEC_CTRL_EXIT_TO_XEN.patch
  65087002-x86-spec-ctrl-SPEC_CTRL-ENTRY-EXIT-asm-macros.patch
  65087003-x86-spec-ctrl-SPEC_CTRL-ENTER-EXIT-comments.patch
  65087004-x86-entry-restore_all_xen-stack_end.patch
  65087005-x86-entry-track-IST-ness-of-entry.patch
  65087006-x86-spec-ctrl-VERW-on-IST-exit-to-Xen.patch
  65087007-x86-AMD-Zen-1-2-predicates.patch
  65087008-x86-spec-ctrl-Zen1-DIV-leakage.patch
  650abbfe-x86-shadow-defer-PV-top-level-release.patch
  65263470-AMD-IOMMU-flush-TLB-when-flushing-DTE.patch
  65263471-libfsimage-xfs-remove-dead-code.patch
  65263472-libfsimage-xfs-amend-mask32lo.patch
  65263473-libfsimage-xfs-sanity-check-superblock.patch
  65263474-libfsimage-xfs-compile-time-check.patch
  65263475-pygrub-remove-unnecessary-hypercall.patch
  65263476-pygrub-small-refactors.patch
  65263477-pygrub-open-output-files-earlier.patch
  65263478-libfsimage-function-to-preload-plugins.patch
  65263479-pygrub-deprivilege.patch
  6526347a-libxl-allow-bootloader-restricted-mode.patch
  6526347b-libxl-limit-bootloader-when-restricted.patch
  6526347c-SVM-fix-AMD-DR-MASK-context-switch-asymmetry.patch
  6526347d-x86-PV-auditing-of-guest-breakpoints.patch
  652fef4f-x86-AMD-erratum-1485.patch
  65319724-VT-d-SAGAW-parsing.patch
  6532858d-x86-DOITM.patch
  654370e2-x86-x2APIC-remove-ACPI_FADT_APIC_CLUSTER-use.patch
  65437103-x86-i8259-dont-assume-IRQs-always-target-CPU0.patch
  65536847-AMD-IOMMU-correct-level-for-quarantine-pt.patch
  65536848-x86-spec-ctrl-remove-conditional-IRQs-on-ness.patch
  655b2ba9-fix-sched_move_domain.patch
  xsa440.patch</changelog>
  <changelog author="carnold@suse.com" date="1705406400">- bsc#1218851 - VUL-0: CVE-2023-46839: xen: phantom functions
  assigned to incorrect contexts (XSA-449)
  xsa449.patch</changelog>
  <changelog author="carnold@suse.com" date="1706011200">- bsc#1219080 - VUL-0: CVE-2023-46840: xen: VT-d: Failure to
  quarantine devices in !HVM builds (XSA-450)
  xsa450.patch</changelog>
</package>
<package pkgid="48b21b588a6a119a31fcb49a5dd3eae3e061984bf045ef85817cac04d583eb45" name="xen-libs" arch="x86_64">
  <version epoch="0" ver="4.17.2_06" rel="150500.3.12.1"/>
  <changelog author="carnold@suse.com" date="1677758400">- bsc#1208736 - GCC 13: xen package fails
  bunzip-gcc13.patch
  altp2m-gcc13.patch
- Drop gcc13-fixes.patch</changelog>
  <changelog author="carnold@suse.com" date="1678190400">- bsc#1209017 - VUL-0: CVE-2022-42332: xen: x86 shadow plus
  log-dirty mode use-after-free (XSA-427)
  xsa427.patch
- bsc#1209018 - VUL-0: CVE-2022-42333,CVE-2022-42334: xen: x86/HVM
  pinned cache attributes mis-handling (XSA-428)
  xsa428-1.patch
  xsa428-2.patch
- bsc#1209019 - VUL-0: CVE-2022-42331: xen: x86: speculative
  vulnerability in 32bit SYSCALL path (XSA-429)
  xsa429.patch</changelog>
  <changelog author="ohering@suse.de" date="1678968000">- bsc#1209245 - fix host-assisted kexec/kdump for HVM domUs
  libxl.fix-guest-kexec-skip-cpuid-policy.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1679572800">- Upstream bug fixes (bsc#1027519)
  63a03b73-VMX-VMExit-based-BusLock-detection.patch
  63a03ba6-VMX-INTR_SHADOW_NMI-helper.patch
  63a03bce-VMX-Notify-VMExit.patch
  63e53ac9-x86-CPUID-leaves-7-1-ecx-edx.patch
  63e53ac9-x86-disable-CET-SS-when-fractured-updates.patch
  63f4d045-x86-ucode-AMD-apply-early-on-all-threads.patch
  63fe06e0-x86-ucode-AMD-apply-late-on-all-threads.patch
  641041e8-VT-d-constrain-IGD-check.patch
  6419697d-AMD-IOMMU-no-XT-x2APIC-phys.patch
- Use "proper" upstream backports:
  640f3035-x86-altp2m-help-gcc13.patch
  64104238-bunzip-gcc13.patch
  64199e0c-x86-shadow-account-for-log-dirty-mode.patch
  64199e0d-x86-HVM-bound-number-of-pca-regions.patch
  64199e0e-x86-HVM-serialize-pca-list-manipulation.patch
  64199e0f-x86-spec-ctrl-defer-CR4_PV32_RESTORE-for-CSTAR.patch
- ... in place of:
  bunzip-gcc13.patch
  altp2m-gcc13.patch
  xsa427.patch
  xsa428-1.patch
  xsa428-2.patch
  xsa429.patch</changelog>
  <changelog author="carnold@suse.com" date="1680264000">- Not building the shim is correctly handled by --disable-pvshim
  Drop disable-building-pv-shim.patch</changelog>
  <changelog author="carnold@suse.com" date="1681214400">- bsc#1210315 - VUL-0: CVE-2022-42335: xen: x86 shadow paging
  arbitrary pointer dereference (XSA-430)
  xsa430.patch</changelog>
  <changelog author="carnold@suse.com" date="1682596800">- Update to Xen 4.17.1 bug fix release (bsc#1027519)
  xen-4.17.1-testing-src.tar.bz2
  * No upstream changelog found in sources or webpage
- Dropped patches contained in new tarball
  63a03b73-VMX-VMExit-based-BusLock-detection.patch
  63a03ba6-VMX-INTR_SHADOW_NMI-helper.patch
  63a03bce-VMX-Notify-VMExit.patch
  63a03e28-x86-high-freq-TSC-overflow.patch
  63c05478-VMX-calculate-model-specific-LBRs-once.patch
  63c05478-VMX-support-CPUs-without-model-specific-LBR.patch
  63d24e91-tools-xenstore-revert-simplify-loop-handling.patch
  63e53ac9-x86-CPUID-leaves-7-1-ecx-edx.patch
  63e53ac9-x86-disable-CET-SS-when-fractured-updates.patch
  63ebca9c-x86-spec-ctrl-Mitigate-Cross-Thread-Return-Address-Predictions.patch
  63f4d045-x86-ucode-AMD-apply-early-on-all-threads.patch
  63fe06e0-x86-ucode-AMD-apply-late-on-all-threads.patch
  640f3035-x86-altp2m-help-gcc13.patch
  641041e8-VT-d-constrain-IGD-check.patch
  64104238-bunzip-gcc13.patch
  6419697d-AMD-IOMMU-no-XT-x2APIC-phys.patch
  64199e0c-x86-shadow-account-for-log-dirty-mode.patch
  64199e0d-x86-HVM-bound-number-of-pca-regions.patch
  64199e0e-x86-HVM-serialize-pca-list-manipulation.patch
  64199e0f-x86-spec-ctrl-defer-CR4_PV32_RESTORE-for-CSTAR.patch
  libxl.fix-guest-kexec-skip-cpuid-policy.patch
  xsa430.patch</changelog>
  <changelog author="carnold@suse.com" date="1682683200">- bsc#1209237 - xen-syms doesn't contain debug-info
  643e3810-CONFIG_DEBUG_INFO-no-EXPERT.patch
  643e387f-xen-update-CONFIG_DEBUG_INFO-help-text.patch
  6447a8fd-x86-EFI-permit-crash-dump-analysis.patch</changelog>
  <changelog author="carnold@suse.com" date="1683201600">- bsc#1210570 - gcc-13 realloc use-after-free analysis error
  64525c61-tools-libs-guest-assist-gcc13s-realloc-analyzer.patch</changelog>
  <changelog author="carnold@suse.com" date="1684756800">- bsc#1211433 - VUL-0: CVE-2022-42336: xen: Mishandling of guest
  SSBD selection on AMD hardware (XSA-431)
  64639e84-amd-fix-legacy-setting-of-SSBD-on-AMD-Family-17h.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1688644800">- Upstream bug fixes (bsc#1027519)
  645dec48-AMD-IOMMU-assert-boolean-enum.patch
  646b782b-PCI-pci_get_pdev-respect-segment.patch
  647dfb0e-x86-missing-unlock-in-microcode_update_helper.patch
  648863fc-AMD-IOMMU-Invalidate-All-check.patch</changelog>
  <changelog author="carnold@suse.com" date="1690286400">- bsc#1213616 - VUL-0: CVE-2023-20593: xen: x86/AMD: Zenbleed
  (XSA-433)
  64bea1b2-x86-AMD-Zenbleed.patch</changelog>
  <changelog author="ohering@suse.de" date="1690545600">- Add more debug to libxc-sr-track-migration-time.patch
  This is supposed to help with doing the math in case xl restore
  fails with ERANGE as reported in bug#1209311</changelog>
  <changelog author="ohering@suse.de" date="1690891200">- Handle potential off-by-one errors in libxc-sr-xg_sr_bitmap.patch
  A bit is an index in bitmap, while bits is the allocated size
  of the bitmap.</changelog>
  <changelog author="carnold@suse.com" date="1691496000">- Update to Xen 4.17.2 bug fix release (bsc#1027519)
  xen-4.17.2-testing-src.tar.bz2
  * No upstream changelog found in sources or webpage
- bsc#1214082 - VUL-0: CVE-2023-20569: xen: x86/AMD: Speculative
  Return Stack Overflow (XSA-434)
- bsc#1214083 - VUL-0: CVE-2022-40982: xen: x86/Intel: Gather Data
  Sampling (XSA-435)
- Dropped patches contained in new tarball
  64525c61-tools-libs-guest-assist-gcc13s-realloc-analyzer.patch
  645dec48-AMD-IOMMU-assert-boolean-enum.patch
  64639e84-amd-fix-legacy-setting-of-SSBD-on-AMD-Family-17h.patch
  646b782b-PCI-pci_get_pdev-respect-segment.patch
  647dfb0e-x86-missing-unlock-in-microcode_update_helper.patch
  648863fc-AMD-IOMMU-Invalidate-All-check.patch
  64bea1b2-x86-AMD-Zenbleed.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1691668800">- bsc#1212684 - xentop fails with long interface name
  64d33a57-libxenstat-Linux-nul-terminate-string.patch</changelog>
  <changelog author="ohering@suse.de" date="1691928000">- Handle potential unaligned access to bitmap in
  libxc-sr-restore-hvm-legacy-superpage.patch
  If setting BITS_PER_LONG at once, the initial bit must be aligned</changelog>
  <changelog author="carnold@suse.com" date="1694174400">- bsc#1215145 - VUL-0: CVE-2023-34322: xen: top-level shadow
  reference dropped too early for 64-bit PV guests (XSA-438)
  xsa438.patch</changelog>
  <changelog author="carnold@suse.com" date="1695038400">- bsc#1215474 - VUL-0: CVE-2023-20588: xen: AMD CPU transitional
  execution leak via division by zero (XSA-439)
  xsa439-00.patch
  xsa439-01.patch
  xsa439-02.patch
  xsa439-03.patch
  xsa439-04.patch
  xsa439-05.patch
  xsa439-06.patch
  xsa439-07.patch
  xsa439-08.patch
  xsa439-09.patch</changelog>
  <changelog author="carnold@suse.com" date="1695816000">- bsc#1215744 - VUL-0: CVE-2023-34323: xen: xenstored: A
  transaction conflict can crash C Xenstored (XSA-440)
  xsa440.patch
- bsc#1215746 - VUL-0: CVE-2023-34326: xen: x86/AMD: missing IOMMU
  TLB flushing (XSA-442)
  xsa442.patch
- bsc#1215747 - VUL-0: CVE-2023-34325: xen: Multiple
  vulnerabilities in libfsimage disk handling (XSA-443)
  xsa443-01.patch
  xsa443-02.patch
  xsa443-03.patch
  xsa443-04.patch
  xsa443-05.patch
  xsa443-06.patch
  xsa443-07.patch
  xsa443-08.patch
  xsa443-09.patch
  xsa443-10.patch
  xsa443-11.patch
- bsc#1215748 - VUL-0: CVE-2023-34327,CVE-2023-34328: xen: x86/AMD:
  Debug Mask handling (XSA-444)
  xsa444-1.patch
  xsa444-2.patch</changelog>
</package>
<package pkgid="5614b9f64ad8a1ca516ec339b86f053400350559d97c4aecabaae421adabe21e" name="xen-libs" arch="x86_64">
  <version epoch="0" ver="4.17.2_08" rel="150500.3.15.1"/>
  <changelog author="jbeulich@suse.com" date="1679572800">- Upstream bug fixes (bsc#1027519)
  63a03b73-VMX-VMExit-based-BusLock-detection.patch
  63a03ba6-VMX-INTR_SHADOW_NMI-helper.patch
  63a03bce-VMX-Notify-VMExit.patch
  63e53ac9-x86-CPUID-leaves-7-1-ecx-edx.patch
  63e53ac9-x86-disable-CET-SS-when-fractured-updates.patch
  63f4d045-x86-ucode-AMD-apply-early-on-all-threads.patch
  63fe06e0-x86-ucode-AMD-apply-late-on-all-threads.patch
  641041e8-VT-d-constrain-IGD-check.patch
  6419697d-AMD-IOMMU-no-XT-x2APIC-phys.patch
- Use "proper" upstream backports:
  640f3035-x86-altp2m-help-gcc13.patch
  64104238-bunzip-gcc13.patch
  64199e0c-x86-shadow-account-for-log-dirty-mode.patch
  64199e0d-x86-HVM-bound-number-of-pca-regions.patch
  64199e0e-x86-HVM-serialize-pca-list-manipulation.patch
  64199e0f-x86-spec-ctrl-defer-CR4_PV32_RESTORE-for-CSTAR.patch
- ... in place of:
  bunzip-gcc13.patch
  altp2m-gcc13.patch
  xsa427.patch
  xsa428-1.patch
  xsa428-2.patch
  xsa429.patch</changelog>
  <changelog author="carnold@suse.com" date="1680264000">- Not building the shim is correctly handled by --disable-pvshim
  Drop disable-building-pv-shim.patch</changelog>
  <changelog author="carnold@suse.com" date="1681214400">- bsc#1210315 - VUL-0: CVE-2022-42335: xen: x86 shadow paging
  arbitrary pointer dereference (XSA-430)
  xsa430.patch</changelog>
  <changelog author="carnold@suse.com" date="1682596800">- Update to Xen 4.17.1 bug fix release (bsc#1027519)
  xen-4.17.1-testing-src.tar.bz2
  * No upstream changelog found in sources or webpage
- Dropped patches contained in new tarball
  63a03b73-VMX-VMExit-based-BusLock-detection.patch
  63a03ba6-VMX-INTR_SHADOW_NMI-helper.patch
  63a03bce-VMX-Notify-VMExit.patch
  63a03e28-x86-high-freq-TSC-overflow.patch
  63c05478-VMX-calculate-model-specific-LBRs-once.patch
  63c05478-VMX-support-CPUs-without-model-specific-LBR.patch
  63d24e91-tools-xenstore-revert-simplify-loop-handling.patch
  63e53ac9-x86-CPUID-leaves-7-1-ecx-edx.patch
  63e53ac9-x86-disable-CET-SS-when-fractured-updates.patch
  63ebca9c-x86-spec-ctrl-Mitigate-Cross-Thread-Return-Address-Predictions.patch
  63f4d045-x86-ucode-AMD-apply-early-on-all-threads.patch
  63fe06e0-x86-ucode-AMD-apply-late-on-all-threads.patch
  640f3035-x86-altp2m-help-gcc13.patch
  641041e8-VT-d-constrain-IGD-check.patch
  64104238-bunzip-gcc13.patch
  6419697d-AMD-IOMMU-no-XT-x2APIC-phys.patch
  64199e0c-x86-shadow-account-for-log-dirty-mode.patch
  64199e0d-x86-HVM-bound-number-of-pca-regions.patch
  64199e0e-x86-HVM-serialize-pca-list-manipulation.patch
  64199e0f-x86-spec-ctrl-defer-CR4_PV32_RESTORE-for-CSTAR.patch
  libxl.fix-guest-kexec-skip-cpuid-policy.patch
  xsa430.patch</changelog>
  <changelog author="carnold@suse.com" date="1682683200">- bsc#1209237 - xen-syms doesn't contain debug-info
  643e3810-CONFIG_DEBUG_INFO-no-EXPERT.patch
  643e387f-xen-update-CONFIG_DEBUG_INFO-help-text.patch
  6447a8fd-x86-EFI-permit-crash-dump-analysis.patch</changelog>
  <changelog author="carnold@suse.com" date="1683201600">- bsc#1210570 - gcc-13 realloc use-after-free analysis error
  64525c61-tools-libs-guest-assist-gcc13s-realloc-analyzer.patch</changelog>
  <changelog author="carnold@suse.com" date="1684756800">- bsc#1211433 - VUL-0: CVE-2022-42336: xen: Mishandling of guest
  SSBD selection on AMD hardware (XSA-431)
  64639e84-amd-fix-legacy-setting-of-SSBD-on-AMD-Family-17h.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1688644800">- Upstream bug fixes (bsc#1027519)
  645dec48-AMD-IOMMU-assert-boolean-enum.patch
  646b782b-PCI-pci_get_pdev-respect-segment.patch
  647dfb0e-x86-missing-unlock-in-microcode_update_helper.patch
  648863fc-AMD-IOMMU-Invalidate-All-check.patch</changelog>
  <changelog author="carnold@suse.com" date="1690286400">- bsc#1213616 - VUL-0: CVE-2023-20593: xen: x86/AMD: Zenbleed
  (XSA-433)
  64bea1b2-x86-AMD-Zenbleed.patch</changelog>
  <changelog author="ohering@suse.de" date="1690545600">- Add more debug to libxc-sr-track-migration-time.patch
  This is supposed to help with doing the math in case xl restore
  fails with ERANGE as reported in bug#1209311</changelog>
  <changelog author="ohering@suse.de" date="1690891200">- Handle potential off-by-one errors in libxc-sr-xg_sr_bitmap.patch
  A bit is an index in bitmap, while bits is the allocated size
  of the bitmap.</changelog>
  <changelog author="carnold@suse.com" date="1691496000">- Update to Xen 4.17.2 bug fix release (bsc#1027519)
  xen-4.17.2-testing-src.tar.bz2
  * No upstream changelog found in sources or webpage
- bsc#1214082 - VUL-0: CVE-2023-20569: xen: x86/AMD: Speculative
  Return Stack Overflow (XSA-434)
- bsc#1214083 - VUL-0: CVE-2022-40982: xen: x86/Intel: Gather Data
  Sampling (XSA-435)
- Dropped patches contained in new tarball
  64525c61-tools-libs-guest-assist-gcc13s-realloc-analyzer.patch
  645dec48-AMD-IOMMU-assert-boolean-enum.patch
  64639e84-amd-fix-legacy-setting-of-SSBD-on-AMD-Family-17h.patch
  646b782b-PCI-pci_get_pdev-respect-segment.patch
  647dfb0e-x86-missing-unlock-in-microcode_update_helper.patch
  648863fc-AMD-IOMMU-Invalidate-All-check.patch
  64bea1b2-x86-AMD-Zenbleed.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1691668800">- bsc#1212684 - xentop fails with long interface name
  64d33a57-libxenstat-Linux-nul-terminate-string.patch</changelog>
  <changelog author="ohering@suse.de" date="1691928000">- Handle potential unaligned access to bitmap in
  libxc-sr-restore-hvm-legacy-superpage.patch
  If setting BITS_PER_LONG at once, the initial bit must be aligned</changelog>
  <changelog author="carnold@suse.com" date="1694174400">- bsc#1215145 - VUL-0: CVE-2023-34322: xen: top-level shadow
  reference dropped too early for 64-bit PV guests (XSA-438)
  xsa438.patch</changelog>
  <changelog author="carnold@suse.com" date="1695038400">- bsc#1215474 - VUL-0: CVE-2023-20588: xen: AMD CPU transitional
  execution leak via division by zero (XSA-439)
  xsa439-00.patch
  xsa439-01.patch
  xsa439-02.patch
  xsa439-03.patch
  xsa439-04.patch
  xsa439-05.patch
  xsa439-06.patch
  xsa439-07.patch
  xsa439-08.patch
  xsa439-09.patch</changelog>
  <changelog author="carnold@suse.com" date="1695816000">- bsc#1215744 - VUL-0: CVE-2023-34323: xen: xenstored: A
  transaction conflict can crash C Xenstored (XSA-440)
  xsa440.patch
- bsc#1215746 - VUL-0: CVE-2023-34326: xen: x86/AMD: missing IOMMU
  TLB flushing (XSA-442)
  xsa442.patch
- bsc#1215747 - VUL-0: CVE-2023-34325: xen: Multiple
  vulnerabilities in libfsimage disk handling (XSA-443)
  xsa443-01.patch
  xsa443-02.patch
  xsa443-03.patch
  xsa443-04.patch
  xsa443-05.patch
  xsa443-06.patch
  xsa443-07.patch
  xsa443-08.patch
  xsa443-09.patch
  xsa443-10.patch
  xsa443-11.patch
- bsc#1215748 - VUL-0: CVE-2023-34327,CVE-2023-34328: xen: x86/AMD:
  Debug Mask handling (XSA-444)
  xsa444-1.patch
  xsa444-2.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1697544000">- bsc#1215145 - VUL-0: CVE-2023-34322: xen: top-level shadow
  reference dropped too early for 64-bit PV guests (XSA-438)
  650abbfe-x86-shadow-defer-PV-top-level-release.patch
- bsc#1215474 - VUL-0: CVE-2023-20588: xen: AMD CPU transitional
  execution leak via division by zero (XSA-439)
  64e5b4ac-x86-AMD-extend-Zenbleed-check.patch
  65087000-x86-spec-ctrl-SPEC_CTRL_EXIT_TO_XEN-confusion.patch
  65087001-x86-spec-ctrl-fold-DO_SPEC_CTRL_EXIT_TO_XEN.patch
  65087002-x86-spec-ctrl-SPEC_CTRL-ENTRY-EXIT-asm-macros.patch
  65087003-x86-spec-ctrl-SPEC_CTRL-ENTER-EXIT-comments.patch
  65087004-x86-entry-restore_all_xen-stack_end.patch
  65087005-x86-entry-track-IST-ness-of-entry.patch
  65087006-x86-spec-ctrl-VERW-on-IST-exit-to-Xen.patch
  65087007-x86-AMD-Zen-1-2-predicates.patch
  65087008-x86-spec-ctrl-Zen1-DIV-leakage.patch
- bsc#1215746 - VUL-0: CVE-2023-34326: xen: x86/AMD: missing IOMMU
  TLB flushing (XSA-442)
  65263470-AMD-IOMMU-flush-TLB-when-flushing-DTE.patch
- bsc#1215747 - VUL-0: CVE-2023-34325: xen: Multiple
  vulnerabilities in libfsimage disk handling (XSA-443)
  65263471-libfsimage-xfs-remove-dead-code.patch
  65263472-libfsimage-xfs-amend-mask32lo.patch
  65263473-libfsimage-xfs-sanity-check-superblock.patch
  65263474-libfsimage-xfs-compile-time-check.patch
  65263475-pygrub-remove-unnecessary-hypercall.patch
  65263476-pygrub-small-refactors.patch
  65263477-pygrub-open-output-files-earlier.patch
  65263478-libfsimage-function-to-preload-plugins.patch
  65263479-pygrub-deprivilege.patch
  6526347a-libxl-allow-bootloader-restricted-mode.patch
  6526347b-libxl-limit-bootloader-when-restricted.patch
- bsc#1215748 - VUL-0: CVE-2023-34327,CVE-2023-34328: xen: x86/AMD:
  Debug Mask handling (XSA-444)
  6526347c-SVM-fix-AMD-DR-MASK-context-switch-asymmetry.patch
  6526347d-x86-PV-auditing-of-guest-breakpoints.patch
- Upstream bug fixes (bsc#1027519)
  64e6459b-revert-VMX-sanitize-rIP-before-reentering.patch
  64eef7e9-x86-reporting-spurious-i8259-interrupts.patch
  64f71f50-Arm-handle-cache-flush-at-top.patch
  65084ba5-x86-AMD-dont-expose-TscFreqSel.patch
- Patches dropped / replaced by newer upstream versions
  xsa438.patch
  xsa439-00.patch
  xsa439-01.patch
  xsa439-02.patch
  xsa439-03.patch
  xsa439-04.patch
  xsa439-05.patch
  xsa439-06.patch
  xsa439-07.patch
  xsa439-08.patch
  xsa439-09.patch
  xsa442.patch
  xsa443-01.patch
  xsa443-02.patch
  xsa443-03.patch
  xsa443-04.patch
  xsa443-05.patch
  xsa443-06.patch
  xsa443-07.patch
  xsa443-08.patch
  xsa443-09.patch
  xsa443-10.patch
  xsa443-11.patch
  xsa444-1.patch
  xsa444-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1698408000">- bsc#1216654 - VUL-0: CVE-2023-46835: xen: x86/AMD: mismatch in
  IOMMU quarantine page table levels (XSA-445)
  xsa445.patch</changelog>
  <changelog author="carnold@suse.com" date="1698926400">- bsc#1216807 - VUL-0: CVE-2023-46836: xen: x86: BTC/SRSO fixes not
  fully effective (XSA-446)
  xsa446.patch</changelog>
</package>
<package pkgid="d4169abd1d540cf977eb27ded088fbc0eada06ee4962934b63fbcd3852711ef0" name="xen-libs" arch="x86_64">
  <version epoch="0" ver="4.17.3_02" rel="150500.3.18.1"/>
  <changelog author="carnold@suse.com" date="1681214400">- bsc#1210315 - VUL-0: CVE-2022-42335: xen: x86 shadow paging
  arbitrary pointer dereference (XSA-430)
  xsa430.patch</changelog>
  <changelog author="carnold@suse.com" date="1682596800">- Update to Xen 4.17.1 bug fix release (bsc#1027519)
  xen-4.17.1-testing-src.tar.bz2
  * No upstream changelog found in sources or webpage
- Dropped patches contained in new tarball
  63a03b73-VMX-VMExit-based-BusLock-detection.patch
  63a03ba6-VMX-INTR_SHADOW_NMI-helper.patch
  63a03bce-VMX-Notify-VMExit.patch
  63a03e28-x86-high-freq-TSC-overflow.patch
  63c05478-VMX-calculate-model-specific-LBRs-once.patch
  63c05478-VMX-support-CPUs-without-model-specific-LBR.patch
  63d24e91-tools-xenstore-revert-simplify-loop-handling.patch
  63e53ac9-x86-CPUID-leaves-7-1-ecx-edx.patch
  63e53ac9-x86-disable-CET-SS-when-fractured-updates.patch
  63ebca9c-x86-spec-ctrl-Mitigate-Cross-Thread-Return-Address-Predictions.patch
  63f4d045-x86-ucode-AMD-apply-early-on-all-threads.patch
  63fe06e0-x86-ucode-AMD-apply-late-on-all-threads.patch
  640f3035-x86-altp2m-help-gcc13.patch
  641041e8-VT-d-constrain-IGD-check.patch
  64104238-bunzip-gcc13.patch
  6419697d-AMD-IOMMU-no-XT-x2APIC-phys.patch
  64199e0c-x86-shadow-account-for-log-dirty-mode.patch
  64199e0d-x86-HVM-bound-number-of-pca-regions.patch
  64199e0e-x86-HVM-serialize-pca-list-manipulation.patch
  64199e0f-x86-spec-ctrl-defer-CR4_PV32_RESTORE-for-CSTAR.patch
  libxl.fix-guest-kexec-skip-cpuid-policy.patch
  xsa430.patch</changelog>
  <changelog author="carnold@suse.com" date="1682683200">- bsc#1209237 - xen-syms doesn't contain debug-info
  643e3810-CONFIG_DEBUG_INFO-no-EXPERT.patch
  643e387f-xen-update-CONFIG_DEBUG_INFO-help-text.patch
  6447a8fd-x86-EFI-permit-crash-dump-analysis.patch</changelog>
  <changelog author="carnold@suse.com" date="1683201600">- bsc#1210570 - gcc-13 realloc use-after-free analysis error
  64525c61-tools-libs-guest-assist-gcc13s-realloc-analyzer.patch</changelog>
  <changelog author="carnold@suse.com" date="1684756800">- bsc#1211433 - VUL-0: CVE-2022-42336: xen: Mishandling of guest
  SSBD selection on AMD hardware (XSA-431)
  64639e84-amd-fix-legacy-setting-of-SSBD-on-AMD-Family-17h.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1688644800">- Upstream bug fixes (bsc#1027519)
  645dec48-AMD-IOMMU-assert-boolean-enum.patch
  646b782b-PCI-pci_get_pdev-respect-segment.patch
  647dfb0e-x86-missing-unlock-in-microcode_update_helper.patch
  648863fc-AMD-IOMMU-Invalidate-All-check.patch</changelog>
  <changelog author="carnold@suse.com" date="1690286400">- bsc#1213616 - VUL-0: CVE-2023-20593: xen: x86/AMD: Zenbleed
  (XSA-433)
  64bea1b2-x86-AMD-Zenbleed.patch</changelog>
  <changelog author="ohering@suse.de" date="1690545600">- Add more debug to libxc-sr-track-migration-time.patch
  This is supposed to help with doing the math in case xl restore
  fails with ERANGE as reported in bug#1209311</changelog>
  <changelog author="ohering@suse.de" date="1690891200">- Handle potential off-by-one errors in libxc-sr-xg_sr_bitmap.patch
  A bit is an index in bitmap, while bits is the allocated size
  of the bitmap.</changelog>
  <changelog author="carnold@suse.com" date="1691496000">- Update to Xen 4.17.2 bug fix release (bsc#1027519)
  xen-4.17.2-testing-src.tar.bz2
  * No upstream changelog found in sources or webpage
- bsc#1214082 - VUL-0: CVE-2023-20569: xen: x86/AMD: Speculative
  Return Stack Overflow (XSA-434)
- bsc#1214083 - VUL-0: CVE-2022-40982: xen: x86/Intel: Gather Data
  Sampling (XSA-435)
- Dropped patches contained in new tarball
  64525c61-tools-libs-guest-assist-gcc13s-realloc-analyzer.patch
  645dec48-AMD-IOMMU-assert-boolean-enum.patch
  64639e84-amd-fix-legacy-setting-of-SSBD-on-AMD-Family-17h.patch
  646b782b-PCI-pci_get_pdev-respect-segment.patch
  647dfb0e-x86-missing-unlock-in-microcode_update_helper.patch
  648863fc-AMD-IOMMU-Invalidate-All-check.patch
  64bea1b2-x86-AMD-Zenbleed.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1691668800">- bsc#1212684 - xentop fails with long interface name
  64d33a57-libxenstat-Linux-nul-terminate-string.patch</changelog>
  <changelog author="ohering@suse.de" date="1691928000">- Handle potential unaligned access to bitmap in
  libxc-sr-restore-hvm-legacy-superpage.patch
  If setting BITS_PER_LONG at once, the initial bit must be aligned</changelog>
  <changelog author="carnold@suse.com" date="1694174400">- bsc#1215145 - VUL-0: CVE-2023-34322: xen: top-level shadow
  reference dropped too early for 64-bit PV guests (XSA-438)
  xsa438.patch</changelog>
  <changelog author="carnold@suse.com" date="1695038400">- bsc#1215474 - VUL-0: CVE-2023-20588: xen: AMD CPU transitional
  execution leak via division by zero (XSA-439)
  xsa439-00.patch
  xsa439-01.patch
  xsa439-02.patch
  xsa439-03.patch
  xsa439-04.patch
  xsa439-05.patch
  xsa439-06.patch
  xsa439-07.patch
  xsa439-08.patch
  xsa439-09.patch</changelog>
  <changelog author="carnold@suse.com" date="1695816000">- bsc#1215744 - VUL-0: CVE-2023-34323: xen: xenstored: A
  transaction conflict can crash C Xenstored (XSA-440)
  xsa440.patch
- bsc#1215746 - VUL-0: CVE-2023-34326: xen: x86/AMD: missing IOMMU
  TLB flushing (XSA-442)
  xsa442.patch
- bsc#1215747 - VUL-0: CVE-2023-34325: xen: Multiple
  vulnerabilities in libfsimage disk handling (XSA-443)
  xsa443-01.patch
  xsa443-02.patch
  xsa443-03.patch
  xsa443-04.patch
  xsa443-05.patch
  xsa443-06.patch
  xsa443-07.patch
  xsa443-08.patch
  xsa443-09.patch
  xsa443-10.patch
  xsa443-11.patch
- bsc#1215748 - VUL-0: CVE-2023-34327,CVE-2023-34328: xen: x86/AMD:
  Debug Mask handling (XSA-444)
  xsa444-1.patch
  xsa444-2.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1697544000">- bsc#1215145 - VUL-0: CVE-2023-34322: xen: top-level shadow
  reference dropped too early for 64-bit PV guests (XSA-438)
  650abbfe-x86-shadow-defer-PV-top-level-release.patch
- bsc#1215474 - VUL-0: CVE-2023-20588: xen: AMD CPU transitional
  execution leak via division by zero (XSA-439)
  64e5b4ac-x86-AMD-extend-Zenbleed-check.patch
  65087000-x86-spec-ctrl-SPEC_CTRL_EXIT_TO_XEN-confusion.patch
  65087001-x86-spec-ctrl-fold-DO_SPEC_CTRL_EXIT_TO_XEN.patch
  65087002-x86-spec-ctrl-SPEC_CTRL-ENTRY-EXIT-asm-macros.patch
  65087003-x86-spec-ctrl-SPEC_CTRL-ENTER-EXIT-comments.patch
  65087004-x86-entry-restore_all_xen-stack_end.patch
  65087005-x86-entry-track-IST-ness-of-entry.patch
  65087006-x86-spec-ctrl-VERW-on-IST-exit-to-Xen.patch
  65087007-x86-AMD-Zen-1-2-predicates.patch
  65087008-x86-spec-ctrl-Zen1-DIV-leakage.patch
- bsc#1215746 - VUL-0: CVE-2023-34326: xen: x86/AMD: missing IOMMU
  TLB flushing (XSA-442)
  65263470-AMD-IOMMU-flush-TLB-when-flushing-DTE.patch
- bsc#1215747 - VUL-0: CVE-2023-34325: xen: Multiple
  vulnerabilities in libfsimage disk handling (XSA-443)
  65263471-libfsimage-xfs-remove-dead-code.patch
  65263472-libfsimage-xfs-amend-mask32lo.patch
  65263473-libfsimage-xfs-sanity-check-superblock.patch
  65263474-libfsimage-xfs-compile-time-check.patch
  65263475-pygrub-remove-unnecessary-hypercall.patch
  65263476-pygrub-small-refactors.patch
  65263477-pygrub-open-output-files-earlier.patch
  65263478-libfsimage-function-to-preload-plugins.patch
  65263479-pygrub-deprivilege.patch
  6526347a-libxl-allow-bootloader-restricted-mode.patch
  6526347b-libxl-limit-bootloader-when-restricted.patch
- bsc#1215748 - VUL-0: CVE-2023-34327,CVE-2023-34328: xen: x86/AMD:
  Debug Mask handling (XSA-444)
  6526347c-SVM-fix-AMD-DR-MASK-context-switch-asymmetry.patch
  6526347d-x86-PV-auditing-of-guest-breakpoints.patch
- Upstream bug fixes (bsc#1027519)
  64e6459b-revert-VMX-sanitize-rIP-before-reentering.patch
  64eef7e9-x86-reporting-spurious-i8259-interrupts.patch
  64f71f50-Arm-handle-cache-flush-at-top.patch
  65084ba5-x86-AMD-dont-expose-TscFreqSel.patch
- Patches dropped / replaced by newer upstream versions
  xsa438.patch
  xsa439-00.patch
  xsa439-01.patch
  xsa439-02.patch
  xsa439-03.patch
  xsa439-04.patch
  xsa439-05.patch
  xsa439-06.patch
  xsa439-07.patch
  xsa439-08.patch
  xsa439-09.patch
  xsa442.patch
  xsa443-01.patch
  xsa443-02.patch
  xsa443-03.patch
  xsa443-04.patch
  xsa443-05.patch
  xsa443-06.patch
  xsa443-07.patch
  xsa443-08.patch
  xsa443-09.patch
  xsa443-10.patch
  xsa443-11.patch
  xsa444-1.patch
  xsa444-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1698408000">- bsc#1216654 - VUL-0: CVE-2023-46835: xen: x86/AMD: mismatch in
  IOMMU quarantine page table levels (XSA-445)
  xsa445.patch</changelog>
  <changelog author="carnold@suse.com" date="1698926400">- bsc#1216807 - VUL-0: CVE-2023-46836: xen: x86: BTC/SRSO fixes not
  fully effective (XSA-446)
  xsa446.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1700568000">- Upstream bug fixes (bsc#1027519)
  64763137-x86-AutoIBRS-definitions.patch
  652fef4f-x86-AMD-erratum-1485.patch
  65319724-VT-d-SAGAW-parsing.patch
  6532858d-x86-DOITM.patch
  654370e2-x86-x2APIC-remove-ACPI_FADT_APIC_CLUSTER-use.patch
  65437103-x86-i8259-dont-assume-IRQs-always-target-CPU0.patch
  655b2ba9-fix-sched_move_domain.patch
- bsc#1216654 - VUL-0: CVE-2023-46835: xen: x86/AMD: mismatch in
  IOMMU quarantine page table levels (XSA-445)
  65536847-AMD-IOMMU-correct-level-for-quarantine-pt.patch
- bsc#1216807 - VUL-0: CVE-2023-46836: xen: x86: BTC/SRSO fixes not
  fully effective (XSA-446)
  65536848-x86-spec-ctrl-remove-conditional-IRQs-on-ness.patch
- Patches replaced by newer upstream versions
  xsa445.patch
  xsa446.patch</changelog>
  <changelog author="carnold@suse.com" date="1702900800">- Update to Xen 4.17.3 bug fix release (bsc#1027519)
  xen-4.17.3-testing-src.tar.bz2
  * No upstream changelog found in sources or webpage
- Dropped patches contained in new tarball
  64763137-x86-AutoIBRS-definitions.patch
  64e5b4ac-x86-AMD-extend-Zenbleed-check.patch
  64e6459b-revert-VMX-sanitize-rIP-before-reentering.patch
  64eef7e9-x86-reporting-spurious-i8259-interrupts.patch
  64f71f50-Arm-handle-cache-flush-at-top.patch
  65084ba5-x86-AMD-dont-expose-TscFreqSel.patch
  65087000-x86-spec-ctrl-SPEC_CTRL_EXIT_TO_XEN-confusion.patch
  65087001-x86-spec-ctrl-fold-DO_SPEC_CTRL_EXIT_TO_XEN.patch
  65087002-x86-spec-ctrl-SPEC_CTRL-ENTRY-EXIT-asm-macros.patch
  65087003-x86-spec-ctrl-SPEC_CTRL-ENTER-EXIT-comments.patch
  65087004-x86-entry-restore_all_xen-stack_end.patch
  65087005-x86-entry-track-IST-ness-of-entry.patch
  65087006-x86-spec-ctrl-VERW-on-IST-exit-to-Xen.patch
  65087007-x86-AMD-Zen-1-2-predicates.patch
  65087008-x86-spec-ctrl-Zen1-DIV-leakage.patch
  650abbfe-x86-shadow-defer-PV-top-level-release.patch
  65263470-AMD-IOMMU-flush-TLB-when-flushing-DTE.patch
  65263471-libfsimage-xfs-remove-dead-code.patch
  65263472-libfsimage-xfs-amend-mask32lo.patch
  65263473-libfsimage-xfs-sanity-check-superblock.patch
  65263474-libfsimage-xfs-compile-time-check.patch
  65263475-pygrub-remove-unnecessary-hypercall.patch
  65263476-pygrub-small-refactors.patch
  65263477-pygrub-open-output-files-earlier.patch
  65263478-libfsimage-function-to-preload-plugins.patch
  65263479-pygrub-deprivilege.patch
  6526347a-libxl-allow-bootloader-restricted-mode.patch
  6526347b-libxl-limit-bootloader-when-restricted.patch
  6526347c-SVM-fix-AMD-DR-MASK-context-switch-asymmetry.patch
  6526347d-x86-PV-auditing-of-guest-breakpoints.patch
  652fef4f-x86-AMD-erratum-1485.patch
  65319724-VT-d-SAGAW-parsing.patch
  6532858d-x86-DOITM.patch
  654370e2-x86-x2APIC-remove-ACPI_FADT_APIC_CLUSTER-use.patch
  65437103-x86-i8259-dont-assume-IRQs-always-target-CPU0.patch
  65536847-AMD-IOMMU-correct-level-for-quarantine-pt.patch
  65536848-x86-spec-ctrl-remove-conditional-IRQs-on-ness.patch
  655b2ba9-fix-sched_move_domain.patch
  xsa440.patch</changelog>
</package>
<package pkgid="d74b4688033bfa8cb264910d30712b7841fffbefec5ac90e68daa5182be6f971" name="xen-libs" arch="x86_64">
  <version epoch="0" ver="4.17.3_04" rel="150500.3.21.1"/>
  <changelog author="carnold@suse.com" date="1682683200">- bsc#1209237 - xen-syms doesn't contain debug-info
  643e3810-CONFIG_DEBUG_INFO-no-EXPERT.patch
  643e387f-xen-update-CONFIG_DEBUG_INFO-help-text.patch
  6447a8fd-x86-EFI-permit-crash-dump-analysis.patch</changelog>
  <changelog author="carnold@suse.com" date="1683201600">- bsc#1210570 - gcc-13 realloc use-after-free analysis error
  64525c61-tools-libs-guest-assist-gcc13s-realloc-analyzer.patch</changelog>
  <changelog author="carnold@suse.com" date="1684756800">- bsc#1211433 - VUL-0: CVE-2022-42336: xen: Mishandling of guest
  SSBD selection on AMD hardware (XSA-431)
  64639e84-amd-fix-legacy-setting-of-SSBD-on-AMD-Family-17h.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1688644800">- Upstream bug fixes (bsc#1027519)
  645dec48-AMD-IOMMU-assert-boolean-enum.patch
  646b782b-PCI-pci_get_pdev-respect-segment.patch
  647dfb0e-x86-missing-unlock-in-microcode_update_helper.patch
  648863fc-AMD-IOMMU-Invalidate-All-check.patch</changelog>
  <changelog author="carnold@suse.com" date="1690286400">- bsc#1213616 - VUL-0: CVE-2023-20593: xen: x86/AMD: Zenbleed
  (XSA-433)
  64bea1b2-x86-AMD-Zenbleed.patch</changelog>
  <changelog author="ohering@suse.de" date="1690545600">- Add more debug to libxc-sr-track-migration-time.patch
  This is supposed to help with doing the math in case xl restore
  fails with ERANGE as reported in bug#1209311</changelog>
  <changelog author="ohering@suse.de" date="1690891200">- Handle potential off-by-one errors in libxc-sr-xg_sr_bitmap.patch
  A bit is an index in bitmap, while bits is the allocated size
  of the bitmap.</changelog>
  <changelog author="carnold@suse.com" date="1691496000">- Update to Xen 4.17.2 bug fix release (bsc#1027519)
  xen-4.17.2-testing-src.tar.bz2
  * No upstream changelog found in sources or webpage
- bsc#1214082 - VUL-0: CVE-2023-20569: xen: x86/AMD: Speculative
  Return Stack Overflow (XSA-434)
- bsc#1214083 - VUL-0: CVE-2022-40982: xen: x86/Intel: Gather Data
  Sampling (XSA-435)
- Dropped patches contained in new tarball
  64525c61-tools-libs-guest-assist-gcc13s-realloc-analyzer.patch
  645dec48-AMD-IOMMU-assert-boolean-enum.patch
  64639e84-amd-fix-legacy-setting-of-SSBD-on-AMD-Family-17h.patch
  646b782b-PCI-pci_get_pdev-respect-segment.patch
  647dfb0e-x86-missing-unlock-in-microcode_update_helper.patch
  648863fc-AMD-IOMMU-Invalidate-All-check.patch
  64bea1b2-x86-AMD-Zenbleed.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1691668800">- bsc#1212684 - xentop fails with long interface name
  64d33a57-libxenstat-Linux-nul-terminate-string.patch</changelog>
  <changelog author="ohering@suse.de" date="1691928000">- Handle potential unaligned access to bitmap in
  libxc-sr-restore-hvm-legacy-superpage.patch
  If setting BITS_PER_LONG at once, the initial bit must be aligned</changelog>
  <changelog author="carnold@suse.com" date="1694174400">- bsc#1215145 - VUL-0: CVE-2023-34322: xen: top-level shadow
  reference dropped too early for 64-bit PV guests (XSA-438)
  xsa438.patch</changelog>
  <changelog author="carnold@suse.com" date="1695038400">- bsc#1215474 - VUL-0: CVE-2023-20588: xen: AMD CPU transitional
  execution leak via division by zero (XSA-439)
  xsa439-00.patch
  xsa439-01.patch
  xsa439-02.patch
  xsa439-03.patch
  xsa439-04.patch
  xsa439-05.patch
  xsa439-06.patch
  xsa439-07.patch
  xsa439-08.patch
  xsa439-09.patch</changelog>
  <changelog author="carnold@suse.com" date="1695816000">- bsc#1215744 - VUL-0: CVE-2023-34323: xen: xenstored: A
  transaction conflict can crash C Xenstored (XSA-440)
  xsa440.patch
- bsc#1215746 - VUL-0: CVE-2023-34326: xen: x86/AMD: missing IOMMU
  TLB flushing (XSA-442)
  xsa442.patch
- bsc#1215747 - VUL-0: CVE-2023-34325: xen: Multiple
  vulnerabilities in libfsimage disk handling (XSA-443)
  xsa443-01.patch
  xsa443-02.patch
  xsa443-03.patch
  xsa443-04.patch
  xsa443-05.patch
  xsa443-06.patch
  xsa443-07.patch
  xsa443-08.patch
  xsa443-09.patch
  xsa443-10.patch
  xsa443-11.patch
- bsc#1215748 - VUL-0: CVE-2023-34327,CVE-2023-34328: xen: x86/AMD:
  Debug Mask handling (XSA-444)
  xsa444-1.patch
  xsa444-2.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1697544000">- bsc#1215145 - VUL-0: CVE-2023-34322: xen: top-level shadow
  reference dropped too early for 64-bit PV guests (XSA-438)
  650abbfe-x86-shadow-defer-PV-top-level-release.patch
- bsc#1215474 - VUL-0: CVE-2023-20588: xen: AMD CPU transitional
  execution leak via division by zero (XSA-439)
  64e5b4ac-x86-AMD-extend-Zenbleed-check.patch
  65087000-x86-spec-ctrl-SPEC_CTRL_EXIT_TO_XEN-confusion.patch
  65087001-x86-spec-ctrl-fold-DO_SPEC_CTRL_EXIT_TO_XEN.patch
  65087002-x86-spec-ctrl-SPEC_CTRL-ENTRY-EXIT-asm-macros.patch
  65087003-x86-spec-ctrl-SPEC_CTRL-ENTER-EXIT-comments.patch
  65087004-x86-entry-restore_all_xen-stack_end.patch
  65087005-x86-entry-track-IST-ness-of-entry.patch
  65087006-x86-spec-ctrl-VERW-on-IST-exit-to-Xen.patch
  65087007-x86-AMD-Zen-1-2-predicates.patch
  65087008-x86-spec-ctrl-Zen1-DIV-leakage.patch
- bsc#1215746 - VUL-0: CVE-2023-34326: xen: x86/AMD: missing IOMMU
  TLB flushing (XSA-442)
  65263470-AMD-IOMMU-flush-TLB-when-flushing-DTE.patch
- bsc#1215747 - VUL-0: CVE-2023-34325: xen: Multiple
  vulnerabilities in libfsimage disk handling (XSA-443)
  65263471-libfsimage-xfs-remove-dead-code.patch
  65263472-libfsimage-xfs-amend-mask32lo.patch
  65263473-libfsimage-xfs-sanity-check-superblock.patch
  65263474-libfsimage-xfs-compile-time-check.patch
  65263475-pygrub-remove-unnecessary-hypercall.patch
  65263476-pygrub-small-refactors.patch
  65263477-pygrub-open-output-files-earlier.patch
  65263478-libfsimage-function-to-preload-plugins.patch
  65263479-pygrub-deprivilege.patch
  6526347a-libxl-allow-bootloader-restricted-mode.patch
  6526347b-libxl-limit-bootloader-when-restricted.patch
- bsc#1215748 - VUL-0: CVE-2023-34327,CVE-2023-34328: xen: x86/AMD:
  Debug Mask handling (XSA-444)
  6526347c-SVM-fix-AMD-DR-MASK-context-switch-asymmetry.patch
  6526347d-x86-PV-auditing-of-guest-breakpoints.patch
- Upstream bug fixes (bsc#1027519)
  64e6459b-revert-VMX-sanitize-rIP-before-reentering.patch
  64eef7e9-x86-reporting-spurious-i8259-interrupts.patch
  64f71f50-Arm-handle-cache-flush-at-top.patch
  65084ba5-x86-AMD-dont-expose-TscFreqSel.patch
- Patches dropped / replaced by newer upstream versions
  xsa438.patch
  xsa439-00.patch
  xsa439-01.patch
  xsa439-02.patch
  xsa439-03.patch
  xsa439-04.patch
  xsa439-05.patch
  xsa439-06.patch
  xsa439-07.patch
  xsa439-08.patch
  xsa439-09.patch
  xsa442.patch
  xsa443-01.patch
  xsa443-02.patch
  xsa443-03.patch
  xsa443-04.patch
  xsa443-05.patch
  xsa443-06.patch
  xsa443-07.patch
  xsa443-08.patch
  xsa443-09.patch
  xsa443-10.patch
  xsa443-11.patch
  xsa444-1.patch
  xsa444-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1698408000">- bsc#1216654 - VUL-0: CVE-2023-46835: xen: x86/AMD: mismatch in
  IOMMU quarantine page table levels (XSA-445)
  xsa445.patch</changelog>
  <changelog author="carnold@suse.com" date="1698926400">- bsc#1216807 - VUL-0: CVE-2023-46836: xen: x86: BTC/SRSO fixes not
  fully effective (XSA-446)
  xsa446.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1700568000">- Upstream bug fixes (bsc#1027519)
  64763137-x86-AutoIBRS-definitions.patch
  652fef4f-x86-AMD-erratum-1485.patch
  65319724-VT-d-SAGAW-parsing.patch
  6532858d-x86-DOITM.patch
  654370e2-x86-x2APIC-remove-ACPI_FADT_APIC_CLUSTER-use.patch
  65437103-x86-i8259-dont-assume-IRQs-always-target-CPU0.patch
  655b2ba9-fix-sched_move_domain.patch
- bsc#1216654 - VUL-0: CVE-2023-46835: xen: x86/AMD: mismatch in
  IOMMU quarantine page table levels (XSA-445)
  65536847-AMD-IOMMU-correct-level-for-quarantine-pt.patch
- bsc#1216807 - VUL-0: CVE-2023-46836: xen: x86: BTC/SRSO fixes not
  fully effective (XSA-446)
  65536848-x86-spec-ctrl-remove-conditional-IRQs-on-ness.patch
- Patches replaced by newer upstream versions
  xsa445.patch
  xsa446.patch</changelog>
  <changelog author="carnold@suse.com" date="1702900800">- Update to Xen 4.17.3 bug fix release (bsc#1027519)
  xen-4.17.3-testing-src.tar.bz2
  * No upstream changelog found in sources or webpage
- Dropped patches contained in new tarball
  64763137-x86-AutoIBRS-definitions.patch
  64e5b4ac-x86-AMD-extend-Zenbleed-check.patch
  64e6459b-revert-VMX-sanitize-rIP-before-reentering.patch
  64eef7e9-x86-reporting-spurious-i8259-interrupts.patch
  64f71f50-Arm-handle-cache-flush-at-top.patch
  65084ba5-x86-AMD-dont-expose-TscFreqSel.patch
  65087000-x86-spec-ctrl-SPEC_CTRL_EXIT_TO_XEN-confusion.patch
  65087001-x86-spec-ctrl-fold-DO_SPEC_CTRL_EXIT_TO_XEN.patch
  65087002-x86-spec-ctrl-SPEC_CTRL-ENTRY-EXIT-asm-macros.patch
  65087003-x86-spec-ctrl-SPEC_CTRL-ENTER-EXIT-comments.patch
  65087004-x86-entry-restore_all_xen-stack_end.patch
  65087005-x86-entry-track-IST-ness-of-entry.patch
  65087006-x86-spec-ctrl-VERW-on-IST-exit-to-Xen.patch
  65087007-x86-AMD-Zen-1-2-predicates.patch
  65087008-x86-spec-ctrl-Zen1-DIV-leakage.patch
  650abbfe-x86-shadow-defer-PV-top-level-release.patch
  65263470-AMD-IOMMU-flush-TLB-when-flushing-DTE.patch
  65263471-libfsimage-xfs-remove-dead-code.patch
  65263472-libfsimage-xfs-amend-mask32lo.patch
  65263473-libfsimage-xfs-sanity-check-superblock.patch
  65263474-libfsimage-xfs-compile-time-check.patch
  65263475-pygrub-remove-unnecessary-hypercall.patch
  65263476-pygrub-small-refactors.patch
  65263477-pygrub-open-output-files-earlier.patch
  65263478-libfsimage-function-to-preload-plugins.patch
  65263479-pygrub-deprivilege.patch
  6526347a-libxl-allow-bootloader-restricted-mode.patch
  6526347b-libxl-limit-bootloader-when-restricted.patch
  6526347c-SVM-fix-AMD-DR-MASK-context-switch-asymmetry.patch
  6526347d-x86-PV-auditing-of-guest-breakpoints.patch
  652fef4f-x86-AMD-erratum-1485.patch
  65319724-VT-d-SAGAW-parsing.patch
  6532858d-x86-DOITM.patch
  654370e2-x86-x2APIC-remove-ACPI_FADT_APIC_CLUSTER-use.patch
  65437103-x86-i8259-dont-assume-IRQs-always-target-CPU0.patch
  65536847-AMD-IOMMU-correct-level-for-quarantine-pt.patch
  65536848-x86-spec-ctrl-remove-conditional-IRQs-on-ness.patch
  655b2ba9-fix-sched_move_domain.patch
  xsa440.patch</changelog>
  <changelog author="carnold@suse.com" date="1705406400">- bsc#1218851 - VUL-0: CVE-2023-46839: xen: phantom functions
  assigned to incorrect contexts (XSA-449)
  xsa449.patch</changelog>
  <changelog author="carnold@suse.com" date="1706011200">- bsc#1219080 - VUL-0: CVE-2023-46840: xen: VT-d: Failure to
  quarantine devices in !HVM builds (XSA-450)
  xsa450.patch</changelog>
</package>
<package pkgid="28cdb6f3c64ade615a07dce3a7b48e78bfcdda9a041c7c50d2175fa12c447b62" name="zchunk" arch="src">
  <version epoch="0" ver="1.1.16" rel="150400.3.7.1"/>
  <changelog author="ngompa13@gmail.com" date="1530792000">- Initial packaging based on Mageia package</changelog>
  <changelog author="ngompa13@gmail.com" date="1531828800">- Update to 0.7.6
  + SHA-512 and SHA-512/128 support
  + New default chunk checksum type SHA-512/128
  + Automatic chunking moved into libzck and is now default
  + New option to disable automatic chunking
  + Bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Do not manually specify dependencies which are automatically
  generated
- Make requirements of devel package less strict</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222400">- Rebase to 0.9.11
  + Fix small bug where creating a zck_dl context fails when zck
    context is NULL
  + Fix security bugs found by Coverity
  + Fix test failures for zstd &lt;= 1.3.4
  + Add gen_xml_dictionary to libexecdir with zck_ prefix
  + Fix intermittent bug where auto-chunking wasn't deterministic
  + ABI (but not API change) - Use bool from stdbool.h
  + Allow specification of output file in zck
  + Set minimum and maximum chunk sizes for both automatic and
    manual chunking
  + New error handling functions
  + File format changes
  + API changes
- Make requirements between subpackages stricter to avoid issues
  due to inter-subpackage ABI/API changes</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222401">- Bump meson build dependency to match meson.build requirement</changelog>
  <changelog author="aloisio@gmx.com" date="1540814400">- Update to version 0.9.13
  * Add read support for zchunk files with optional flags
  * Fix tests for zstd-1.3.6</changelog>
  <changelog author="ngompa13@gmail.com" date="1545048000">- Update to version 0.9.17
  + Turn off some tests for big-endian architectures since zstd
    isn't deterministic on them
  + Add zck_gen_zdict binary to generate optimal zdict for a zchunk file
  + Add functions to API to simplify extracting a single chunk
  + Change default zstd compression to 9 for a 6x speed increase in
    compression speed for a 5% increase in compression size
  + Switch from optional flags to more robust optional elements
  + Sanity check hex hashes passed in as an option</changelog>
  <changelog author="ngompa13@gmail.com" date="1548244800">- Update to version 1.0.2
  + Use hash table for finding identical chunks, speeding up process
    considerably
  + Add test case to verify that identical chunk checking is working</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331200">- Backport patch from upstream to fix bugs discovered by Coverity
  + Add patch: 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331201">- Update to version 1.0.3
  + Fix some small bugs found by Coverity
  + Fix memory leak and off-by-one errors
- Drop patches part of 1.0.3 release
  + 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1554033600">- Update to version 1.1.0
  + Fix multipart boundary bug when dealing with lighttpd servers
  + Optimize chunk matching while downloading, significantly reducing CPU usage</changelog>
  <changelog author="mpluskal@suse.com" date="1576670400">- Update to version 1.1.4:
  * Simplify regex for detecting part header info
  * Fix coverity warnings
  * Open files with permissions 0666 and let umask(2) do its job.
  * Multipart boundary field can be quoted.</changelog>
  <changelog author="ngompa13@gmail.com" date="1579435200">- Update to version 1.1.5
  + Handle write errors correctly</changelog>
  <changelog author="dimstar@opensuse.org" date="1609761600">- Add d2eae512bee09a4047cfe586de12f644d73b0736.patch: Fix build
  with zstd 1.4.7+.</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 1.1.9
  * Handle zstd 1.4.7+
  * Update documentation
  * unzck: require a *.zck extension
  * General bug fixes
- Dropped upstream merged
  d2eae512bee09a4047cfe586de12f644d73b0736.patch
- Add fix-test-argp.patch: Fix argp detection</changelog>
  <changelog author="rpm@fthiessen.de" date="1620043200">- Update to version 1.1.11
  * Fix memory leak of zck-&gt;prep_digest
  * Fix argp detection
  * Handle certain rare web servers that don't start with \r\n
- Drop upstream merged fix-test-argp.patch</changelog>
  <changelog author="ismail@i10z.com" date="1621080000">- Update to version 1.1.12
  * Update testsuite for zstd 1.5</changelog>
  <changelog author="ismail@i10z.com" date="1621598400">- Update to version 1.1.14
  * Final fixes for zstd 1.5 support</changelog>
  <changelog author="rpm@fthiessen.de" date="1624536000">- Update to version 1.1.16
  * Fix major bug when compressing with dictionary</changelog>
  <changelog author="ali.abdallah@suse.com" date="1697716800">- Fix CVE-2023-46228, bsc#1216268
  * Handle overflow errors in malformed zchunk files.
- Added patch:
  * CVE-2023-46228.patch</changelog>
</package>
<package pkgid="c0cf79712be60deb670e7096b7e674cdd834c6a301c33592baee0b048961c89c" name="zlib" arch="src">
  <version epoch="0" ver="1.2.13" rel="150500.4.3.1"/>
  <changelog author="brogers@suse.com" date="1562846400">- Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum
  conform to usage
  bsc#1141059</changelog>
  <changelog author="tchvatal@suse.com" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1571659200">- Add SUSE specific patch to fix bsc#1138793, we simply don't want
  to test if the app was linked with exactly same version of zlib
  like the one that is present on the runtime:
  * zlib-no-version-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1572350400">- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Update 410.patch to contain latest fixes from IBM bsc#1166260
  * The build behaviour changed</changelog>
  <changelog author="lidong.zhong@suse.com" date="1596715200">- Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1598529600">- Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776</changelog>
  <changelog author="tchvatal@suse.com" date="1598616000">- Add patch to fix compression level switching
  bsc#1175811 bsc#1175830 bsc#1175831
  * zlib-compression-switching.patch</changelog>
  <changelog author="coolo@suse.com" date="1600257600">- Provide a testsuite subpackage to run post-build validation</changelog>
  <changelog author="lnussel@suse.de" date="1603886400">- install to /usr (boo#1029961)</changelog>
  <changelog author="ali.abdallah@suse.com" date="1604923200">- Fix hw compression on z15 bsc#1176201
- Add zlib-s390x-z15-fix-hw-compression.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1647000000">- Don't install (internal) crypt.h header in minizip
  * minizip-dont-install-crypt-header.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648209600">- Fix memory corruption on deflate, bsc#1197459
  * bsc1197459.patch - CVE-2018-25032
- Update 410.patch
  * Remove included patches:
    bsc1174551-fxi-imcomplete-raw-streams.patch
    zlib-compression-switching.patch
    zlib-s390x-z15-fix-hw-compression.patch
- Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch</changelog>
  <changelog author="meissner@suse.com" date="1656763200">- switch to https urls</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661256000">- Update to 1.2.12:
  * A lot of bug fixes
  * Improve speed of crc32 functions
  * Use ARM crc32 instructions if the ARM architecture has them
  For the complete changes, see ChangeLog
- Fixes CVE-2022-37434,  heap-based buffer over-read or buffer overflow in
  inflate.c via a large gzip header extra field
  (CVE-2022-37434, bsc#1202175)
- Added patches:
  * zlib-1.2.11-covscan-issues-rhel9.patch
  * zlib-1.2.11-covscan-issues.patch
  * zlib-1.2.12-s390-vectorize-crc32.patch
  * zlib-1.2.12-optimized-crc32-power8.patch
  * zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.12-fix-configure.patch
  * zlib-1.2.12-correct-inputs-provided-to-crc-func.patch
  * zlib-1.2.12-fix-CVE-2022-37434.patch
  * zlib-1.2.5-minizip-fixuncrypt.patch
- Removed patches:
  * bsc1197459.patch (upstreamed)
  * zlib-power8-fate325307.patch
    (replaced by zlib-1.2.12-optimized-crc32-power8.patch)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
    (replaced by zlib-1.2.12-IBM-Z-hw-accelrated-deflate-s390x.patch)
  * 410.patch
    (replaced by zlib-1.2.12-IBM-Z-hw-accelrated-deflate-s390x.patch)
- Refreshed patches:
  * zlib-format.patch
  * zlib-no-version-check.patch
- Disable profiling since it breaks tests
- Update zlib-rpmlintrc</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Add Power8 optimizations:
  * zlib-1.2.12-add-optimized-slide_hash-for-power.patch
  * zlib-1.2.12-add-vectorized-longest_match-for-power.patch
  * zlib-1.2.12-adler32-vector-optimizations-for-power.patch
  * zlib-1.2.12-fix-invalid-memory-access-on-ppc-and-ppc64.patch
- Update zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch</changelog>
  <changelog author="dmueller@suse.com" date="1670760000">- build zlib with optflags again</changelog>
  <changelog author="danilo.spinella@suse.com" date="1674129600">- Update to 1.13:
  * Fix configure issue that discarded provided CC definition
  * Correct incorrect inputs provided to the CRC functions
  * Repair prototypes and exporting of new CRC functions
  * Fix inflateBack to detect invalid input with distances too far
  * Have infback() deliver all of the available output up to any error
  * Fix a bug when getting a gzip header extra field with inflate()
  * Fix bug in block type selection when Z_FIXED used
  * Tighten deflateBound bounds
  * Remove deleted assembler code references
  * Various portability and appearance improvements
- Added patches:
  * zlib-1.2.13-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.13-fix-bug-deflateBound.patch
  * zlib-1.2.13-optimized-s390.patch
- Refreshed patches:
  * zlib-1.2.12-add-optimized-slide_hash-for-power.patch
  * zlib-1.2.12-add-vectorized-longest_match-for-power.patch
  * zlib-1.2.12-s390-vectorize-crc32.patch
- Removed patches:
  * zlib-1.2.12-fix-configure.patch
  * zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.12-optimized-crc32-power8.patch
  * zlib-1.2.12-correct-inputs-provided-to-crc-func.patch
  * zlib-1.2.12-fix-CVE-2022-37434.patch
  * zlib-1.2.11-optimized-s390.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1683201600">- Fix deflateBound() before deflateInit(), bsc#1210593, bsc#1211005
  bsc1210593.patch</changelog>
  <changelog author="oss@danyspin97.org" date="1697716800">- Fix CVE-2023-45853, integer overflow and resultant heap-based buffer
  overflow in zipOpenNewFileInZip4_6, bsc#1216378
  * CVE-2023-45853.patch</changelog>
</package>
<package pkgid="72876b386af3b49e707d3464dc0c15b6700f16fc09d7b99f27f1eeb406f8f1ec" name="zlib-devel" arch="aarch64">
  <version epoch="0" ver="1.2.13" rel="150500.4.3.1"/>
  <changelog author="brogers@suse.com" date="1562846400">- Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum
  conform to usage
  bsc#1141059</changelog>
  <changelog author="tchvatal@suse.com" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1571659200">- Add SUSE specific patch to fix bsc#1138793, we simply don't want
  to test if the app was linked with exactly same version of zlib
  like the one that is present on the runtime:
  * zlib-no-version-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1572350400">- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Update 410.patch to contain latest fixes from IBM bsc#1166260
  * The build behaviour changed</changelog>
  <changelog author="lidong.zhong@suse.com" date="1596715200">- Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1598529600">- Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776</changelog>
  <changelog author="tchvatal@suse.com" date="1598616000">- Add patch to fix compression level switching
  bsc#1175811 bsc#1175830 bsc#1175831
  * zlib-compression-switching.patch</changelog>
  <changelog author="coolo@suse.com" date="1600257600">- Provide a testsuite subpackage to run post-build validation</changelog>
  <changelog author="lnussel@suse.de" date="1603886400">- install to /usr (boo#1029961)</changelog>
  <changelog author="ali.abdallah@suse.com" date="1604923200">- Fix hw compression on z15 bsc#1176201
- Add zlib-s390x-z15-fix-hw-compression.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1647000000">- Don't install (internal) crypt.h header in minizip
  * minizip-dont-install-crypt-header.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648209600">- Fix memory corruption on deflate, bsc#1197459
  * bsc1197459.patch - CVE-2018-25032
- Update 410.patch
  * Remove included patches:
    bsc1174551-fxi-imcomplete-raw-streams.patch
    zlib-compression-switching.patch
    zlib-s390x-z15-fix-hw-compression.patch
- Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch</changelog>
  <changelog author="meissner@suse.com" date="1656763200">- switch to https urls</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661256000">- Update to 1.2.12:
  * A lot of bug fixes
  * Improve speed of crc32 functions
  * Use ARM crc32 instructions if the ARM architecture has them
  For the complete changes, see ChangeLog
- Fixes CVE-2022-37434,  heap-based buffer over-read or buffer overflow in
  inflate.c via a large gzip header extra field
  (CVE-2022-37434, bsc#1202175)
- Added patches:
  * zlib-1.2.11-covscan-issues-rhel9.patch
  * zlib-1.2.11-covscan-issues.patch
  * zlib-1.2.12-s390-vectorize-crc32.patch
  * zlib-1.2.12-optimized-crc32-power8.patch
  * zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.12-fix-configure.patch
  * zlib-1.2.12-correct-inputs-provided-to-crc-func.patch
  * zlib-1.2.12-fix-CVE-2022-37434.patch
  * zlib-1.2.5-minizip-fixuncrypt.patch
- Removed patches:
  * bsc1197459.patch (upstreamed)
  * zlib-power8-fate325307.patch
    (replaced by zlib-1.2.12-optimized-crc32-power8.patch)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
    (replaced by zlib-1.2.12-IBM-Z-hw-accelrated-deflate-s390x.patch)
  * 410.patch
    (replaced by zlib-1.2.12-IBM-Z-hw-accelrated-deflate-s390x.patch)
- Refreshed patches:
  * zlib-format.patch
  * zlib-no-version-check.patch
- Disable profiling since it breaks tests
- Update zlib-rpmlintrc</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Add Power8 optimizations:
  * zlib-1.2.12-add-optimized-slide_hash-for-power.patch
  * zlib-1.2.12-add-vectorized-longest_match-for-power.patch
  * zlib-1.2.12-adler32-vector-optimizations-for-power.patch
  * zlib-1.2.12-fix-invalid-memory-access-on-ppc-and-ppc64.patch
- Update zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch</changelog>
  <changelog author="dmueller@suse.com" date="1670760000">- build zlib with optflags again</changelog>
  <changelog author="danilo.spinella@suse.com" date="1674129600">- Update to 1.13:
  * Fix configure issue that discarded provided CC definition
  * Correct incorrect inputs provided to the CRC functions
  * Repair prototypes and exporting of new CRC functions
  * Fix inflateBack to detect invalid input with distances too far
  * Have infback() deliver all of the available output up to any error
  * Fix a bug when getting a gzip header extra field with inflate()
  * Fix bug in block type selection when Z_FIXED used
  * Tighten deflateBound bounds
  * Remove deleted assembler code references
  * Various portability and appearance improvements
- Added patches:
  * zlib-1.2.13-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.13-fix-bug-deflateBound.patch
  * zlib-1.2.13-optimized-s390.patch
- Refreshed patches:
  * zlib-1.2.12-add-optimized-slide_hash-for-power.patch
  * zlib-1.2.12-add-vectorized-longest_match-for-power.patch
  * zlib-1.2.12-s390-vectorize-crc32.patch
- Removed patches:
  * zlib-1.2.12-fix-configure.patch
  * zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.12-optimized-crc32-power8.patch
  * zlib-1.2.12-correct-inputs-provided-to-crc-func.patch
  * zlib-1.2.12-fix-CVE-2022-37434.patch
  * zlib-1.2.11-optimized-s390.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1683201600">- Fix deflateBound() before deflateInit(), bsc#1210593, bsc#1211005
  bsc1210593.patch</changelog>
  <changelog author="oss@danyspin97.org" date="1697716800">- Fix CVE-2023-45853, integer overflow and resultant heap-based buffer
  overflow in zipOpenNewFileInZip4_6, bsc#1216378
  * CVE-2023-45853.patch</changelog>
</package>
<package pkgid="cd7a582806700401b638d90e79c07b6f4db63429527787cbff25554ce12990b0" name="zlib-devel" arch="s390x">
  <version epoch="0" ver="1.2.13" rel="150500.4.3.1"/>
  <changelog author="brogers@suse.com" date="1562846400">- Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum
  conform to usage
  bsc#1141059</changelog>
  <changelog author="tchvatal@suse.com" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1571659200">- Add SUSE specific patch to fix bsc#1138793, we simply don't want
  to test if the app was linked with exactly same version of zlib
  like the one that is present on the runtime:
  * zlib-no-version-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1572350400">- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Update 410.patch to contain latest fixes from IBM bsc#1166260
  * The build behaviour changed</changelog>
  <changelog author="lidong.zhong@suse.com" date="1596715200">- Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1598529600">- Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776</changelog>
  <changelog author="tchvatal@suse.com" date="1598616000">- Add patch to fix compression level switching
  bsc#1175811 bsc#1175830 bsc#1175831
  * zlib-compression-switching.patch</changelog>
  <changelog author="coolo@suse.com" date="1600257600">- Provide a testsuite subpackage to run post-build validation</changelog>
  <changelog author="lnussel@suse.de" date="1603886400">- install to /usr (boo#1029961)</changelog>
  <changelog author="ali.abdallah@suse.com" date="1604923200">- Fix hw compression on z15 bsc#1176201
- Add zlib-s390x-z15-fix-hw-compression.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1647000000">- Don't install (internal) crypt.h header in minizip
  * minizip-dont-install-crypt-header.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648209600">- Fix memory corruption on deflate, bsc#1197459
  * bsc1197459.patch - CVE-2018-25032
- Update 410.patch
  * Remove included patches:
    bsc1174551-fxi-imcomplete-raw-streams.patch
    zlib-compression-switching.patch
    zlib-s390x-z15-fix-hw-compression.patch
- Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch</changelog>
  <changelog author="meissner@suse.com" date="1656763200">- switch to https urls</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661256000">- Update to 1.2.12:
  * A lot of bug fixes
  * Improve speed of crc32 functions
  * Use ARM crc32 instructions if the ARM architecture has them
  For the complete changes, see ChangeLog
- Fixes CVE-2022-37434,  heap-based buffer over-read or buffer overflow in
  inflate.c via a large gzip header extra field
  (CVE-2022-37434, bsc#1202175)
- Added patches:
  * zlib-1.2.11-covscan-issues-rhel9.patch
  * zlib-1.2.11-covscan-issues.patch
  * zlib-1.2.12-s390-vectorize-crc32.patch
  * zlib-1.2.12-optimized-crc32-power8.patch
  * zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.12-fix-configure.patch
  * zlib-1.2.12-correct-inputs-provided-to-crc-func.patch
  * zlib-1.2.12-fix-CVE-2022-37434.patch
  * zlib-1.2.5-minizip-fixuncrypt.patch
- Removed patches:
  * bsc1197459.patch (upstreamed)
  * zlib-power8-fate325307.patch
    (replaced by zlib-1.2.12-optimized-crc32-power8.patch)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
    (replaced by zlib-1.2.12-IBM-Z-hw-accelrated-deflate-s390x.patch)
  * 410.patch
    (replaced by zlib-1.2.12-IBM-Z-hw-accelrated-deflate-s390x.patch)
- Refreshed patches:
  * zlib-format.patch
  * zlib-no-version-check.patch
- Disable profiling since it breaks tests
- Update zlib-rpmlintrc</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Add Power8 optimizations:
  * zlib-1.2.12-add-optimized-slide_hash-for-power.patch
  * zlib-1.2.12-add-vectorized-longest_match-for-power.patch
  * zlib-1.2.12-adler32-vector-optimizations-for-power.patch
  * zlib-1.2.12-fix-invalid-memory-access-on-ppc-and-ppc64.patch
- Update zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch</changelog>
  <changelog author="dmueller@suse.com" date="1670760000">- build zlib with optflags again</changelog>
  <changelog author="danilo.spinella@suse.com" date="1674129600">- Update to 1.13:
  * Fix configure issue that discarded provided CC definition
  * Correct incorrect inputs provided to the CRC functions
  * Repair prototypes and exporting of new CRC functions
  * Fix inflateBack to detect invalid input with distances too far
  * Have infback() deliver all of the available output up to any error
  * Fix a bug when getting a gzip header extra field with inflate()
  * Fix bug in block type selection when Z_FIXED used
  * Tighten deflateBound bounds
  * Remove deleted assembler code references
  * Various portability and appearance improvements
- Added patches:
  * zlib-1.2.13-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.13-fix-bug-deflateBound.patch
  * zlib-1.2.13-optimized-s390.patch
- Refreshed patches:
  * zlib-1.2.12-add-optimized-slide_hash-for-power.patch
  * zlib-1.2.12-add-vectorized-longest_match-for-power.patch
  * zlib-1.2.12-s390-vectorize-crc32.patch
- Removed patches:
  * zlib-1.2.12-fix-configure.patch
  * zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.12-optimized-crc32-power8.patch
  * zlib-1.2.12-correct-inputs-provided-to-crc-func.patch
  * zlib-1.2.12-fix-CVE-2022-37434.patch
  * zlib-1.2.11-optimized-s390.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1683201600">- Fix deflateBound() before deflateInit(), bsc#1210593, bsc#1211005
  bsc1210593.patch</changelog>
  <changelog author="oss@danyspin97.org" date="1697716800">- Fix CVE-2023-45853, integer overflow and resultant heap-based buffer
  overflow in zipOpenNewFileInZip4_6, bsc#1216378
  * CVE-2023-45853.patch</changelog>
</package>
<package pkgid="16b0c66f6384d2ed18894441075a928d263897e8fb1c0c496f9ee41f3a1c2411" name="zlib-devel" arch="x86_64">
  <version epoch="0" ver="1.2.13" rel="150500.4.3.1"/>
  <changelog author="brogers@suse.com" date="1562846400">- Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum
  conform to usage
  bsc#1141059</changelog>
  <changelog author="tchvatal@suse.com" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1571659200">- Add SUSE specific patch to fix bsc#1138793, we simply don't want
  to test if the app was linked with exactly same version of zlib
  like the one that is present on the runtime:
  * zlib-no-version-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1572350400">- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Update 410.patch to contain latest fixes from IBM bsc#1166260
  * The build behaviour changed</changelog>
  <changelog author="lidong.zhong@suse.com" date="1596715200">- Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1598529600">- Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776</changelog>
  <changelog author="tchvatal@suse.com" date="1598616000">- Add patch to fix compression level switching
  bsc#1175811 bsc#1175830 bsc#1175831
  * zlib-compression-switching.patch</changelog>
  <changelog author="coolo@suse.com" date="1600257600">- Provide a testsuite subpackage to run post-build validation</changelog>
  <changelog author="lnussel@suse.de" date="1603886400">- install to /usr (boo#1029961)</changelog>
  <changelog author="ali.abdallah@suse.com" date="1604923200">- Fix hw compression on z15 bsc#1176201
- Add zlib-s390x-z15-fix-hw-compression.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1647000000">- Don't install (internal) crypt.h header in minizip
  * minizip-dont-install-crypt-header.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648209600">- Fix memory corruption on deflate, bsc#1197459
  * bsc1197459.patch - CVE-2018-25032
- Update 410.patch
  * Remove included patches:
    bsc1174551-fxi-imcomplete-raw-streams.patch
    zlib-compression-switching.patch
    zlib-s390x-z15-fix-hw-compression.patch
- Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch</changelog>
  <changelog author="meissner@suse.com" date="1656763200">- switch to https urls</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661256000">- Update to 1.2.12:
  * A lot of bug fixes
  * Improve speed of crc32 functions
  * Use ARM crc32 instructions if the ARM architecture has them
  For the complete changes, see ChangeLog
- Fixes CVE-2022-37434,  heap-based buffer over-read or buffer overflow in
  inflate.c via a large gzip header extra field
  (CVE-2022-37434, bsc#1202175)
- Added patches:
  * zlib-1.2.11-covscan-issues-rhel9.patch
  * zlib-1.2.11-covscan-issues.patch
  * zlib-1.2.12-s390-vectorize-crc32.patch
  * zlib-1.2.12-optimized-crc32-power8.patch
  * zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.12-fix-configure.patch
  * zlib-1.2.12-correct-inputs-provided-to-crc-func.patch
  * zlib-1.2.12-fix-CVE-2022-37434.patch
  * zlib-1.2.5-minizip-fixuncrypt.patch
- Removed patches:
  * bsc1197459.patch (upstreamed)
  * zlib-power8-fate325307.patch
    (replaced by zlib-1.2.12-optimized-crc32-power8.patch)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
    (replaced by zlib-1.2.12-IBM-Z-hw-accelrated-deflate-s390x.patch)
  * 410.patch
    (replaced by zlib-1.2.12-IBM-Z-hw-accelrated-deflate-s390x.patch)
- Refreshed patches:
  * zlib-format.patch
  * zlib-no-version-check.patch
- Disable profiling since it breaks tests
- Update zlib-rpmlintrc</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Add Power8 optimizations:
  * zlib-1.2.12-add-optimized-slide_hash-for-power.patch
  * zlib-1.2.12-add-vectorized-longest_match-for-power.patch
  * zlib-1.2.12-adler32-vector-optimizations-for-power.patch
  * zlib-1.2.12-fix-invalid-memory-access-on-ppc-and-ppc64.patch
- Update zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch</changelog>
  <changelog author="dmueller@suse.com" date="1670760000">- build zlib with optflags again</changelog>
  <changelog author="danilo.spinella@suse.com" date="1674129600">- Update to 1.13:
  * Fix configure issue that discarded provided CC definition
  * Correct incorrect inputs provided to the CRC functions
  * Repair prototypes and exporting of new CRC functions
  * Fix inflateBack to detect invalid input with distances too far
  * Have infback() deliver all of the available output up to any error
  * Fix a bug when getting a gzip header extra field with inflate()
  * Fix bug in block type selection when Z_FIXED used
  * Tighten deflateBound bounds
  * Remove deleted assembler code references
  * Various portability and appearance improvements
- Added patches:
  * zlib-1.2.13-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.13-fix-bug-deflateBound.patch
  * zlib-1.2.13-optimized-s390.patch
- Refreshed patches:
  * zlib-1.2.12-add-optimized-slide_hash-for-power.patch
  * zlib-1.2.12-add-vectorized-longest_match-for-power.patch
  * zlib-1.2.12-s390-vectorize-crc32.patch
- Removed patches:
  * zlib-1.2.12-fix-configure.patch
  * zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.12-optimized-crc32-power8.patch
  * zlib-1.2.12-correct-inputs-provided-to-crc-func.patch
  * zlib-1.2.12-fix-CVE-2022-37434.patch
  * zlib-1.2.11-optimized-s390.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1683201600">- Fix deflateBound() before deflateInit(), bsc#1210593, bsc#1211005
  bsc1210593.patch</changelog>
  <changelog author="oss@danyspin97.org" date="1697716800">- Fix CVE-2023-45853, integer overflow and resultant heap-based buffer
  overflow in zipOpenNewFileInZip4_6, bsc#1216378
  * CVE-2023-45853.patch</changelog>
</package>
<package pkgid="953aeb9ba8e9b0748616d1f73d4cde45064a94c9e8afef0a6a6fa7f582de63c7" name="zypper" arch="aarch64">
  <version epoch="0" ver="1.14.66" rel="150400.3.35.1"/>
  <changelog author="ma@suse.de" date="1625140800">- Quick fix obs:// platform guessing for Leap (bsc#1187425)
- man: point out more clearly that patches update affected
  packages to the latest version (bsc#1187466)
- version 1.14.47</changelog>
  <changelog author="ma@suse.de" date="1627473600">- Support new reports for singletrans rpm commit.
- BuildRequires:  libzypp-devel &gt;= 17.27.1.
  For lock/query comments.
- Prompt: choose exact match if prompt options are not prefix
  free (bsc#1188156)
- Install summary: Show new and removed packages closer to the
  prompt (fixes #403)
  These packages are usually more interesting than the updated
  ones. In case of doubt less scrolling is needed to see them.
- Add need reboot/restart hint to XML install summary
  (bsc#1188435)
- Add comment option for lock command (fixes #388).
- version 1.14.48</changelog>
  <changelog author="ma@suse.de" date="1630670400">- Avoid calling 'su' to detect a too restrictive sudo user umask
  (bsc#1186602)
- Fix typo in German translation (fixes #395)
- BuildRequires:  libzypp-devel &gt;= 17.28.3.
- version 1.14.49</changelog>
  <changelog author="ma@suse.de" date="1634558400">- Fix compiler warning.
- zypper.conf: New option whether to collect subcommands found in
  $PATH (fixes #379)
  +[subcommand] i
  +
  +##  Whether to look for subcommands in $PATH
  +##
  +## If a subcommand is not found in the zypper_execdir, the wrapper
  +## will look in the rest of your $PATH for it. Thus, it's possible
  +## to write local zypper extensions that don't live in system space.
  +## See section SUBCOMMANDS in the zypper manpage.
  +##
  +## Valid values: boolean
  +## Default value: yes
  +##
  +# seachSubcommandInPath = yes.
- help subcommand: show path of command found in $PATH.
- version 1.14.50</changelog>
  <changelog author="ma@suse.de" date="1640260800">- Singletrans: handle fatal and non-fatal script errors properly.
- Add SingleTransReportReceiver.
- Immediately write out additional rpm output.
- BuildRequires:  libzypp-devel &gt;= 17.29.0.
  Need SingleTransReport and immediate rpm script output reports.
- version 1.14.51</changelog>
  <changelog author="ma@suse.de" date="1645704000">- info: print the packages upstream URL if available (fixes #426)
- info: Fix SEGV with not installed PTFs (bsc#1196317)
- Don't prevent less restrictive umasks (bsc#1195999)
- version 1.14.52</changelog>
  <changelog author="ma@suse.de" date="1655294400">- Basic JobReport for "cmdout/monitor".
- versioncmp: if verbose, also print the edition 'parts' which are
  compared.
- Make sure MediaAccess is closed on exception (bsc#1194550)
- Display plus-content hint conditionally (fixes #433)
- Honor the NO_COLOR environment variable when auto-detecting
  whether to use color (fixes #432)
- Define table columns which should be sorted natural [case
  insensitive] (fixes #391, closes #396, fixes #424)
- lr/ls: Use highlight color on name and alias as well.
- version 1.14.53</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 13 (fixes #448)
- Put signing key supplying repository name in quotes.
- version 1.14.54</changelog>
  <changelog author="ma@suse.de" date="1658318400">- lr: Allow shortening the Name column if table is wider than the
  terminal (bsc#1201638)
- Don't accepts install/remove modifier without argument
  (bsc#1201576)
- zypper-download: Set correct ExitInfoCode when failing to
  resolve argument.
- zypper-download: Handle unresolvable arguments as error.
  This commit changes zypper-download such that it behaves more
  consistent to zypper-install when an argument can't be resolved.
- version 1.14.55</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #441, fixes #444)
- Remove unneeded code to compute the PPP status.
  Since libzypp 17.23.0 the PPP status is auto established. No
  extra solver run is needed.
- Make sure 'up' respects solver related CLI options (bsc#1201972)
- Fix tests to use locale "C.UTF-8" rather than "en_US".
- Fix man page (fixes #451)
- version 1.14.56</changelog>
  <changelog author="ma@suse.de" date="1664971200">- BuildRequires:  libzypp-devel &gt;= 17.31.2.
- Fix --[no]-allow-vendor-change feedback in install command
  (bsc#1201972)
- version 1.14.57</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Update man page and explain '.no_auto_prune' (bsc#1204956)
- Allow to (re)add a service with the same URL (bsc#1203715)
- Explain outdatedness of repos (fixes #463)
- BuildRequires:  libzypp-devel &gt;= 17.31.5
- version 1.14.58</changelog>
  <changelog author="ma@suse.de" date="1671883200">- BuildRequires:  libzypp-devel &gt;= 17.31.7.
- Provide "removeptf" command (bsc#1203249)
  A remove command which prefers replacing dependant packages to
  removing them as well.
  A PTF is typically removed as soon as the fix it provides is
  applied to the latest official update of the dependant packages.
  But you don't want the dependant packages to be removed together
  with the PTF, which is what the remove command would do. The
  removeptf command however will aim to replace the dependant
  packages by their official update versions.
- patterns: Avoid dispylaing superfluous @System entries
  (bsc#1205570)
- version 1.14.59</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Fix selecting installed patterns from picklist (bsc#1209406)
- man: better explanation of --priority (fixes #480)
- version 1.14.60</changelog>
  <changelog author="ma@suse.de" date="1686830400">- targetos: Add an error note if XPath:/product/register/target
  is not defined in /etc/products.d/baseproduct (bsc#1211261)
- targetos: Update help and man page (bsc#1211261)
- version 1.14.61</changelog>
  <changelog author="ma@suse.de" date="1690545600">- man: revised explanation of --force-resolution (bsc#1213557)
  Point out that the option not only allows to remove packages but
  may also violate any other active policy if there is no other way
  to resolve the job.
- Print summary hint if policies were violated due to
  - -force-resolution (bsc#1213557)
- BuildRequires:  libzypp-devel &gt;= 17.31.16 (for zypp-tui)
- version 1.14.62</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Changed location of bash completion script (bsc#1213854).
  This changes the location of zypper.sh bash completion script
  from /usr/share/bash-completion/completions/.
- version 1.14.63</changelog>
  <changelog author="ma@suse.de" date="1693915200">- Fix name of the bash completion script (bsc#1215007)
  In 1.14.63 the location of the bash completion script was changed
  to /usr/share/bash-completion/completions/. But the patch failed
  to also rename the completion script. The original script name
  zypper.sh is not recognized at the new location.
- Update notes about failing signature checks (bsc#1214395)
  It might be a transient issue if the server is in the midst of
  receiving new data. Retry after a few minutes might work.
- Improve the SIGINT handler to be signal safe (bsc#1214292)
  This patch updates the SIGINT handling strategy to be signal
  safe. Meaning the signal handler will do not much more than
  setting a flag, which we are going to check in the normal program
  flow as much as possible.
- version 1.14.64</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Fix some typos and spelling errors found by Lintian (fixes #501)
- Prefer unaliased `grep` to avoid unexpected/wrong completions.
  (#503)
- commit: Insert a headline to separate output of different rpm
  scripts (bsc#1041742)
- Fix typo in changes file.
- version 1.14.65</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Return 104 also if info suggests near matches (fixes #504)
- Rephrase upgrade message for openSUSE Tumbleweed (bsc#1212422)
- Fix typo (fixes #484)
- version 1.14.66</changelog>
</package>
<package pkgid="1d1fbb975f002330b9fe65a7e70f9977581273fb30be579a2c7df79d51ede892" name="zypper" arch="s390x">
  <version epoch="0" ver="1.14.66" rel="150400.3.35.1"/>
  <changelog author="ma@suse.de" date="1625140800">- Quick fix obs:// platform guessing for Leap (bsc#1187425)
- man: point out more clearly that patches update affected
  packages to the latest version (bsc#1187466)
- version 1.14.47</changelog>
  <changelog author="ma@suse.de" date="1627473600">- Support new reports for singletrans rpm commit.
- BuildRequires:  libzypp-devel &gt;= 17.27.1.
  For lock/query comments.
- Prompt: choose exact match if prompt options are not prefix
  free (bsc#1188156)
- Install summary: Show new and removed packages closer to the
  prompt (fixes #403)
  These packages are usually more interesting than the updated
  ones. In case of doubt less scrolling is needed to see them.
- Add need reboot/restart hint to XML install summary
  (bsc#1188435)
- Add comment option for lock command (fixes #388).
- version 1.14.48</changelog>
  <changelog author="ma@suse.de" date="1630670400">- Avoid calling 'su' to detect a too restrictive sudo user umask
  (bsc#1186602)
- Fix typo in German translation (fixes #395)
- BuildRequires:  libzypp-devel &gt;= 17.28.3.
- version 1.14.49</changelog>
  <changelog author="ma@suse.de" date="1634558400">- Fix compiler warning.
- zypper.conf: New option whether to collect subcommands found in
  $PATH (fixes #379)
  +[subcommand] i
  +
  +##  Whether to look for subcommands in $PATH
  +##
  +## If a subcommand is not found in the zypper_execdir, the wrapper
  +## will look in the rest of your $PATH for it. Thus, it's possible
  +## to write local zypper extensions that don't live in system space.
  +## See section SUBCOMMANDS in the zypper manpage.
  +##
  +## Valid values: boolean
  +## Default value: yes
  +##
  +# seachSubcommandInPath = yes.
- help subcommand: show path of command found in $PATH.
- version 1.14.50</changelog>
  <changelog author="ma@suse.de" date="1640260800">- Singletrans: handle fatal and non-fatal script errors properly.
- Add SingleTransReportReceiver.
- Immediately write out additional rpm output.
- BuildRequires:  libzypp-devel &gt;= 17.29.0.
  Need SingleTransReport and immediate rpm script output reports.
- version 1.14.51</changelog>
  <changelog author="ma@suse.de" date="1645704000">- info: print the packages upstream URL if available (fixes #426)
- info: Fix SEGV with not installed PTFs (bsc#1196317)
- Don't prevent less restrictive umasks (bsc#1195999)
- version 1.14.52</changelog>
  <changelog author="ma@suse.de" date="1655294400">- Basic JobReport for "cmdout/monitor".
- versioncmp: if verbose, also print the edition 'parts' which are
  compared.
- Make sure MediaAccess is closed on exception (bsc#1194550)
- Display plus-content hint conditionally (fixes #433)
- Honor the NO_COLOR environment variable when auto-detecting
  whether to use color (fixes #432)
- Define table columns which should be sorted natural [case
  insensitive] (fixes #391, closes #396, fixes #424)
- lr/ls: Use highlight color on name and alias as well.
- version 1.14.53</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 13 (fixes #448)
- Put signing key supplying repository name in quotes.
- version 1.14.54</changelog>
  <changelog author="ma@suse.de" date="1658318400">- lr: Allow shortening the Name column if table is wider than the
  terminal (bsc#1201638)
- Don't accepts install/remove modifier without argument
  (bsc#1201576)
- zypper-download: Set correct ExitInfoCode when failing to
  resolve argument.
- zypper-download: Handle unresolvable arguments as error.
  This commit changes zypper-download such that it behaves more
  consistent to zypper-install when an argument can't be resolved.
- version 1.14.55</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #441, fixes #444)
- Remove unneeded code to compute the PPP status.
  Since libzypp 17.23.0 the PPP status is auto established. No
  extra solver run is needed.
- Make sure 'up' respects solver related CLI options (bsc#1201972)
- Fix tests to use locale "C.UTF-8" rather than "en_US".
- Fix man page (fixes #451)
- version 1.14.56</changelog>
  <changelog author="ma@suse.de" date="1664971200">- BuildRequires:  libzypp-devel &gt;= 17.31.2.
- Fix --[no]-allow-vendor-change feedback in install command
  (bsc#1201972)
- version 1.14.57</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Update man page and explain '.no_auto_prune' (bsc#1204956)
- Allow to (re)add a service with the same URL (bsc#1203715)
- Explain outdatedness of repos (fixes #463)
- BuildRequires:  libzypp-devel &gt;= 17.31.5
- version 1.14.58</changelog>
  <changelog author="ma@suse.de" date="1671883200">- BuildRequires:  libzypp-devel &gt;= 17.31.7.
- Provide "removeptf" command (bsc#1203249)
  A remove command which prefers replacing dependant packages to
  removing them as well.
  A PTF is typically removed as soon as the fix it provides is
  applied to the latest official update of the dependant packages.
  But you don't want the dependant packages to be removed together
  with the PTF, which is what the remove command would do. The
  removeptf command however will aim to replace the dependant
  packages by their official update versions.
- patterns: Avoid dispylaing superfluous @System entries
  (bsc#1205570)
- version 1.14.59</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Fix selecting installed patterns from picklist (bsc#1209406)
- man: better explanation of --priority (fixes #480)
- version 1.14.60</changelog>
  <changelog author="ma@suse.de" date="1686830400">- targetos: Add an error note if XPath:/product/register/target
  is not defined in /etc/products.d/baseproduct (bsc#1211261)
- targetos: Update help and man page (bsc#1211261)
- version 1.14.61</changelog>
  <changelog author="ma@suse.de" date="1690545600">- man: revised explanation of --force-resolution (bsc#1213557)
  Point out that the option not only allows to remove packages but
  may also violate any other active policy if there is no other way
  to resolve the job.
- Print summary hint if policies were violated due to
  - -force-resolution (bsc#1213557)
- BuildRequires:  libzypp-devel &gt;= 17.31.16 (for zypp-tui)
- version 1.14.62</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Changed location of bash completion script (bsc#1213854).
  This changes the location of zypper.sh bash completion script
  from /usr/share/bash-completion/completions/.
- version 1.14.63</changelog>
  <changelog author="ma@suse.de" date="1693915200">- Fix name of the bash completion script (bsc#1215007)
  In 1.14.63 the location of the bash completion script was changed
  to /usr/share/bash-completion/completions/. But the patch failed
  to also rename the completion script. The original script name
  zypper.sh is not recognized at the new location.
- Update notes about failing signature checks (bsc#1214395)
  It might be a transient issue if the server is in the midst of
  receiving new data. Retry after a few minutes might work.
- Improve the SIGINT handler to be signal safe (bsc#1214292)
  This patch updates the SIGINT handling strategy to be signal
  safe. Meaning the signal handler will do not much more than
  setting a flag, which we are going to check in the normal program
  flow as much as possible.
- version 1.14.64</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Fix some typos and spelling errors found by Lintian (fixes #501)
- Prefer unaliased `grep` to avoid unexpected/wrong completions.
  (#503)
- commit: Insert a headline to separate output of different rpm
  scripts (bsc#1041742)
- Fix typo in changes file.
- version 1.14.65</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Return 104 also if info suggests near matches (fixes #504)
- Rephrase upgrade message for openSUSE Tumbleweed (bsc#1212422)
- Fix typo (fixes #484)
- version 1.14.66</changelog>
</package>
<package pkgid="b0cd690da8b4a8fe8a219842bfcf1840d55ab984544dc45aad276074a57c588a" name="zypper" arch="src">
  <version epoch="0" ver="1.14.66" rel="150400.3.35.1"/>
  <changelog author="ma@suse.de" date="1625140800">- Quick fix obs:// platform guessing for Leap (bsc#1187425)
- man: point out more clearly that patches update affected
  packages to the latest version (bsc#1187466)
- version 1.14.47</changelog>
  <changelog author="ma@suse.de" date="1627473600">- Support new reports for singletrans rpm commit.
- BuildRequires:  libzypp-devel &gt;= 17.27.1.
  For lock/query comments.
- Prompt: choose exact match if prompt options are not prefix
  free (bsc#1188156)
- Install summary: Show new and removed packages closer to the
  prompt (fixes #403)
  These packages are usually more interesting than the updated
  ones. In case of doubt less scrolling is needed to see them.
- Add need reboot/restart hint to XML install summary
  (bsc#1188435)
- Add comment option for lock command (fixes #388).
- version 1.14.48</changelog>
  <changelog author="ma@suse.de" date="1630670400">- Avoid calling 'su' to detect a too restrictive sudo user umask
  (bsc#1186602)
- Fix typo in German translation (fixes #395)
- BuildRequires:  libzypp-devel &gt;= 17.28.3.
- version 1.14.49</changelog>
  <changelog author="ma@suse.de" date="1634558400">- Fix compiler warning.
- zypper.conf: New option whether to collect subcommands found in
  $PATH (fixes #379)
  +[subcommand] i
  +
  +##  Whether to look for subcommands in $PATH
  +##
  +## If a subcommand is not found in the zypper_execdir, the wrapper
  +## will look in the rest of your $PATH for it. Thus, it's possible
  +## to write local zypper extensions that don't live in system space.
  +## See section SUBCOMMANDS in the zypper manpage.
  +##
  +## Valid values: boolean
  +## Default value: yes
  +##
  +# seachSubcommandInPath = yes.
- help subcommand: show path of command found in $PATH.
- version 1.14.50</changelog>
  <changelog author="ma@suse.de" date="1640260800">- Singletrans: handle fatal and non-fatal script errors properly.
- Add SingleTransReportReceiver.
- Immediately write out additional rpm output.
- BuildRequires:  libzypp-devel &gt;= 17.29.0.
  Need SingleTransReport and immediate rpm script output reports.
- version 1.14.51</changelog>
  <changelog author="ma@suse.de" date="1645704000">- info: print the packages upstream URL if available (fixes #426)
- info: Fix SEGV with not installed PTFs (bsc#1196317)
- Don't prevent less restrictive umasks (bsc#1195999)
- version 1.14.52</changelog>
  <changelog author="ma@suse.de" date="1655294400">- Basic JobReport for "cmdout/monitor".
- versioncmp: if verbose, also print the edition 'parts' which are
  compared.
- Make sure MediaAccess is closed on exception (bsc#1194550)
- Display plus-content hint conditionally (fixes #433)
- Honor the NO_COLOR environment variable when auto-detecting
  whether to use color (fixes #432)
- Define table columns which should be sorted natural [case
  insensitive] (fixes #391, closes #396, fixes #424)
- lr/ls: Use highlight color on name and alias as well.
- version 1.14.53</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 13 (fixes #448)
- Put signing key supplying repository name in quotes.
- version 1.14.54</changelog>
  <changelog author="ma@suse.de" date="1658318400">- lr: Allow shortening the Name column if table is wider than the
  terminal (bsc#1201638)
- Don't accepts install/remove modifier without argument
  (bsc#1201576)
- zypper-download: Set correct ExitInfoCode when failing to
  resolve argument.
- zypper-download: Handle unresolvable arguments as error.
  This commit changes zypper-download such that it behaves more
  consistent to zypper-install when an argument can't be resolved.
- version 1.14.55</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #441, fixes #444)
- Remove unneeded code to compute the PPP status.
  Since libzypp 17.23.0 the PPP status is auto established. No
  extra solver run is needed.
- Make sure 'up' respects solver related CLI options (bsc#1201972)
- Fix tests to use locale "C.UTF-8" rather than "en_US".
- Fix man page (fixes #451)
- version 1.14.56</changelog>
  <changelog author="ma@suse.de" date="1664971200">- BuildRequires:  libzypp-devel &gt;= 17.31.2.
- Fix --[no]-allow-vendor-change feedback in install command
  (bsc#1201972)
- version 1.14.57</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Update man page and explain '.no_auto_prune' (bsc#1204956)
- Allow to (re)add a service with the same URL (bsc#1203715)
- Explain outdatedness of repos (fixes #463)
- BuildRequires:  libzypp-devel &gt;= 17.31.5
- version 1.14.58</changelog>
  <changelog author="ma@suse.de" date="1671883200">- BuildRequires:  libzypp-devel &gt;= 17.31.7.
- Provide "removeptf" command (bsc#1203249)
  A remove command which prefers replacing dependant packages to
  removing them as well.
  A PTF is typically removed as soon as the fix it provides is
  applied to the latest official update of the dependant packages.
  But you don't want the dependant packages to be removed together
  with the PTF, which is what the remove command would do. The
  removeptf command however will aim to replace the dependant
  packages by their official update versions.
- patterns: Avoid dispylaing superfluous @System entries
  (bsc#1205570)
- version 1.14.59</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Fix selecting installed patterns from picklist (bsc#1209406)
- man: better explanation of --priority (fixes #480)
- version 1.14.60</changelog>
  <changelog author="ma@suse.de" date="1686830400">- targetos: Add an error note if XPath:/product/register/target
  is not defined in /etc/products.d/baseproduct (bsc#1211261)
- targetos: Update help and man page (bsc#1211261)
- version 1.14.61</changelog>
  <changelog author="ma@suse.de" date="1690545600">- man: revised explanation of --force-resolution (bsc#1213557)
  Point out that the option not only allows to remove packages but
  may also violate any other active policy if there is no other way
  to resolve the job.
- Print summary hint if policies were violated due to
  - -force-resolution (bsc#1213557)
- BuildRequires:  libzypp-devel &gt;= 17.31.16 (for zypp-tui)
- version 1.14.62</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Changed location of bash completion script (bsc#1213854).
  This changes the location of zypper.sh bash completion script
  from /usr/share/bash-completion/completions/.
- version 1.14.63</changelog>
  <changelog author="ma@suse.de" date="1693915200">- Fix name of the bash completion script (bsc#1215007)
  In 1.14.63 the location of the bash completion script was changed
  to /usr/share/bash-completion/completions/. But the patch failed
  to also rename the completion script. The original script name
  zypper.sh is not recognized at the new location.
- Update notes about failing signature checks (bsc#1214395)
  It might be a transient issue if the server is in the midst of
  receiving new data. Retry after a few minutes might work.
- Improve the SIGINT handler to be signal safe (bsc#1214292)
  This patch updates the SIGINT handling strategy to be signal
  safe. Meaning the signal handler will do not much more than
  setting a flag, which we are going to check in the normal program
  flow as much as possible.
- version 1.14.64</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Fix some typos and spelling errors found by Lintian (fixes #501)
- Prefer unaliased `grep` to avoid unexpected/wrong completions.
  (#503)
- commit: Insert a headline to separate output of different rpm
  scripts (bsc#1041742)
- Fix typo in changes file.
- version 1.14.65</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Return 104 also if info suggests near matches (fixes #504)
- Rephrase upgrade message for openSUSE Tumbleweed (bsc#1212422)
- Fix typo (fixes #484)
- version 1.14.66</changelog>
</package>
<package pkgid="2cbe0de622a674278490cd0279a0a8fe447794f6a9f749932f7a90d559bce482" name="zypper" arch="x86_64">
  <version epoch="0" ver="1.14.66" rel="150400.3.35.1"/>
  <changelog author="ma@suse.de" date="1625140800">- Quick fix obs:// platform guessing for Leap (bsc#1187425)
- man: point out more clearly that patches update affected
  packages to the latest version (bsc#1187466)
- version 1.14.47</changelog>
  <changelog author="ma@suse.de" date="1627473600">- Support new reports for singletrans rpm commit.
- BuildRequires:  libzypp-devel &gt;= 17.27.1.
  For lock/query comments.
- Prompt: choose exact match if prompt options are not prefix
  free (bsc#1188156)
- Install summary: Show new and removed packages closer to the
  prompt (fixes #403)
  These packages are usually more interesting than the updated
  ones. In case of doubt less scrolling is needed to see them.
- Add need reboot/restart hint to XML install summary
  (bsc#1188435)
- Add comment option for lock command (fixes #388).
- version 1.14.48</changelog>
  <changelog author="ma@suse.de" date="1630670400">- Avoid calling 'su' to detect a too restrictive sudo user umask
  (bsc#1186602)
- Fix typo in German translation (fixes #395)
- BuildRequires:  libzypp-devel &gt;= 17.28.3.
- version 1.14.49</changelog>
  <changelog author="ma@suse.de" date="1634558400">- Fix compiler warning.
- zypper.conf: New option whether to collect subcommands found in
  $PATH (fixes #379)
  +[subcommand] i
  +
  +##  Whether to look for subcommands in $PATH
  +##
  +## If a subcommand is not found in the zypper_execdir, the wrapper
  +## will look in the rest of your $PATH for it. Thus, it's possible
  +## to write local zypper extensions that don't live in system space.
  +## See section SUBCOMMANDS in the zypper manpage.
  +##
  +## Valid values: boolean
  +## Default value: yes
  +##
  +# seachSubcommandInPath = yes.
- help subcommand: show path of command found in $PATH.
- version 1.14.50</changelog>
  <changelog author="ma@suse.de" date="1640260800">- Singletrans: handle fatal and non-fatal script errors properly.
- Add SingleTransReportReceiver.
- Immediately write out additional rpm output.
- BuildRequires:  libzypp-devel &gt;= 17.29.0.
  Need SingleTransReport and immediate rpm script output reports.
- version 1.14.51</changelog>
  <changelog author="ma@suse.de" date="1645704000">- info: print the packages upstream URL if available (fixes #426)
- info: Fix SEGV with not installed PTFs (bsc#1196317)
- Don't prevent less restrictive umasks (bsc#1195999)
- version 1.14.52</changelog>
  <changelog author="ma@suse.de" date="1655294400">- Basic JobReport for "cmdout/monitor".
- versioncmp: if verbose, also print the edition 'parts' which are
  compared.
- Make sure MediaAccess is closed on exception (bsc#1194550)
- Display plus-content hint conditionally (fixes #433)
- Honor the NO_COLOR environment variable when auto-detecting
  whether to use color (fixes #432)
- Define table columns which should be sorted natural [case
  insensitive] (fixes #391, closes #396, fixes #424)
- lr/ls: Use highlight color on name and alias as well.
- version 1.14.53</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 13 (fixes #448)
- Put signing key supplying repository name in quotes.
- version 1.14.54</changelog>
  <changelog author="ma@suse.de" date="1658318400">- lr: Allow shortening the Name column if table is wider than the
  terminal (bsc#1201638)
- Don't accepts install/remove modifier without argument
  (bsc#1201576)
- zypper-download: Set correct ExitInfoCode when failing to
  resolve argument.
- zypper-download: Handle unresolvable arguments as error.
  This commit changes zypper-download such that it behaves more
  consistent to zypper-install when an argument can't be resolved.
- version 1.14.55</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #441, fixes #444)
- Remove unneeded code to compute the PPP status.
  Since libzypp 17.23.0 the PPP status is auto established. No
  extra solver run is needed.
- Make sure 'up' respects solver related CLI options (bsc#1201972)
- Fix tests to use locale "C.UTF-8" rather than "en_US".
- Fix man page (fixes #451)
- version 1.14.56</changelog>
  <changelog author="ma@suse.de" date="1664971200">- BuildRequires:  libzypp-devel &gt;= 17.31.2.
- Fix --[no]-allow-vendor-change feedback in install command
  (bsc#1201972)
- version 1.14.57</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Update man page and explain '.no_auto_prune' (bsc#1204956)
- Allow to (re)add a service with the same URL (bsc#1203715)
- Explain outdatedness of repos (fixes #463)
- BuildRequires:  libzypp-devel &gt;= 17.31.5
- version 1.14.58</changelog>
  <changelog author="ma@suse.de" date="1671883200">- BuildRequires:  libzypp-devel &gt;= 17.31.7.
- Provide "removeptf" command (bsc#1203249)
  A remove command which prefers replacing dependant packages to
  removing them as well.
  A PTF is typically removed as soon as the fix it provides is
  applied to the latest official update of the dependant packages.
  But you don't want the dependant packages to be removed together
  with the PTF, which is what the remove command would do. The
  removeptf command however will aim to replace the dependant
  packages by their official update versions.
- patterns: Avoid dispylaing superfluous @System entries
  (bsc#1205570)
- version 1.14.59</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Fix selecting installed patterns from picklist (bsc#1209406)
- man: better explanation of --priority (fixes #480)
- version 1.14.60</changelog>
  <changelog author="ma@suse.de" date="1686830400">- targetos: Add an error note if XPath:/product/register/target
  is not defined in /etc/products.d/baseproduct (bsc#1211261)
- targetos: Update help and man page (bsc#1211261)
- version 1.14.61</changelog>
  <changelog author="ma@suse.de" date="1690545600">- man: revised explanation of --force-resolution (bsc#1213557)
  Point out that the option not only allows to remove packages but
  may also violate any other active policy if there is no other way
  to resolve the job.
- Print summary hint if policies were violated due to
  - -force-resolution (bsc#1213557)
- BuildRequires:  libzypp-devel &gt;= 17.31.16 (for zypp-tui)
- version 1.14.62</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Changed location of bash completion script (bsc#1213854).
  This changes the location of zypper.sh bash completion script
  from /usr/share/bash-completion/completions/.
- version 1.14.63</changelog>
  <changelog author="ma@suse.de" date="1693915200">- Fix name of the bash completion script (bsc#1215007)
  In 1.14.63 the location of the bash completion script was changed
  to /usr/share/bash-completion/completions/. But the patch failed
  to also rename the completion script. The original script name
  zypper.sh is not recognized at the new location.
- Update notes about failing signature checks (bsc#1214395)
  It might be a transient issue if the server is in the midst of
  receiving new data. Retry after a few minutes might work.
- Improve the SIGINT handler to be signal safe (bsc#1214292)
  This patch updates the SIGINT handling strategy to be signal
  safe. Meaning the signal handler will do not much more than
  setting a flag, which we are going to check in the normal program
  flow as much as possible.
- version 1.14.64</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Fix some typos and spelling errors found by Lintian (fixes #501)
- Prefer unaliased `grep` to avoid unexpected/wrong completions.
  (#503)
- commit: Insert a headline to separate output of different rpm
  scripts (bsc#1041742)
- Fix typo in changes file.
- version 1.14.65</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Return 104 also if info suggests near matches (fixes #504)
- Rephrase upgrade message for openSUSE Tumbleweed (bsc#1212422)
- Fix typo (fixes #484)
- version 1.14.66</changelog>
</package>
<package pkgid="0d0a476fde3e7b8045740f1414c24292d8767d0da2574949cddadc808a6f03e7" name="zypper" arch="aarch64">
  <version epoch="0" ver="1.14.68" rel="150400.3.40.2"/>
  <changelog author="ma@suse.de" date="1630670400">- Avoid calling 'su' to detect a too restrictive sudo user umask
  (bsc#1186602)
- Fix typo in German translation (fixes #395)
- BuildRequires:  libzypp-devel &gt;= 17.28.3.
- version 1.14.49</changelog>
  <changelog author="ma@suse.de" date="1634558400">- Fix compiler warning.
- zypper.conf: New option whether to collect subcommands found in
  $PATH (fixes #379)
  +[subcommand] i
  +
  +##  Whether to look for subcommands in $PATH
  +##
  +## If a subcommand is not found in the zypper_execdir, the wrapper
  +## will look in the rest of your $PATH for it. Thus, it's possible
  +## to write local zypper extensions that don't live in system space.
  +## See section SUBCOMMANDS in the zypper manpage.
  +##
  +## Valid values: boolean
  +## Default value: yes
  +##
  +# seachSubcommandInPath = yes.
- help subcommand: show path of command found in $PATH.
- version 1.14.50</changelog>
  <changelog author="ma@suse.de" date="1640260800">- Singletrans: handle fatal and non-fatal script errors properly.
- Add SingleTransReportReceiver.
- Immediately write out additional rpm output.
- BuildRequires:  libzypp-devel &gt;= 17.29.0.
  Need SingleTransReport and immediate rpm script output reports.
- version 1.14.51</changelog>
  <changelog author="ma@suse.de" date="1645704000">- info: print the packages upstream URL if available (fixes #426)
- info: Fix SEGV with not installed PTFs (bsc#1196317)
- Don't prevent less restrictive umasks (bsc#1195999)
- version 1.14.52</changelog>
  <changelog author="ma@suse.de" date="1655294400">- Basic JobReport for "cmdout/monitor".
- versioncmp: if verbose, also print the edition 'parts' which are
  compared.
- Make sure MediaAccess is closed on exception (bsc#1194550)
- Display plus-content hint conditionally (fixes #433)
- Honor the NO_COLOR environment variable when auto-detecting
  whether to use color (fixes #432)
- Define table columns which should be sorted natural [case
  insensitive] (fixes #391, closes #396, fixes #424)
- lr/ls: Use highlight color on name and alias as well.
- version 1.14.53</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 13 (fixes #448)
- Put signing key supplying repository name in quotes.
- version 1.14.54</changelog>
  <changelog author="ma@suse.de" date="1658318400">- lr: Allow shortening the Name column if table is wider than the
  terminal (bsc#1201638)
- Don't accepts install/remove modifier without argument
  (bsc#1201576)
- zypper-download: Set correct ExitInfoCode when failing to
  resolve argument.
- zypper-download: Handle unresolvable arguments as error.
  This commit changes zypper-download such that it behaves more
  consistent to zypper-install when an argument can't be resolved.
- version 1.14.55</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #441, fixes #444)
- Remove unneeded code to compute the PPP status.
  Since libzypp 17.23.0 the PPP status is auto established. No
  extra solver run is needed.
- Make sure 'up' respects solver related CLI options (bsc#1201972)
- Fix tests to use locale "C.UTF-8" rather than "en_US".
- Fix man page (fixes #451)
- version 1.14.56</changelog>
  <changelog author="ma@suse.de" date="1664971200">- BuildRequires:  libzypp-devel &gt;= 17.31.2.
- Fix --[no]-allow-vendor-change feedback in install command
  (bsc#1201972)
- version 1.14.57</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Update man page and explain '.no_auto_prune' (bsc#1204956)
- Allow to (re)add a service with the same URL (bsc#1203715)
- Explain outdatedness of repos (fixes #463)
- BuildRequires:  libzypp-devel &gt;= 17.31.5
- version 1.14.58</changelog>
  <changelog author="ma@suse.de" date="1671883200">- BuildRequires:  libzypp-devel &gt;= 17.31.7.
- Provide "removeptf" command (bsc#1203249)
  A remove command which prefers replacing dependant packages to
  removing them as well.
  A PTF is typically removed as soon as the fix it provides is
  applied to the latest official update of the dependant packages.
  But you don't want the dependant packages to be removed together
  with the PTF, which is what the remove command would do. The
  removeptf command however will aim to replace the dependant
  packages by their official update versions.
- patterns: Avoid dispylaing superfluous @System entries
  (bsc#1205570)
- version 1.14.59</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Fix selecting installed patterns from picklist (bsc#1209406)
- man: better explanation of --priority (fixes #480)
- version 1.14.60</changelog>
  <changelog author="ma@suse.de" date="1686830400">- targetos: Add an error note if XPath:/product/register/target
  is not defined in /etc/products.d/baseproduct (bsc#1211261)
- targetos: Update help and man page (bsc#1211261)
- version 1.14.61</changelog>
  <changelog author="ma@suse.de" date="1690545600">- man: revised explanation of --force-resolution (bsc#1213557)
  Point out that the option not only allows to remove packages but
  may also violate any other active policy if there is no other way
  to resolve the job.
- Print summary hint if policies were violated due to
  - -force-resolution (bsc#1213557)
- BuildRequires:  libzypp-devel &gt;= 17.31.16 (for zypp-tui)
- version 1.14.62</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Changed location of bash completion script (bsc#1213854).
  This changes the location of zypper.sh bash completion script
  from /usr/share/bash-completion/completions/.
- version 1.14.63</changelog>
  <changelog author="ma@suse.de" date="1693915200">- Fix name of the bash completion script (bsc#1215007)
  In 1.14.63 the location of the bash completion script was changed
  to /usr/share/bash-completion/completions/. But the patch failed
  to also rename the completion script. The original script name
  zypper.sh is not recognized at the new location.
- Update notes about failing signature checks (bsc#1214395)
  It might be a transient issue if the server is in the midst of
  receiving new data. Retry after a few minutes might work.
- Improve the SIGINT handler to be signal safe (bsc#1214292)
  This patch updates the SIGINT handling strategy to be signal
  safe. Meaning the signal handler will do not much more than
  setting a flag, which we are going to check in the normal program
  flow as much as possible.
- version 1.14.64</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Fix some typos and spelling errors found by Lintian (fixes #501)
- Prefer unaliased `grep` to avoid unexpected/wrong completions.
  (#503)
- commit: Insert a headline to separate output of different rpm
  scripts (bsc#1041742)
- Fix typo in changes file.
- version 1.14.65</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Return 104 also if info suggests near matches (fixes #504)
- Rephrase upgrade message for openSUSE Tumbleweed (bsc#1212422)
- Fix typo (fixes #484)
- version 1.14.66</changelog>
  <changelog author="ma@suse.de" date="1702036800">- patch: Make sure reboot-needed is remembered until next boot
  (bsc#1217873)
- version 1.14.67</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Fix search/info commands ignoring --ignore-unknown (bsc#1217593)
  The switch makes search commands return 0 rather than 104 for
  empty search results.
- version 1.14.68</changelog>
</package>
<package pkgid="d393a804012b6f6765f1152aa262558a18034d2af8efbc184c2816f038e40fdc" name="zypper" arch="s390x">
  <version epoch="0" ver="1.14.68" rel="150400.3.40.2"/>
  <changelog author="ma@suse.de" date="1630670400">- Avoid calling 'su' to detect a too restrictive sudo user umask
  (bsc#1186602)
- Fix typo in German translation (fixes #395)
- BuildRequires:  libzypp-devel &gt;= 17.28.3.
- version 1.14.49</changelog>
  <changelog author="ma@suse.de" date="1634558400">- Fix compiler warning.
- zypper.conf: New option whether to collect subcommands found in
  $PATH (fixes #379)
  +[subcommand] i
  +
  +##  Whether to look for subcommands in $PATH
  +##
  +## If a subcommand is not found in the zypper_execdir, the wrapper
  +## will look in the rest of your $PATH for it. Thus, it's possible
  +## to write local zypper extensions that don't live in system space.
  +## See section SUBCOMMANDS in the zypper manpage.
  +##
  +## Valid values: boolean
  +## Default value: yes
  +##
  +# seachSubcommandInPath = yes.
- help subcommand: show path of command found in $PATH.
- version 1.14.50</changelog>
  <changelog author="ma@suse.de" date="1640260800">- Singletrans: handle fatal and non-fatal script errors properly.
- Add SingleTransReportReceiver.
- Immediately write out additional rpm output.
- BuildRequires:  libzypp-devel &gt;= 17.29.0.
  Need SingleTransReport and immediate rpm script output reports.
- version 1.14.51</changelog>
  <changelog author="ma@suse.de" date="1645704000">- info: print the packages upstream URL if available (fixes #426)
- info: Fix SEGV with not installed PTFs (bsc#1196317)
- Don't prevent less restrictive umasks (bsc#1195999)
- version 1.14.52</changelog>
  <changelog author="ma@suse.de" date="1655294400">- Basic JobReport for "cmdout/monitor".
- versioncmp: if verbose, also print the edition 'parts' which are
  compared.
- Make sure MediaAccess is closed on exception (bsc#1194550)
- Display plus-content hint conditionally (fixes #433)
- Honor the NO_COLOR environment variable when auto-detecting
  whether to use color (fixes #432)
- Define table columns which should be sorted natural [case
  insensitive] (fixes #391, closes #396, fixes #424)
- lr/ls: Use highlight color on name and alias as well.
- version 1.14.53</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 13 (fixes #448)
- Put signing key supplying repository name in quotes.
- version 1.14.54</changelog>
  <changelog author="ma@suse.de" date="1658318400">- lr: Allow shortening the Name column if table is wider than the
  terminal (bsc#1201638)
- Don't accepts install/remove modifier without argument
  (bsc#1201576)
- zypper-download: Set correct ExitInfoCode when failing to
  resolve argument.
- zypper-download: Handle unresolvable arguments as error.
  This commit changes zypper-download such that it behaves more
  consistent to zypper-install when an argument can't be resolved.
- version 1.14.55</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #441, fixes #444)
- Remove unneeded code to compute the PPP status.
  Since libzypp 17.23.0 the PPP status is auto established. No
  extra solver run is needed.
- Make sure 'up' respects solver related CLI options (bsc#1201972)
- Fix tests to use locale "C.UTF-8" rather than "en_US".
- Fix man page (fixes #451)
- version 1.14.56</changelog>
  <changelog author="ma@suse.de" date="1664971200">- BuildRequires:  libzypp-devel &gt;= 17.31.2.
- Fix --[no]-allow-vendor-change feedback in install command
  (bsc#1201972)
- version 1.14.57</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Update man page and explain '.no_auto_prune' (bsc#1204956)
- Allow to (re)add a service with the same URL (bsc#1203715)
- Explain outdatedness of repos (fixes #463)
- BuildRequires:  libzypp-devel &gt;= 17.31.5
- version 1.14.58</changelog>
  <changelog author="ma@suse.de" date="1671883200">- BuildRequires:  libzypp-devel &gt;= 17.31.7.
- Provide "removeptf" command (bsc#1203249)
  A remove command which prefers replacing dependant packages to
  removing them as well.
  A PTF is typically removed as soon as the fix it provides is
  applied to the latest official update of the dependant packages.
  But you don't want the dependant packages to be removed together
  with the PTF, which is what the remove command would do. The
  removeptf command however will aim to replace the dependant
  packages by their official update versions.
- patterns: Avoid dispylaing superfluous @System entries
  (bsc#1205570)
- version 1.14.59</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Fix selecting installed patterns from picklist (bsc#1209406)
- man: better explanation of --priority (fixes #480)
- version 1.14.60</changelog>
  <changelog author="ma@suse.de" date="1686830400">- targetos: Add an error note if XPath:/product/register/target
  is not defined in /etc/products.d/baseproduct (bsc#1211261)
- targetos: Update help and man page (bsc#1211261)
- version 1.14.61</changelog>
  <changelog author="ma@suse.de" date="1690545600">- man: revised explanation of --force-resolution (bsc#1213557)
  Point out that the option not only allows to remove packages but
  may also violate any other active policy if there is no other way
  to resolve the job.
- Print summary hint if policies were violated due to
  - -force-resolution (bsc#1213557)
- BuildRequires:  libzypp-devel &gt;= 17.31.16 (for zypp-tui)
- version 1.14.62</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Changed location of bash completion script (bsc#1213854).
  This changes the location of zypper.sh bash completion script
  from /usr/share/bash-completion/completions/.
- version 1.14.63</changelog>
  <changelog author="ma@suse.de" date="1693915200">- Fix name of the bash completion script (bsc#1215007)
  In 1.14.63 the location of the bash completion script was changed
  to /usr/share/bash-completion/completions/. But the patch failed
  to also rename the completion script. The original script name
  zypper.sh is not recognized at the new location.
- Update notes about failing signature checks (bsc#1214395)
  It might be a transient issue if the server is in the midst of
  receiving new data. Retry after a few minutes might work.
- Improve the SIGINT handler to be signal safe (bsc#1214292)
  This patch updates the SIGINT handling strategy to be signal
  safe. Meaning the signal handler will do not much more than
  setting a flag, which we are going to check in the normal program
  flow as much as possible.
- version 1.14.64</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Fix some typos and spelling errors found by Lintian (fixes #501)
- Prefer unaliased `grep` to avoid unexpected/wrong completions.
  (#503)
- commit: Insert a headline to separate output of different rpm
  scripts (bsc#1041742)
- Fix typo in changes file.
- version 1.14.65</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Return 104 also if info suggests near matches (fixes #504)
- Rephrase upgrade message for openSUSE Tumbleweed (bsc#1212422)
- Fix typo (fixes #484)
- version 1.14.66</changelog>
  <changelog author="ma@suse.de" date="1702036800">- patch: Make sure reboot-needed is remembered until next boot
  (bsc#1217873)
- version 1.14.67</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Fix search/info commands ignoring --ignore-unknown (bsc#1217593)
  The switch makes search commands return 0 rather than 104 for
  empty search results.
- version 1.14.68</changelog>
</package>
<package pkgid="d391fe96b53d1f7b613970903c4685e28791ab379bfd18697614c7d5356f64fc" name="zypper" arch="src">
  <version epoch="0" ver="1.14.68" rel="150400.3.40.2"/>
  <changelog author="ma@suse.de" date="1630670400">- Avoid calling 'su' to detect a too restrictive sudo user umask
  (bsc#1186602)
- Fix typo in German translation (fixes #395)
- BuildRequires:  libzypp-devel &gt;= 17.28.3.
- version 1.14.49</changelog>
  <changelog author="ma@suse.de" date="1634558400">- Fix compiler warning.
- zypper.conf: New option whether to collect subcommands found in
  $PATH (fixes #379)
  +[subcommand] i
  +
  +##  Whether to look for subcommands in $PATH
  +##
  +## If a subcommand is not found in the zypper_execdir, the wrapper
  +## will look in the rest of your $PATH for it. Thus, it's possible
  +## to write local zypper extensions that don't live in system space.
  +## See section SUBCOMMANDS in the zypper manpage.
  +##
  +## Valid values: boolean
  +## Default value: yes
  +##
  +# seachSubcommandInPath = yes.
- help subcommand: show path of command found in $PATH.
- version 1.14.50</changelog>
  <changelog author="ma@suse.de" date="1640260800">- Singletrans: handle fatal and non-fatal script errors properly.
- Add SingleTransReportReceiver.
- Immediately write out additional rpm output.
- BuildRequires:  libzypp-devel &gt;= 17.29.0.
  Need SingleTransReport and immediate rpm script output reports.
- version 1.14.51</changelog>
  <changelog author="ma@suse.de" date="1645704000">- info: print the packages upstream URL if available (fixes #426)
- info: Fix SEGV with not installed PTFs (bsc#1196317)
- Don't prevent less restrictive umasks (bsc#1195999)
- version 1.14.52</changelog>
  <changelog author="ma@suse.de" date="1655294400">- Basic JobReport for "cmdout/monitor".
- versioncmp: if verbose, also print the edition 'parts' which are
  compared.
- Make sure MediaAccess is closed on exception (bsc#1194550)
- Display plus-content hint conditionally (fixes #433)
- Honor the NO_COLOR environment variable when auto-detecting
  whether to use color (fixes #432)
- Define table columns which should be sorted natural [case
  insensitive] (fixes #391, closes #396, fixes #424)
- lr/ls: Use highlight color on name and alias as well.
- version 1.14.53</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 13 (fixes #448)
- Put signing key supplying repository name in quotes.
- version 1.14.54</changelog>
  <changelog author="ma@suse.de" date="1658318400">- lr: Allow shortening the Name column if table is wider than the
  terminal (bsc#1201638)
- Don't accepts install/remove modifier without argument
  (bsc#1201576)
- zypper-download: Set correct ExitInfoCode when failing to
  resolve argument.
- zypper-download: Handle unresolvable arguments as error.
  This commit changes zypper-download such that it behaves more
  consistent to zypper-install when an argument can't be resolved.
- version 1.14.55</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #441, fixes #444)
- Remove unneeded code to compute the PPP status.
  Since libzypp 17.23.0 the PPP status is auto established. No
  extra solver run is needed.
- Make sure 'up' respects solver related CLI options (bsc#1201972)
- Fix tests to use locale "C.UTF-8" rather than "en_US".
- Fix man page (fixes #451)
- version 1.14.56</changelog>
  <changelog author="ma@suse.de" date="1664971200">- BuildRequires:  libzypp-devel &gt;= 17.31.2.
- Fix --[no]-allow-vendor-change feedback in install command
  (bsc#1201972)
- version 1.14.57</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Update man page and explain '.no_auto_prune' (bsc#1204956)
- Allow to (re)add a service with the same URL (bsc#1203715)
- Explain outdatedness of repos (fixes #463)
- BuildRequires:  libzypp-devel &gt;= 17.31.5
- version 1.14.58</changelog>
  <changelog author="ma@suse.de" date="1671883200">- BuildRequires:  libzypp-devel &gt;= 17.31.7.
- Provide "removeptf" command (bsc#1203249)
  A remove command which prefers replacing dependant packages to
  removing them as well.
  A PTF is typically removed as soon as the fix it provides is
  applied to the latest official update of the dependant packages.
  But you don't want the dependant packages to be removed together
  with the PTF, which is what the remove command would do. The
  removeptf command however will aim to replace the dependant
  packages by their official update versions.
- patterns: Avoid dispylaing superfluous @System entries
  (bsc#1205570)
- version 1.14.59</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Fix selecting installed patterns from picklist (bsc#1209406)
- man: better explanation of --priority (fixes #480)
- version 1.14.60</changelog>
  <changelog author="ma@suse.de" date="1686830400">- targetos: Add an error note if XPath:/product/register/target
  is not defined in /etc/products.d/baseproduct (bsc#1211261)
- targetos: Update help and man page (bsc#1211261)
- version 1.14.61</changelog>
  <changelog author="ma@suse.de" date="1690545600">- man: revised explanation of --force-resolution (bsc#1213557)
  Point out that the option not only allows to remove packages but
  may also violate any other active policy if there is no other way
  to resolve the job.
- Print summary hint if policies were violated due to
  - -force-resolution (bsc#1213557)
- BuildRequires:  libzypp-devel &gt;= 17.31.16 (for zypp-tui)
- version 1.14.62</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Changed location of bash completion script (bsc#1213854).
  This changes the location of zypper.sh bash completion script
  from /usr/share/bash-completion/completions/.
- version 1.14.63</changelog>
  <changelog author="ma@suse.de" date="1693915200">- Fix name of the bash completion script (bsc#1215007)
  In 1.14.63 the location of the bash completion script was changed
  to /usr/share/bash-completion/completions/. But the patch failed
  to also rename the completion script. The original script name
  zypper.sh is not recognized at the new location.
- Update notes about failing signature checks (bsc#1214395)
  It might be a transient issue if the server is in the midst of
  receiving new data. Retry after a few minutes might work.
- Improve the SIGINT handler to be signal safe (bsc#1214292)
  This patch updates the SIGINT handling strategy to be signal
  safe. Meaning the signal handler will do not much more than
  setting a flag, which we are going to check in the normal program
  flow as much as possible.
- version 1.14.64</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Fix some typos and spelling errors found by Lintian (fixes #501)
- Prefer unaliased `grep` to avoid unexpected/wrong completions.
  (#503)
- commit: Insert a headline to separate output of different rpm
  scripts (bsc#1041742)
- Fix typo in changes file.
- version 1.14.65</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Return 104 also if info suggests near matches (fixes #504)
- Rephrase upgrade message for openSUSE Tumbleweed (bsc#1212422)
- Fix typo (fixes #484)
- version 1.14.66</changelog>
  <changelog author="ma@suse.de" date="1702036800">- patch: Make sure reboot-needed is remembered until next boot
  (bsc#1217873)
- version 1.14.67</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Fix search/info commands ignoring --ignore-unknown (bsc#1217593)
  The switch makes search commands return 0 rather than 104 for
  empty search results.
- version 1.14.68</changelog>
</package>
<package pkgid="cd77b0050ce5f7a722b9b1fd374c852371bfa68d81d6517134152eb3a74c298b" name="zypper" arch="x86_64">
  <version epoch="0" ver="1.14.68" rel="150400.3.40.2"/>
  <changelog author="ma@suse.de" date="1630670400">- Avoid calling 'su' to detect a too restrictive sudo user umask
  (bsc#1186602)
- Fix typo in German translation (fixes #395)
- BuildRequires:  libzypp-devel &gt;= 17.28.3.
- version 1.14.49</changelog>
  <changelog author="ma@suse.de" date="1634558400">- Fix compiler warning.
- zypper.conf: New option whether to collect subcommands found in
  $PATH (fixes #379)
  +[subcommand] i
  +
  +##  Whether to look for subcommands in $PATH
  +##
  +## If a subcommand is not found in the zypper_execdir, the wrapper
  +## will look in the rest of your $PATH for it. Thus, it's possible
  +## to write local zypper extensions that don't live in system space.
  +## See section SUBCOMMANDS in the zypper manpage.
  +##
  +## Valid values: boolean
  +## Default value: yes
  +##
  +# seachSubcommandInPath = yes.
- help subcommand: show path of command found in $PATH.
- version 1.14.50</changelog>
  <changelog author="ma@suse.de" date="1640260800">- Singletrans: handle fatal and non-fatal script errors properly.
- Add SingleTransReportReceiver.
- Immediately write out additional rpm output.
- BuildRequires:  libzypp-devel &gt;= 17.29.0.
  Need SingleTransReport and immediate rpm script output reports.
- version 1.14.51</changelog>
  <changelog author="ma@suse.de" date="1645704000">- info: print the packages upstream URL if available (fixes #426)
- info: Fix SEGV with not installed PTFs (bsc#1196317)
- Don't prevent less restrictive umasks (bsc#1195999)
- version 1.14.52</changelog>
  <changelog author="ma@suse.de" date="1655294400">- Basic JobReport for "cmdout/monitor".
- versioncmp: if verbose, also print the edition 'parts' which are
  compared.
- Make sure MediaAccess is closed on exception (bsc#1194550)
- Display plus-content hint conditionally (fixes #433)
- Honor the NO_COLOR environment variable when auto-detecting
  whether to use color (fixes #432)
- Define table columns which should be sorted natural [case
  insensitive] (fixes #391, closes #396, fixes #424)
- lr/ls: Use highlight color on name and alias as well.
- version 1.14.53</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 13 (fixes #448)
- Put signing key supplying repository name in quotes.
- version 1.14.54</changelog>
  <changelog author="ma@suse.de" date="1658318400">- lr: Allow shortening the Name column if table is wider than the
  terminal (bsc#1201638)
- Don't accepts install/remove modifier without argument
  (bsc#1201576)
- zypper-download: Set correct ExitInfoCode when failing to
  resolve argument.
- zypper-download: Handle unresolvable arguments as error.
  This commit changes zypper-download such that it behaves more
  consistent to zypper-install when an argument can't be resolved.
- version 1.14.55</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #441, fixes #444)
- Remove unneeded code to compute the PPP status.
  Since libzypp 17.23.0 the PPP status is auto established. No
  extra solver run is needed.
- Make sure 'up' respects solver related CLI options (bsc#1201972)
- Fix tests to use locale "C.UTF-8" rather than "en_US".
- Fix man page (fixes #451)
- version 1.14.56</changelog>
  <changelog author="ma@suse.de" date="1664971200">- BuildRequires:  libzypp-devel &gt;= 17.31.2.
- Fix --[no]-allow-vendor-change feedback in install command
  (bsc#1201972)
- version 1.14.57</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Update man page and explain '.no_auto_prune' (bsc#1204956)
- Allow to (re)add a service with the same URL (bsc#1203715)
- Explain outdatedness of repos (fixes #463)
- BuildRequires:  libzypp-devel &gt;= 17.31.5
- version 1.14.58</changelog>
  <changelog author="ma@suse.de" date="1671883200">- BuildRequires:  libzypp-devel &gt;= 17.31.7.
- Provide "removeptf" command (bsc#1203249)
  A remove command which prefers replacing dependant packages to
  removing them as well.
  A PTF is typically removed as soon as the fix it provides is
  applied to the latest official update of the dependant packages.
  But you don't want the dependant packages to be removed together
  with the PTF, which is what the remove command would do. The
  removeptf command however will aim to replace the dependant
  packages by their official update versions.
- patterns: Avoid dispylaing superfluous @System entries
  (bsc#1205570)
- version 1.14.59</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Fix selecting installed patterns from picklist (bsc#1209406)
- man: better explanation of --priority (fixes #480)
- version 1.14.60</changelog>
  <changelog author="ma@suse.de" date="1686830400">- targetos: Add an error note if XPath:/product/register/target
  is not defined in /etc/products.d/baseproduct (bsc#1211261)
- targetos: Update help and man page (bsc#1211261)
- version 1.14.61</changelog>
  <changelog author="ma@suse.de" date="1690545600">- man: revised explanation of --force-resolution (bsc#1213557)
  Point out that the option not only allows to remove packages but
  may also violate any other active policy if there is no other way
  to resolve the job.
- Print summary hint if policies were violated due to
  - -force-resolution (bsc#1213557)
- BuildRequires:  libzypp-devel &gt;= 17.31.16 (for zypp-tui)
- version 1.14.62</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Changed location of bash completion script (bsc#1213854).
  This changes the location of zypper.sh bash completion script
  from /usr/share/bash-completion/completions/.
- version 1.14.63</changelog>
  <changelog author="ma@suse.de" date="1693915200">- Fix name of the bash completion script (bsc#1215007)
  In 1.14.63 the location of the bash completion script was changed
  to /usr/share/bash-completion/completions/. But the patch failed
  to also rename the completion script. The original script name
  zypper.sh is not recognized at the new location.
- Update notes about failing signature checks (bsc#1214395)
  It might be a transient issue if the server is in the midst of
  receiving new data. Retry after a few minutes might work.
- Improve the SIGINT handler to be signal safe (bsc#1214292)
  This patch updates the SIGINT handling strategy to be signal
  safe. Meaning the signal handler will do not much more than
  setting a flag, which we are going to check in the normal program
  flow as much as possible.
- version 1.14.64</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Fix some typos and spelling errors found by Lintian (fixes #501)
- Prefer unaliased `grep` to avoid unexpected/wrong completions.
  (#503)
- commit: Insert a headline to separate output of different rpm
  scripts (bsc#1041742)
- Fix typo in changes file.
- version 1.14.65</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Return 104 also if info suggests near matches (fixes #504)
- Rephrase upgrade message for openSUSE Tumbleweed (bsc#1212422)
- Fix typo (fixes #484)
- version 1.14.66</changelog>
  <changelog author="ma@suse.de" date="1702036800">- patch: Make sure reboot-needed is remembered until next boot
  (bsc#1217873)
- version 1.14.67</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Fix search/info commands ignoring --ignore-unknown (bsc#1217593)
  The switch makes search commands return 0 rather than 104 for
  empty search results.
- version 1.14.68</changelog>
</package>
<package pkgid="15710706841d71fd59c7c5a5f44ef978a3c7ce30142d6a0ac6f947cbe5393bb9" name="zypper-needs-restarting" arch="noarch">
  <version epoch="0" ver="1.14.66" rel="150400.3.35.1"/>
  <changelog author="ma@suse.de" date="1625140800">- Quick fix obs:// platform guessing for Leap (bsc#1187425)
- man: point out more clearly that patches update affected
  packages to the latest version (bsc#1187466)
- version 1.14.47</changelog>
  <changelog author="ma@suse.de" date="1627473600">- Support new reports for singletrans rpm commit.
- BuildRequires:  libzypp-devel &gt;= 17.27.1.
  For lock/query comments.
- Prompt: choose exact match if prompt options are not prefix
  free (bsc#1188156)
- Install summary: Show new and removed packages closer to the
  prompt (fixes #403)
  These packages are usually more interesting than the updated
  ones. In case of doubt less scrolling is needed to see them.
- Add need reboot/restart hint to XML install summary
  (bsc#1188435)
- Add comment option for lock command (fixes #388).
- version 1.14.48</changelog>
  <changelog author="ma@suse.de" date="1630670400">- Avoid calling 'su' to detect a too restrictive sudo user umask
  (bsc#1186602)
- Fix typo in German translation (fixes #395)
- BuildRequires:  libzypp-devel &gt;= 17.28.3.
- version 1.14.49</changelog>
  <changelog author="ma@suse.de" date="1634558400">- Fix compiler warning.
- zypper.conf: New option whether to collect subcommands found in
  $PATH (fixes #379)
  +[subcommand] i
  +
  +##  Whether to look for subcommands in $PATH
  +##
  +## If a subcommand is not found in the zypper_execdir, the wrapper
  +## will look in the rest of your $PATH for it. Thus, it's possible
  +## to write local zypper extensions that don't live in system space.
  +## See section SUBCOMMANDS in the zypper manpage.
  +##
  +## Valid values: boolean
  +## Default value: yes
  +##
  +# seachSubcommandInPath = yes.
- help subcommand: show path of command found in $PATH.
- version 1.14.50</changelog>
  <changelog author="ma@suse.de" date="1640260800">- Singletrans: handle fatal and non-fatal script errors properly.
- Add SingleTransReportReceiver.
- Immediately write out additional rpm output.
- BuildRequires:  libzypp-devel &gt;= 17.29.0.
  Need SingleTransReport and immediate rpm script output reports.
- version 1.14.51</changelog>
  <changelog author="ma@suse.de" date="1645704000">- info: print the packages upstream URL if available (fixes #426)
- info: Fix SEGV with not installed PTFs (bsc#1196317)
- Don't prevent less restrictive umasks (bsc#1195999)
- version 1.14.52</changelog>
  <changelog author="ma@suse.de" date="1655294400">- Basic JobReport for "cmdout/monitor".
- versioncmp: if verbose, also print the edition 'parts' which are
  compared.
- Make sure MediaAccess is closed on exception (bsc#1194550)
- Display plus-content hint conditionally (fixes #433)
- Honor the NO_COLOR environment variable when auto-detecting
  whether to use color (fixes #432)
- Define table columns which should be sorted natural [case
  insensitive] (fixes #391, closes #396, fixes #424)
- lr/ls: Use highlight color on name and alias as well.
- version 1.14.53</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 13 (fixes #448)
- Put signing key supplying repository name in quotes.
- version 1.14.54</changelog>
  <changelog author="ma@suse.de" date="1658318400">- lr: Allow shortening the Name column if table is wider than the
  terminal (bsc#1201638)
- Don't accepts install/remove modifier without argument
  (bsc#1201576)
- zypper-download: Set correct ExitInfoCode when failing to
  resolve argument.
- zypper-download: Handle unresolvable arguments as error.
  This commit changes zypper-download such that it behaves more
  consistent to zypper-install when an argument can't be resolved.
- version 1.14.55</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #441, fixes #444)
- Remove unneeded code to compute the PPP status.
  Since libzypp 17.23.0 the PPP status is auto established. No
  extra solver run is needed.
- Make sure 'up' respects solver related CLI options (bsc#1201972)
- Fix tests to use locale "C.UTF-8" rather than "en_US".
- Fix man page (fixes #451)
- version 1.14.56</changelog>
  <changelog author="ma@suse.de" date="1664971200">- BuildRequires:  libzypp-devel &gt;= 17.31.2.
- Fix --[no]-allow-vendor-change feedback in install command
  (bsc#1201972)
- version 1.14.57</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Update man page and explain '.no_auto_prune' (bsc#1204956)
- Allow to (re)add a service with the same URL (bsc#1203715)
- Explain outdatedness of repos (fixes #463)
- BuildRequires:  libzypp-devel &gt;= 17.31.5
- version 1.14.58</changelog>
  <changelog author="ma@suse.de" date="1671883200">- BuildRequires:  libzypp-devel &gt;= 17.31.7.
- Provide "removeptf" command (bsc#1203249)
  A remove command which prefers replacing dependant packages to
  removing them as well.
  A PTF is typically removed as soon as the fix it provides is
  applied to the latest official update of the dependant packages.
  But you don't want the dependant packages to be removed together
  with the PTF, which is what the remove command would do. The
  removeptf command however will aim to replace the dependant
  packages by their official update versions.
- patterns: Avoid dispylaing superfluous @System entries
  (bsc#1205570)
- version 1.14.59</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Fix selecting installed patterns from picklist (bsc#1209406)
- man: better explanation of --priority (fixes #480)
- version 1.14.60</changelog>
  <changelog author="ma@suse.de" date="1686830400">- targetos: Add an error note if XPath:/product/register/target
  is not defined in /etc/products.d/baseproduct (bsc#1211261)
- targetos: Update help and man page (bsc#1211261)
- version 1.14.61</changelog>
  <changelog author="ma@suse.de" date="1690545600">- man: revised explanation of --force-resolution (bsc#1213557)
  Point out that the option not only allows to remove packages but
  may also violate any other active policy if there is no other way
  to resolve the job.
- Print summary hint if policies were violated due to
  - -force-resolution (bsc#1213557)
- BuildRequires:  libzypp-devel &gt;= 17.31.16 (for zypp-tui)
- version 1.14.62</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Changed location of bash completion script (bsc#1213854).
  This changes the location of zypper.sh bash completion script
  from /usr/share/bash-completion/completions/.
- version 1.14.63</changelog>
  <changelog author="ma@suse.de" date="1693915200">- Fix name of the bash completion script (bsc#1215007)
  In 1.14.63 the location of the bash completion script was changed
  to /usr/share/bash-completion/completions/. But the patch failed
  to also rename the completion script. The original script name
  zypper.sh is not recognized at the new location.
- Update notes about failing signature checks (bsc#1214395)
  It might be a transient issue if the server is in the midst of
  receiving new data. Retry after a few minutes might work.
- Improve the SIGINT handler to be signal safe (bsc#1214292)
  This patch updates the SIGINT handling strategy to be signal
  safe. Meaning the signal handler will do not much more than
  setting a flag, which we are going to check in the normal program
  flow as much as possible.
- version 1.14.64</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Fix some typos and spelling errors found by Lintian (fixes #501)
- Prefer unaliased `grep` to avoid unexpected/wrong completions.
  (#503)
- commit: Insert a headline to separate output of different rpm
  scripts (bsc#1041742)
- Fix typo in changes file.
- version 1.14.65</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Return 104 also if info suggests near matches (fixes #504)
- Rephrase upgrade message for openSUSE Tumbleweed (bsc#1212422)
- Fix typo (fixes #484)
- version 1.14.66</changelog>
</package>
<package pkgid="2296ddf91f76d072a0b64abab50c427176d56aa04d8f94f5fe8896f48dcfdbf6" name="zypper-needs-restarting" arch="noarch">
  <version epoch="0" ver="1.14.68" rel="150400.3.40.2"/>
  <changelog author="ma@suse.de" date="1630670400">- Avoid calling 'su' to detect a too restrictive sudo user umask
  (bsc#1186602)
- Fix typo in German translation (fixes #395)
- BuildRequires:  libzypp-devel &gt;= 17.28.3.
- version 1.14.49</changelog>
  <changelog author="ma@suse.de" date="1634558400">- Fix compiler warning.
- zypper.conf: New option whether to collect subcommands found in
  $PATH (fixes #379)
  +[subcommand] i
  +
  +##  Whether to look for subcommands in $PATH
  +##
  +## If a subcommand is not found in the zypper_execdir, the wrapper
  +## will look in the rest of your $PATH for it. Thus, it's possible
  +## to write local zypper extensions that don't live in system space.
  +## See section SUBCOMMANDS in the zypper manpage.
  +##
  +## Valid values: boolean
  +## Default value: yes
  +##
  +# seachSubcommandInPath = yes.
- help subcommand: show path of command found in $PATH.
- version 1.14.50</changelog>
  <changelog author="ma@suse.de" date="1640260800">- Singletrans: handle fatal and non-fatal script errors properly.
- Add SingleTransReportReceiver.
- Immediately write out additional rpm output.
- BuildRequires:  libzypp-devel &gt;= 17.29.0.
  Need SingleTransReport and immediate rpm script output reports.
- version 1.14.51</changelog>
  <changelog author="ma@suse.de" date="1645704000">- info: print the packages upstream URL if available (fixes #426)
- info: Fix SEGV with not installed PTFs (bsc#1196317)
- Don't prevent less restrictive umasks (bsc#1195999)
- version 1.14.52</changelog>
  <changelog author="ma@suse.de" date="1655294400">- Basic JobReport for "cmdout/monitor".
- versioncmp: if verbose, also print the edition 'parts' which are
  compared.
- Make sure MediaAccess is closed on exception (bsc#1194550)
- Display plus-content hint conditionally (fixes #433)
- Honor the NO_COLOR environment variable when auto-detecting
  whether to use color (fixes #432)
- Define table columns which should be sorted natural [case
  insensitive] (fixes #391, closes #396, fixes #424)
- lr/ls: Use highlight color on name and alias as well.
- version 1.14.53</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 13 (fixes #448)
- Put signing key supplying repository name in quotes.
- version 1.14.54</changelog>
  <changelog author="ma@suse.de" date="1658318400">- lr: Allow shortening the Name column if table is wider than the
  terminal (bsc#1201638)
- Don't accepts install/remove modifier without argument
  (bsc#1201576)
- zypper-download: Set correct ExitInfoCode when failing to
  resolve argument.
- zypper-download: Handle unresolvable arguments as error.
  This commit changes zypper-download such that it behaves more
  consistent to zypper-install when an argument can't be resolved.
- version 1.14.55</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #441, fixes #444)
- Remove unneeded code to compute the PPP status.
  Since libzypp 17.23.0 the PPP status is auto established. No
  extra solver run is needed.
- Make sure 'up' respects solver related CLI options (bsc#1201972)
- Fix tests to use locale "C.UTF-8" rather than "en_US".
- Fix man page (fixes #451)
- version 1.14.56</changelog>
  <changelog author="ma@suse.de" date="1664971200">- BuildRequires:  libzypp-devel &gt;= 17.31.2.
- Fix --[no]-allow-vendor-change feedback in install command
  (bsc#1201972)
- version 1.14.57</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Update man page and explain '.no_auto_prune' (bsc#1204956)
- Allow to (re)add a service with the same URL (bsc#1203715)
- Explain outdatedness of repos (fixes #463)
- BuildRequires:  libzypp-devel &gt;= 17.31.5
- version 1.14.58</changelog>
  <changelog author="ma@suse.de" date="1671883200">- BuildRequires:  libzypp-devel &gt;= 17.31.7.
- Provide "removeptf" command (bsc#1203249)
  A remove command which prefers replacing dependant packages to
  removing them as well.
  A PTF is typically removed as soon as the fix it provides is
  applied to the latest official update of the dependant packages.
  But you don't want the dependant packages to be removed together
  with the PTF, which is what the remove command would do. The
  removeptf command however will aim to replace the dependant
  packages by their official update versions.
- patterns: Avoid dispylaing superfluous @System entries
  (bsc#1205570)
- version 1.14.59</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Fix selecting installed patterns from picklist (bsc#1209406)
- man: better explanation of --priority (fixes #480)
- version 1.14.60</changelog>
  <changelog author="ma@suse.de" date="1686830400">- targetos: Add an error note if XPath:/product/register/target
  is not defined in /etc/products.d/baseproduct (bsc#1211261)
- targetos: Update help and man page (bsc#1211261)
- version 1.14.61</changelog>
  <changelog author="ma@suse.de" date="1690545600">- man: revised explanation of --force-resolution (bsc#1213557)
  Point out that the option not only allows to remove packages but
  may also violate any other active policy if there is no other way
  to resolve the job.
- Print summary hint if policies were violated due to
  - -force-resolution (bsc#1213557)
- BuildRequires:  libzypp-devel &gt;= 17.31.16 (for zypp-tui)
- version 1.14.62</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Changed location of bash completion script (bsc#1213854).
  This changes the location of zypper.sh bash completion script
  from /usr/share/bash-completion/completions/.
- version 1.14.63</changelog>
  <changelog author="ma@suse.de" date="1693915200">- Fix name of the bash completion script (bsc#1215007)
  In 1.14.63 the location of the bash completion script was changed
  to /usr/share/bash-completion/completions/. But the patch failed
  to also rename the completion script. The original script name
  zypper.sh is not recognized at the new location.
- Update notes about failing signature checks (bsc#1214395)
  It might be a transient issue if the server is in the midst of
  receiving new data. Retry after a few minutes might work.
- Improve the SIGINT handler to be signal safe (bsc#1214292)
  This patch updates the SIGINT handling strategy to be signal
  safe. Meaning the signal handler will do not much more than
  setting a flag, which we are going to check in the normal program
  flow as much as possible.
- version 1.14.64</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Fix some typos and spelling errors found by Lintian (fixes #501)
- Prefer unaliased `grep` to avoid unexpected/wrong completions.
  (#503)
- commit: Insert a headline to separate output of different rpm
  scripts (bsc#1041742)
- Fix typo in changes file.
- version 1.14.65</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Return 104 also if info suggests near matches (fixes #504)
- Rephrase upgrade message for openSUSE Tumbleweed (bsc#1212422)
- Fix typo (fixes #484)
- version 1.14.66</changelog>
  <changelog author="ma@suse.de" date="1702036800">- patch: Make sure reboot-needed is remembered until next boot
  (bsc#1217873)
- version 1.14.67</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Fix search/info commands ignoring --ignore-unknown (bsc#1217593)
  The switch makes search commands return 0 rather than 104 for
  empty search results.
- version 1.14.68</changelog>
</package>
</otherdata>